$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft File: 5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft (raw, json) Hash identifier: Y+dJMcG2O6fArwB1EbVadQ9+vJhIuxU1OrIWe+Z/vx8= Subject key identifier: 0E:70:54:A5:FA:29:5B:B7:0A:40:1D:CC:E9:E0:64:E6:7D:27:93:56 Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1 Certificate issuer: /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1 Certificate serial: 61D3448AE06849E499869AAB73BCD350FEE62D4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft Manifest number: 07D8 Signing time: Fri 22 May 2026 11:02:01 +0000 Manifest this update: Fri 22 May 2026 10:57:01 +0000 Manifest next update: Sat 23 May 2026 13:49:01 +0000 Files and hashes: 1: 3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa (hash: M+kaKR8R1hpLE6n7CVRBmAYxGjsp1XCYpKk2aIr5Q3Q=) 2: 3139322e36342e3230342e302f32342d3234203d3e203336323336.roa (hash: cjPRK9qLuIrk2Qcz5MIry+JIAYYQot59N/+6dxX+1TU=) 3: 3139322e36342e3230332e302f32342d3234203d3e203336323336.roa (hash: iSVzEtaduQywCQdcSyMNmFI0Id4YYz6qHsCZbxVt1kQ=) 4: 3139382e3137392e3232352e302f32342d3234203d3e203336323336.roa (hash: Ga42+36DBXvhFJL9fNOGskBUD02TlB8rrrReqjfGPPc=) 5: 5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl (hash: 9/OzhhGYkmobU/Nj0S8B5GBq5itVJ1mjjLVKqEyG8fY=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 13:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d3:44:8a:e0:68:49:e4:99:86:9a:ab:73:bc:d3:50:fe:e6:2d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D85A20000, serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1 Validity Not Before: May 22 10:57:01 2026 GMT Not After : May 23 13:49:01 2026 GMT Subject: CN=0E7054A5FA295BB70A401DCCE9E064E67D279356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:f7:04:2f:1d:e6:39:dd:b6:36:fb:66:ff: f7:f1:82:df:54:20:f4:62:e1:1e:19:ad:c2:77:05: 0a:e2:f9:dc:c1:7f:30:6d:fe:d2:e9:b0:a2:5c:32: f4:a7:21:fc:78:3e:36:c3:c3:cd:e9:70:63:08:c0: 36:46:09:c1:bd:a5:0e:3d:bc:85:89:56:8a:00:6f: 6a:39:46:9c:19:5a:b1:00:33:dc:50:47:0a:56:95: d8:d7:9d:bf:00:3e:e2:5f:64:69:43:ee:c6:fb:e7: 9f:1f:e3:ff:98:a5:13:4a:1c:62:62:37:a9:52:79: 9d:24:bb:9c:1d:a8:ed:62:8b:7e:e8:3d:0a:c7:49: 94:8c:2b:76:c8:5d:b6:88:99:b1:3b:df:be:e9:03: e8:92:7b:8b:51:98:59:5e:a5:51:aa:ee:aa:9e:7e: 05:08:a9:03:17:c6:55:89:03:3e:85:74:b2:bd:0f: 84:c9:91:00:5a:b4:a9:94:57:d3:51:b6:60:64:08: a7:0a:58:f7:45:04:04:e5:ae:e5:bd:b1:43:d4:92: 23:7f:c5:1d:19:bb:2a:fd:22:6f:58:3e:67:5d:62: 59:a1:de:f8:16:75:ef:41:ee:1e:be:06:ee:9a:91: 0b:e6:65:eb:fa:70:c9:5a:5d:be:85:c6:e2:9b:6c: fb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:70:54:A5:FA:29:5B:B7:0A:40:1D:CC:E9:E0:64:E6:7D:27:93:56 X509v3 Authority Key Identifier: keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2a:d1:fa:e8:c9:66:07:6f:80:25:be:b4:ac:be:85:de:a4: 99:c0:85:48:9d:84:98:a4:aa:36:bb:7e:0c:95:b7:a7:b2:28: e2:f1:3b:84:68:9d:ba:07:6d:5d:03:62:e4:07:71:f1:86:4c: 3b:b0:3e:8d:74:68:95:d7:47:cf:a6:25:f9:f9:69:90:8a:15: 12:86:e2:57:46:76:6d:eb:46:77:1f:7c:cf:51:e6:b9:e9:b9: 3a:a8:32:88:6a:ea:d9:11:d6:1d:85:71:07:22:8e:7a:49:92: 06:40:c3:34:27:05:0d:3d:b9:1b:50:a2:a0:2e:c1:d6:5c:00: c5:47:ba:32:19:6c:73:d9:84:42:7c:9a:ae:70:14:da:b7:8c: ea:3d:8e:61:84:24:29:73:94:05:ca:60:60:f5:a5:37:d9:ba: 84:2d:2d:b4:83:d8:2c:03:fd:ce:c8:89:6e:4a:87:18:5b:53: e1:07:0c:47:34:ae:6a:58:63:44:21:d9:41:2d:84:71:99:86: ed:a0:9a:f2:3b:f2:0f:bc:38:19:0a:30:7e:dc:66:7a:30:0a: d7:9c:97:82:2d:ed:25:15:dc:5f:ec:72:38:ec:c6:80:34:af: 78:af:22:a2:f7:d5:dc:ff:99:a4:c9:a2:07:47:33:1f:7a:fd: ab:5e:a9:2c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUYdNEiuBoSeSZhpqrc7zTUP7mLU0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg1RUQ1Rjc5MjFB Qzg2NTQxRDkyOTM2RjY5MUNCMUNEQkY2RDVDMkExMB4XDTI2MDUyMjEwNTcwMVoX DTI2MDUyMzEzNDkwMVowMzExMC8GA1UEAxMoMEU3MDU0QTVGQTI5NUJCNzBBNDAx RENDRTlFMDY0RTY3RDI3OTM1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnr9wQvHeY53bY2+2b/9/GC31Qg9GLhHhmtwncFCuL53MF/MG3+0umwolwy 9Kch/Hg+NsPDzelwYwjANkYJwb2lDj28hYlWigBvajlGnBlasQAz3FBHClaV2Ned vwA+4l9kaUPuxvvnnx/j/5ilE0ocYmI3qVJ5nSS7nB2o7WKLfug9CsdJlIwrdshd toiZsTvfvukD6JJ7i1GYWV6lUaruqp5+BQipAxfGVYkDPoV0sr0PhMmRAFq0qZRX 01G2YGQIpwpY90UEBOWu5b2xQ9SSI3/FHRm7Kv0ib1g+Z11iWaHe+BZ170HuHr4G 7pqRC+Zl6/pwyVpdvoXG4pts+6cCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBQOcFSl +ilbtwpAHczp4GTmfSeTVjAfBgNVHSMEGDAWgBRe1feSGshlQdkpNvaRyxzb9tXC oTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2 ODY2MTA4NGI4Ni8yLzVFRDVGNzkyMUFDODY1NDFEOTI5MzZGNjkxQ0IxQ0RCRjZE NUMyQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3 QzcyRkQxRkYyL1h0WDNraHJJWlVIWktUYjJrY3NjMl9iVndxRS5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2 LzIvNUVENUY3OTIxQUM4NjU0MUQ5MjkzNkY2OTFDQjFDREJGNkQ1QzJBMS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAF4q0froyWYHb4AlvrSsvoXepJnAhUidhJikqja7fgyVt6eyKOLxO4Ro nboHbV0DYuQHcfGGTDuwPo10aJXXR8+mJfn5aZCKFRKG4ldGdm3rRncffM9R5rnp uTqoMohq6tkR1h2FcQcijnpJkgZAwzQnBQ09uRtQoqAuwdZcAMVHujIZbHPZhEJ8 mq5wFNq3jOo9jmGEJClzlAXKYGD1pTfZuoQtLbSD2CwD/c7IiW5KhxhbU+EHDEc0 rmpYY0Qh2UEthHGZhu2gmvI78g+8OBkKMH7cZnowCtecl4It7SUV3F/scjjsxoA0 r3ivIqL31dz/maTJogdHMx96/ateqSw= -----END CERTIFICATE-----Generated at Sat May 23 06:26:20 2026 by rpki-client