$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft File: b8fa95ca-aa42-4b86-891b-7be12d533da7.mft (raw, json) Hash identifier: Q/glE9xKRlO9ZhzIVCTZHGo5z+j8sKe1YxmY0vkLrZI= Subject key identifier: DB:27:06:50:6A:15:C1:2F:A8:84:B0:15:4B:0D:DC:2B:6B:6E:5C:D1 Authority key identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Certificate issuer: /CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Certificate serial: 010D0C9F4328584DB3D4D7BFAD251030F5BE5410 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft Manifest number: 010D0C9F43285844CDD9816FE539D09BB3184347 Signing time: Sat 02 May 2026 18:00:03 +0000 Manifest this update: Sat 02 May 2026 18:00:03 +0000 Manifest next update: Tue 05 May 2026 18:00:00 +0000 Files and hashes: 1: b8fa95ca-aa42-4b86-891b-7be12d533da7.crl (hash: W67R6+vSill0ErOZPf7fPonHL9bQ2ikcMU+2TWi/66s=) 2: f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa (hash: lBKMXeMIbWJyfUw7B0hMFGg/NrvNwEt+kAH8qAv1808=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b3:d4:d7:bf:ad:25:10:30:f5:be:54:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Validity Not Before: May 2 18:00:03 2026 GMT Not After : May 5 18:00:00 2026 GMT Subject: CN=9bcb0e1a-6c2c-4bba-9a0b-bc6855f3a5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:3c:33:4e:f5:03:90:39:db:4a:98:30:58: 7b:3f:b6:2b:6c:47:20:b7:b8:d4:89:fc:01:15:33: 01:70:45:36:a7:44:85:2a:c0:32:09:81:da:34:8d: 1a:bd:12:d3:70:43:16:4e:5c:cd:ee:1d:d6:73:d4: 69:c3:46:10:f9:17:ca:ca:5c:6b:aa:32:91:ec:ca: 99:09:7d:79:f6:98:fa:df:d3:57:5e:2b:45:8f:48: ba:63:cd:ec:4a:e4:a4:29:ad:97:dd:99:f5:d8:12: 7d:64:b4:19:72:35:f3:95:e7:46:33:ba:87:99:da: f4:0d:e1:c6:48:3e:33:65:8c:92:42:5f:43:40:3c: 3a:41:48:0c:ea:2b:9b:3e:d6:23:58:7f:c5:f9:4a: 11:4f:2f:63:4b:61:e6:32:3a:b8:03:bb:3d:0f:71: ca:9f:65:5e:94:4c:29:0d:0e:af:a4:6b:a7:f9:36: be:dc:0d:cb:ff:e4:c1:ff:6a:bc:b7:31:4a:00:60: 6f:6a:a7:17:84:e6:85:20:bb:2a:c4:e7:8a:eb:84: 04:2f:c3:de:73:34:bb:ef:30:e1:3f:5b:a0:bc:17: 10:7b:2e:e7:80:9c:3b:1f:42:f4:6e:47:0a:f1:75: 71:41:86:69:10:19:04:7f:98:22:45:09:ac:27:b4: 0d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:27:06:50:6A:15:C1:2F:A8:84:B0:15:4B:0D:DC:2B:6B:6E:5C:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl X509v3 Authority Key Identifier: keyid:EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:68:4e:7e:f7:2e:97:ef:23:b2:89:76:e1:13:9e:bd:b2:de: 83:8f:70:23:66:28:b7:6c:c5:bb:73:90:33:dd:ab:ad:24:8a: 7a:1a:6e:f1:a0:d1:ec:4e:a9:f4:0e:e6:c8:18:b0:44:fb:59: 25:9c:3c:02:00:b2:13:3b:d5:c4:da:e0:2f:6b:2f:d6:dc:4d: 11:01:82:0e:7c:69:11:bd:03:ab:9a:ae:7a:46:8e:88:30:1e: bc:e6:85:7e:bd:13:94:74:ac:37:ff:c3:a5:7d:a7:20:92:5d: c4:dd:aa:a2:b8:b2:f9:79:5a:fd:b4:56:ff:9b:7d:42:53:41: 7e:78:3e:7a:31:8e:a8:2a:95:99:41:e5:83:fb:bb:b0:48:63: 49:83:cb:d5:77:7c:8e:d1:bb:04:21:cc:3f:3e:0f:4a:17:96: 08:6a:95:f6:57:98:5a:84:36:83:99:8a:77:3b:c9:23:d5:8b: de:f8:2d:74:39:f9:62:68:8e:db:16:31:0f:42:7c:8a:96:7f: cd:e8:ef:23:d4:5e:37:cc:fc:ec:98:c4:5f:82:87:2f:7d:22: c4:36:ad:42:e8:b2:8e:cd:a7:fe:91:ec:be:f2:24:15:53:ce: 21:6f:a1:a4:ca:06:4e:22:d2:73:2e:3a:6f:79:70:cc:db:49: bc:a8:ec:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2z1Ne/rSUQMPW+VBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5MWItN2JlMTJkNTMz ZGE3MB4XDTI2MDUwMjE4MDAwM1oXDTI2MDUwNTE4MDAwMFowLzEtMCsGA1UEAxMk OWJjYjBlMWEtNmMyYy00YmJhLTlhMGItYmM2ODU1ZjNhNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/Y8M071A5A520qYMFh7P7YrbEcgt7jUifwB FTMBcEU2p0SFKsAyCYHaNI0avRLTcEMWTlzN7h3Wc9Rpw0YQ+RfKylxrqjKR7MqZ CX159pj639NXXitFj0i6Y83sSuSkKa2X3Zn12BJ9ZLQZcjXzledGM7qHmdr0DeHG SD4zZYySQl9DQDw6QUgM6iubPtYjWH/F+UoRTy9jS2HmMjq4A7s9D3HKn2VelEwp DQ6vpGun+Ta+3A3L/+TB/2q8tzFKAGBvaqcXhOaFILsqxOeK64QEL8PeczS77zDh P1ugvBcQey7ngJw7H0L0bkcK8XVxQYZpEBkEf5giRQmsJ7QNSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNsnBlBqFcEvqISwFUsN3CtrblzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZh OTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1MzNkYTcvYjhmYTk1Y2EtYWE0Mi00 Yjg2LTg5MWItN2JlMTJkNTMzZGE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5 MWItN2JlMTJkNTMzZGE3L2I4ZmE5NWNhLWFhNDItNGI4Ni04OTFiLTdiZTEyZDUz M2RhNy5jcmwwHwYDVR0jBBgwFoAU7sOjJy3EvbNgvZp5M5mA/c2R1/0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUx MmQ1MzNkYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUaE5+9y6X7yOyiXbhE569 st6Dj3AjZii3bMW7c5Az3autJIp6Gm7xoNHsTqn0DubIGLBE+1klnDwCALITO9XE 2uAvay/W3E0RAYIOfGkRvQOrmq56Ro6IMB685oV+vROUdKw3/8Olfacgkl3E3aqi uLL5eVr9tFb/m31CU0F+eD56MY6oKpWZQeWD+7uwSGNJg8vVd3yO0bsEIcw/Pg9K F5YIapX2V5hahDaDmYp3O8kj1Yve+C10OfliaI7bFjEPQnyKln/N6O8j1F43zPzs mMRfgocvfSLENq1C6LKOzaf+key+8iQVU84hb6GkygZOItJzLjpveXDM20m8qOxF -----END CERTIFICATE-----Generated at Sun May 3 17:10:28 2026 by rpki-client