$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft File: ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft (raw, json) Hash identifier: bIge6gu/2/R+gl1oV6Fx7vQawADhd4HUcLxluuX5Kbc= Subject key identifier: 86:55:E9:BC:0B:BF:F6:92:AB:D5:7D:6E:6C:82:05:7B:3B:50:A9:00 Authority key identifier: F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 Certificate issuer: /CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Certificate serial: 010D0C9F4328584E0B12E6FE8DB4C882FEE9AC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft Manifest number: 010D0C9F43285849286C32D062B377DCDAAACE4B Signing time: Wed 03 Jun 2026 00:00:23 +0000 Manifest this update: Wed 03 Jun 2026 00:00:23 +0000 Manifest next update: Sat 06 Jun 2026 00:00:00 +0000 Files and hashes: 1: ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl (hash: /E9pR46tTnGoUASw9dKG+BttxaoC+g8TOgnB3/XL+oE=) 2: f17090ed-14f3-32d9-9d34-9fc6bed092d1.roa (hash: TivrQlU1vJ6l2vsTfW47bT7TAGEzlEw8k3g5fDgcExs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0b:12:e6:fe:8d:b4:c8:82:fe:e9:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Validity Not Before: Jun 3 00:00:23 2026 GMT Not After : Jun 6 00:00:00 2026 GMT Subject: CN=8e6a9f5f-ecdf-4245-8b86-e058eebad2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6d:05:11:7b:49:c3:9e:33:64:22:05:81:3d: d7:a7:a3:21:c7:af:40:64:59:53:37:72:00:8d:6f: 0c:e6:c5:ba:ba:00:54:35:db:38:f5:27:08:93:48: e1:22:22:7c:39:34:6e:a8:59:c7:69:9d:28:e1:49: 17:9b:57:9a:a9:ab:e0:53:40:15:fc:e2:b5:a4:0a: fa:e8:90:f4:0a:0f:23:a0:cf:e9:26:50:5a:76:3d: f4:cf:07:bc:a2:d5:b7:e3:69:c0:4e:74:a5:fd:40: af:fb:35:75:c5:3f:be:54:59:db:3b:30:8a:f9:30: 6c:99:20:0a:4c:a0:20:52:fd:32:1a:ac:98:69:7b: 42:4b:e2:ef:f1:43:01:d9:3d:c1:01:27:6a:38:a6: 15:37:b5:46:af:6c:d2:36:6b:49:e2:50:c0:75:29: 64:db:90:95:b0:08:a5:3a:a4:0c:f2:3d:62:bf:57: e8:34:f5:2f:c9:69:b4:32:54:03:93:b0:d0:8c:fc: 3a:ff:23:11:a1:c2:7d:ee:e6:a1:51:eb:bb:cd:75: 6e:a7:91:50:05:cc:25:b8:ca:7e:ec:ee:2c:97:f0: 55:ab:de:db:4b:b5:ca:9b:57:d6:16:77:0e:75:8e: c8:ec:a4:c5:32:c8:6d:de:1e:c0:07:6d:49:4c:07: 93:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:55:E9:BC:0B:BF:F6:92:AB:D5:7D:6E:6C:82:05:7B:3B:50:A9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl X509v3 Authority Key Identifier: keyid:F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:34:80:73:f5:7c:30:cb:b7:f4:2f:81:3f:38:1c:46:c8:88: ed:88:27:00:97:1d:be:e8:7d:77:e1:49:bf:f7:fb:8a:60:e6: fc:a2:df:bd:cc:1b:84:c2:9c:82:ac:32:d7:5d:9a:d3:ee:d8: a5:4a:ed:5b:5d:44:88:88:5c:66:a0:5f:1b:fb:01:7e:d2:69: 6c:47:89:e0:4d:1f:e1:b0:cc:17:32:34:17:27:16:27:69:64: ca:47:a3:c6:a9:0c:f8:a5:3f:84:50:e5:cd:f0:ba:66:6f:6f: a8:3a:4e:91:0f:97:50:26:ac:56:24:fa:c3:a4:71:22:d7:99: a6:a7:1c:63:e9:06:4f:c7:69:8f:5c:d7:f0:31:19:3c:10:33: c5:14:a0:b4:65:bb:2b:1d:09:2e:e8:f7:5c:65:60:ed:7e:57: 9c:d6:1b:62:d0:f0:66:29:5b:54:89:ab:b6:0d:3b:19:fb:5f: 97:76:aa:81:61:8a:2f:ef:6e:7e:9a:89:07:d0:e4:61:31:bc: a4:06:64:6e:cf:bd:45:7c:66:0e:21:f7:e4:09:38:a5:7f:6e: 01:50:89:ed:56:01:19:c3:5c:47:03:bd:a9:8d:89:d2:6c:33: 1c:f4:48:5d:9d:f7:bb:a7:33:b9:c4:e5:9d:36:5a:57:80:0e: 88:aa:96:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE4LEub+jbTIgv7prIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRmOThjN2EtZWUyMi00NjkzLTgxNzAtYzliMTk3YmM5 ZGEwMB4XDTI2MDYwMzAwMDAyM1oXDTI2MDYwNjAwMDAwMFowLzEtMCsGA1UEAxMk OGU2YTlmNWYtZWNkZi00MjQ1LThiODYtZTA1OGVlYmFkMmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm0FEXtJw54zZCIFgT3Xp6Mhx69AZFlTN3IA jW8M5sW6ugBUNds49ScIk0jhIiJ8OTRuqFnHaZ0o4UkXm1eaqavgU0AV/OK1pAr6 6JD0Cg8joM/pJlBadj30zwe8otW342nATnSl/UCv+zV1xT++VFnbOzCK+TBsmSAK TKAgUv0yGqyYaXtCS+Lv8UMB2T3BASdqOKYVN7VGr2zSNmtJ4lDAdSlk25CVsAil OqQM8j1iv1foNPUvyWm0MlQDk7DQjPw6/yMRocJ97uahUeu7zXVup5FQBcwluMp+ 7O4sl/BVq97bS7XKm1fWFncOdY7I7KTFMsht3h7AB21JTAeT0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIZV6bwLv/aSq9V9bmyCBXs7UKkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5 OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIxOTdiYzlkYTAvZGRmOThjN2EtZWUyMi00 NjkzLTgxNzAtYzliMTk3YmM5ZGEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRmOThjN2EtZWUyMi00NjkzLTgx NzAtYzliMTk3YmM5ZGEwL2RkZjk4YzdhLWVlMjItNDY5My04MTcwLWM5YjE5N2Jj OWRhMC5jcmwwHwYDVR0jBBgwFoAU9lYTxhcbMI3ihtZCrCsd+DzeQ3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIx OTdiYzlkYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnNIBz9Xwwy7f0L4E/OBxG yIjtiCcAlx2+6H134Um/9/uKYOb8ot+9zBuEwpyCrDLXXZrT7tilSu1bXUSIiFxm oF8b+wF+0mlsR4ngTR/hsMwXMjQXJxYnaWTKR6PGqQz4pT+EUOXN8Lpmb2+oOk6R D5dQJqxWJPrDpHEi15mmpxxj6QZPx2mPXNfwMRk8EDPFFKC0ZbsrHQku6PdcZWDt flec1hti0PBmKVtUiau2DTsZ+1+XdqqBYYov725+mokH0ORhMbykBmRuz71FfGYO IffkCTilf24BUIntVgEZw1xHA72pjYnSbDMc9Ehdnfe7pzO5xOWdNlpXgA6IqpYB -----END CERTIFICATE-----Generated at Wed Jun 3 09:02:43 2026 by rpki-client