$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft File: b9ea3438-4142-4de2-a912-7b081a51b42d.mft (raw, json) Hash identifier: 3wOiHj4h9zFa9gHEziek3Xi6nTZhHX8fKOPXj/ox7Lg= Subject key identifier: 73:73:31:49:DB:F2:DC:04:73:93:60:B0:91:92:30:AB:08:C6:2F:60 Authority key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D Certificate issuer: /CN=b9ea3438-4142-4de2-a912-7b081a51b42d Certificate serial: 010D0C9F4328584DEDE0505D0A2868037A8B8F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft Manifest number: 010D0C9F4328584073A854B5F80ED5C22F91611C Signing time: Sat 23 May 2026 13:00:03 +0000 Manifest this update: Sat 23 May 2026 13:00:03 +0000 Manifest next update: Mon 25 May 2026 13:00:00 +0000 Files and hashes: 1: 408f67a4-965c-3201-9f19-0975f3af94df.roa (hash: +cesHvnZQmprqsYc5d35Wi406WQcMDXn7DL/mrm2/GA=) 2: 99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa (hash: D7g3iCMOFAbi56Qmhx7RC7/8C0YG2gC9b+nOOdCj3tY=) 3: b9ea3438-4142-4de2-a912-7b081a51b42d.crl (hash: qmpz/veemrHVY1UBYV/3FCUVUQY8FFH9VswCWlzvxEI=) 4: e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa (hash: YJpM8IXP084e/pT9QsEG8rsgJTCVuEsElcS4rJYDIGE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:50:5d:0a:28:68:03:7a:8b:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea3438-4142-4de2-a912-7b081a51b42d Validity Not Before: May 23 13:00:03 2026 GMT Not After : May 25 13:00:00 2026 GMT Subject: CN=6521e928-e7b5-4932-8dac-22080300ceb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:50:25:f2:02:b6:92:ab:bd:af:ee:d6:2c:c5: f5:3e:c0:2d:ff:27:87:c7:1a:f5:31:27:7d:fb:cd: b4:1f:ea:51:4e:87:00:3d:36:ef:05:9b:16:30:dc: 47:39:1b:5f:5f:84:08:fa:d4:64:c0:3d:8d:a7:d5: dd:b8:c8:50:a0:76:56:4b:80:4d:f9:0a:fb:73:7d: 01:68:81:a2:1b:77:62:73:e8:60:50:4b:d5:62:cb: bf:6b:4b:94:89:94:fa:2a:33:32:8a:00:56:f5:b2: 69:57:9e:5e:8c:c5:9a:7f:13:2e:75:c9:17:2a:39: aa:5b:82:54:b0:32:34:f8:17:43:da:f5:ea:d9:ff: d5:3e:25:bf:18:b3:91:bf:50:17:28:72:fa:9e:3c: 6e:2b:37:39:08:ea:8d:f2:74:bf:c5:c0:f3:a1:63: f0:64:db:98:67:be:43:28:0e:92:06:68:cf:69:10: 41:68:ac:04:79:72:08:56:2e:df:43:83:f4:21:78: 7c:25:d9:42:2c:7d:96:13:93:8f:b6:e8:e6:99:d4: ea:38:76:75:8f:52:a5:00:e8:63:06:36:cc:06:f7: ca:db:91:16:c5:eb:4d:aa:fc:35:c2:5a:e8:71:1b: 1a:fd:e6:f7:2a:14:dd:e8:c3:72:96:6f:b8:5b:b3: 28:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:73:31:49:DB:F2:DC:04:73:93:60:B0:91:92:30:AB:08:C6:2F:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl X509v3 Authority Key Identifier: keyid:24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:f9:ce:54:70:bd:31:eb:25:21:ab:44:43:6a:c5:c1:a4:9a: 15:ac:c2:0e:44:20:af:01:94:6b:3a:8d:39:14:e5:f4:d0:b4: 84:6e:43:4f:6c:88:6a:f0:4c:7b:6c:8b:81:89:ed:e9:3f:19: 73:77:7c:27:ef:47:ef:d2:88:c2:0f:e7:5e:a6:4c:60:6c:0f: f4:46:40:e7:89:34:1c:65:e0:af:f4:ca:0c:78:69:37:3b:dc: dd:8a:b1:f2:72:cb:f8:7d:89:4f:98:28:34:b0:26:f9:b7:c5: 72:ad:8d:08:c2:3e:2b:48:1e:da:be:86:f2:86:ec:de:7a:39: 11:ba:84:6e:8b:29:9b:dd:5c:5b:30:c6:2c:a6:9e:20:9d:dd: 31:a7:74:14:87:ed:ac:ce:a2:7f:a5:22:d6:e7:a2:46:0b:e2: be:82:bf:fd:61:dc:e1:12:8d:6d:8b:90:01:f1:e5:ac:55:51: 03:1a:f4:7f:6d:80:a3:ef:69:97:7c:07:7a:17:ab:b6:0c:b7: f2:7c:dc:f4:94:86:30:e9:77:4f:ca:a7:e7:b0:48:cb:40:a2: 12:62:db:75:a8:27:bb:3d:da:d0:eb:59:0d:bb:74:d6:6d:9f: 7e:9b:34:d4:6a:ab:24:26:91:a1:fd:f3:ea:d9:88:e8:1a:57: 22:37:9d:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3t4FBdCihoA3qLjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjllYTM0MzgtNDE0Mi00ZGUyLWE5MTItN2IwODFhNTFi NDJkMB4XDTI2MDUyMzEzMDAwM1oXDTI2MDUyNTEzMDAwMFowLzEtMCsGA1UEAxMk NjUyMWU5MjgtZTdiNS00OTMyLThkYWMtMjIwODAzMDBjZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61Al8gK2kqu9r+7WLMX1PsAt/yeHxxr1MSd9 +820H+pRTocAPTbvBZsWMNxHORtfX4QI+tRkwD2Np9XduMhQoHZWS4BN+Qr7c30B aIGiG3dic+hgUEvVYsu/a0uUiZT6KjMyigBW9bJpV55ejMWafxMudckXKjmqW4JU sDI0+BdD2vXq2f/VPiW/GLORv1AXKHL6njxuKzc5COqN8nS/xcDzoWPwZNuYZ75D KA6SBmjPaRBBaKwEeXIIVi7fQ4P0IXh8JdlCLH2WE5OPtujmmdTqOHZ1j1KlAOhj BjbMBvfK25EWxetNqvw1wlrocRsa/eb3KhTd6MNylm+4W7MoIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHNzMUnb8twEc5NgsJGSMKsIxi9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVh MzQzOC00MTQyLTRkZTItYTkxMi03YjA4MWE1MWI0MmQvYjllYTM0MzgtNDE0Mi00 ZGUyLWE5MTItN2IwODFhNTFiNDJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjllYTM0MzgtNDE0Mi00ZGUyLWE5 MTItN2IwODFhNTFiNDJkL2I5ZWEzNDM4LTQxNDItNGRlMi1hOTEyLTdiMDgxYTUx YjQyZC5jcmwwHwYDVR0jBBgwFoAUJDliXoh2ePZzmBGt5EgWbTk2r20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVhMzQzOC00MTQyLTRkZTItYTkxMi03YjA4 MWE1MWI0MmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDG+c5UcL0x6yUhq0RDasXB pJoVrMIORCCvAZRrOo05FOX00LSEbkNPbIhq8Ex7bIuBie3pPxlzd3wn70fv0ojC D+depkxgbA/0RkDniTQcZeCv9MoMeGk3O9zdirHycsv4fYlPmCg0sCb5t8VyrY0I wj4rSB7avobyhuzeejkRuoRuiymb3VxbMMYspp4gnd0xp3QUh+2szqJ/pSLW56JG C+K+gr/9YdzhEo1ti5AB8eWsVVEDGvR/bYCj72mXfAd6F6u2DLfyfNz0lIYw6XdP yqfnsEjLQKISYtt1qCe7PdrQ61kNu3TWbZ9+mzTUaqskJpGh/fPq2YjoGlciN527 -----END CERTIFICATE-----Generated at Sat May 23 15:17:11 2026 by rpki-client