$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft File: bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft (raw, json) Hash identifier: KDT8XOZtJW+EoUabM2ohT9y7MMlTDpdd1lQ5pDQFmXA= Subject key identifier: 3A:30:E5:1A:EE:A5:A6:92:6F:81:11:9A:13:DE:F0:6C:FB:D6:7C:62 Authority key identifier: A8:7C:BC:02:A0:48:D4:7A:E9:DA:8D:36:46:F5:24:F2:0D:65:29:6A Certificate issuer: /CN=bf07f8a7-1a95-4127-aa54-a5c85bcca9b8 Certificate serial: 010D0C9F4328584DEDA4C1F71354AC2BAA2118C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft Manifest number: 010D0C9F4328584073A850B44D23714C2A8A2C70 Signing time: Sat 23 May 2026 11:00:03 +0000 Manifest this update: Sat 23 May 2026 11:00:03 +0000 Manifest next update: Mon 25 May 2026 11:00:00 +0000 Files and hashes: 1: 41f5ef31-c5d9-309f-bb2c-fd3013b7f8c3.roa (hash: sf4N4aM0OhkczpxWkeZmPXZ3TKYWYzxXClbwd7vaL08=) 2: bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl (hash: CpceUYeWkBnP4ydwfOv2vKgg0j5VbjNTiOKgzNrCSck=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:a4:c1:f7:13:54:ac:2b:aa:21:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf07f8a7-1a95-4127-aa54-a5c85bcca9b8 Validity Not Before: May 23 11:00:03 2026 GMT Not After : May 25 11:00:00 2026 GMT Subject: CN=f884fea9-ad3c-4e47-b9fc-f03c32c737a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1f:a1:4d:0f:cf:21:3a:b4:4a:d0:ce:a1:26: 01:1a:f6:de:ec:d3:70:e3:74:ac:8a:6b:93:48:ce: d4:ca:03:9b:91:aa:d5:ca:8f:db:6c:38:f4:16:eb: d0:99:17:7d:de:6d:c3:f2:12:da:ad:e3:55:81:ea: f1:a1:56:e1:c8:3e:1b:26:02:f6:53:f5:66:da:ee: 4e:2b:b1:a4:05:8e:18:5f:17:5e:d0:b9:84:47:a1: 71:78:ad:a2:71:2d:b6:0a:a5:49:66:ae:2f:45:14: db:99:e8:b7:a2:58:1e:f9:bf:df:3c:22:7e:27:80: 9a:c5:87:a0:41:27:b0:07:f7:97:9f:9d:94:dd:33: 36:e7:e2:33:7e:ae:0f:8e:a7:df:e2:ca:72:cc:74: 98:44:24:36:97:8a:50:69:73:29:bf:c3:7e:87:85: ab:18:44:aa:b9:e7:f1:7f:1e:a7:d2:58:b1:56:e8: 68:49:1d:0b:f0:a6:31:ed:14:cb:0e:fd:eb:bb:4b: f9:9f:b3:97:99:81:81:0b:57:8d:30:21:c6:e1:b2: 04:ed:24:b9:f0:3c:99:bf:c8:c9:ea:ed:0b:f5:22: e4:9a:67:8b:f8:9c:a5:6d:32:d6:f0:0e:86:b0:cc: 7e:5a:90:1c:8b:b8:57:e4:65:5e:da:3a:cf:d1:ae: 33:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:30:E5:1A:EE:A5:A6:92:6F:81:11:9A:13:DE:F0:6C:FB:D6:7C:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl X509v3 Authority Key Identifier: keyid:A8:7C:BC:02:A0:48:D4:7A:E9:DA:8D:36:46:F5:24:F2:0D:65:29:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:44:21:b8:f7:a8:e9:c7:18:c1:66:64:7b:6a:8d:64:45:2f: 3b:13:78:28:c7:93:39:78:01:78:a4:ba:f8:28:fa:d6:4c:94: cb:b1:63:b7:1e:d7:72:eb:de:33:48:ff:9c:c8:9d:72:b5:8d: 1f:cc:16:b5:d9:4b:5a:e0:cd:85:93:4a:83:2f:a2:13:2e:84: 41:5a:dc:09:79:87:72:f9:5f:3f:56:7d:d6:3b:03:b6:41:42: f7:90:bc:da:ed:8c:36:f4:8b:ec:bb:d4:14:1c:ab:cd:79:aa: 82:fa:96:77:c7:24:6a:91:5d:dc:59:56:b0:43:23:35:2f:39: b4:67:08:f3:33:b0:5a:cc:80:99:42:24:ae:f0:43:c4:60:c8: 13:b4:03:dd:39:93:53:34:76:14:4d:59:36:3c:a9:6f:3d:f7: 68:97:9d:de:03:f2:cd:38:3c:78:b6:3b:a0:8f:3f:ac:cd:ea: 64:6d:4f:ca:14:21:a0:90:02:17:ac:ca:55:5a:ac:af:68:7d: 37:8d:02:50:80:df:3b:6d:8e:0f:31:a0:61:2c:9b:ae:4a:5d: 59:1c:c3:df:82:bc:8b:ba:eb:d9:22:14:48:80:2e:81:d4:73: 2c:c2:24:4e:ff:e1:77:88:2b:6f:e0:f7:63:10:26:65:9f:95: 2b:3f:3b:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3tpMH3E1SsK6ohGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYwN2Y4YTctMWE5NS00MTI3LWFhNTQtYTVjODViY2Nh OWI4MB4XDTI2MDUyMzExMDAwM1oXDTI2MDUyNTExMDAwMFowLzEtMCsGA1UEAxMk Zjg4NGZlYTktYWQzYy00ZTQ3LWI5ZmMtZjAzYzMyYzczN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx+hTQ/PITq0StDOoSYBGvbe7NNw43SsimuT SM7UygObkarVyo/bbDj0FuvQmRd93m3D8hLareNVgerxoVbhyD4bJgL2U/Vm2u5O K7GkBY4YXxde0LmER6FxeK2icS22CqVJZq4vRRTbmei3olge+b/fPCJ+J4CaxYeg QSewB/eXn52U3TM25+Izfq4Pjqff4spyzHSYRCQ2l4pQaXMpv8N+h4WrGESquefx fx6n0lixVuhoSR0L8KYx7RTLDv3ru0v5n7OXmYGBC1eNMCHG4bIE7SS58DyZv8jJ 6u0L9SLkmmeL+JylbTLW8A6GsMx+WpAci7hX5GVe2jrP0a4z+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDow5RrupaaSb4ERmhPe8Gz71nxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjA3 ZjhhNy0xYTk1LTQxMjctYWE1NC1hNWM4NWJjY2E5YjgvYmYwN2Y4YTctMWE5NS00 MTI3LWFhNTQtYTVjODViY2NhOWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYwN2Y4YTctMWE5NS00MTI3LWFh NTQtYTVjODViY2NhOWI4L2JmMDdmOGE3LTFhOTUtNDEyNy1hYTU0LWE1Yzg1YmNj YTliOC5jcmwwHwYDVR0jBBgwFoAUqHy8AqBI1Hrp2o02RvUk8g1lKWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjA3ZjhhNy0xYTk1LTQxMjctYWE1NC1hNWM4 NWJjY2E5YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDHRCG496jpxxjBZmR7ao1k RS87E3gox5M5eAF4pLr4KPrWTJTLsWO3Htdy694zSP+cyJ1ytY0fzBa12Uta4M2F k0qDL6ITLoRBWtwJeYdy+V8/Vn3WOwO2QUL3kLza7Yw29Ivsu9QUHKvNeaqC+pZ3 xyRqkV3cWVawQyM1Lzm0ZwjzM7BazICZQiSu8EPEYMgTtAPdOZNTNHYUTVk2PKlv Pfdol53eA/LNODx4tjugjz+szepkbU/KFCGgkAIXrMpVWqyvaH03jQJQgN87bY4P MaBhLJuuSl1ZHMPfgryLuuvZIhRIgC6B1HMswiRO/+F3iCtv4PdjECZln5UrPztn -----END CERTIFICATE-----Generated at Sat May 23 15:16:08 2026 by rpki-client