$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5.mft File: daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5.mft (raw, json) Hash identifier: kEWYGfd6j2waQGzwOwVOnvjrGfxmi83v6foEgcG39WA= Subject key identifier: 12:85:7A:AD:17:EA:C7:9C:59:9C:61:83:5A:7E:E7:D0:22:A3:FD:3D Authority key identifier: 18:B3:DE:96:A3:89:9C:A4:AB:54:ED:D0:F9:F5:7A:AE:7F:E2:5F:5F Certificate issuer: /CN=daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5 Certificate serial: 010D0C9F4328584DED69305CED0CB812FB9B15A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5.mft Manifest number: 010D0C9F4328584073A849E6871B4CAFBD8575D4 Signing time: Sat 23 May 2026 09:00:03 +0000 Manifest this update: Sat 23 May 2026 09:00:03 +0000 Manifest next update: Mon 25 May 2026 09:00:00 +0000 Files and hashes: 1: daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5.crl (hash: b1UHg2cay9bYDIVzTI/e/dh/61/33LKAkyFaDo1wz0A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:69:30:5c:ed:0c:b8:12:fb:9b:15:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5 Validity Not Before: May 23 09:00:03 2026 GMT Not After : May 25 09:00:00 2026 GMT Subject: CN=bfc98cac-003d-4af9-a451-54ce0cb630e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9c:c6:39:4b:21:a5:87:15:f4:7e:d6:ef:fc: c0:04:9e:f7:33:f7:fa:2f:27:32:f5:13:d5:ab:33: 9b:3d:6f:4b:92:39:57:cb:de:6b:29:a9:9b:2c:7d: 35:fd:8d:af:7e:25:bd:10:0e:ee:20:1d:84:fb:50: d5:be:7b:06:5b:e4:b3:17:80:4f:9d:f2:c2:4c:9e: 30:aa:8a:00:7d:1d:97:3f:ec:3b:c6:17:10:ef:23: 44:df:4c:4e:7f:45:5f:69:a0:19:9f:93:54:69:f0: 6f:64:79:56:e9:a4:28:24:81:79:95:c5:02:87:1a: 4e:ef:e5:c2:ee:f3:c8:3b:7b:5d:1b:68:aa:bc:8f: 4d:dd:f3:6e:51:8f:b9:65:c2:82:4e:ae:85:55:43: b5:50:95:04:bd:0d:62:26:57:68:66:36:4d:67:f3: 1f:52:fa:b9:63:63:d3:b5:8e:3f:92:d2:67:c0:87: ed:19:7f:d8:f7:f8:d8:98:cc:21:2e:5e:c1:b3:7d: f7:48:58:8f:13:c7:52:e6:f3:6a:93:f2:3b:08:61: 7f:db:64:ae:9b:94:60:fd:07:c6:90:ea:c8:1b:71: 4b:16:ac:ce:94:ec:55:6c:07:95:55:67:f2:c2:f3: 54:ea:82:73:a1:55:77:69:2a:1c:d4:81:4f:47:94: e9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:85:7A:AD:17:EA:C7:9C:59:9C:61:83:5A:7E:E7:D0:22:A3:FD:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5.crl X509v3 Authority Key Identifier: keyid:18:B3:DE:96:A3:89:9C:A4:AB:54:ED:D0:F9:F5:7A:AE:7F:E2:5F:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/daa4f8ff-2f7c-4b61-afd5-63a50aa53ea5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:57:af:20:7e:ee:72:e7:6f:33:c6:b0:bf:9f:9d:fd:97:79: 0d:4b:16:23:79:57:d6:1a:58:5d:7b:47:08:d3:96:68:4b:9e: 59:1c:a2:fd:2f:c4:10:00:c8:e0:59:c7:94:98:f7:d1:37:d5: fc:72:5e:65:92:0d:70:b9:8e:dd:76:3b:d9:ae:ca:36:b7:e5: 65:08:bb:e8:a1:29:6d:4b:04:17:71:a0:13:0d:38:40:03:8d: 96:13:1f:58:e6:95:72:f0:28:0f:87:59:c5:1b:96:ad:2a:1a: b0:f2:1c:e4:d4:75:75:50:9b:3f:8b:31:c7:a8:fc:79:3b:0e: 50:ab:e5:e7:e0:69:5c:88:d6:08:d9:5e:e1:b2:f3:e7:a0:80: 72:da:85:86:cc:2b:08:a6:7e:19:88:ad:7d:59:37:5a:d6:91: 0f:91:53:42:c1:bd:3b:07:ac:a7:d5:5e:3d:68:25:85:8e:04: 54:a0:70:30:31:2d:b2:7a:64:63:73:42:7f:23:58:77:f6:ce: ae:a5:d9:0b:eb:08:53:2c:14:85:d1:6d:13:22:87:1c:8a:0e: e8:71:ab:78:e5:ab:b5:22:83:79:e0:ae:1a:60:55:79:30:12: e7:6b:8d:bc:d9:52:f0:26:eb:cf:00:45:09:21:83:bb:d5:e8: 7f:11:0a:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3taTBc7Qy4EvubFaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhNGY4ZmYtMmY3Yy00YjYxLWFmZDUtNjNhNTBhYTUz ZWE1MB4XDTI2MDUyMzA5MDAwM1oXDTI2MDUyNTA5MDAwMFowLzEtMCsGA1UEAxMk YmZjOThjYWMtMDAzZC00YWY5LWE0NTEtNTRjZTBjYjYzMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZzGOUshpYcV9H7W7/zABJ73M/f6Lycy9RPV qzObPW9LkjlXy95rKambLH01/Y2vfiW9EA7uIB2E+1DVvnsGW+SzF4BPnfLCTJ4w qooAfR2XP+w7xhcQ7yNE30xOf0VfaaAZn5NUafBvZHlW6aQoJIF5lcUChxpO7+XC 7vPIO3tdG2iqvI9N3fNuUY+5ZcKCTq6FVUO1UJUEvQ1iJldoZjZNZ/MfUvq5Y2PT tY4/ktJnwIftGX/Y9/jYmMwhLl7Bs333SFiPE8dS5vNqk/I7CGF/22Sum5Rg/QfG kOrIG3FLFqzOlOxVbAeVVWfywvNU6oJzoVV3aSoc1IFPR5TpuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBKFeq0X6secWZxhg1p+59Aio/09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kYWE0 ZjhmZi0yZjdjLTRiNjEtYWZkNS02M2E1MGFhNTNlYTUvZGFhNGY4ZmYtMmY3Yy00 YjYxLWFmZDUtNjNhNTBhYTUzZWE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGFhNGY4ZmYtMmY3Yy00YjYxLWFm ZDUtNjNhNTBhYTUzZWE1L2RhYTRmOGZmLTJmN2MtNGI2MS1hZmQ1LTYzYTUwYWE1 M2VhNS5jcmwwHwYDVR0jBBgwFoAUGLPelqOJnKSrVO3Q+fV6rn/iX18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kYWE0ZjhmZi0yZjdjLTRiNjEtYWZkNS02M2E1 MGFhNTNlYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARV68gfu5y528zxrC/n539 l3kNSxYjeVfWGlhde0cI05ZoS55ZHKL9L8QQAMjgWceUmPfRN9X8cl5lkg1wuY7d djvZrso2t+VlCLvooSltSwQXcaATDThAA42WEx9Y5pVy8CgPh1nFG5atKhqw8hzk 1HV1UJs/izHHqPx5Ow5Qq+Xn4GlciNYI2V7hsvPnoIBy2oWGzCsIpn4ZiK19WTda 1pEPkVNCwb07B6yn1V49aCWFjgRUoHAwMS2yemRjc0J/I1h39s6updkL6whTLBSF 0W0TIoccig7ocat45au1IoN54K4aYFV5MBLna4282VLwJuvPAEUJIYO71eh/EQo7 -----END CERTIFICATE-----Generated at Sat May 23 15:14:58 2026 by rpki-client