$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.mft File: 023d0fc7-7b66-4e52-a96e-e85dab7d2566.mft (raw, json) Hash identifier: S2Ev8YLpqUg0cSl7bDsKBFWe3LekF/lMzDDyIz/bXFE= Subject key identifier: 29:E6:EF:A2:05:15:2F:81:96:B2:73:8D:17:64:67:FC:90:CC:53:9F Authority key identifier: 42:53:F1:86:AD:3F:72:A6:70:94:E8:E6:0A:60:D7:E2:E7:43:49:21 Certificate issuer: /CN=023d0fc7-7b66-4e52-a96e-e85dab7d2566 Certificate serial: 010D0C9F4328584DE0BB579994A7D3EE3BA80C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.mft Manifest number: 010D0C9F4328584DA621EA467C362FE9F855EC28 Signing time: Mon 18 May 2026 20:00:04 +0000 Manifest this update: Mon 18 May 2026 20:00:04 +0000 Manifest next update: Wed 20 May 2026 20:00:00 +0000 Files and hashes: 1: 023d0fc7-7b66-4e52-a96e-e85dab7d2566.crl (hash: 2XYhpD40LXLscjIeGmwRSoQsbec8j66b6m6mzxvGog0=) 2: 9c6f5e16-b5f7-3115-bb49-7bbc1ef160f9.roa (hash: bhUL/arH8CuOI4uN1wB6Do/z9S5G8ueUmzhctuPBhg4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 20 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e0:bb:57:99:94:a7:d3:ee:3b:a8:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023d0fc7-7b66-4e52-a96e-e85dab7d2566 Validity Not Before: May 18 20:00:04 2026 GMT Not After : May 20 20:00:00 2026 GMT Subject: CN=e402d0d1-a5fe-4bc0-9608-f6d8a6c2e5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:db:1f:94:91:2f:a8:d1:49:85:84:17:69:a1: c3:65:38:46:eb:58:02:83:c9:bd:01:8b:cf:1e:d4: 3d:24:b3:0c:1c:57:b5:ee:09:59:c2:ba:e1:66:b4: 40:7f:52:16:21:5c:57:db:b0:9d:ae:4c:a7:e4:19: e5:26:39:d5:dc:a8:e6:91:27:c0:6c:cb:ed:97:43: bc:9e:56:33:2c:65:73:45:39:59:21:38:d2:c7:68: b7:85:d7:0a:dc:25:16:f9:75:96:55:ad:cf:56:f6: f1:54:ef:34:4d:cf:bc:47:78:f4:7b:ba:fd:4e:d0: 92:dd:42:12:99:a6:69:b8:41:5c:ed:08:64:f4:9d: 9a:76:a6:f0:95:91:3a:e6:5a:80:c1:1e:a4:8a:9a: 35:40:0d:b3:1f:cd:6b:6d:32:6f:0f:d1:69:00:e8: 7f:08:62:d1:97:4f:e4:11:29:07:aa:34:9d:a4:6c: 01:07:d5:d1:00:62:48:f7:8d:3d:ba:bd:4d:99:5b: cd:c0:51:b1:9f:cc:75:c5:8e:20:95:cd:ec:63:29: 3e:3c:27:92:47:45:7e:61:15:19:d1:89:a7:e4:67: f7:ad:fc:34:6e:1b:a8:a7:a2:8e:80:b0:98:15:a2: f7:08:41:3e:04:59:b6:08:a4:01:b9:f2:17:a7:8a: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E6:EF:A2:05:15:2F:81:96:B2:73:8D:17:64:67:FC:90:CC:53:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.crl X509v3 Authority Key Identifier: keyid:42:53:F1:86:AD:3F:72:A6:70:94:E8:E6:0A:60:D7:E2:E7:43:49:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:ab:45:01:84:9e:d7:d8:64:6b:fd:ef:61:44:0f:8e:64:16: 2e:a7:14:64:25:d8:5b:9c:45:74:5a:b0:74:ce:40:1c:c8:e5: b2:7d:39:f5:0a:07:b4:ea:43:ff:8c:63:ac:94:f5:1a:ef:b8: 08:7d:12:68:61:60:aa:e2:b6:3b:68:41:41:10:2c:6e:a2:91: e7:a9:7d:b5:ec:57:0a:77:93:c6:9d:32:20:29:10:f1:de:5f: 00:e6:ca:c0:fe:42:32:c3:2c:66:d9:8c:f5:7d:fd:57:28:ea: 41:6c:40:57:b1:4a:1b:1a:05:75:de:11:12:62:97:b1:fc:1c: d0:23:42:a9:eb:f6:a0:61:9c:ba:a2:f7:1e:ab:9c:9e:13:8c: 93:d3:33:72:14:b4:73:ca:f0:ef:8b:3a:74:12:bf:05:4d:e2: 94:de:bb:a6:7a:e2:9a:9c:8e:6b:4c:9c:52:fb:13:9c:0a:a4: e6:1a:48:ee:f0:17:2d:ac:88:8b:ac:01:3d:74:4f:c1:18:28: 9d:10:7e:a2:13:e0:0f:b2:0d:47:23:d1:36:4e:01:ea:21:79: 2a:2f:c3:38:7b:88:6c:85:ea:e0:9f:a6:18:49:56:12:1b:ac: 1d:ee:46:a0:18:bf:fc:d0:bf:e3:3d:2e:51:a7:d7:0b:f8:36: 20:96:9c:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3gu1eZlKfT7juoDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDIzZDBmYzctN2I2Ni00ZTUyLWE5NmUtZTg1ZGFiN2Qy NTY2MB4XDTI2MDUxODIwMDAwNFoXDTI2MDUyMDIwMDAwMFowLzEtMCsGA1UEAxMk ZTQwMmQwZDEtYTVmZS00YmMwLTk2MDgtZjZkOGE2YzJlNWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9sflJEvqNFJhYQXaaHDZThG61gCg8m9AYvP HtQ9JLMMHFe17glZwrrhZrRAf1IWIVxX27Cdrkyn5BnlJjnV3KjmkSfAbMvtl0O8 nlYzLGVzRTlZITjSx2i3hdcK3CUW+XWWVa3PVvbxVO80Tc+8R3j0e7r9TtCS3UIS maZpuEFc7Qhk9J2adqbwlZE65lqAwR6kipo1QA2zH81rbTJvD9FpAOh/CGLRl0/k ESkHqjSdpGwBB9XRAGJI9409ur1NmVvNwFGxn8x1xY4glc3sYyk+PCeSR0V+YRUZ 0Ymn5Gf3rfw0bhuop6KOgLCYFaL3CEE+BFm2CKQBufIXp4qc0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCnm76IFFS+BlrJzjRdkZ/yQzFOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMjNk MGZjNy03YjY2LTRlNTItYTk2ZS1lODVkYWI3ZDI1NjYvMDIzZDBmYzctN2I2Ni00 ZTUyLWE5NmUtZTg1ZGFiN2QyNTY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDIzZDBmYzctN2I2Ni00ZTUyLWE5 NmUtZTg1ZGFiN2QyNTY2LzAyM2QwZmM3LTdiNjYtNGU1Mi1hOTZlLWU4NWRhYjdk MjU2Ni5jcmwwHwYDVR0jBBgwFoAUQlPxhq0/cqZwlOjmCmDX4udDSSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMjNkMGZjNy03YjY2LTRlNTItYTk2ZS1lODVk YWI3ZDI1NjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCnq0UBhJ7X2GRr/e9hRA+O ZBYupxRkJdhbnEV0WrB0zkAcyOWyfTn1Cge06kP/jGOslPUa77gIfRJoYWCq4rY7 aEFBECxuopHnqX217FcKd5PGnTIgKRDx3l8A5srA/kIywyxm2Yz1ff1XKOpBbEBX sUobGgV13hESYpex/BzQI0Kp6/agYZy6ovceq5yeE4yT0zNyFLRzyvDvizp0Er8F TeKU3rumeuKanI5rTJxS+xOcCqTmGkju8BctrIiLrAE9dE/BGCidEH6iE+APsg1H I9E2TgHqIXkqL8M4e4hshergn6YYSVYSG6wd7kagGL/80L/jPS5Rp9cL+DYglpx6 -----END CERTIFICATE-----Generated at Tue May 19 10:20:01 2026 by rpki-client