$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.mft File: 02858587-45de-40d7-9b70-faa916db9aa3.mft (raw, json) Hash identifier: R+AeVSMbVbjROQJQ5016xoq+zZPyAEtbuEoLiTAPO20= Subject key identifier: 56:BB:F0:50:67:71:D9:9B:E5:22:84:4C:37:2B:27:55:2C:5C:82:8C Authority key identifier: 9A:41:4F:AC:FA:D0:57:64:41:03:CC:99:A8:DC:AA:AE:ED:30:07:30 Certificate issuer: /CN=02858587-45de-40d7-9b70-faa916db9aa3 Certificate serial: 010D0C9F4328584DFAE7AAA5976D37C851D99380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.mft Manifest number: 010D0C9F4328584DA73DCDDD826C53DA503EB8FF Signing time: Thu 28 May 2026 05:00:22 +0000 Manifest this update: Thu 28 May 2026 05:00:22 +0000 Manifest next update: Sun 31 May 2026 05:00:00 +0000 Files and hashes: 1: 02858587-45de-40d7-9b70-faa916db9aa3.crl (hash: fxmnBJ1HRO1LXghXRi/MNORja2ouc9Wy6NmDSp/86xQ=) 2: e919f5d7-15f4-3d9a-aad1-94f19ddb2962.roa (hash: 1V28LLVHLRym4FIyvYvV7xaL7MZmre4kWzdy6HTgBbs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:e7:aa:a5:97:6d:37:c8:51:d9:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02858587-45de-40d7-9b70-faa916db9aa3 Validity Not Before: May 28 05:00:22 2026 GMT Not After : May 31 05:00:00 2026 GMT Subject: CN=4910a3f2-1b77-4a25-b1d8-67c7ea483874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bb:f4:fa:77:43:20:cb:cf:7e:e8:c5:4f:da: a9:5e:57:bc:72:73:7d:e0:ac:7f:54:6a:ef:35:59: db:36:c3:6f:df:a4:bf:b9:fe:6b:e2:a4:9f:36:7e: d8:e6:0e:81:18:d1:92:ce:c4:13:0a:99:1a:4c:73: 20:eb:bb:56:61:88:30:c4:6c:0a:98:49:4c:af:76: 65:e6:06:c9:81:83:a5:6c:36:46:28:70:0b:bc:a5: e1:d2:55:2d:dc:5a:1b:3a:af:0d:1d:b2:7d:52:12: b9:f1:43:25:82:e6:86:b4:ef:70:12:97:b2:c7:e0: 7e:7d:fa:a5:e9:78:eb:11:d1:ca:63:3e:b8:7b:1e: 69:59:a3:ac:cb:fa:39:e6:34:bd:97:6c:f9:96:ee: 39:f5:e3:83:88:1d:44:84:23:34:a7:c8:85:17:93: 7c:a4:57:c6:76:e3:25:f0:ec:36:f8:d5:fd:ff:6d: 35:d9:d6:7c:c7:34:7f:4c:0f:0b:ce:e6:63:45:18: 48:a1:02:68:d1:51:a6:30:32:e4:33:42:2f:71:5b: 94:02:d9:0e:97:20:81:0d:d5:9e:a3:67:bf:df:62: 9a:05:4f:7d:d8:20:74:a1:d9:41:43:54:ca:bd:09: f6:f1:8e:c5:d6:50:40:5d:6b:79:d1:a5:c7:80:13: a4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BB:F0:50:67:71:D9:9B:E5:22:84:4C:37:2B:27:55:2C:5C:82:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.crl X509v3 Authority Key Identifier: keyid:9A:41:4F:AC:FA:D0:57:64:41:03:CC:99:A8:DC:AA:AE:ED:30:07:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:2d:eb:1c:c5:9f:d6:db:2b:b3:bf:61:80:05:fc:c9:5b:a9: 37:83:ec:cc:50:6a:ca:85:77:1d:2e:d8:24:67:8c:b7:25:e1: 86:62:43:b5:23:34:7b:05:b1:7b:17:29:62:0b:2f:2e:9b:3c: 4b:08:69:62:da:fa:ea:c4:91:d7:45:e8:02:9f:2e:e7:68:57: 20:f9:36:3e:2e:1b:df:b9:67:8a:49:6e:f3:1b:42:ff:aa:fc: 43:24:77:3c:9f:20:2a:ae:83:2e:24:d3:2a:32:b7:92:55:55: 8a:ca:f0:69:b0:89:9a:29:6a:6d:ce:3a:d3:99:12:76:44:49: 20:8b:43:10:c1:a3:86:bf:e2:e3:79:db:5f:c7:11:29:d6:3a: a9:a7:00:34:35:f5:aa:cf:0e:42:e3:95:8c:79:6e:ca:d1:54: 2f:af:eb:15:1c:bb:12:62:88:64:c2:17:5b:ed:18:71:57:5b: 1a:eb:55:97:b0:b4:a0:94:03:d3:d5:73:c1:9d:58:c3:8d:fd: 37:c9:ea:7f:1d:f3:a0:b6:5a:ce:9b:26:3f:20:84:79:86:38: d5:1f:6c:48:5c:56:17:d3:60:e2:49:2d:e4:7d:ac:72:cf:6d: ac:c8:1e:88:31:30:6f:f6:44:8a:40:6a:d9:db:4f:01:8e:7c: 9a:bb:20:b8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3656qll203yFHZk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4NTg1ODctNDVkZS00MGQ3LTliNzAtZmFhOTE2ZGI5 YWEzMB4XDTI2MDUyODA1MDAyMloXDTI2MDUzMTA1MDAwMFowLzEtMCsGA1UEAxMk NDkxMGEzZjItMWI3Ny00YTI1LWIxZDgtNjdjN2VhNDgzODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLv0+ndDIMvPfujFT9qpXle8cnN94Kx/VGrv NVnbNsNv36S/uf5r4qSfNn7Y5g6BGNGSzsQTCpkaTHMg67tWYYgwxGwKmElMr3Zl 5gbJgYOlbDZGKHALvKXh0lUt3FobOq8NHbJ9UhK58UMlguaGtO9wEpeyx+B+ffql 6XjrEdHKYz64ex5pWaOsy/o55jS9l2z5lu459eODiB1EhCM0p8iFF5N8pFfGduMl 8Ow2+NX9/2012dZ8xzR/TA8LzuZjRRhIoQJo0VGmMDLkM0IvcVuUAtkOlyCBDdWe o2e/32KaBU992CB0odlBQ1TKvQn28Y7F1lBAXWt50aXHgBOkAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFa78FBncdmb5SKETDcrJ1UsXIKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMjg1 ODU4Ny00NWRlLTQwZDctOWI3MC1mYWE5MTZkYjlhYTMvMDI4NTg1ODctNDVkZS00 MGQ3LTliNzAtZmFhOTE2ZGI5YWEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDI4NTg1ODctNDVkZS00MGQ3LTli NzAtZmFhOTE2ZGI5YWEzLzAyODU4NTg3LTQ1ZGUtNDBkNy05YjcwLWZhYTkxNmRi OWFhMy5jcmwwHwYDVR0jBBgwFoAUmkFPrPrQV2RBA8yZqNyqru0wBzAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMjg1ODU4Ny00NWRlLTQwZDctOWI3MC1mYWE5 MTZkYjlhYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhLescxZ/W2yuzv2GABfzJ W6k3g+zMUGrKhXcdLtgkZ4y3JeGGYkO1IzR7BbF7FyliCy8umzxLCGli2vrqxJHX RegCny7naFcg+TY+LhvfuWeKSW7zG0L/qvxDJHc8nyAqroMuJNMqMreSVVWKyvBp sImaKWptzjrTmRJ2REkgi0MQwaOGv+LjedtfxxEp1jqppwA0NfWqzw5C45WMeW7K 0VQvr+sVHLsSYohkwhdb7RhxV1sa61WXsLSglAPT1XPBnVjDjf03yep/HfOgtlrO myY/IIR5hjjVH2xIXFYX02DiSS3kfaxyz22syB6IMTBv9kSKQGrZ208BjnyauyC4 -----END CERTIFICATE-----Generated at Thu May 28 16:12:29 2026 by rpki-client