$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft File: 2149afff-d907-4d42-a1e9-e162fad34f0d.mft (raw, json) Hash identifier: EgI/dkV7m8fKGmpLZ+HHkqQh3GUhpYS1CuURLplIcg4= Subject key identifier: 28:46:8A:D9:22:27:BD:F7:49:AF:DA:62:DC:E3:CE:79:1C:E2:8E:34 Authority key identifier: 2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 Certificate issuer: /CN=2149afff-d907-4d42-a1e9-e162fad34f0d Certificate serial: 010D0C9F4328584DE04438FF3E4333CB7AB7D240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft Manifest number: 010D0C9F432858449B57AC092D104FF3C5F04492 Signing time: Mon 18 May 2026 16:00:03 +0000 Manifest this update: Mon 18 May 2026 16:00:03 +0000 Manifest next update: Thu 21 May 2026 16:00:00 +0000 Files and hashes: 1: 2149afff-d907-4d42-a1e9-e162fad34f0d.crl (hash: Jd6XT6ViQsSxQzN7f95Y2bhwCDFBkJRd83uIuqztMO4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 20 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e0:44:38:ff:3e:43:33:cb:7a:b7:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2149afff-d907-4d42-a1e9-e162fad34f0d Validity Not Before: May 18 16:00:03 2026 GMT Not After : May 21 16:00:00 2026 GMT Subject: CN=be7a2506-0830-47ad-8548-bfc1c623668e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:a2:39:15:59:61:1a:98:78:98:a8:c8:75: ff:cf:ef:ef:13:dd:d2:d6:23:0e:59:f6:8a:2c:d1: 42:b9:8e:5d:c9:d9:82:41:84:7b:ba:4b:49:27:f3: 53:3a:3a:f4:31:fd:38:60:f0:73:c2:ac:e8:66:fa: a6:52:0f:b0:27:75:31:4f:4e:97:6a:88:e5:14:98: 47:4c:6a:be:57:e1:3d:33:18:8b:37:13:ad:57:6e: df:d5:e6:69:26:f7:9f:a5:06:8a:ad:f8:a0:f5:f7: 29:b1:56:6e:05:5f:68:b4:ce:29:92:50:7f:4a:b1: e4:fd:13:7d:f7:e7:b3:c6:f8:6e:94:00:d6:8c:25: 15:b4:c3:4e:3e:19:0f:6a:02:71:d3:8b:64:40:0e: 9c:fa:3f:23:d8:32:d6:5b:e8:b7:69:69:ac:2f:0a: 2f:1c:5e:3c:ae:a1:53:c1:7e:36:08:f9:1d:00:76: e4:6a:f8:b5:21:6d:5d:66:62:60:27:85:77:e1:0d: 51:c9:4a:ae:f8:af:82:55:44:92:96:a7:98:b5:e0: a4:df:8b:c8:85:68:63:17:ca:7c:cd:40:db:f5:41: 6a:6e:38:c6:04:15:22:b7:5d:d5:3a:84:1e:cc:8f: 51:94:a6:b7:49:71:e5:f1:6b:e1:f2:81:89:ba:ae: 65:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:46:8A:D9:22:27:BD:F7:49:AF:DA:62:DC:E3:CE:79:1C:E2:8E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl X509v3 Authority Key Identifier: keyid:2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:10:4b:f3:11:8c:66:02:4f:16:2c:58:49:98:85:59:cb:ff: 73:5d:52:13:f2:e6:f7:10:40:c6:7d:9c:82:a8:99:ce:c2:39: 45:55:95:f4:a1:96:d9:09:4f:00:44:3b:86:a5:aa:79:57:1f: 72:10:e6:f5:9f:a0:50:05:e6:1f:c2:4f:fd:5f:ea:e6:1d:02: 18:33:e4:4f:a9:24:67:38:b4:c9:86:46:1a:b4:99:88:08:3e: 87:dc:9e:b7:58:4d:c8:28:df:95:76:ea:3c:57:f1:fc:71:e4: bd:f8:0b:e1:08:e1:f9:74:77:0f:74:af:b4:a0:35:2d:10:42: 91:c5:03:c4:90:ab:05:86:2a:0a:3f:56:ec:46:30:af:f7:c2: fb:f1:d6:a4:4f:a9:c6:cf:90:c5:36:3a:38:14:bd:2b:57:e1: b0:c4:b1:e0:cf:15:49:51:a3:60:31:34:90:ed:ca:ab:18:69: e0:25:6e:e6:06:98:9c:f7:b0:41:25:d2:54:47:78:19:f7:62: 82:d4:ec:5a:71:c0:ae:ed:b0:c0:be:6a:df:b0:a9:a8:9a:06: 93:3f:15:a1:d8:f3:cb:98:90:e5:b3:97:37:d1:f4:19:2e:56: ee:a9:61:2d:99:a2:4b:95:69:c1:bb:95:81:24:f7:48:e4:c8: 31:31:62:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3gRDj/PkMzy3q30kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0OWFmZmYtZDkwNy00ZDQyLWExZTktZTE2MmZhZDM0 ZjBkMB4XDTI2MDUxODE2MDAwM1oXDTI2MDUyMTE2MDAwMFowLzEtMCsGA1UEAxMk YmU3YTI1MDYtMDgzMC00N2FkLTg1NDgtYmZjMWM2MjM2NjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZqiORVZYRqYeJioyHX/z+/vE93S1iMOWfaK LNFCuY5dydmCQYR7uktJJ/NTOjr0Mf04YPBzwqzoZvqmUg+wJ3UxT06XaojlFJhH TGq+V+E9MxiLNxOtV27f1eZpJvefpQaKrfig9fcpsVZuBV9otM4pklB/SrHk/RN9 9+ezxvhulADWjCUVtMNOPhkPagJx04tkQA6c+j8j2DLWW+i3aWmsLwovHF48rqFT wX42CPkdAHbkavi1IW1dZmJgJ4V34Q1RyUqu+K+CVUSSlqeYteCk34vIhWhjF8p8 zUDb9UFqbjjGBBUit13VOoQezI9RlKa3SXHl8Wvh8oGJuq5lYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFChGitkiJ733Sa/aYtzjznkc4o40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5 YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYyZmFkMzRmMGQvMjE0OWFmZmYtZDkwNy00 ZDQyLWExZTktZTE2MmZhZDM0ZjBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjE0OWFmZmYtZDkwNy00ZDQyLWEx ZTktZTE2MmZhZDM0ZjBkLzIxNDlhZmZmLWQ5MDctNGQ0Mi1hMWU5LWUxNjJmYWQz NGYwZC5jcmwwHwYDVR0jBBgwFoAUL1GdNS50NL4xJ5wiscUz17gfbkcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYy ZmFkMzRmMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQEEvzEYxmAk8WLFhJmIVZ y/9zXVIT8ub3EEDGfZyCqJnOwjlFVZX0oZbZCU8ARDuGpap5Vx9yEOb1n6BQBeYf wk/9X+rmHQIYM+RPqSRnOLTJhkYatJmICD6H3J63WE3IKN+Vduo8V/H8ceS9+Avh COH5dHcPdK+0oDUtEEKRxQPEkKsFhioKP1bsRjCv98L78dakT6nGz5DFNjo4FL0r V+GwxLHgzxVJUaNgMTSQ7cqrGGngJW7mBpic97BBJdJUR3gZ92KC1OxaccCu7bDA vmrfsKmomgaTPxWh2PPLmJDls5c30fQZLlbuqWEtmaJLlWnBu5WBJPdI5MgxMWIi -----END CERTIFICATE-----Generated at Tue May 19 07:11:05 2026 by rpki-client