$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft File: 3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft (raw, json) Hash identifier: bkiW1XE1L4romn7AyP1Akl4Lcmbym2wzdX5NbGeXhRQ= Subject key identifier: 10:51:8D:5B:7B:C6:C0:F4:47:CD:2D:49:6D:24:4F:38:56:B9:43:05 Authority key identifier: 57:2E:D3:14:B7:20:C3:3F:3E:1B:3F:A1:B6:FE:36:E9:7D:3D:B0:9F Certificate issuer: /CN=3e229d9a-dfd5-4a69-be96-2f27a660d4b5 Certificate serial: 010D0C9F4328584DE0D91DF77CBC643A876D9900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft Manifest number: 010D0C9F4328584583AA4B32D28F2848E443197F Signing time: Mon 18 May 2026 21:00:03 +0000 Manifest this update: Mon 18 May 2026 21:00:03 +0000 Manifest next update: Wed 20 May 2026 21:00:00 +0000 Files and hashes: 1: 3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl (hash: aq3s9nu0aGx5rZT3gLakw8uYIqs/S22P3MIdtgnNDlE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 20 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e0:d9:1d:f7:7c:bc:64:3a:87:6d:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e229d9a-dfd5-4a69-be96-2f27a660d4b5 Validity Not Before: May 18 21:00:03 2026 GMT Not After : May 20 21:00:00 2026 GMT Subject: CN=87da5aab-7bf4-4048-8cdc-a71ecebd9ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:00:26:35:cd:9b:47:88:ff:86:6c:d5:f2:64: 50:7b:36:5a:d2:49:10:a4:f1:4a:90:54:6d:41:27: 16:c4:ad:e2:26:1a:00:be:11:38:28:c8:05:1e:1c: 8c:6a:85:85:59:42:4e:60:41:ef:01:f0:2a:7c:ef: 96:5e:15:4b:c1:34:d3:bd:d2:34:7d:ea:c7:dd:8a: 1f:a9:e1:40:c8:fa:c7:98:08:d0:2f:e7:94:34:15: 12:13:5f:b7:80:94:4a:40:d4:af:77:9c:43:97:51: 77:81:df:3a:02:61:b8:7f:4a:92:27:6d:65:10:2b: e2:27:a7:fd:b4:95:3c:09:2c:f5:f0:7e:4f:28:c5: 05:5d:43:ac:4c:2c:3d:8f:a9:cd:a0:7b:90:7b:af: d5:c1:e2:c2:7d:ff:76:05:ab:89:24:f1:1e:a7:0a: aa:7c:c7:7c:76:98:a7:df:8d:f4:06:80:2c:87:9a: e9:83:62:74:4a:9b:7e:42:8e:ab:d4:2b:c8:0a:3e: 20:5d:19:d9:92:56:8a:5b:97:16:de:64:43:b2:8f: 81:04:4b:e9:c0:7f:ca:69:2e:c2:2e:c2:99:f3:4d: fd:7a:18:2c:a1:da:1e:a0:ce:20:69:41:8d:5f:b4: 60:d0:1e:df:11:e0:01:de:bb:47:96:7f:a9:d5:b8: 46:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:51:8D:5B:7B:C6:C0:F4:47:CD:2D:49:6D:24:4F:38:56:B9:43:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl X509v3 Authority Key Identifier: keyid:57:2E:D3:14:B7:20:C3:3F:3E:1B:3F:A1:B6:FE:36:E9:7D:3D:B0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:19:d9:cc:00:9a:f5:0d:58:23:4f:6d:0b:d9:67:a3:ef:9d: e8:4e:63:02:ac:08:70:6d:b2:87:f0:6a:6c:4d:55:3d:22:35: 02:6c:84:10:27:ed:07:07:67:38:ee:2e:09:4f:70:33:e1:d5: 4b:98:6b:64:1b:ae:a1:b6:93:a1:e4:f9:4a:01:b1:13:80:3b: 90:94:3f:14:0a:a7:ac:fa:dc:88:42:e0:28:fe:ff:0a:9c:15: 22:e6:27:f2:4d:f4:d9:2c:cf:4e:3c:74:9e:16:ec:ca:6f:cd: 53:1e:05:25:07:8d:ce:4a:f6:bf:3d:65:2d:be:c0:7d:4f:e2: 72:87:53:18:f8:19:16:5b:2c:6f:07:f8:54:f6:82:10:1f:cd: 99:f7:fa:21:f0:63:45:78:e2:83:96:c7:44:78:70:f7:22:ed: 75:64:0f:93:c1:f2:06:22:bf:79:5a:05:59:98:38:cc:64:99: ad:99:e4:07:53:86:72:38:1e:53:b1:70:8c:76:9c:b0:67:bd: e4:6a:27:cb:a8:99:5b:99:7a:29:48:b5:a5:d6:5e:cb:6e:57: 25:2e:7b:2f:f3:ee:a3:73:dd:b6:54:9f:b2:47:39:99:70:b3: 8b:e2:46:5a:d3:ba:b7:ad:84:41:73:fa:e3:3a:c3:b6:c4:73: bf:68:95:fa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3g2R33fLxkOodtmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UyMjlkOWEtZGZkNS00YTY5LWJlOTYtMmYyN2E2NjBk NGI1MB4XDTI2MDUxODIxMDAwM1oXDTI2MDUyMDIxMDAwMFowLzEtMCsGA1UEAxMk ODdkYTVhYWItN2JmNC00MDQ4LThjZGMtYTcxZWNlYmQ5ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwAmNc2bR4j/hmzV8mRQezZa0kkQpPFKkFRt QScWxK3iJhoAvhE4KMgFHhyMaoWFWUJOYEHvAfAqfO+WXhVLwTTTvdI0ferH3Yof qeFAyPrHmAjQL+eUNBUSE1+3gJRKQNSvd5xDl1F3gd86AmG4f0qSJ21lECviJ6f9 tJU8CSz18H5PKMUFXUOsTCw9j6nNoHuQe6/VweLCff92BauJJPEepwqqfMd8dpin 3430BoAsh5rpg2J0Spt+Qo6r1CvICj4gXRnZklaKW5cW3mRDso+BBEvpwH/KaS7C LsKZ8039ehgsodoeoM4gaUGNX7Rg0B7fEeAB3rtHln+p1bhGrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBBRjVt7xsD0R80tSW0kTzhWuUMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTIy OWQ5YS1kZmQ1LTRhNjktYmU5Ni0yZjI3YTY2MGQ0YjUvM2UyMjlkOWEtZGZkNS00 YTY5LWJlOTYtMmYyN2E2NjBkNGI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UyMjlkOWEtZGZkNS00YTY5LWJl OTYtMmYyN2E2NjBkNGI1LzNlMjI5ZDlhLWRmZDUtNGE2OS1iZTk2LTJmMjdhNjYw ZDRiNS5jcmwwHwYDVR0jBBgwFoAUVy7TFLcgwz8+Gz+htv426X09sJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTIyOWQ5YS1kZmQ1LTRhNjktYmU5Ni0yZjI3 YTY2MGQ0YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2GdnMAJr1DVgjT20L2Wej 753oTmMCrAhwbbKH8GpsTVU9IjUCbIQQJ+0HB2c47i4JT3Az4dVLmGtkG66htpOh 5PlKAbETgDuQlD8UCqes+tyIQuAo/v8KnBUi5ifyTfTZLM9OPHSeFuzKb81THgUl B43OSva/PWUtvsB9T+Jyh1MY+BkWWyxvB/hU9oIQH82Z9/oh8GNFeOKDlsdEeHD3 Iu11ZA+TwfIGIr95WgVZmDjMZJmtmeQHU4ZyOB5TsXCMdpywZ73kaifLqJlbmXop SLWl1l7LblclLnsv8+6jc922VJ+yRzmZcLOL4kZa07q3rYRBc/rjOsO2xHO/aJX6 -----END CERTIFICATE-----Generated at Tue May 19 07:11:05 2026 by rpki-client