$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: XU1MYLwjSLH5VCBpvGWfLU7Ohumqxy8hBFufj2WlHLs= Subject key identifier: AC:E8:CD:2C:5C:EB:C8:3D:A9:E4:3A:A6:E4:F1:1F:14:1A:D8:D9:65 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584DD2E3B19916B4785C8CC85C50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD079AC9 Signing time: Wed 13 May 2026 21:00:03 +0000 Manifest this update: Wed 13 May 2026 21:00:03 +0000 Manifest next update: Fri 15 May 2026 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: q/aNnle/SclAr3GQMufmWvYc+31QdyTq4HH+K5/F6UU=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: jKC27pyMI/3aDf82xfTsk5FPxXSQsYlEaHhsl553p0A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d2:e3:b1:99:16:b4:78:5c:8c:c8:5c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: May 13 21:00:03 2026 GMT Not After : May 15 21:00:00 2026 GMT Subject: CN=d6c48435-73ab-409a-80ba-edc2c35f3560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6c:65:34:d2:e5:25:df:94:e6:c6:20:40:7d: 25:fc:88:69:61:e4:0d:e5:f9:56:cc:cd:c6:b3:e7: dc:d9:ee:46:fe:35:26:47:90:b7:03:43:0a:08:06: 8b:6a:ce:af:e2:02:67:f4:90:7b:c3:2d:61:d1:7b: bd:b9:b3:70:f7:af:7a:9c:c8:08:0f:1f:38:91:dc: a0:9f:7a:91:a2:96:13:82:e5:12:0a:0f:02:d6:26: 93:67:01:d5:e8:85:3b:1e:74:90:20:5b:3a:15:9d: c3:ce:de:d9:16:82:f2:2d:07:e0:95:b8:ef:ed:50: 0b:53:54:72:c1:87:83:e3:46:c9:4a:e6:c3:cc:d2: 1a:9e:82:7d:64:7e:17:0d:b7:7e:27:8f:26:91:e3: dc:ab:8a:22:a2:c9:c3:a3:1b:31:00:ad:ec:9c:e9: 90:f1:a5:0c:7e:93:5a:0a:12:85:0f:6f:5a:43:c9: c2:f4:6c:f7:dd:ed:93:ef:b8:2d:05:d7:69:1c:37: 8f:b3:8d:14:8c:76:28:3c:76:8c:63:a1:d9:2b:35: 8d:66:6c:44:18:b7:7d:77:79:3e:84:cd:93:6b:1f: 6c:a7:34:4b:01:6f:c1:41:97:da:54:fb:57:64:0b: cb:ea:29:03:a8:1c:91:1c:35:fd:38:af:86:75:d1: 2a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E8:CD:2C:5C:EB:C8:3D:A9:E4:3A:A6:E4:F1:1F:14:1A:D8:D9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e8:47:73:3b:38:7f:35:f4:0d:2f:53:32:cb:d9:65:7c:b5: 13:2c:be:bd:74:b9:f0:9b:9e:42:21:c3:77:2d:eb:57:7f:ec: cd:a4:82:be:95:90:cc:38:ee:e5:f5:79:60:d6:66:7b:6a:44: 71:15:95:79:7f:f2:2a:5a:fc:65:d0:28:a9:67:88:8f:3a:0b: 9c:5e:ef:0a:b8:6a:07:26:88:23:44:cb:f7:33:6f:d5:ff:ca: 0d:07:25:99:59:1c:65:ed:48:bc:73:c9:e0:26:b3:7a:e7:d3: 62:17:53:a4:88:0c:bc:82:18:5a:99:d9:ad:37:57:b5:7f:37: 91:f6:7b:14:7b:0a:d9:be:07:d9:7e:88:95:84:01:96:a9:95: 64:a8:2e:5c:61:4c:97:75:70:35:b4:52:26:0f:3e:22:f5:e1: e1:fa:ff:9e:a7:9e:35:14:8b:33:3d:f2:4b:91:f7:50:14:0b: 5f:58:d4:98:6a:ba:8f:0b:e9:64:15:7c:9d:03:59:88:08:8b: 22:25:72:1a:b3:70:6c:88:a7:00:3d:5b:27:f5:3b:65:cf:8d: 4a:1f:0a:e1:6c:6b:53:5b:ef:9a:98:e3:bb:fc:52:58:04:cf: 11:3b:bf:97:47:a2:04:53:c8:db:c5:a0:b4:cd:89:64:32:86: 26:33:aa:5d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3S47GZFrR4XIzIXFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI2MDUxMzIxMDAwM1oXDTI2MDUxNTIxMDAwMFowLzEtMCsGA1UEAxMk ZDZjNDg0MzUtNzNhYi00MDlhLTgwYmEtZWRjMmMzNWYzNTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGxlNNLlJd+U5sYgQH0l/IhpYeQN5flWzM3G s+fc2e5G/jUmR5C3A0MKCAaLas6v4gJn9JB7wy1h0Xu9ubNw9696nMgIDx84kdyg n3qRopYTguUSCg8C1iaTZwHV6IU7HnSQIFs6FZ3Dzt7ZFoLyLQfglbjv7VALU1Ry wYeD40bJSubDzNIanoJ9ZH4XDbd+J48mkePcq4oiosnDoxsxAK3snOmQ8aUMfpNa ChKFD29aQ8nC9Gz33e2T77gtBddpHDePs40UjHYoPHaMY6HZKzWNZmxEGLd9d3k+ hM2Tax9spzRLAW/BQZfaVPtXZAvL6ikDqByRHDX9OK+GddEqPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKzozSxc68g9qeQ6puTxHxQa2NllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBn6EdzOzh/NfQNL1Myy9ll fLUTLL69dLnwm55CIcN3LetXf+zNpIK+lZDMOO7l9Xlg1mZ7akRxFZV5f/IqWvxl 0CipZ4iPOgucXu8KuGoHJogjRMv3M2/V/8oNByWZWRxl7Ui8c8ngJrN659NiF1Ok iAy8ghhamdmtN1e1fzeR9nsUewrZvgfZfoiVhAGWqZVkqC5cYUyXdXA1tFImDz4i 9eHh+v+ep541FIszPfJLkfdQFAtfWNSYarqPC+lkFXydA1mICIsiJXIas3BsiKcA PVsn9Ttlz41KHwrhbGtTW++amOO7/FJYBM8RO7+XR6IEU8jbxaC0zYlkMoYmM6pd -----END CERTIFICATE-----Generated at Thu May 14 09:14:12 2026 by rpki-client