$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft File: 25393f82-9e95-47aa-9897-0027f6c5e3d4.mft (raw, json) Hash identifier: reh7rF99Ohqiqpy4k6foy/E3+xyW0v9s5sr27FTt5/s= Subject key identifier: C2:12:FD:79:5F:66:C7:4A:DB:72:5C:4C:F9:CD:88:52:B6:0F:CB:C8 Authority key identifier: 38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E Certificate issuer: /CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Certificate serial: 010D0C9F4328584DEF8133476FA9F127A273A920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft Manifest number: 010D0C9F43285846E41B34F5F05C912653C09738 Signing time: Sun 24 May 2026 03:00:03 +0000 Manifest this update: Sun 24 May 2026 03:00:03 +0000 Manifest next update: Wed 27 May 2026 03:00:00 +0000 Files and hashes: 1: 25393f82-9e95-47aa-9897-0027f6c5e3d4.crl (hash: VyHO/4VpT7gaaWorhb7ZUGuKOj4jwfQ1gpQj88VugZE=) 2: 9c46e998-1908-3d4b-a119-3d998db7b89b.roa (hash: qEFFlnx5+evIjWSSQ3ED3bQZdJBLBLB5ekxbtcwduyk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:81:33:47:6f:a9:f1:27:a2:73:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Validity Not Before: May 24 03:00:03 2026 GMT Not After : May 27 03:00:00 2026 GMT Subject: CN=c8a2b032-08fa-420b-b3a3-a8c2588f6e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:02:34:5c:60:73:4c:99:1e:99:f4:2b:71:4a: 80:19:1a:84:11:95:db:72:d2:cb:5b:fb:1f:10:fd: 12:55:97:66:7c:8f:77:fa:a3:fd:72:15:ac:97:68: 22:a6:97:b6:c4:df:09:72:b4:39:2b:46:32:83:2e: 4f:e9:ef:e9:5d:69:e5:c0:f5:5d:12:38:8a:9b:5f: 64:a3:3d:1a:17:7b:d7:46:1f:3e:d5:dc:c6:5c:14: 44:35:f1:05:11:66:98:cd:fb:55:ca:9e:62:81:c9: f9:e4:26:6e:65:e7:21:38:c5:ef:5e:fb:51:47:a4: 83:99:ae:c0:90:7e:0d:51:05:90:0c:72:27:bc:67: e3:f8:8b:e7:64:24:7b:a5:86:48:94:b6:82:1b:ea: 66:28:f9:7c:62:74:2d:ca:47:ac:49:1d:c1:93:b0: 9d:a6:33:93:87:57:9d:1b:d0:fe:e9:e8:2a:9a:dd: e8:51:9c:d5:66:57:57:c3:fa:f2:73:1e:3f:14:44: 20:80:5c:12:8c:99:f4:64:f2:0c:36:b0:c6:8a:b7: 66:50:57:1e:08:10:03:ad:77:69:e2:bb:ef:33:cf: ae:49:d1:4a:58:78:b6:de:95:25:7c:e7:1a:b3:4a: 82:ea:b8:2a:c5:82:42:8f:e0:d6:bc:ae:2a:f3:5b: 57:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:12:FD:79:5F:66:C7:4A:DB:72:5C:4C:F9:CD:88:52:B6:0F:CB:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl X509v3 Authority Key Identifier: keyid:38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ba:96:d7:e4:05:d3:04:42:00:88:20:be:43:5b:27:2c:ba: 6b:25:e4:18:f4:bb:6d:eb:e1:ca:2e:77:eb:63:85:b3:46:74: d2:00:7f:fc:0c:09:f5:38:6e:b7:13:61:01:60:2d:b0:7f:bd: 01:ad:e5:df:da:55:d2:2c:40:80:1e:ef:8d:6c:5d:10:38:76: 4e:bf:23:9e:2f:86:cb:3d:fd:92:19:e2:f0:23:5e:26:d5:c3: 49:3e:47:ae:64:f0:05:59:64:ce:bb:23:e2:9b:a6:33:37:7c: 93:67:a2:e3:a5:3b:ad:8a:cc:3b:99:f8:08:d4:c2:2d:cf:71: 6f:c7:9d:4f:19:7c:81:18:ee:f0:5c:5f:d2:84:a3:26:59:e4: 0a:26:a4:fd:c8:0c:f0:c2:9e:f5:71:17:3c:c8:16:b0:99:2f: 1f:65:18:68:2d:8b:ae:df:c2:0b:d7:fe:62:f7:d1:3e:5a:14: fd:61:e7:ba:0a:c0:7e:16:fc:3f:a5:be:71:83:2a:a6:6b:5e: 96:ad:85:60:88:43:d8:17:c2:56:cf:7b:6a:70:7e:fe:ac:f9: a3:2c:df:3a:c3:ed:61:d5:1e:81:b8:91:2b:94:5d:f6:d5:e3: 8a:25:03:6a:47:8d:13:3d:b1:19:20:34:5a:b6:2f:6a:4d:c0: 47:0d:99:29 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3vgTNHb6nxJ6JzqSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTNmODItOWU5NS00N2FhLTk4OTctMDAyN2Y2YzVl M2Q0MB4XDTI2MDUyNDAzMDAwM1oXDTI2MDUyNzAzMDAwMFowLzEtMCsGA1UEAxMk YzhhMmIwMzItMDhmYS00MjBiLWIzYTMtYThjMjU4OGY2ZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQI0XGBzTJkemfQrcUqAGRqEEZXbctLLW/sf EP0SVZdmfI93+qP9chWsl2gippe2xN8JcrQ5K0Yygy5P6e/pXWnlwPVdEjiKm19k oz0aF3vXRh8+1dzGXBRENfEFEWaYzftVyp5igcn55CZuZechOMXvXvtRR6SDma7A kH4NUQWQDHInvGfj+IvnZCR7pYZIlLaCG+pmKPl8YnQtykesSR3Bk7CdpjOTh1ed G9D+6egqmt3oUZzVZldXw/rycx4/FEQggFwSjJn0ZPIMNrDGirdmUFceCBADrXdp 4rvvM8+uSdFKWHi23pUlfOcas0qC6rgqxYJCj+DWvK4q81tX6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMIS/XlfZsdK23JcTPnNiFK2D8vIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5 M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3ZjZjNWUzZDQvMjUzOTNmODItOWU5NS00 N2FhLTk4OTctMDAyN2Y2YzVlM2Q0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjUzOTNmODItOWU5NS00N2FhLTk4 OTctMDAyN2Y2YzVlM2Q0LzI1MzkzZjgyLTllOTUtNDdhYS05ODk3LTAwMjdmNmM1 ZTNkNC5jcmwwHwYDVR0jBBgwFoAUOAgtINaveaoYgr9lJFwNdefJhm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3 ZjZjNWUzZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGupbX5AXTBEIAiCC+Q1sn LLprJeQY9Ltt6+HKLnfrY4WzRnTSAH/8DAn1OG63E2EBYC2wf70BreXf2lXSLECA Hu+NbF0QOHZOvyOeL4bLPf2SGeLwI14m1cNJPkeuZPAFWWTOuyPim6YzN3yTZ6Lj pTutisw7mfgI1MItz3Fvx51PGXyBGO7wXF/ShKMmWeQKJqT9yAzwwp71cRc8yBaw mS8fZRhoLYuu38IL1/5i99E+WhT9Yee6CsB+Fvw/pb5xgyqma16WrYVgiEPYF8JW z3tqcH7+rPmjLN86w+1h1R6BuJErlF321eOKJQNqR40TPbEZIDRati9qTcBHDZkp -----END CERTIFICATE-----Generated at Sun May 24 06:02:22 2026 by rpki-client