$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2/173c7a41-4996-43f9-aa22-68750f2b01a2.mft File: 173c7a41-4996-43f9-aa22-68750f2b01a2.mft (raw, json) Hash identifier: oPRkKe0gp2UrnEKdCAI6n4crA/crilMMdkbiBidUXYE= Subject key identifier: C4:08:18:C5:9E:61:8D:46:06:37:1D:1C:C0:C8:9F:88:4D:A2:C9:39 Authority key identifier: 26:27:0B:DE:92:8F:FC:E2:A7:45:52:55:84:96:A4:C1:FA:D8:33:81 Certificate issuer: /CN=173c7a41-4996-43f9-aa22-68750f2b01a2 Certificate serial: 010D0C9F4328584DFAC9E5E0F79ACD4D0DBF7100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2/173c7a41-4996-43f9-aa22-68750f2b01a2.mft Manifest number: 010D0C9F4328584C877DC9857CB3C31BB9994708 Signing time: Thu 28 May 2026 04:00:21 +0000 Manifest this update: Thu 28 May 2026 04:00:21 +0000 Manifest next update: Sat 30 May 2026 04:00:00 +0000 Files and hashes: 1: 173c7a41-4996-43f9-aa22-68750f2b01a2.crl (hash: xCpzqgejxIfbhUkcdJO1c2UJisD0cdqSmQIMQds3McY=) 2: 8e0a5120-dd44-397a-83ec-634e9131f10c.roa (hash: 4PML+M9TH7jNLVqrfyEY/YJF+O+0cwO/BhctoM0FUI4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2/173c7a41-4996-43f9-aa22-68750f2b01a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2/173c7a41-4996-43f9-aa22-68750f2b01a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:c9:e5:e0:f7:9a:cd:4d:0d:bf:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=173c7a41-4996-43f9-aa22-68750f2b01a2 Validity Not Before: May 28 04:00:21 2026 GMT Not After : May 30 04:00:00 2026 GMT Subject: CN=c9f497c0-49c3-49ae-944a-da3d280b609b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:77:89:12:d4:26:3a:ae:9b:78:3b:8f:71:30: ea:6a:aa:61:d5:48:8b:85:65:a6:f2:63:84:4d:c7: 89:a6:0f:9d:24:80:7b:84:6c:b4:5f:db:9b:59:2d: 2e:3b:4c:93:d7:59:8a:11:ec:94:a1:ee:5d:78:cb: c4:50:c1:a8:e2:cc:69:39:21:94:cf:9f:ff:5d:ef: ce:48:09:af:2a:65:b4:c6:90:d3:11:02:36:ad:c0: f4:8c:af:05:2a:1b:e6:04:bb:32:e7:4f:80:13:d7: ee:3d:dc:74:48:70:e0:4c:4b:7b:a5:26:50:b7:ca: a1:cc:a3:81:c6:34:9a:ad:54:ce:08:32:5d:94:2a: 24:37:6c:d1:eb:8c:d9:8b:c5:6e:ab:b9:b8:a3:b5: 58:64:66:49:39:f2:a8:c3:e4:4a:b8:ff:b4:c0:76: 90:73:5c:84:6d:7a:92:d9:17:d8:e1:9b:a0:67:23: e0:9a:62:1a:26:68:7d:de:2c:5c:0d:6d:79:6f:97: 8d:76:6c:b2:c8:4e:b9:db:db:54:32:13:a3:81:08: a9:88:d5:21:41:73:3c:50:8c:d2:44:88:44:eb:57: 30:00:49:14:e1:86:02:e5:7b:d6:c7:f8:53:e8:98: 49:a6:11:78:19:8b:6c:47:41:d4:81:fb:7c:b0:61: 01:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:08:18:C5:9E:61:8D:46:06:37:1D:1C:C0:C8:9F:88:4D:A2:C9:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2/173c7a41-4996-43f9-aa22-68750f2b01a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2/173c7a41-4996-43f9-aa22-68750f2b01a2.crl X509v3 Authority Key Identifier: keyid:26:27:0B:DE:92:8F:FC:E2:A7:45:52:55:84:96:A4:C1:FA:D8:33:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:f4:00:18:c6:5d:e0:35:49:26:e1:1e:dd:90:c5:4f:e5:02: 3e:50:37:d3:5f:b4:63:d7:4f:4e:f9:fd:56:5e:2a:65:93:c8: 4b:4f:62:50:40:45:47:01:a3:57:f5:c7:5c:5c:03:68:f5:50: 9c:d2:87:b4:3d:af:ae:92:f4:f3:d3:c6:88:61:47:5c:eb:56: 3b:4a:cc:5f:e7:08:db:d6:65:44:83:fb:ee:4d:2f:be:a3:20: 7b:f1:cf:ad:f9:b5:f5:49:d3:1e:20:17:0f:2e:51:f3:dd:6d: 7e:d7:60:22:f4:5f:f6:10:e8:c8:24:45:2a:ae:30:dd:60:c1: 89:f1:38:84:86:5c:96:62:3c:08:d1:4e:98:08:bc:71:95:61: 76:cb:fd:07:73:3a:81:0d:bd:02:4d:06:b9:9f:3e:fe:b3:41: a8:6f:d1:39:b5:06:63:b4:cc:50:df:14:f8:e2:03:35:7f:a6: 82:19:9e:d9:91:78:58:d7:62:c8:e6:6c:51:bf:73:42:43:a3: da:c3:53:da:84:cb:af:b7:cd:b0:72:2d:7a:ff:fd:52:51:82: 5c:34:71:ae:fc:84:8d:60:a0:93:8d:c2:c7:c0:59:9c:8e:0c: 57:bc:22:3a:68:3a:ca:fa:0d:96:b1:58:93:1b:21:06:3e:b1: c8:48:57:fa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE36yeXg95rNTQ2/cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTczYzdhNDEtNDk5Ni00M2Y5LWFhMjItNjg3NTBmMmIw MWEyMB4XDTI2MDUyODA0MDAyMVoXDTI2MDUzMDA0MDAwMFowLzEtMCsGA1UEAxMk YzlmNDk3YzAtNDljMy00OWFlLTk0NGEtZGEzZDI4MGI2MDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHeJEtQmOq6beDuPcTDqaqph1UiLhWWm8mOE TceJpg+dJIB7hGy0X9ubWS0uO0yT11mKEeyUoe5deMvEUMGo4sxpOSGUz5//Xe/O SAmvKmW0xpDTEQI2rcD0jK8FKhvmBLsy50+AE9fuPdx0SHDgTEt7pSZQt8qhzKOB xjSarVTOCDJdlCokN2zR64zZi8Vuq7m4o7VYZGZJOfKow+RKuP+0wHaQc1yEbXqS 2RfY4ZugZyPgmmIaJmh93ixcDW15b5eNdmyyyE6529tUMhOjgQipiNUhQXM8UIzS RIhE61cwAEkU4YYC5XvWx/hT6JhJphF4GYtsR0HUgft8sGEBOQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMQIGMWeYY1GBjcdHMDIn4hNosk5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xNzNj N2E0MS00OTk2LTQzZjktYWEyMi02ODc1MGYyYjAxYTIvMTczYzdhNDEtNDk5Ni00 M2Y5LWFhMjItNjg3NTBmMmIwMWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTczYzdhNDEtNDk5Ni00M2Y5LWFh MjItNjg3NTBmMmIwMWEyLzE3M2M3YTQxLTQ5OTYtNDNmOS1hYTIyLTY4NzUwZjJi MDFhMi5jcmwwHwYDVR0jBBgwFoAUJicL3pKP/OKnRVJVhJakwfrYM4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xNzNjN2E0MS00OTk2LTQzZjktYWEyMi02ODc1 MGYyYjAxYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCj9AAYxl3gNUkm4R7dkMVP 5QI+UDfTX7Rj109O+f1WXiplk8hLT2JQQEVHAaNX9cdcXANo9VCc0oe0Pa+ukvTz 08aIYUdc61Y7Ssxf5wjb1mVEg/vuTS++oyB78c+t+bX1SdMeIBcPLlHz3W1+12Ai 9F/2EOjIJEUqrjDdYMGJ8TiEhlyWYjwI0U6YCLxxlWF2y/0HczqBDb0CTQa5nz7+ s0Gob9E5tQZjtMxQ3xT44gM1f6aCGZ7ZkXhY12LI5mxRv3NCQ6Paw1PahMuvt82w ci16//1SUYJcNHGu/ISNYKCTjcLHwFmcjgxXvCI6aDrK+g2WsViTGyEGPrHISFf6 -----END CERTIFICATE-----Generated at Thu May 28 12:42:16 2026 by rpki-client