$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft File: 249f7a2c-0438-4d20-8f0b-095a38d1046f.mft (raw, json) Hash identifier: 0tYS+LkBWPm6bctQrnRYyGIdITdP/cLwbowlm9C5eBc= Subject key identifier: 11:BF:77:49:89:65:D1:67:1A:B7:56:15:F0:C9:42:35:72:BF:69:6A Authority key identifier: 35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29 Certificate issuer: /CN=249f7a2c-0438-4d20-8f0b-095a38d1046f Certificate serial: 010D0C9F4328584DFAAC20F5D6CD8CBE2CDA1D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft Manifest number: 010D0C9F4328584BEB0FA66CD497B3C1B8891C43 Signing time: Thu 28 May 2026 03:00:23 +0000 Manifest this update: Thu 28 May 2026 03:00:23 +0000 Manifest next update: Sat 30 May 2026 03:00:00 +0000 Files and hashes: 1: 249f7a2c-0438-4d20-8f0b-095a38d1046f.crl (hash: A3YNnVEv5eZQUi6Md95UiFHM5jzfkZ3QxObE3ue2R+I=) 2: fa929d22-5b04-3656-bfd5-92174907d027.roa (hash: DHdxj/4XVGSJEDXEmYrmciTjElqc/eeYbhgMJIa7qwI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:ac:20:f5:d6:cd:8c:be:2c:da:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249f7a2c-0438-4d20-8f0b-095a38d1046f Validity Not Before: May 28 03:00:23 2026 GMT Not After : May 30 03:00:00 2026 GMT Subject: CN=471435a1-a9af-48aa-871f-f497fc658606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:d7:63:a1:f9:29:b2:1e:27:50:67:26:52: 15:f0:eb:7f:39:52:0a:ae:e4:a2:14:84:ac:64:6e: 2c:51:7e:5a:9a:bc:52:61:48:a4:f0:79:5b:7b:fb: bc:cb:29:c9:72:53:8f:4c:7b:6e:9f:90:09:62:61: 55:aa:80:2e:98:fc:29:83:fc:1a:2c:cd:ff:c2:91: a5:b0:66:d5:35:8d:4a:74:31:71:3e:01:7c:1a:59: 63:a9:c8:7e:78:b4:dd:2b:68:54:8b:19:32:0c:c5: 4b:9c:3e:41:07:5e:84:47:86:cc:4a:c4:eb:d4:f5: 80:f6:19:ef:e9:f5:e3:8f:99:d1:74:f3:92:90:41: b1:f8:4b:2a:da:82:2b:54:c8:04:18:c4:97:2c:f7: fe:5a:45:3e:b3:04:e5:67:cc:69:21:33:d2:16:67: 2e:e9:ab:3e:79:f9:92:2f:12:ef:80:a8:0e:4a:fb: db:7b:ab:76:a9:ad:b5:29:9a:4c:df:8c:bc:31:4f: 5a:5a:6a:d0:86:53:c4:b0:28:7a:5f:48:6f:91:c0: db:4f:84:aa:f5:37:be:b2:f0:ec:85:65:d5:26:22: 11:62:0b:c1:8d:6c:78:50:2a:4f:6e:e6:51:00:bc: 8e:b6:ea:31:07:96:7c:b2:04:f3:e7:5a:43:4a:4d: 4c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BF:77:49:89:65:D1:67:1A:B7:56:15:F0:C9:42:35:72:BF:69:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.crl X509v3 Authority Key Identifier: keyid:35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:47:ff:0f:fb:95:70:d6:17:ac:2c:1b:93:00:2b:6e:34:d3: 1d:f4:c4:b2:c9:d7:4a:0f:80:77:12:b7:12:5b:e5:e6:3c:06: c6:4e:ae:49:f2:6e:c8:51:2e:e6:71:7b:b5:ad:a2:6d:63:6d: d1:e1:f0:34:ba:58:20:0b:59:2e:0a:69:3e:79:58:bc:1e:4e: a5:50:93:f5:46:0a:86:65:46:30:d3:45:05:06:ef:25:3a:c3: 7c:ac:55:96:76:11:af:57:1c:31:e9:ce:6b:00:a7:7d:92:c0: 4b:d0:a6:15:8c:66:47:b1:e7:20:15:17:5d:cf:32:a6:89:d3: 6c:64:d9:68:9b:8f:ef:8f:81:29:4b:ab:b1:22:21:1c:82:09: 61:42:4c:39:a5:be:14:d1:94:f0:e7:fe:81:09:90:dd:9b:de: 18:23:08:05:a9:49:65:88:66:31:59:76:7e:47:2f:1e:c3:30: 91:d3:97:1f:cc:c8:82:f8:ef:08:dc:38:bf:2d:b6:55:c7:24: 27:d7:04:2a:f7:70:ec:22:1c:1e:b9:cc:cc:a4:76:9c:e3:c5: d1:a1:7b:bc:54:92:77:43:3f:83:2e:7f:67:e6:0b:71:1d:c1: 83:b6:df:fd:7b:80:e7:a4:7b:3b:d0:e1:25:54:dd:e3:79:75: 5e:23:ef:9a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE36rCD11s2MvizaHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5ZjdhMmMtMDQzOC00ZDIwLThmMGItMDk1YTM4ZDEw NDZmMB4XDTI2MDUyODAzMDAyM1oXDTI2MDUzMDAzMDAwMFowLzEtMCsGA1UEAxMk NDcxNDM1YTEtYTlhZi00OGFhLTg3MWYtZjQ5N2ZjNjU4NjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswnXY6H5KbIeJ1BnJlIV8Ot/OVIKruSiFISs ZG4sUX5amrxSYUik8Hlbe/u8yynJclOPTHtun5AJYmFVqoAumPwpg/waLM3/wpGl sGbVNY1KdDFxPgF8Glljqch+eLTdK2hUixkyDMVLnD5BB16ER4bMSsTr1PWA9hnv 6fXjj5nRdPOSkEGx+Esq2oIrVMgEGMSXLPf+WkU+swTlZ8xpITPSFmcu6as+efmS LxLvgKgOSvvbe6t2qa21KZpM34y8MU9aWmrQhlPEsCh6X0hvkcDbT4Sq9Te+svDs hWXVJiIRYgvBjWx4UCpPbuZRALyOtuoxB5Z8sgTz51pDSk1M2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBG/d0mJZdFnGrdWFfDJQjVyv2lqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNDlm N2EyYy0wNDM4LTRkMjAtOGYwYi0wOTVhMzhkMTA0NmYvMjQ5ZjdhMmMtMDQzOC00 ZDIwLThmMGItMDk1YTM4ZDEwNDZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjQ5ZjdhMmMtMDQzOC00ZDIwLThm MGItMDk1YTM4ZDEwNDZmLzI0OWY3YTJjLTA0MzgtNGQyMC04ZjBiLTA5NWEzOGQx MDQ2Zi5jcmwwHwYDVR0jBBgwFoAUNY2F6KzHAj/AIloDXSktnY57TSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNDlmN2EyYy0wNDM4LTRkMjAtOGYwYi0wOTVh MzhkMTA0NmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLR/8P+5Vw1hesLBuTACtu NNMd9MSyyddKD4B3ErcSW+XmPAbGTq5J8m7IUS7mcXu1raJtY23R4fA0ulggC1ku Cmk+eVi8Hk6lUJP1RgqGZUYw00UFBu8lOsN8rFWWdhGvVxwx6c5rAKd9ksBL0KYV jGZHsecgFRddzzKmidNsZNlom4/vj4EpS6uxIiEcgglhQkw5pb4U0ZTw5/6BCZDd m94YIwgFqUlliGYxWXZ+Ry8ewzCR05cfzMiC+O8I3Di/LbZVxyQn1wQq93DsIhwe uczMpHac48XRoXu8VJJ3Qz+DLn9n5gtxHcGDtt/9e4DnpHs70OElVN3jeXVeI++a -----END CERTIFICATE-----Generated at Thu May 28 12:42:01 2026 by rpki-client