$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft File: 954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft (raw, json) Hash identifier: pbTlNzk/wDNPaHGbTGMAAKOi9Ihjc8ecv1B2daqdt9M= Subject key identifier: 72:9D:1E:D0:BB:C4:5C:50:FA:88:D3:3C:8F:F6:F1:40:4B:7E:74:25 Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC Certificate issuer: /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Certificate serial: 010D0C9F4328584DF9A021DA97387700F667E780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft Manifest number: 010D0C9F4328584C112324F43AA2908752839ABC Signing time: Wed 27 May 2026 18:00:21 +0000 Manifest this update: Wed 27 May 2026 18:00:21 +0000 Manifest next update: Fri 29 May 2026 18:00:00 +0000 Files and hashes: 1: 3c531f86-93ab-3895-9a5b-924845a382d9.roa (hash: zUw/Q3CdsEylsWHPWZq40XKZziJVt7paQ75tmgAp5ZU=) 2: 7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa (hash: 8MCV3W5QmpZyEY1ho8raKPDUJn5f0sDUPZ0G1POzGQM=) 3: 913f7d07-9252-322f-9150-9c9077e0c6e4.roa (hash: 70/TywEmGPg34j22DQomShQxJ12Ng5yNdR+I+oL6GYM=) 4: 954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl (hash: A6AdXSBoLphcbA2uPqr69F3z0xDQIdTmai4aUQs3jIc=) 5: b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa (hash: 8hmtdnkKgQFJwG+W+Qf6xMD87vvABbcso33GOinU75k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f9:a0:21:da:97:38:77:00:f6:67:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Validity Not Before: May 27 18:00:21 2026 GMT Not After : May 29 18:00:00 2026 GMT Subject: CN=745f7d86-2d8c-4c4e-bd2b-b8d6c4b41ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:08:e0:74:f0:b2:ba:37:7b:b2:21:a8:99:ce: 8a:3a:0b:5e:9a:14:74:2f:c0:67:5b:ae:13:ee:6e: 7a:94:d1:76:b1:25:80:7c:f3:82:ae:99:e5:e3:98: 87:13:88:51:bd:0f:5a:09:ba:48:1b:1e:8b:19:e8: 20:86:df:d2:96:78:c2:37:95:66:ea:57:69:ff:61: d0:c4:4d:0c:d8:ea:6f:e1:d3:cb:54:95:db:db:3a: ac:8a:89:56:26:d8:13:f0:3a:34:cd:b8:75:8e:71: da:64:39:7c:46:08:e5:47:f7:a9:4d:c0:c4:68:4c: 51:7a:f6:d0:07:0f:3b:24:67:f6:67:4a:e1:be:54: cb:76:56:5b:c1:e6:26:47:33:12:bb:24:f5:5f:c3: 7b:e7:0f:60:80:a5:02:46:77:dd:9d:b7:7b:20:41: c2:82:9e:c7:4f:2f:bf:d2:51:c3:12:1c:9b:cf:97: c8:05:23:98:3f:22:f1:85:b8:91:2f:c6:90:a7:94: d9:70:6d:f7:67:6a:60:75:be:7c:0f:da:42:15:b5: 03:70:e2:75:49:65:b1:98:9f:8e:1a:48:54:0f:4f: d2:5f:36:87:0f:0d:7b:97:1f:84:3e:d7:c5:34:29: 4e:0d:8e:b7:c1:4b:33:50:f4:6d:f4:e0:3d:f2:e4: 1b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9D:1E:D0:BB:C4:5C:50:FA:88:D3:3C:8F:F6:F1:40:4B:7E:74:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl X509v3 Authority Key Identifier: keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:79:a9:4d:10:c8:dd:f2:b6:4e:dd:0b:e0:c8:b2:9b:4b:d7: f6:53:00:91:97:84:b2:06:9d:60:76:7f:2f:d2:8f:c4:b8:59: b3:d7:18:d6:16:fb:c0:33:e6:73:83:29:19:20:ca:84:9f:21: c2:b8:b2:b3:33:18:31:54:2a:cc:9e:a0:81:d8:61:5a:fd:2c: 2e:5e:b7:13:79:fe:51:ff:6b:a9:ed:ec:79:0c:1a:ef:07:d0: fb:ad:14:e8:e1:a8:3d:5b:5c:e5:95:d9:5c:f1:50:b4:1e:2d: 20:89:a0:43:29:83:c7:50:0f:73:98:54:1f:c2:dc:4f:18:a3: d1:2d:63:6c:c9:c9:ea:8e:91:f4:26:d8:48:e6:c9:f5:77:d3: 0f:e2:1b:e2:5b:e7:e9:48:45:18:95:7f:03:b7:df:d9:de:13: 03:4c:0e:fb:31:7e:2f:f2:59:91:d2:ea:66:9f:31:6b:ec:fc: 5e:bb:7c:f8:a4:51:a3:62:f1:40:2f:69:99:65:ad:20:c2:95: 5a:db:fa:0d:81:93:f0:30:46:ae:4a:fb:30:20:86:bb:25:98: e8:3e:e1:00:e8:26:5e:23:86:32:32:d3:ae:cb:78:66:75:da: b3:da:75:5f:38:21:6b:7b:0f:1d:10:43:36:1a:d3:e9:15:34: 49:15:47:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE35oCHalzh3APZn54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4 YjdkMB4XDTI2MDUyNzE4MDAyMVoXDTI2MDUyOTE4MDAwMFowLzEtMCsGA1UEAxMk NzQ1ZjdkODYtMmQ4Yy00YzRlLWJkMmItYjhkNmM0YjQxYmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAjgdPCyujd7siGomc6KOgtemhR0L8BnW64T 7m56lNF2sSWAfPOCrpnl45iHE4hRvQ9aCbpIGx6LGegght/SlnjCN5Vm6ldp/2HQ xE0M2Opv4dPLVJXb2zqsiolWJtgT8Do0zbh1jnHaZDl8RgjlR/epTcDEaExRevbQ Bw87JGf2Z0rhvlTLdlZbweYmRzMSuyT1X8N75w9ggKUCRnfdnbd7IEHCgp7HTy+/ 0lHDEhybz5fIBSOYPyLxhbiRL8aQp5TZcG33Z2pgdb58D9pCFbUDcOJ1SWWxmJ+O GkhUD0/SXzaHDw17lx+EPtfFNClODY63wUszUPRt9OA98uQb0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHKdHtC7xFxQ+ojTPI/28UBLfnQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvOTU0YzAxYmEtZDlhZC00 NGU4LWI0OGMtMWE0OGYyMGQ4YjdkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0 OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4 ZjIwZDhiN2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRealNEMjd8rZO3QvgyLKb S9f2UwCRl4SyBp1gdn8v0o/EuFmz1xjWFvvAM+ZzgykZIMqEnyHCuLKzMxgxVCrM nqCB2GFa/SwuXrcTef5R/2up7ex5DBrvB9D7rRTo4ag9W1zlldlc8VC0Hi0giaBD KYPHUA9zmFQfwtxPGKPRLWNsycnqjpH0JthI5sn1d9MP4hviW+fpSEUYlX8Dt9/Z 3hMDTA77MX4v8lmR0upmnzFr7Pxeu3z4pFGjYvFAL2mZZa0gwpVa2/oNgZPwMEau SvswIIa7JZjoPuEA6CZeI4YyMtOuy3hmddqz2nVfOCFrew8dEEM2GtPpFTRJFUcu -----END CERTIFICATE-----Generated at Thu May 28 12:41:34 2026 by rpki-client