$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a868a3dd-204c-46c4-8d4a-22f0f839f64e/a868a3dd-204c-46c4-8d4a-22f0f839f64e.mft File: a868a3dd-204c-46c4-8d4a-22f0f839f64e.mft (raw, json) Hash identifier: 5IG+N0DyVc4k+2x+9B3nLZHqtcEBpBOs6Aw5hMdFBw0= Subject key identifier: 03:F9:74:3B:51:D8:E6:66:68:D5:DB:ED:24:6B:7B:7A:2C:5C:CD:27 Authority key identifier: 9A:2A:C1:6A:7A:ED:07:9F:95:8F:8A:C1:81:C3:79:CD:01:F3:A2:42 Certificate issuer: /CN=a868a3dd-204c-46c4-8d4a-22f0f839f64e Certificate serial: 010D0C9F4328584DFAE7AEB89D75B3B6EEF84D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a868a3dd-204c-46c4-8d4a-22f0f839f64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a868a3dd-204c-46c4-8d4a-22f0f839f64e/a868a3dd-204c-46c4-8d4a-22f0f839f64e.mft Manifest number: 010D0C9F4328584C6BC08F9893138E9BE21A070F Signing time: Thu 28 May 2026 05:00:22 +0000 Manifest this update: Thu 28 May 2026 05:00:22 +0000 Manifest next update: Sat 30 May 2026 05:00:00 +0000 Files and hashes: 1: a868a3dd-204c-46c4-8d4a-22f0f839f64e.crl (hash: riTy9gtqhH4MKl0ZzMZqP/LMHJInPLoYwySwmrYSLqs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a868a3dd-204c-46c4-8d4a-22f0f839f64e/a868a3dd-204c-46c4-8d4a-22f0f839f64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a868a3dd-204c-46c4-8d4a-22f0f839f64e/a868a3dd-204c-46c4-8d4a-22f0f839f64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a868a3dd-204c-46c4-8d4a-22f0f839f64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:e7:ae:b8:9d:75:b3:b6:ee:f8:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a868a3dd-204c-46c4-8d4a-22f0f839f64e Validity Not Before: May 28 05:00:22 2026 GMT Not After : May 30 05:00:00 2026 GMT Subject: CN=43975d1f-3cda-46f9-923d-0fb6f1d9756f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bd:2b:24:1b:72:b5:f1:cf:1c:9b:1e:2c:3e: bd:69:d4:0d:f4:a6:f1:ae:c0:c6:b8:f9:cb:9b:3b: 01:04:04:b1:7c:9e:2c:29:9d:2a:fa:3b:54:97:5c: c7:cf:9f:f4:01:13:67:2d:77:28:02:3d:8e:93:a0: 8a:06:4e:aa:33:10:8a:5f:f2:9a:b1:7f:38:52:1b: 7b:d9:ec:50:ac:82:0e:80:b6:fe:b1:1e:17:c7:fa: 87:ad:3c:d6:fc:91:a0:de:dc:68:86:1d:36:a2:ef: a3:c1:8d:0a:89:da:23:64:df:0f:7e:7f:f7:74:30: 05:0b:5a:3a:c2:ba:7e:1c:98:1a:6e:64:9a:c8:b1: c0:ba:20:41:49:77:3e:75:96:b4:ad:17:54:79:33: 53:d9:a0:04:0b:46:d7:a3:6a:b2:34:71:04:38:5e: e0:ad:e2:37:e0:c7:50:0c:b5:73:f8:8d:a0:7e:88: 3b:35:b5:29:23:c1:86:5b:b1:39:da:e2:20:3f:8f: 01:8f:c3:ff:3a:36:1e:22:c1:2c:d7:3f:74:ae:39: d5:f3:86:3e:d7:c3:3c:0d:53:9f:e3:db:e3:ab:f1: 56:b0:2b:bc:89:d8:38:3d:83:46:61:5d:d3:e5:d9: 27:05:84:f2:15:9c:7e:e7:c9:4c:52:a8:cf:ed:23: d8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F9:74:3B:51:D8:E6:66:68:D5:DB:ED:24:6B:7B:7A:2C:5C:CD:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a868a3dd-204c-46c4-8d4a-22f0f839f64e/a868a3dd-204c-46c4-8d4a-22f0f839f64e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a868a3dd-204c-46c4-8d4a-22f0f839f64e/a868a3dd-204c-46c4-8d4a-22f0f839f64e.crl X509v3 Authority Key Identifier: keyid:9A:2A:C1:6A:7A:ED:07:9F:95:8F:8A:C1:81:C3:79:CD:01:F3:A2:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a868a3dd-204c-46c4-8d4a-22f0f839f64e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f3:fc:0d:3f:c6:ed:d0:79:73:7f:d8:92:31:c0:c0:d7:c5: 92:e2:92:62:c2:c8:06:e7:f9:7e:d9:27:c2:a1:a1:b7:36:b5: ce:94:74:de:47:92:33:e0:17:49:14:4b:c4:d4:73:fd:d5:e0: 47:46:39:a7:5e:6b:9d:6a:f6:15:45:f1:18:42:14:8a:fe:ea: 95:8d:08:d4:12:3e:6f:81:fc:60:ea:e1:d2:3b:9e:d0:db:8c: a2:8b:51:3d:74:64:bd:28:56:7b:6a:db:2a:1c:8e:1d:9b:b5: 9d:0f:fb:0d:fb:53:d4:34:0a:68:64:64:ae:8b:0c:47:ae:e0: 0b:21:e7:ce:fb:86:83:c8:7f:eb:8d:8b:e8:6c:26:11:e2:fa: 76:9d:25:9a:e3:91:c1:34:ed:da:8f:43:48:52:da:11:ae:65: cf:8f:0c:83:2a:fa:a7:ef:d2:f4:81:95:f9:e2:6a:11:ae:82: 97:f5:5f:54:65:ba:49:7b:90:04:c3:56:95:2d:02:aa:a5:8a: 0d:d6:99:84:70:39:3d:c3:31:5d:32:f8:76:95:68:95:24:56: 63:19:70:d5:b3:a0:91:27:d5:9e:48:78:bf:00:d9:5c:ab:fd: a9:51:f0:ac:4e:3b:7d:06:89:9c:bb:01:14:36:df:05:46:ef: 0d:b5:68:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE365664nXWztu74TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg2OGEzZGQtMjA0Yy00NmM0LThkNGEtMjJmMGY4Mzlm NjRlMB4XDTI2MDUyODA1MDAyMloXDTI2MDUzMDA1MDAwMFowLzEtMCsGA1UEAxMk NDM5NzVkMWYtM2NkYS00NmY5LTkyM2QtMGZiNmYxZDk3NTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm70rJBtytfHPHJseLD69adQN9KbxrsDGuPnL mzsBBASxfJ4sKZ0q+jtUl1zHz5/0ARNnLXcoAj2Ok6CKBk6qMxCKX/KasX84Uht7 2exQrIIOgLb+sR4Xx/qHrTzW/JGg3txohh02ou+jwY0KidojZN8Pfn/3dDAFC1o6 wrp+HJgabmSayLHAuiBBSXc+dZa0rRdUeTNT2aAEC0bXo2qyNHEEOF7greI34MdQ DLVz+I2gfog7NbUpI8GGW7E52uIgP48Bj8P/OjYeIsEs1z90rjnV84Y+18M8DVOf 49vjq/FWsCu8idg4PYNGYV3T5dknBYTyFZx+58lMUqjP7SPY1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAP5dDtR2OZmaNXb7SRre3osXM0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODY4 YTNkZC0yMDRjLTQ2YzQtOGQ0YS0yMmYwZjgzOWY2NGUvYTg2OGEzZGQtMjA0Yy00 NmM0LThkNGEtMjJmMGY4MzlmNjRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg2OGEzZGQtMjA0Yy00NmM0LThk NGEtMjJmMGY4MzlmNjRlL2E4NjhhM2RkLTIwNGMtNDZjNC04ZDRhLTIyZjBmODM5 ZjY0ZS5jcmwwHwYDVR0jBBgwFoAUmirBanrtB5+Vj4rBgcN5zQHzokIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODY4YTNkZC0yMDRjLTQ2YzQtOGQ0YS0yMmYw ZjgzOWY2NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBt8/wNP8bt0Hlzf9iSMcDA 18WS4pJiwsgG5/l+2SfCoaG3NrXOlHTeR5Iz4BdJFEvE1HP91eBHRjmnXmudavYV RfEYQhSK/uqVjQjUEj5vgfxg6uHSO57Q24yii1E9dGS9KFZ7atsqHI4dm7WdD/sN +1PUNApoZGSuiwxHruALIefO+4aDyH/rjYvobCYR4vp2nSWa45HBNO3aj0NIUtoR rmXPjwyDKvqn79L0gZX54moRroKX9V9UZbpJe5AEw1aVLQKqpYoN1pmEcDk9wzFd Mvh2lWiVJFZjGXDVs6CRJ9WeSHi/ANlcq/2pUfCsTjt9BomcuwEUNt8FRu8NtWhe -----END CERTIFICATE-----Generated at Thu May 28 12:41:16 2026 by rpki-client