$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft File: 8c2a8d95-0290-4218-9b08-d157e5f127f9.mft (raw, json) Hash identifier: fc+CW3/FHf4Uh+JjvA+rZnLUe/9jz9Oy3nINYHwgVtI= Subject key identifier: 1E:2A:E0:9A:81:41:60:74:DA:C8:F2:24:FD:95:13:A8:D7:D5:54:97 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584DE8FD9B4B49BDD6E58649B1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft Manifest number: 010D0C9F43285843E5E52DE223730459039AA6EC Signing time: Thu 21 May 2026 19:00:03 +0000 Manifest this update: Thu 21 May 2026 19:00:03 +0000 Manifest next update: Sun 24 May 2026 19:00:00 +0000 Files and hashes: 1: 07f6b5d0-e80a-344b-a252-2129c64d94b1.roa (hash: 43jCvaoKwcOEnTk2f3L99RdNW7Lg47sL0vYr4BdArr0=) 2: 8c2a8d95-0290-4218-9b08-d157e5f127f9.crl (hash: PhqSjjEf4sh6g0jwIbRNFhicGv6xW9pmaXCkee037rU=) 3: b011365d-0b8a-3c85-a74e-0aa432daa9c4.roa (hash: JsnN4ZmQPYViw/Tiiou26EhSzrJBKQKhQql24I+H2t0=) 4: b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa (hash: agR94n7dcR81MY0solkeqVnqgr6lpEtxjkW6OmEquYw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:fd:9b:4b:49:bd:d6:e5:86:49:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: May 21 19:00:03 2026 GMT Not After : May 24 19:00:00 2026 GMT Subject: CN=23a91f68-2c02-484c-8e10-b0d64b8986ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cb:7b:23:9e:dd:3a:aa:23:41:79:ee:a8:ae: 69:88:44:1b:f0:bd:46:d8:51:03:68:ba:66:76:ef: f6:82:35:23:69:e2:f8:ab:e4:72:86:ad:d1:36:d0: bb:93:10:05:ea:32:3f:ce:5b:a7:3d:67:6d:8d:6f: 7b:f7:30:73:89:3b:13:c2:cf:d6:92:92:0b:44:0f: a0:b6:c9:8d:00:c3:52:47:ef:98:6e:ad:72:29:1d: 13:88:44:fe:95:f0:dc:5f:a7:4c:53:ae:fb:13:bd: 20:c1:96:59:fa:0c:68:58:f1:fa:fe:e1:5e:96:31: 54:69:78:8d:fb:27:df:39:1f:39:82:0f:03:0b:1e: 58:35:64:2b:15:51:58:e6:88:37:c2:96:2b:c9:eb: 96:78:de:20:a3:37:4f:e6:91:1a:f6:bd:fd:e4:93: 57:93:1c:bf:b9:a0:4c:12:56:80:34:47:c8:81:92: d8:c4:9f:66:d5:9b:30:7a:0b:23:99:50:4d:47:7e: 06:b3:cc:c1:16:f9:cf:a1:a4:65:7f:24:44:b2:88: bc:e6:52:05:58:99:ac:60:81:db:86:60:c3:ee:60: b8:7e:c3:2a:5e:a8:2d:1c:12:5a:1e:47:62:f0:c7: 62:44:4a:04:94:64:26:2d:4c:6f:dc:42:46:d8:28: f1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2A:E0:9A:81:41:60:74:DA:C8:F2:24:FD:95:13:A8:D7:D5:54:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:31:06:01:2c:ad:33:b6:19:fe:03:2b:e1:a5:23:11:27:38: b7:76:c8:85:a6:c7:f8:f8:2b:f4:3a:44:c4:a2:df:69:14:93: 76:13:3b:01:c7:bf:d6:6b:af:d5:f2:81:bf:3c:60:42:97:de: c6:66:58:03:26:c8:c7:c4:51:21:e2:4e:22:c1:a1:b9:3c:1e: 07:db:cd:d2:93:93:eb:95:7b:12:e0:18:76:e0:25:bc:d0:76: ae:99:14:2f:fe:39:ac:24:29:86:67:9a:6d:20:51:07:2d:30: 81:32:e9:81:09:32:81:2b:e9:32:b3:4a:86:bc:24:83:99:09: d5:e7:d6:0a:88:da:8a:ba:df:70:69:0c:03:2f:4b:8a:99:5b: d4:59:9a:15:ce:6e:3a:84:4a:91:24:0e:01:28:9b:49:ae:bd: 18:a0:a5:fc:cb:19:00:44:45:19:c6:b4:81:05:7f:8a:c7:c1: c3:2b:59:f3:31:e0:ab:32:b0:4d:8f:35:73:0e:3e:09:d4:3a: ba:75:b6:db:5f:55:52:46:94:cd:62:df:18:4b:ad:1a:49:b2: 82:19:ec:21:c0:39:6b:b4:c9:58:75:76:fd:e4:54:d9:f5:9d: 00:10:7b:ae:91:f2:cc:ff:36:0c:26:e6:70:86:2e:85:aa:69: 46:36:17:dc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3o/ZtLSb3W5YZJscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI2MDUyMTE5MDAwM1oXDTI2MDUyNDE5MDAwMFowLzEtMCsGA1UEAxMk MjNhOTFmNjgtMmMwMi00ODRjLThlMTAtYjBkNjRiODk4NmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkst7I57dOqojQXnuqK5piEQb8L1G2FEDaLpm du/2gjUjaeL4q+Ryhq3RNtC7kxAF6jI/zlunPWdtjW979zBziTsTws/WkpILRA+g tsmNAMNSR++Ybq1yKR0TiET+lfDcX6dMU677E70gwZZZ+gxoWPH6/uFeljFUaXiN +yffOR85gg8DCx5YNWQrFVFY5og3wpYryeuWeN4gozdP5pEa9r395JNXkxy/uaBM ElaANEfIgZLYxJ9m1ZswegsjmVBNR34Gs8zBFvnPoaRlfyREsoi85lIFWJmsYIHb hmDD7mC4fsMqXqgtHBJaHkdi8MdiREoElGQmLUxv3EJG2CjxoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB4q4JqBQWB02sjyJP2VE6jX1VSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvOGMyYThkOTUtMDI5MC00 MjE4LTliMDgtZDE1N2U1ZjEyN2Y5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvMQYBLK0zthn+AyvhpSMR Jzi3dsiFpsf4+Cv0OkTEot9pFJN2EzsBx7/Wa6/V8oG/PGBCl97GZlgDJsjHxFEh 4k4iwaG5PB4H283Sk5PrlXsS4Bh24CW80HaumRQv/jmsJCmGZ5ptIFEHLTCBMumB CTKBK+kys0qGvCSDmQnV59YKiNqKut9waQwDL0uKmVvUWZoVzm46hEqRJA4BKJtJ rr0YoKX8yxkAREUZxrSBBX+Kx8HDK1nzMeCrMrBNjzVzDj4J1Dq6dbbbX1VSRpTN Yt8YS60aSbKCGewhwDlrtMlYdXb95FTZ9Z0AEHuukfLM/zYMJuZwhi6FqmlGNhfc -----END CERTIFICATE-----Generated at Fri May 22 16:56:33 2026 by rpki-client