$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft File: bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft (raw, json) Hash identifier: hGVr4I7UyRY8TbYb/xIYRTT3qbhoalBai3uVPSA7sw0= Subject key identifier: C7:A6:44:A2:84:CA:F6:01:5B:83:90:E8:92:46:1A:D1:9D:13:BF:EC Authority key identifier: FD:96:B5:EA:84:51:92:BF:CA:3C:23:83:53:F2:EE:C7:B6:89:DA:2D Certificate issuer: /CN=bf7e412f-ddf7-470c-acb4-1f6dd865230d Certificate serial: 010D0C9F4328584DE9CE118C5E6CB49672849180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft Manifest number: 010D0C9F432858445F1E5ABAB51C32EDCCCD8FDB Signing time: Fri 22 May 2026 02:00:03 +0000 Manifest this update: Fri 22 May 2026 02:00:03 +0000 Manifest next update: Sun 24 May 2026 02:00:00 +0000 Files and hashes: 1: bf7e412f-ddf7-470c-acb4-1f6dd865230d.crl (hash: tIxFrpYVf7JFB7w2GP6NjdJL2Ss7vqrmiqIz80W4R9c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:ce:11:8c:5e:6c:b4:96:72:84:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7e412f-ddf7-470c-acb4-1f6dd865230d Validity Not Before: May 22 02:00:03 2026 GMT Not After : May 24 02:00:00 2026 GMT Subject: CN=8960363c-1c75-4051-879f-9aee32ff8622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:4f:50:76:9d:fb:03:18:05:dc:94:3e:9f: 39:08:5e:e7:2e:6d:6a:2c:f5:14:00:e4:28:7e:5f: a0:27:29:97:6a:52:5b:8c:61:b1:b4:9e:f1:d2:26: 34:4d:80:f6:7e:b7:14:71:90:fa:8d:42:eb:bd:d8: b4:c4:9c:59:0e:af:1f:17:a1:b7:6d:5f:cc:f0:8f: ab:fd:67:40:64:08:61:f8:cf:77:fa:29:f2:c5:6e: 93:18:f1:1f:4d:2d:aa:4c:e9:e1:6a:2a:72:be:3d: c0:9a:5d:df:16:cd:f9:c9:a8:30:05:85:46:9f:48: ca:9a:a4:24:98:5d:b6:9a:cc:08:a3:ca:ab:89:70: ce:b2:82:0b:90:0f:0c:81:f7:0e:83:f7:3c:95:9b: 5d:38:99:9d:00:af:63:76:be:27:a6:1d:e2:79:e2: bc:1b:94:68:ae:95:88:76:91:c4:df:07:60:d1:8d: ad:75:74:dc:43:94:a0:5f:6a:87:bd:21:60:f5:f4: ef:6b:2d:f4:63:41:5d:79:7a:0e:f5:3b:7e:68:d5: 94:ac:7c:d4:02:a5:79:97:3f:5e:7d:97:59:ab:a3: da:72:ad:38:c4:2d:2a:12:e1:20:07:2e:79:64:6f: 07:60:00:8b:93:bc:79:be:07:65:89:c1:bb:e7:9b: 6e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A6:44:A2:84:CA:F6:01:5B:83:90:E8:92:46:1A:D1:9D:13:BF:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.crl X509v3 Authority Key Identifier: keyid:FD:96:B5:EA:84:51:92:BF:CA:3C:23:83:53:F2:EE:C7:B6:89:DA:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6c:eb:26:4e:1c:c0:60:e5:1d:b7:7a:e6:f5:05:63:ad:18: d7:16:55:22:ae:5c:6b:10:43:03:4c:1d:e2:64:b6:33:09:5d: 62:2d:77:28:4d:6a:8a:21:4c:31:92:ca:5c:42:c8:d0:aa:63: 50:4b:e2:ec:63:86:d6:c3:0b:3a:a0:91:04:36:0f:d2:1f:18: bf:7c:b6:2c:f0:28:da:c2:5f:01:cf:9a:a1:44:19:e7:e8:d2: 39:28:15:4f:b3:ce:24:c6:b4:9a:43:7c:96:dc:af:66:18:d6: 78:58:42:ca:30:a3:18:99:3a:f3:79:79:1a:f4:8f:ec:97:74: 2b:61:92:46:4d:24:69:cb:36:84:48:33:d9:f5:d3:72:0a:16: ce:ff:a1:19:c8:a0:2a:3d:c4:50:54:0f:25:0a:db:8e:72:68: 4e:b5:27:a7:29:d8:cd:b3:02:34:0b:61:1c:b6:7c:3d:59:3d: 99:0d:86:66:4a:01:b7:5e:b9:28:2f:16:07:6e:db:aa:bf:c0: 0f:12:1b:72:2f:1a:f2:8f:59:c6:17:77:02:04:1f:24:9e:19: 6d:80:4d:85:f0:b6:f5:5a:d7:42:6c:86:da:ed:35:b9:34:a3: 92:7d:66:d4:a6:59:ab:97:be:39:79:4b:54:ab:01:c2:43:c8: b4:96:7e:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3pzhGMXmy0lnKEkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZTQxMmYtZGRmNy00NzBjLWFjYjQtMWY2ZGQ4NjUy MzBkMB4XDTI2MDUyMjAyMDAwM1oXDTI2MDUyNDAyMDAwMFowLzEtMCsGA1UEAxMk ODk2MDM2M2MtMWM3NS00MDUxLTg3OWYtOWFlZTMyZmY4NjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBBPUHad+wMYBdyUPp85CF7nLm1qLPUUAOQo fl+gJymXalJbjGGxtJ7x0iY0TYD2frcUcZD6jULrvdi0xJxZDq8fF6G3bV/M8I+r /WdAZAhh+M93+inyxW6TGPEfTS2qTOnhaipyvj3Aml3fFs35yagwBYVGn0jKmqQk mF22mswIo8qriXDOsoILkA8MgfcOg/c8lZtdOJmdAK9jdr4nph3ieeK8G5RorpWI dpHE3wdg0Y2tdXTcQ5SgX2qHvSFg9fTvay30Y0FdeXoO9Tt+aNWUrHzUAqV5lz9e fZdZq6Pacq04xC0qEuEgBy55ZG8HYACLk7x5vgdlicG755tu+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMemRKKEyvYBW4OQ6JJGGtGdE7/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZjdl NDEyZi1kZGY3LTQ3MGMtYWNiNC0xZjZkZDg2NTIzMGQvYmY3ZTQxMmYtZGRmNy00 NzBjLWFjYjQtMWY2ZGQ4NjUyMzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmY3ZTQxMmYtZGRmNy00NzBjLWFj YjQtMWY2ZGQ4NjUyMzBkL2JmN2U0MTJmLWRkZjctNDcwYy1hY2I0LTFmNmRkODY1 MjMwZC5jcmwwHwYDVR0jBBgwFoAU/Za16oRRkr/KPCODU/Lux7aJ2i0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZjdlNDEyZi1kZGY3LTQ3MGMtYWNiNC0xZjZk ZDg2NTIzMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBabOsmThzAYOUdt3rm9QVj rRjXFlUirlxrEEMDTB3iZLYzCV1iLXcoTWqKIUwxkspcQsjQqmNQS+LsY4bWwws6 oJEENg/SHxi/fLYs8Cjawl8Bz5qhRBnn6NI5KBVPs84kxrSaQ3yW3K9mGNZ4WELK MKMYmTrzeXka9I/sl3QrYZJGTSRpyzaESDPZ9dNyChbO/6EZyKAqPcRQVA8lCtuO cmhOtSenKdjNswI0C2Ectnw9WT2ZDYZmSgG3XrkoLxYHbtuqv8APEhtyLxryj1nG F3cCBB8knhltgE2F8Lb1WtdCbIba7TW5NKOSfWbUplmrl745eUtUqwHCQ8i0ln7U -----END CERTIFICATE-----Generated at Fri May 22 17:39:55 2026 by rpki-client