$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft File: d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft (raw, json) Hash identifier: 2oViDBvjxHdhvxGi5rNbjMQJthlPOUKgj3FN+yIY7/o= Subject key identifier: E4:52:8A:F2:1C:8F:4A:43:AA:18:E1:2F:86:98:5F:DD:7F:FC:00:77 Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 Certificate issuer: /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Certificate serial: 010D0C9F4328584DE8DFD3BFF64DF024C0988340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft Manifest number: 010D0C9F43285844238BC8FE3994304CD9335330 Signing time: Thu 21 May 2026 18:00:03 +0000 Manifest this update: Thu 21 May 2026 18:00:03 +0000 Manifest next update: Sun 24 May 2026 18:00:00 +0000 Files and hashes: 1: 4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa (hash: /zUg/YVldnv1NZ3aa/Y10hRoATyumy3URgxJhgg6Ovg=) 2: 6b983b9b-3d7a-3d9e-8138-1eb898f0fd33.roa (hash: Hc8th2sUijELxQ9n4tBW8vKiUegFGbdG39SHH4OoDsU=) 3: 71105327-84d5-3f6a-bcc8-fff7f32ab982.roa (hash: nq4/PmftHCmtjMeSo5E6qe/RnyVZlLNeuvAgb5VHGoE=) 4: d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl (hash: vx6+EFbNL2v6/RHHLAsHd4Kszo2bHFDPn5Fm30sti0Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:df:d3:bf:f6:4d:f0:24:c0:98:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Validity Not Before: May 21 18:00:03 2026 GMT Not After : May 24 18:00:00 2026 GMT Subject: CN=38d846d3-cc77-4ebf-a55a-511b9f4cdf9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f0:d8:73:1a:6b:9a:83:c7:e2:2f:3c:44:63: b2:96:da:a9:11:90:66:6d:29:0f:aa:37:41:92:11: 32:99:c4:93:02:3f:88:98:d9:a5:74:3c:9c:65:34: 76:a8:27:d2:65:01:4c:e4:dd:74:03:ff:ab:84:f9: 3e:5b:8a:c6:39:5a:ff:7f:5a:38:84:5e:6e:22:fe: 50:9a:6a:29:4f:23:58:ea:94:09:be:f4:8e:f4:af: a6:38:73:69:be:77:ee:3a:55:63:7e:15:8f:32:cb: 55:89:f6:b0:d6:7b:01:04:36:a8:02:e2:ad:5e:97: 62:ad:2f:8e:5a:f2:09:2c:35:6c:41:2d:07:02:d6: ef:68:77:c9:b4:95:93:cc:a1:3e:03:92:22:fd:a0: c0:41:b1:09:77:7f:fc:fc:ff:51:29:c2:d2:22:d4: 5a:5c:5b:fa:a4:a8:33:c9:74:14:2a:51:58:de:cb: 01:f1:1c:0c:7d:8e:ad:49:10:94:81:73:56:4e:e6: 7e:fe:73:7e:d6:bd:a5:9f:dc:3c:b0:63:12:70:6d: ae:1c:50:3a:e8:fd:34:ba:d1:e9:ec:eb:fa:21:71: ee:26:94:ef:ab:65:f7:b3:8b:eb:62:1f:8a:cf:2e: be:fe:1a:eb:4a:23:82:4e:99:51:03:2f:f5:04:e6: 20:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:52:8A:F2:1C:8F:4A:43:AA:18:E1:2F:86:98:5F:DD:7F:FC:00:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl X509v3 Authority Key Identifier: keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ee:12:dc:f0:36:80:4b:b0:9c:4f:3a:e1:01:50:5a:0f:f8: 00:75:1f:db:87:73:54:a2:4a:7a:66:c6:8b:00:e2:06:4a:c8: 2e:d3:f4:a3:ad:e2:5f:15:24:51:fe:1a:51:cb:c0:01:13:d5: 84:06:fb:f7:5f:c1:01:b1:72:2b:10:dc:9f:2f:70:cd:17:c5: c3:2e:12:cf:50:1a:23:46:d3:a1:c7:a4:07:a4:81:7b:36:c1: 2b:f5:b2:35:6a:be:38:19:a7:39:c3:c0:fe:b0:96:f3:d1:e7: 30:11:78:e8:2e:a0:e2:2e:f0:47:09:84:85:9c:51:2b:f5:5b: cc:06:2f:bd:60:28:f4:54:e6:fc:0d:36:70:2b:c0:58:9e:47: 0a:de:7f:94:67:e0:0d:b6:b8:5d:9c:82:71:87:da:3e:b1:46: 76:d8:02:12:5e:62:dd:c0:f6:00:2e:f9:db:5f:22:6e:c1:70: 92:5f:0b:6c:32:dc:50:d1:e1:ea:b5:4a:31:d0:7d:f0:b2:42: 2d:05:9c:32:d4:c8:84:5c:8b:49:5f:ac:59:05:92:9b:82:4d: b9:a2:57:0b:b2:11:0b:4b:24:b2:68:eb:5d:f9:26:86:de:2e: 0f:46:a6:51:44:1a:06:e2:84:7e:a6:89:a2:e3:3e:65:0b:49: c6:ba:5a:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3o39O/9k3wJMCYg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhhMGYxNzYtYjRhMi00ZTMyLThhOTgtNGUxMmUwN2Q4 OTk2MB4XDTI2MDUyMTE4MDAwM1oXDTI2MDUyNDE4MDAwMFowLzEtMCsGA1UEAxMk MzhkODQ2ZDMtY2M3Ny00ZWJmLWE1NWEtNTExYjlmNGNkZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/DYcxprmoPH4i88RGOyltqpEZBmbSkPqjdB khEymcSTAj+ImNmldDycZTR2qCfSZQFM5N10A/+rhPk+W4rGOVr/f1o4hF5uIv5Q mmopTyNY6pQJvvSO9K+mOHNpvnfuOlVjfhWPMstVifaw1nsBBDaoAuKtXpdirS+O WvIJLDVsQS0HAtbvaHfJtJWTzKE+A5Ii/aDAQbEJd3/8/P9RKcLSItRaXFv6pKgz yXQUKlFY3ssB8RwMfY6tSRCUgXNWTuZ+/nN+1r2ln9w8sGMScG2uHFA66P00utHp 7Ov6IXHuJpTvq2X3s4vrYh+Kzy6+/hrrSiOCTplRAy/1BOYguwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFORSivIcj0pDqhjhL4aYX91//AB3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEw ZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEyZTA3ZDg5OTYvZDhhMGYxNzYtYjRhMi00 ZTMyLThhOTgtNGUxMmUwN2Q4OTk2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDhhMGYxNzYtYjRhMi00ZTMyLThh OTgtNGUxMmUwN2Q4OTk2L2Q4YTBmMTc2LWI0YTItNGUzMi04YTk4LTRlMTJlMDdk ODk5Ni5jcmwwHwYDVR0jBBgwFoAU3HV8E36ogo58+VN1GdCxhU7FP/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEwZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEy ZTA3ZDg5OTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCm7hLc8DaAS7CcTzrhAVBa D/gAdR/bh3NUokp6ZsaLAOIGSsgu0/SjreJfFSRR/hpRy8ABE9WEBvv3X8EBsXIr ENyfL3DNF8XDLhLPUBojRtOhx6QHpIF7NsEr9bI1ar44Gac5w8D+sJbz0ecwEXjo LqDiLvBHCYSFnFEr9VvMBi+9YCj0VOb8DTZwK8BYnkcK3n+UZ+ANtrhdnIJxh9o+ sUZ22AISXmLdwPYALvnbXyJuwXCSXwtsMtxQ0eHqtUox0H3wskItBZwy1MiEXItJ X6xZBZKbgk25olcLshELSySyaOtd+SaG3i4PRqZRRBoG4oR+pomi4z5lC0nGuloO -----END CERTIFICATE-----Generated at Fri May 22 15:09:49 2026 by rpki-client