$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft File: 0b689f43-cae9-48ce-aef4-680ca5613c03.mft (raw, json) Hash identifier: OROkLW6hTF5kduIDjFl/GhV1CRtHZvTl2avKUjuQd9c= Subject key identifier: A1:A1:B1:E0:D8:FA:94:0E:70:52:66:AA:E2:7A:A6:77:DD:5D:E3:31 Authority key identifier: CD:14:51:E6:3E:52:8A:EA:1D:CA:B1:0F:BD:60:74:61:76:59:B1:A4 Certificate issuer: /CN=0b689f43-cae9-48ce-aef4-680ca5613c03 Certificate serial: 010D0C9F4328584DBE8874AC1500FDA4E808E970 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft Manifest number: 010D0C9F43285841822CFCCF87820EC23EBD429D Signing time: Wed 06 May 2026 14:00:03 +0000 Manifest this update: Wed 06 May 2026 14:00:03 +0000 Manifest next update: Sat 09 May 2026 14:00:00 +0000 Files and hashes: 1: 0b689f43-cae9-48ce-aef4-680ca5613c03.crl (hash: nlGWH+0yMUVPWfKq/nu0x0ekKYBHYsiQHsD390ympS8=) 2: e9570d6d-d9db-3ffb-bf6f-1ca7d4909859.roa (hash: XtUUi+wK/EvCAwQo1JmYfdH+CYn/3x1Q2bCdkCq/yT4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:88:74:ac:15:00:fd:a4:e8:08:e9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b689f43-cae9-48ce-aef4-680ca5613c03 Validity Not Before: May 6 14:00:03 2026 GMT Not After : May 9 14:00:00 2026 GMT Subject: CN=de994ed2-f2f5-4139-a633-6f4c4ae3fd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:72:cf:db:ad:e7:80:c9:c1:8d:ed:7e:4c:96: a2:f5:3f:c5:f9:41:c2:a1:69:c5:b3:68:e1:84:fe: d2:e4:cb:48:6e:2b:b7:fe:56:98:ef:2f:21:c3:9a: e1:92:56:1b:61:e4:26:85:a9:3f:72:ff:c5:38:1b: 0c:f5:1b:a1:e0:73:1f:02:a8:55:3a:4d:e6:05:df: a9:76:ab:1a:8d:52:39:f2:8d:36:6b:0b:23:64:d1: bb:6e:c9:53:2a:dc:5a:13:07:44:f8:c0:d5:53:eb: 6a:5f:56:22:63:0d:34:7c:55:bd:32:c1:b8:53:d9: 59:22:1c:aa:66:c8:0f:4a:b2:bb:9d:26:82:44:b8: 38:b7:50:7a:96:61:26:23:cf:be:0b:f1:0e:aa:e6: 9a:09:71:32:a2:8c:17:ca:26:4f:84:f1:06:d5:36: 79:df:64:b7:d4:96:88:c5:04:47:18:17:1d:91:a5: aa:74:80:2d:09:f3:50:2f:1a:78:c8:82:05:d6:e4: 5b:ae:e6:1c:00:dc:e0:df:67:9e:9e:52:95:d3:80: ef:81:1a:ba:b3:7c:23:20:71:73:c1:f7:2e:c5:17: 55:53:21:0c:ca:d3:57:b3:83:53:ca:3a:46:f7:09: 25:43:56:a4:c1:75:12:76:5c:27:09:d9:25:8a:b4: 16:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A1:B1:E0:D8:FA:94:0E:70:52:66:AA:E2:7A:A6:77:DD:5D:E3:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.crl X509v3 Authority Key Identifier: keyid:CD:14:51:E6:3E:52:8A:EA:1D:CA:B1:0F:BD:60:74:61:76:59:B1:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:7c:1a:e1:8f:1f:4d:ae:bf:6d:f0:aa:eb:06:e8:c9:7f:05: 4d:05:c7:a6:48:48:d8:c6:6d:34:a7:c2:5c:e7:cd:da:d3:a8: 01:f0:6e:66:56:b7:7e:1d:86:d5:dc:b2:64:2b:41:f6:74:50: b2:db:63:e2:bb:6d:5e:fc:fe:9d:8f:4d:8b:50:ae:84:73:79: 3b:16:e0:9c:9c:7e:71:88:63:36:0a:58:c2:73:8b:23:74:1f: 73:66:9c:b5:02:56:03:0b:c2:6b:3f:7a:3d:92:12:ad:b6:69: 4d:d0:e4:1e:23:d5:51:dc:99:ff:ff:79:a9:41:07:b6:40:c5: 72:fa:8d:7a:10:9a:01:1e:d5:9d:fc:8d:03:d4:cd:d1:28:c4: 04:90:99:8c:3d:e2:65:0a:54:84:60:09:84:77:6d:2d:40:ed: 9c:48:88:20:e2:14:b5:05:dd:54:46:c2:35:ce:a9:7a:f4:5e: bf:17:1f:d9:31:87:59:5e:46:ce:9e:1d:ee:0a:07:88:cf:02: 46:f2:43:18:4c:52:7a:66:35:74:05:19:3e:da:28:2f:66:ff: c0:3b:1c:b6:cc:ed:90:19:8f:ab:f9:9d:5e:d1:e5:92:2d:33: 3b:16:67:6d:e8:da:94:08:43:80:fe:a2:f7:36:e5:21:3d:df: 7d:79:f1:dc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2+iHSsFQD9pOgI6XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2ODlmNDMtY2FlOS00OGNlLWFlZjQtNjgwY2E1NjEz YzAzMB4XDTI2MDUwNjE0MDAwM1oXDTI2MDUwOTE0MDAwMFowLzEtMCsGA1UEAxMk ZGU5OTRlZDItZjJmNS00MTM5LWE2MzMtNmY0YzRhZTNmZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnLP263ngMnBje1+TJai9T/F+UHCoWnFs2jh hP7S5MtIbiu3/laY7y8hw5rhklYbYeQmhak/cv/FOBsM9Ruh4HMfAqhVOk3mBd+p dqsajVI58o02awsjZNG7bslTKtxaEwdE+MDVU+tqX1YiYw00fFW9MsG4U9lZIhyq ZsgPSrK7nSaCRLg4t1B6lmEmI8++C/EOquaaCXEyoowXyiZPhPEG1TZ532S31JaI xQRHGBcdkaWqdIAtCfNQLxp4yIIF1uRbruYcANzg32eenlKV04DvgRq6s3wjIHFz wfcuxRdVUyEMytNXs4NTyjpG9wklQ1akwXUSdlwnCdklirQWLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKGhseDY+pQOcFJmquJ6pnfdXeMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYjY4 OWY0My1jYWU5LTQ4Y2UtYWVmNC02ODBjYTU2MTNjMDMvMGI2ODlmNDMtY2FlOS00 OGNlLWFlZjQtNjgwY2E1NjEzYzAzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGI2ODlmNDMtY2FlOS00OGNlLWFl ZjQtNjgwY2E1NjEzYzAzLzBiNjg5ZjQzLWNhZTktNDhjZS1hZWY0LTY4MGNhNTYx M2MwMy5jcmwwHwYDVR0jBBgwFoAUzRRR5j5SiuodyrEPvWB0YXZZsaQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYjY4OWY0My1jYWU5LTQ4Y2UtYWVmNC02ODBj YTU2MTNjMDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVfBrhjx9Nrr9t8KrrBujJ fwVNBcemSEjYxm00p8Jc583a06gB8G5mVrd+HYbV3LJkK0H2dFCy22Piu21e/P6d j02LUK6Ec3k7FuCcnH5xiGM2CljCc4sjdB9zZpy1AlYDC8JrP3o9khKttmlN0OQe I9VR3Jn//3mpQQe2QMVy+o16EJoBHtWd/I0D1M3RKMQEkJmMPeJlClSEYAmEd20t QO2cSIgg4hS1Bd1URsI1zql69F6/Fx/ZMYdZXkbOnh3uCgeIzwJG8kMYTFJ6ZjV0 BRk+2igvZv/AOxy2zO2QGY+r+Z1e0eWSLTM7Fmdt6NqUCEOA/qL3NuUhPd99efHc -----END CERTIFICATE-----Generated at Thu May 7 00:26:11 2026 by rpki-client