$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft File: de111c10-2de5-41fa-a9e4-1e49a0479199.mft (raw, json) Hash identifier: gjDMKTNqpq8SXDx4RlnO6ZR4pLsTRZVKc/9J9qXgcoU= Subject key identifier: 13:78:6B:50:BB:3B:52:4D:2C:C9:EC:E0:5A:7A:03:11:2F:70:3B:DA Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF Certificate issuer: /CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Certificate serial: 010D0C9F4328584DF9BDE68BB4262332F9221B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft Manifest number: 010D0C9F43285840C7A133CC5EFAFBE0119B7799 Signing time: Wed 27 May 2026 19:00:21 +0000 Manifest this update: Wed 27 May 2026 19:00:21 +0000 Manifest next update: Sat 30 May 2026 19:00:00 +0000 Files and hashes: 1: de111c10-2de5-41fa-a9e4-1e49a0479199.crl (hash: zM+fkyRwZkcsgNpKYRp9QVmB4OwQmbYeKy8e5XsDIK0=) 2: f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (hash: B9AhvM1S2lz2EAZK1hrQFQWoirShYBZCrcf11+eih8Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f9:bd:e6:8b:b4:26:23:32:f9:22:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Validity Not Before: May 27 19:00:21 2026 GMT Not After : May 30 19:00:00 2026 GMT Subject: CN=a488a626-41f8-4bd9-91dc-039df722b922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:02:85:c7:1c:7e:ec:6a:9d:bb:a5:66:ae: b9:a9:aa:20:48:af:ab:41:8b:5a:55:68:ba:5e:1b: 7a:e1:a8:8e:97:19:87:db:39:96:2d:e0:14:62:63: 44:27:8d:e6:08:9c:d8:c7:6b:72:c7:b5:88:f1:2f: 67:eb:32:0b:1d:0f:bf:2f:57:85:d5:b1:a9:3b:e5: 2f:e3:9a:7b:3f:e7:0b:9c:d8:fe:0e:3c:89:36:22: a2:0b:d2:c7:89:83:c2:03:1b:56:92:37:d7:ea:fc: 7e:63:f9:ce:0b:46:56:c5:a2:0c:73:39:88:d0:20: 75:4f:1e:c8:75:56:2c:d6:49:8b:3b:aa:4e:ed:39: a2:ef:30:cd:68:32:40:3c:8c:6d:a3:f0:53:af:42: 4e:fc:28:22:44:ce:fa:8b:fd:02:33:28:70:d7:b7: 0b:d0:7e:75:92:f2:0e:33:9e:ea:0c:99:c0:e3:b5: 73:25:36:e7:9e:4b:1e:48:68:6f:b7:8e:10:ec:57: 1f:fe:a2:89:a2:10:2d:e9:9c:11:bc:78:c4:bc:fd: d2:39:d3:fc:05:75:bf:d0:5e:8d:f4:3a:5d:57:e8: 17:82:48:f7:48:33:2b:79:45:ed:d7:29:10:33:3f: 4c:65:94:76:e6:01:07:ad:86:e2:41:4c:2d:32:5a: b1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:78:6B:50:BB:3B:52:4D:2C:C9:EC:E0:5A:7A:03:11:2F:70:3B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl X509v3 Authority Key Identifier: keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:07:1d:ad:ac:29:7c:16:2c:6b:e9:d9:1d:c4:2c:b9:77:14: b3:f9:54:ea:83:33:9b:e5:ec:9c:bf:90:83:57:90:bf:c4:b4: 3a:d0:70:09:64:48:cf:22:46:25:20:00:48:cd:81:1c:4d:26: ad:cf:10:34:39:65:c4:df:59:be:8d:42:cb:2f:95:af:0f:aa: d5:26:d0:cb:e1:9c:32:ff:f0:2c:f8:97:57:c0:53:12:f6:6f: d0:d6:b9:8a:c7:00:d3:f5:ed:62:56:b4:83:e7:b9:64:b7:89: f5:74:83:a9:f7:a6:86:72:ed:45:c4:59:a4:40:22:77:44:62: 4f:35:fa:c4:1f:02:ee:f1:fb:da:61:58:8f:3d:97:18:62:3a: 52:50:10:97:d1:8c:11:5f:dd:6c:65:18:55:d1:9f:d3:22:f6: 22:2e:a2:14:8b:a0:d2:69:af:72:37:51:69:f7:d0:34:ea:95: 1b:d8:5a:58:03:ac:e9:8a:5e:ea:25:eb:ff:15:80:ae:c0:c7: 71:67:85:27:b0:dd:ca:18:34:2a:89:85:62:ec:34:79:e7:11: 80:d2:ae:12:ec:1c:3d:ff:33:78:c9:ca:45:bb:ed:b6:f0:d4: dd:90:db:ad:2e:3c:f8:49:a4:e3:b0:0a:74:7c:94:32:63:af: 78:01:c6:82 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE35veaLtCYjMvkiG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxMTFjMTAtMmRlNS00MWZhLWE5ZTQtMWU0OWEwNDc5 MTk5MB4XDTI2MDUyNzE5MDAyMVoXDTI2MDUzMDE5MDAwMFowLzEtMCsGA1UEAxMk YTQ4OGE2MjYtNDFmOC00YmQ5LTkxZGMtMDM5ZGY3MjJiOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn0ChcccfuxqnbulZq65qaogSK+rQYtaVWi6 Xht64aiOlxmH2zmWLeAUYmNEJ43mCJzYx2tyx7WI8S9n6zILHQ+/L1eF1bGpO+Uv 45p7P+cLnNj+DjyJNiKiC9LHiYPCAxtWkjfX6vx+Y/nOC0ZWxaIMczmI0CB1Tx7I dVYs1kmLO6pO7Tmi7zDNaDJAPIxto/BTr0JO/CgiRM76i/0CMyhw17cL0H51kvIO M57qDJnA47VzJTbnnkseSGhvt44Q7Fcf/qKJohAt6ZwRvHjEvP3SOdP8BXW/0F6N 9DpdV+gXgkj3SDMreUXt1ykQMz9MZZR25gEHrYbiQUwtMlqxIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBN4a1C7O1JNLMns4Fp6AxEvcDvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTEx MWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5YTA0NzkxOTkvZGUxMTFjMTAtMmRlNS00 MWZhLWE5ZTQtMWU0OWEwNDc5MTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGUxMTFjMTAtMmRlNS00MWZhLWE5 ZTQtMWU0OWEwNDc5MTk5L2RlMTExYzEwLTJkZTUtNDFmYS1hOWU0LTFlNDlhMDQ3 OTE5OS5jcmwwHwYDVR0jBBgwFoAUI3+yI40QWbbIrz84S5R6fMqSab8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTExMWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5 YTA0NzkxOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuBx2trCl8Fixr6dkdxCy5 dxSz+VTqgzOb5eycv5CDV5C/xLQ60HAJZEjPIkYlIABIzYEcTSatzxA0OWXE31m+ jULLL5WvD6rVJtDL4Zwy//As+JdXwFMS9m/Q1rmKxwDT9e1iVrSD57lkt4n1dIOp 96aGcu1FxFmkQCJ3RGJPNfrEHwLu8fvaYViPPZcYYjpSUBCX0YwRX91sZRhV0Z/T IvYiLqIUi6DSaa9yN1Fp99A06pUb2FpYA6zpil7qJev/FYCuwMdxZ4UnsN3KGDQq iYVi7DR55xGA0q4S7Bw9/zN4ycpFu+228NTdkNutLjz4SaTjsAp0fJQyY694AcaC -----END CERTIFICATE-----Generated at Thu May 28 19:21:19 2026 by rpki-client