$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft File: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft (raw, json) Hash identifier: +E8Z7h8+kBxxfddY12/5Nwz32FArZg7TCx099SETQKs= Subject key identifier: 61:45:36:11:D1:E0:80:FC:59:2F:2F:21:54:41:A2:C2:69:B0:E4:2B Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 Certificate issuer: /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Certificate serial: 010D0C9F4328584DBEE1CF563E9524E018113151 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft Manifest number: 010D0C9F4328584073A81F41A8F9BAE8BF3A8847 Signing time: Wed 06 May 2026 17:00:03 +0000 Manifest this update: Wed 06 May 2026 17:00:03 +0000 Manifest next update: Fri 08 May 2026 17:00:00 +0000 Files and hashes: 1: 97a9023c-3b6e-3158-89d8-efe63001f64e.roa (hash: re1nXPstgO2mvuMxed2GIGmy6G5HAWiZ43KgcoxpKQ4=) 2: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl (hash: /5Ub7udcAhfDGBo44yCWXTUM9VryWiks0MKRccEc+a0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:e1:cf:56:3e:95:24:e0:18:11:31:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Validity Not Before: May 6 17:00:03 2026 GMT Not After : May 8 17:00:00 2026 GMT Subject: CN=d2de3da1-c3ba-4bdd-aaa2-525bc3c57786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7b:12:44:9e:84:47:be:39:a1:ae:d0:38:97: f6:ab:54:19:dc:d2:ea:88:1b:53:84:80:53:e7:e6: fa:ed:a2:26:78:6a:76:d2:c7:8d:4f:f3:62:fb:5e: 6f:2a:33:44:85:24:57:98:42:b4:ff:74:ef:85:ef: db:2d:58:24:31:f3:76:57:c3:5f:52:57:cd:bb:1b: d2:da:bb:7e:d7:39:7d:22:fe:f1:78:2a:f4:53:18: 7c:13:2a:23:18:e5:a9:1b:2d:df:63:92:0e:e9:f6: 4e:10:29:05:46:ac:d6:54:ba:92:b1:f6:37:b6:b9: 61:5c:66:b1:76:ff:5c:05:47:7b:48:c8:f9:4d:74: bd:67:cb:ff:d5:03:ae:d3:fb:47:23:b4:b0:8b:aa: 7a:b4:91:13:ec:22:ce:d8:cf:2a:72:59:fb:a3:70: ff:22:e2:03:94:11:4f:c9:f7:dd:e2:91:75:47:a9: fe:50:3d:a9:e8:61:da:a1:b8:3e:c4:52:0c:72:02: db:39:de:75:e8:ef:44:41:94:56:79:14:66:91:7f: 03:02:19:b7:5d:bd:23:70:92:0d:8f:36:c9:81:55: d4:92:d7:6c:79:09:60:d5:4b:04:72:b8:6b:c7:44: b9:b4:32:4f:1c:97:0e:f3:6b:f2:28:dd:82:00:52: 8d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:45:36:11:D1:E0:80:FC:59:2F:2F:21:54:41:A2:C2:69:B0:E4:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl X509v3 Authority Key Identifier: keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:d6:30:8b:0d:0e:f8:a0:22:81:7d:fd:d2:23:2e:78:b0:4f: 4d:21:a8:46:68:d5:96:18:39:db:06:87:cd:5d:4d:2d:8f:33: d1:80:88:e4:54:66:e0:c1:f5:fe:de:98:18:d5:fc:c1:6a:c8: 96:af:49:40:31:bb:6f:f9:9d:22:4d:c8:d5:52:bd:58:88:25: f4:76:1b:e4:75:6c:80:30:7b:62:53:5a:9c:b4:ea:1d:59:57: 24:9b:dc:7c:a6:59:42:4b:3b:83:59:b6:91:7f:82:73:7f:69: ba:9c:46:46:3d:3d:03:21:df:64:f7:1b:b1:8c:2c:1a:aa:81: dd:9a:3e:ed:2a:04:9c:a6:a6:21:6e:33:d2:92:d9:3b:9d:de: d0:10:8c:f7:02:db:ef:bb:bb:e7:36:9f:b0:7e:f2:20:2f:95: 78:f7:fc:00:97:c9:2d:37:fd:0d:9e:f4:b2:0c:c2:2b:49:92: f0:6f:ee:27:53:e8:17:b7:1b:40:4e:74:5f:0f:d9:8f:bc:d1: 8d:34:ce:58:d2:4a:26:d4:e9:aa:83:80:9e:35:c2:8b:79:40: 08:54:69:e1:e1:79:40:3f:8d:e1:27:e9:1d:75:e3:b1:43:89: 5a:6f:d7:0d:11:b2:9a:6a:65:1d:1e:c1:b7:fb:5b:ee:b2:8b: 67:11:a6:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2+4c9WPpUk4BgRMVEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZkNWYzNWQtNWIwMi00ODRhLThlMGUtYTczMGFiZDk4 ZmEyMB4XDTI2MDUwNjE3MDAwM1oXDTI2MDUwODE3MDAwMFowLzEtMCsGA1UEAxMk ZDJkZTNkYTEtYzNiYS00YmRkLWFhYTItNTI1YmMzYzU3Nzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHsSRJ6ER745oa7QOJf2q1QZ3NLqiBtThIBT 5+b67aImeGp20seNT/Ni+15vKjNEhSRXmEK0/3Tvhe/bLVgkMfN2V8NfUlfNuxvS 2rt+1zl9Iv7xeCr0Uxh8EyojGOWpGy3fY5IO6fZOECkFRqzWVLqSsfY3trlhXGax dv9cBUd7SMj5TXS9Z8v/1QOu0/tHI7Swi6p6tJET7CLO2M8qcln7o3D/IuIDlBFP yffd4pF1R6n+UD2p6GHaobg+xFIMcgLbOd516O9EQZRWeRRmkX8DAhm3Xb0jcJIN jzbJgVXUktdseQlg1UsEcrhrx0S5tDJPHJcO82vyKN2CAFKNPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGFFNhHR4ID8WS8vIVRBosJpsOQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1 ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMwYWJkOThmYTIvZGZkNWYzNWQtNWIwMi00 ODRhLThlMGUtYTczMGFiZDk4ZmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZkNWYzNWQtNWIwMi00ODRhLThl MGUtYTczMGFiZDk4ZmEyL2RmZDVmMzVkLTViMDItNDg0YS04ZTBlLWE3MzBhYmQ5 OGZhMi5jcmwwHwYDVR0jBBgwFoAUGqPjaFCuyycxWd2nix8QwlkQm0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMw YWJkOThmYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQ1jCLDQ74oCKBff3SIy54 sE9NIahGaNWWGDnbBofNXU0tjzPRgIjkVGbgwfX+3pgY1fzBasiWr0lAMbtv+Z0i TcjVUr1YiCX0dhvkdWyAMHtiU1qctOodWVckm9x8pllCSzuDWbaRf4Jzf2m6nEZG PT0DId9k9xuxjCwaqoHdmj7tKgScpqYhbjPSktk7nd7QEIz3Atvvu7vnNp+wfvIg L5V49/wAl8ktN/0NnvSyDMIrSZLwb+4nU+gXtxtATnRfD9mPvNGNNM5Y0kom1Omq g4CeNcKLeUAIVGnh4XlAP43hJ+kddeOxQ4lab9cNEbKaamUdHsG3+1vusotnEaZE -----END CERTIFICATE-----Generated at Thu May 7 00:22:19 2026 by rpki-client