$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/43d1739b-8a68-4059-a0c2-32d1528366cd/43d1739b-8a68-4059-a0c2-32d1528366cd.mft File: 43d1739b-8a68-4059-a0c2-32d1528366cd.mft (raw, json) Hash identifier: 8tEp/6Neytw/3wbGde/xyGI3lnZEKFwlAHxgd9GzegE= Subject key identifier: EE:C9:EA:85:93:10:84:D1:CC:0C:D2:87:53:D9:E0:45:DD:63:4D:29 Authority key identifier: A7:4C:92:BE:DA:69:24:93:C5:88:47:49:88:B0:1A:0F:20:AF:E9:53 Certificate issuer: /CN=43d1739b-8a68-4059-a0c2-32d1528366cd Certificate serial: 010D0C9F4328584E05D6E8AE7B06C7DBCF4325B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/43d1739b-8a68-4059-a0c2-32d1528366cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/43d1739b-8a68-4059-a0c2-32d1528366cd/43d1739b-8a68-4059-a0c2-32d1528366cd.mft Manifest number: 010D0C9F4328584CEBF082266D56F7103F631CEA Signing time: Mon 01 Jun 2026 03:00:23 +0000 Manifest this update: Mon 01 Jun 2026 03:00:23 +0000 Manifest next update: Wed 03 Jun 2026 03:00:00 +0000 Files and hashes: 1: 43d1739b-8a68-4059-a0c2-32d1528366cd.crl (hash: fyinLarf4YG6Mlwj7nhZ4EqFHjhsz1pMAftZWmWy1UU=) 2: e41d481d-2078-3f7e-8862-1a3992c1e598.roa (hash: 3sZmfnlmorzLCgOUx2jc61jUPP/GNJZnV9fCqtaMVAA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/43d1739b-8a68-4059-a0c2-32d1528366cd/43d1739b-8a68-4059-a0c2-32d1528366cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/43d1739b-8a68-4059-a0c2-32d1528366cd/43d1739b-8a68-4059-a0c2-32d1528366cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/43d1739b-8a68-4059-a0c2-32d1528366cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:d6:e8:ae:7b:06:c7:db:cf:43:25:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d1739b-8a68-4059-a0c2-32d1528366cd Validity Not Before: Jun 1 03:00:23 2026 GMT Not After : Jun 3 03:00:00 2026 GMT Subject: CN=441b6c69-edfe-4303-a9c9-b702af0f8240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:0b:88:7e:5f:11:b9:ca:9f:77:0a:97:cc: b6:15:c2:51:92:cb:c0:d6:56:7e:33:5c:42:2e:41: db:dc:19:cf:84:db:93:33:ce:18:89:f3:17:36:21: 94:cd:1e:8b:07:aa:02:eb:2d:99:af:b3:75:5f:82: 5a:80:cc:c7:17:23:81:05:dd:26:d7:db:da:e2:3d: 3f:80:ef:fd:55:7b:b5:67:86:04:e5:e1:6c:e1:2d: bb:be:25:ba:80:91:94:94:d7:e3:0d:d1:26:ce:c5: 6f:bc:9e:1a:74:c3:ba:1a:05:64:02:67:85:3d:15: 63:1e:76:9d:ba:bf:d5:bd:c8:ae:16:3e:e5:f7:fb: bf:ac:6a:c2:4b:78:f2:d8:61:b9:c9:4b:75:e3:fc: 13:21:29:81:18:27:6b:24:ec:be:27:ee:3e:14:67: 4b:18:58:cc:43:df:42:b8:44:62:5b:a8:38:4c:fc: 6c:93:71:37:8c:08:6f:f6:dd:64:77:34:4c:16:73: cb:e3:22:f4:60:16:56:26:ab:d1:fa:a6:20:a0:04: 9f:d8:ef:e3:b6:a8:25:9c:ac:a2:68:f0:0f:34:9a: 52:96:66:a0:22:c5:0b:89:72:59:a3:f5:4d:44:55: cf:db:5d:e2:d1:6b:35:31:a8:52:8a:37:36:07:59: af:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C9:EA:85:93:10:84:D1:CC:0C:D2:87:53:D9:E0:45:DD:63:4D:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/43d1739b-8a68-4059-a0c2-32d1528366cd/43d1739b-8a68-4059-a0c2-32d1528366cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/43d1739b-8a68-4059-a0c2-32d1528366cd/43d1739b-8a68-4059-a0c2-32d1528366cd.crl X509v3 Authority Key Identifier: keyid:A7:4C:92:BE:DA:69:24:93:C5:88:47:49:88:B0:1A:0F:20:AF:E9:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/43d1739b-8a68-4059-a0c2-32d1528366cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:fd:ef:c5:f8:55:17:47:3e:98:ad:7f:ea:2b:df:83:3e:e5: 93:35:a1:be:c5:7f:9e:17:11:f0:18:27:2c:69:18:78:1e:83: 9c:90:75:9c:c5:07:5d:e9:f2:f0:56:f4:ca:05:53:a5:74:a8: ed:7d:a0:65:d1:83:b7:46:6e:17:24:51:a5:3d:40:75:c5:43: 47:d3:eb:22:e9:b7:df:e1:67:47:8b:7a:80:ef:83:ab:6d:41: 7c:c9:58:c2:3e:dd:d2:6b:93:f6:0e:c9:72:c4:5d:92:fa:55: dd:f7:7a:1d:f7:4b:bc:4c:b1:58:05:ed:de:29:26:9d:74:a1: ca:df:a0:10:59:89:fa:d4:68:8f:b0:7e:42:ce:d9:54:08:6d: d6:ca:0a:28:87:d7:18:ba:e9:76:14:30:4e:38:a5:33:a7:bb: 05:86:4c:b9:3d:7f:0b:5c:97:49:62:d2:d3:7d:58:a6:b1:d7: aa:d0:70:b3:f3:e3:82:c2:af:b2:3e:92:5f:ba:16:66:ad:c2: 9b:66:3e:06:a6:3d:39:39:31:15:c1:f7:ec:d2:a8:41:1b:36: 89:b6:f7:fa:92:9c:fe:3a:ce:1a:29:9a:cc:10:57:59:83:c4: 37:9b:93:aa:02:e8:f3:f2:75:e8:51:37:50:21:af:fb:73:16: 5a:9f:d2:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE4F1uiuewbH289DJbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkMTczOWItOGE2OC00MDU5LWEwYzItMzJkMTUyODM2 NmNkMB4XDTI2MDYwMTAzMDAyM1oXDTI2MDYwMzAzMDAwMFowLzEtMCsGA1UEAxMk NDQxYjZjNjktZWRmZS00MzAzLWE5YzktYjcwMmFmMGY4MjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0wLiH5fEbnKn3cKl8y2FcJRksvA1lZ+M1xC LkHb3BnPhNuTM84YifMXNiGUzR6LB6oC6y2Zr7N1X4JagMzHFyOBBd0m19va4j0/ gO/9VXu1Z4YE5eFs4S27viW6gJGUlNfjDdEmzsVvvJ4adMO6GgVkAmeFPRVjHnad ur/VvciuFj7l9/u/rGrCS3jy2GG5yUt14/wTISmBGCdrJOy+J+4+FGdLGFjMQ99C uERiW6g4TPxsk3E3jAhv9t1kdzRMFnPL4yL0YBZWJqvR+qYgoASf2O/jtqglnKyi aPAPNJpSlmagIsULiXJZo/VNRFXP213i0Ws1MahSijc2B1mv/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO7J6oWTEITRzAzSh1PZ4EXdY00pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80M2Qx NzM5Yi04YTY4LTQwNTktYTBjMi0zMmQxNTI4MzY2Y2QvNDNkMTczOWItOGE2OC00 MDU5LWEwYzItMzJkMTUyODM2NmNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDNkMTczOWItOGE2OC00MDU5LWEw YzItMzJkMTUyODM2NmNkLzQzZDE3MzliLThhNjgtNDA1OS1hMGMyLTMyZDE1Mjgz NjZjZC5jcmwwHwYDVR0jBBgwFoAUp0ySvtppJJPFiEdJiLAaDyCv6VMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80M2QxNzM5Yi04YTY4LTQwNTktYTBjMi0zMmQx NTI4MzY2Y2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCi/e/F+FUXRz6YrX/qK9+D PuWTNaG+xX+eFxHwGCcsaRh4HoOckHWcxQdd6fLwVvTKBVOldKjtfaBl0YO3Rm4X JFGlPUB1xUNH0+si6bff4WdHi3qA74OrbUF8yVjCPt3Sa5P2DslyxF2S+lXd93od 90u8TLFYBe3eKSaddKHK36AQWYn61GiPsH5CztlUCG3Wygooh9cYuul2FDBOOKUz p7sFhky5PX8LXJdJYtLTfVimsdeq0HCz8+OCwq+yPpJfuhZmrcKbZj4Gpj05OTEV wffs0qhBGzaJtvf6kpz+Os4aKZrMEFdZg8Q3m5OqAujz8nXoUTdQIa/7cxZan9K2 -----END CERTIFICATE-----Generated at Mon Jun 1 22:00:29 2026 by rpki-client