$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/4a1f1870-2d18-4f29-a8d8-91987d2f683e.mft File: 4a1f1870-2d18-4f29-a8d8-91987d2f683e.mft (raw, json) Hash identifier: Qq2pc0F3kOZV7CQBO4eKyEE2+3HocE+dR+CAuX/2NDE= Subject key identifier: 8C:13:30:F2:20:45:AA:5D:38:A6:03:8F:A7:0F:FE:67:E2:D6:BD:58 Authority key identifier: C6:E9:FD:71:4C:EE:F8:67:DA:C7:F3:9D:BD:A1:91:42:46:1C:EB:04 Certificate issuer: /CN=4a1f1870-2d18-4f29-a8d8-91987d2f683e Certificate serial: 010D0C9F4328584E0777C0CDD54F5A2D09B64880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/4a1f1870-2d18-4f29-a8d8-91987d2f683e.mft Manifest number: 010D0C9F4328584D1D050C8E40A47D3D82081316 Signing time: Mon 01 Jun 2026 17:00:22 +0000 Manifest this update: Mon 01 Jun 2026 17:00:22 +0000 Manifest next update: Thu 04 Jun 2026 17:00:00 +0000 Files and hashes: 1: 09362b02-a38b-3388-9801-18d7732c47a7.roa (hash: o/I+OBr9BAR/eAUbHr4e+TL7eHAJkFzGGqquhvOaFV8=) 2: 4a1f1870-2d18-4f29-a8d8-91987d2f683e.crl (hash: ZykFjB0cAtpdJo69+n50gGT+LjVV1nBwBCOMLFyQKDc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/4a1f1870-2d18-4f29-a8d8-91987d2f683e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/4a1f1870-2d18-4f29-a8d8-91987d2f683e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:77:c0:cd:d5:4f:5a:2d:09:b6:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a1f1870-2d18-4f29-a8d8-91987d2f683e Validity Not Before: Jun 1 17:00:22 2026 GMT Not After : Jun 4 17:00:00 2026 GMT Subject: CN=7f242ce2-f882-45aa-9c09-237b22b317d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:4e:a8:07:35:c5:2d:92:1f:15:1a:2b:a3: f1:7f:96:e3:19:c4:92:8b:7c:c3:0d:26:68:4c:6a: e6:a1:2d:e0:94:05:1e:63:04:32:97:37:e7:a4:5c: ba:47:72:4a:57:7e:17:2f:07:a1:3a:f6:68:82:64: dd:53:0e:c1:f5:b8:0a:1f:b3:40:52:a5:6b:23:40: bb:aa:5e:03:ef:2b:b0:c0:16:4c:61:4e:12:75:1f: 5e:bf:76:76:4a:cd:ff:11:05:3b:e8:55:0d:d0:22: df:f7:f2:1e:b7:74:00:eb:71:3f:50:26:f9:40:08: 4c:b5:3a:be:ce:6d:e5:16:e1:2c:2f:81:b2:4c:9e: 41:29:d9:fb:f6:e0:46:20:cd:c5:04:e1:95:41:a6: 08:86:40:57:5e:6d:0d:17:84:ba:3a:f6:14:df:93: b2:f4:48:99:b8:c3:9d:55:05:05:85:a6:69:4c:11: 9d:cb:b7:ac:cf:2b:f7:3d:a2:66:1f:55:86:18:69: 8f:48:06:30:ac:6e:e6:40:ec:1f:64:3f:eb:6b:d1: de:fa:6d:b4:3c:45:cb:f3:50:79:5b:8a:aa:83:1c: 0a:92:00:7b:b6:42:20:60:65:2f:0f:ff:27:7a:86: 81:0b:45:b5:11:c9:85:f6:00:68:39:e0:48:ef:90: 5d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:13:30:F2:20:45:AA:5D:38:A6:03:8F:A7:0F:FE:67:E2:D6:BD:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/4a1f1870-2d18-4f29-a8d8-91987d2f683e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/4a1f1870-2d18-4f29-a8d8-91987d2f683e.crl X509v3 Authority Key Identifier: keyid:C6:E9:FD:71:4C:EE:F8:67:DA:C7:F3:9D:BD:A1:91:42:46:1C:EB:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:77:d6:23:b4:51:ae:fe:51:55:83:5a:9a:b6:3b:a9:8c:d6: 6f:e6:ee:07:e0:c0:e0:7a:33:3b:1c:d9:d8:38:ec:3f:9a:86: c2:8d:61:01:74:41:fa:bc:4c:cd:c4:ca:7c:07:26:e7:88:ab: 2e:f2:37:e2:79:de:08:62:46:0b:f4:1c:6a:b4:02:c3:4c:15: b5:06:0a:a6:47:4f:a0:7c:95:a4:93:ad:b5:30:2b:68:bc:2d: ff:46:58:eb:66:4e:84:5c:e4:63:91:43:c2:80:f2:91:5e:4e: 0a:90:a5:e8:1f:32:53:60:a5:da:6d:e0:3b:a4:1a:0f:ec:07: 97:03:66:48:83:06:ac:42:0d:e4:44:c8:6b:eb:65:2a:2d:27: a2:83:53:3f:5e:f8:79:fe:57:41:a2:06:2f:a7:cd:eb:e8:42: 45:15:20:0b:3f:e8:6f:4c:55:e4:fb:3b:92:b7:57:4a:ba:63: 09:ea:cd:2f:8e:13:de:fd:f5:61:91:a5:17:64:38:fc:11:30: bf:09:75:e5:41:75:a2:94:10:93:09:32:03:07:e3:ab:ca:b4: 34:a0:0b:45:d8:ae:1c:94:c1:09:fc:56:d4:53:d4:ee:0f:a1: 8e:31:af:41:be:45:ef:92:27:f8:ff:99:51:75:c6:8f:92:85: d2:c7:7d:7b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE4Hd8DN1U9aLQm2SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGExZjE4NzAtMmQxOC00ZjI5LWE4ZDgtOTE5ODdkMmY2 ODNlMB4XDTI2MDYwMTE3MDAyMloXDTI2MDYwNDE3MDAwMFowLzEtMCsGA1UEAxMk N2YyNDJjZTItZjg4Mi00NWFhLTljMDktMjM3YjIyYjMxN2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu89OqAc1xS2SHxUaK6Pxf5bjGcSSi3zDDSZo TGrmoS3glAUeYwQylzfnpFy6R3JKV34XLwehOvZogmTdUw7B9bgKH7NAUqVrI0C7 ql4D7yuwwBZMYU4SdR9ev3Z2Ss3/EQU76FUN0CLf9/Iet3QA63E/UCb5QAhMtTq+ zm3lFuEsL4GyTJ5BKdn79uBGIM3FBOGVQaYIhkBXXm0NF4S6OvYU35Oy9EiZuMOd VQUFhaZpTBGdy7eszyv3PaJmH1WGGGmPSAYwrG7mQOwfZD/ra9He+m20PEXL81B5 W4qqgxwKkgB7tkIgYGUvD/8neoaBC0W1EcmF9gBoOeBI75Bd8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIwTMPIgRapdOKYDj6cP/mfi1r1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80YTFm MTg3MC0yZDE4LTRmMjktYThkOC05MTk4N2QyZjY4M2UvNGExZjE4NzAtMmQxOC00 ZjI5LWE4ZDgtOTE5ODdkMmY2ODNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGExZjE4NzAtMmQxOC00ZjI5LWE4 ZDgtOTE5ODdkMmY2ODNlLzRhMWYxODcwLTJkMTgtNGYyOS1hOGQ4LTkxOTg3ZDJm NjgzZS5jcmwwHwYDVR0jBBgwFoAUxun9cUzu+Gfax/OdvaGRQkYc6wQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80YTFmMTg3MC0yZDE4LTRmMjktYThkOC05MTk4 N2QyZjY4M2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5d9YjtFGu/lFVg1qatjup jNZv5u4H4MDgejM7HNnYOOw/mobCjWEBdEH6vEzNxMp8BybniKsu8jfied4IYkYL 9BxqtALDTBW1BgqmR0+gfJWkk621MCtovC3/RljrZk6EXORjkUPCgPKRXk4KkKXo HzJTYKXabeA7pBoP7AeXA2ZIgwasQg3kRMhr62UqLSeig1M/Xvh5/ldBogYvp83r 6EJFFSALP+hvTFXk+zuSt1dKumMJ6s0vjhPe/fVhkaUXZDj8ETC/CXXlQXWilBCT CTIDB+OryrQ0oAtF2K4clMEJ/FbUU9TuD6GOMa9BvkXvkif4/5lRdcaPkoXSx317 -----END CERTIFICATE-----Generated at Mon Jun 1 22:00:13 2026 by rpki-client