$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.mft File: 09c8b616-1a95-4b1a-848f-f755fed5e23d.mft (raw, json) Hash identifier: 3Q1HNAkqhAtRY5SO8xGdyzDIoJBi52OEPd7uPC1u3MM= Subject key identifier: 3C:ED:EE:43:1A:C0:F7:56:29:FE:E6:4B:89:F7:21:2F:5F:8C:14:08 Authority key identifier: DA:92:48:39:34:D2:A7:FD:AA:8D:07:A2:F7:DE:C2:83:0A:44:B3:24 Certificate issuer: /CN=09c8b616-1a95-4b1a-848f-f755fed5e23d Certificate serial: 010D0C9F4328584DE8C20F02E536239D9B2D5020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.mft Manifest number: 010D0C9F4328584A7BF9A4237617030608F11ECA Signing time: Thu 21 May 2026 17:00:03 +0000 Manifest this update: Thu 21 May 2026 17:00:03 +0000 Manifest next update: Sun 24 May 2026 17:00:00 +0000 Files and hashes: 1: 09c8b616-1a95-4b1a-848f-f755fed5e23d.crl (hash: J+8std53iRzw+WjAOE4+93c3bKzuwKF039K/XfMzJe8=) 2: 59fcf8cc-67b8-309f-ad0a-2ec80931b80f.roa (hash: 3FKAxnulX2RzkFGuQMWVNg/43ENLkN2BXuf71KsBVuU=) 3: cb03ab98-a527-393a-8dba-c54f0bbbdca7.roa (hash: HvU0NYX0K54YbDqWrTCsBdqv7+NHgrpJN7tbxmPAQbM=) 4: f366ea40-987b-35df-88eb-356bddc178a6.roa (hash: P8WbtWe+Qs2nHc33TbjD5ZMxETGe6lEJq3IfuojxEm8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:c2:0f:02:e5:36:23:9d:9b:2d:50:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c8b616-1a95-4b1a-848f-f755fed5e23d Validity Not Before: May 21 17:00:03 2026 GMT Not After : May 24 17:00:00 2026 GMT Subject: CN=793f425c-9107-4d19-97d9-76a8da77bc0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cc:35:31:51:7c:ac:a2:c4:23:37:06:0d:a3: ec:05:34:a5:65:73:1f:8e:5d:52:96:0b:c8:a7:3e: 3e:ff:b8:71:08:d6:bd:66:5d:a0:78:51:92:e0:96: 55:16:85:74:46:5b:94:d4:7d:cf:a1:04:55:4a:9e: 3f:7d:db:06:3e:fa:60:a5:b9:de:c7:b3:ee:e9:13: fc:ba:0c:b9:7c:5a:ea:bf:d7:85:71:4f:c4:48:41: 0b:16:08:76:5b:93:30:eb:2a:91:67:9f:dc:73:15: 32:13:34:60:4b:32:46:95:1a:6f:d1:57:4f:af:5b: 8e:96:69:21:76:66:55:5b:57:94:b4:9d:44:b8:4b: a2:81:dd:ec:bd:95:e6:74:0a:a4:b7:2f:d8:f0:5d: 0c:8b:d7:69:c8:72:8b:74:2b:2e:fb:f7:10:a7:9f: 7f:9c:f4:10:15:1a:61:e2:42:4e:f7:a4:40:7e:77: d7:fe:69:ce:99:99:70:a6:ef:6b:ae:58:2f:dc:81: 65:84:a1:b9:13:b0:4a:ef:24:54:22:38:c4:b3:1b: 64:af:0b:16:4e:cb:9f:fa:25:6d:1d:43:9f:ae:a8: d6:0f:3b:9b:c6:78:3c:cd:48:a1:d4:0c:8c:d7:be: 15:be:7a:ef:96:ad:95:c4:da:46:f4:a5:ad:7d:cc: 5c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:ED:EE:43:1A:C0:F7:56:29:FE:E6:4B:89:F7:21:2F:5F:8C:14:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.crl X509v3 Authority Key Identifier: keyid:DA:92:48:39:34:D2:A7:FD:AA:8D:07:A2:F7:DE:C2:83:0A:44:B3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:80:45:da:d1:2a:75:ae:d8:a7:5f:2b:20:24:17:92:e9:b8: b9:23:df:68:68:40:51:a3:b2:c8:bf:44:77:51:41:9e:1f:d6: 5f:28:a1:21:52:ca:54:45:bf:84:33:a9:72:41:df:80:0a:c4: 28:1e:c8:35:ba:b0:94:f6:b5:c7:4e:59:0f:97:a3:8d:25:e1: f0:51:3a:b5:99:3e:ea:7f:59:af:fc:2d:18:47:bd:81:20:05: 41:e0:be:e5:31:16:32:09:ae:74:d6:dd:76:88:76:60:ae:b6: 1c:f9:4d:e5:bf:8d:04:31:3d:44:f6:a7:34:f8:22:36:bb:36: 22:ed:f1:80:fe:a1:96:29:35:ff:4e:3f:15:03:e7:7c:ab:d8: 96:96:64:64:17:de:cd:3a:1d:b5:98:e1:a0:de:dd:72:a2:e0: 4d:80:bc:ce:6a:a1:80:f8:50:9f:ab:ba:05:93:9d:a8:e8:a1: 02:e4:96:21:f3:a8:c7:77:7e:41:16:d9:55:92:33:3f:f5:1d: 9d:cc:1c:c8:bd:56:e4:6d:51:9e:e5:ec:b5:9b:9a:a4:e4:be: 6e:f0:b2:6c:8c:28:d3:45:c2:56:fc:ad:47:4c:94:1c:4e:bf: 9f:f4:71:58:e6:59:6a:22:6f:87:cb:11:5e:d4:3e:a9:7a:9e: 99:34:b4:78 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3owg8C5TYjnZstUCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDljOGI2MTYtMWE5NS00YjFhLTg0OGYtZjc1NWZlZDVl MjNkMB4XDTI2MDUyMTE3MDAwM1oXDTI2MDUyNDE3MDAwMFowLzEtMCsGA1UEAxMk NzkzZjQyNWMtOTEwNy00ZDE5LTk3ZDktNzZhOGRhNzdiYzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicw1MVF8rKLEIzcGDaPsBTSlZXMfjl1SlgvI pz4+/7hxCNa9Zl2geFGS4JZVFoV0RluU1H3PoQRVSp4/fdsGPvpgpbnex7Pu6RP8 ugy5fFrqv9eFcU/ESEELFgh2W5Mw6yqRZ5/ccxUyEzRgSzJGlRpv0VdPr1uOlmkh dmZVW1eUtJ1EuEuigd3svZXmdAqkty/Y8F0Mi9dpyHKLdCsu+/cQp59/nPQQFRph 4kJO96RAfnfX/mnOmZlwpu9rrlgv3IFlhKG5E7BK7yRUIjjEsxtkrwsWTsuf+iVt HUOfrqjWDzubxng8zUih1AyM174Vvnrvlq2VxNpG9KWtfcxcawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDzt7kMawPdWKf7mS4n3IS9fjBQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wOWM4 YjYxNi0xYTk1LTRiMWEtODQ4Zi1mNzU1ZmVkNWUyM2QvMDljOGI2MTYtMWE5NS00 YjFhLTg0OGYtZjc1NWZlZDVlMjNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDljOGI2MTYtMWE5NS00YjFhLTg0 OGYtZjc1NWZlZDVlMjNkLzA5YzhiNjE2LTFhOTUtNGIxYS04NDhmLWY3NTVmZWQ1 ZTIzZC5jcmwwHwYDVR0jBBgwFoAU2pJIOTTSp/2qjQei997CgwpEsyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wOWM4YjYxNi0xYTk1LTRiMWEtODQ4Zi1mNzU1 ZmVkNWUyM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPgEXa0Sp1rtinXysgJBeS 6bi5I99oaEBRo7LIv0R3UUGeH9ZfKKEhUspURb+EM6lyQd+ACsQoHsg1urCU9rXH TlkPl6ONJeHwUTq1mT7qf1mv/C0YR72BIAVB4L7lMRYyCa501t12iHZgrrYc+U3l v40EMT1E9qc0+CI2uzYi7fGA/qGWKTX/Tj8VA+d8q9iWlmRkF97NOh21mOGg3t1y ouBNgLzOaqGA+FCfq7oFk52o6KEC5JYh86jHd35BFtlVkjM/9R2dzBzIvVbkbVGe 5ey1m5qk5L5u8LJsjCjTRcJW/K1HTJQcTr+f9HFY5llqIm+HyxFe1D6pep6ZNLR4 -----END CERTIFICATE-----Generated at Fri May 22 16:56:34 2026 by rpki-client