$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft File: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft (raw, json) Hash identifier: rqH0siJiVgG+0LIyTTFAjEk/P8BMEEj4At3t9MDYnOA= Subject key identifier: B2:47:3C:CB:A5:85:A7:72:1A:91:5D:FD:D6:D3:CA:EE:6B:6A:A8:FE Authority key identifier: 0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B Certificate issuer: /CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Certificate serial: 010D0C9F4328584DE9CE0ECBA8D0B58F3A97D080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft Manifest number: 010D0C9F4328584B4BCFD881B87CBE90580D3270 Signing time: Fri 22 May 2026 02:00:03 +0000 Manifest this update: Fri 22 May 2026 02:00:03 +0000 Manifest next update: Mon 25 May 2026 02:00:00 +0000 Files and hashes: 1: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl (hash: Y316Sfu0Pw6hsT50HaMD32vaC+Wmd8gqDj04gR3DdTM=) 2: 4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer (hash: YQB3ja0LD/RpPSpiFOvhsYwRInhxQQNy5l8nfauLYkE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:ce:0e:cb:a8:d0:b5:8f:3a:97:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Validity Not Before: May 22 02:00:03 2026 GMT Not After : May 25 02:00:00 2026 GMT Subject: CN=a2dd2a11-8b97-4585-a6ae-3773ebceb3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6a:32:f9:96:d9:6c:59:1d:b7:48:d1:66:09: 97:78:44:fc:1a:52:c1:e2:a5:5d:f7:81:37:52:90: 59:3a:e8:04:c1:96:a8:a1:42:28:f5:df:b9:8b:46: 12:50:88:75:cb:f7:45:d6:e3:32:e4:8c:58:a0:b5: 2e:e6:b3:17:2b:15:28:90:06:8d:a2:87:93:d8:3b: c3:df:78:27:59:5a:e4:e6:40:39:f7:3f:7f:4a:61: 5a:7a:55:9e:a5:31:d7:97:96:e9:73:5d:6f:76:94: cc:3d:75:6b:31:4c:5d:b0:78:51:05:75:1c:63:3a: 7e:5f:69:38:87:cf:69:39:fc:ee:ea:42:39:b2:98: 0f:e8:50:47:30:66:a8:88:fb:f4:34:a6:c1:a6:8b: 48:84:f9:27:28:dc:f7:b4:c7:b2:f6:2e:7d:67:08: ff:4b:18:2d:0f:b1:11:45:d4:f7:a6:91:ea:69:b8: 8e:a6:8e:ce:f7:08:ca:72:25:8b:84:df:90:db:8b: 95:11:88:fe:61:fe:0e:9e:18:8b:38:0c:8c:a8:60: f8:bc:2f:f7:16:fb:12:5d:a2:d7:59:04:cd:48:87: 01:82:7f:5c:12:52:f3:8c:7e:ec:a4:5e:83:1f:ca: 11:82:a7:58:7e:ba:3e:25:fa:16:a3:1a:2c:47:c9: 63:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:47:3C:CB:A5:85:A7:72:1A:91:5D:FD:D6:D3:CA:EE:6B:6A:A8:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl X509v3 Authority Key Identifier: keyid:0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:97:ee:4a:9f:17:8a:cd:0b:92:ec:14:82:29:87:a1:67:62: e9:10:fc:36:6d:32:6c:18:7b:65:24:25:56:88:88:b0:6b:05: 93:2c:ea:81:17:3b:30:de:b5:f6:d4:01:90:cf:6d:a0:bb:5c: 53:9b:9c:50:bb:4d:89:b9:a8:ff:2c:e3:66:66:ed:0d:93:a8: 02:09:a4:7f:7d:b4:70:10:b3:60:18:1a:9d:5d:74:9f:42:75: 04:37:69:1a:a3:54:c6:c3:0d:71:22:f2:9b:db:d9:ba:6a:60: 65:26:94:3b:7f:b3:14:c2:9a:b4:d6:e1:af:00:c8:91:25:73: 89:5e:c2:3b:b3:28:3d:b7:e6:d4:b5:e7:ff:44:c4:dd:97:94: 6a:86:31:62:42:6c:ef:4c:6e:d2:0a:1d:94:9b:49:c0:66:e4: 7e:69:a3:f9:d3:8c:e2:f7:10:ee:96:37:f1:53:45:6c:0d:8c: ce:b1:ba:9b:de:b1:95:e8:79:b2:91:86:49:fe:6d:f0:e8:bb: 32:99:cd:d6:9a:3c:de:4f:b6:2a:4e:11:c5:9c:f4:d8:d3:24: 8c:35:ed:84:fa:94:0c:46:17:8e:0a:8a:48:11:6b:66:93:d7: de:8c:d0:f1:cd:6d:db:ca:88:c2:7e:07:a7:8f:76:99:8b:a4: ce:2a:43:de -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3pzg7LqNC1jzqX0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1NGI4YTEtNjlkZS00NjMwLTgwMDYtNGRjOGZmZTIz YmRkMB4XDTI2MDUyMjAyMDAwM1oXDTI2MDUyNTAyMDAwMFowLzEtMCsGA1UEAxMk YTJkZDJhMTEtOGI5Ny00NTg1LWE2YWUtMzc3M2ViY2ViM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2oy+ZbZbFkdt0jRZgmXeET8GlLB4qVd94E3 UpBZOugEwZaooUIo9d+5i0YSUIh1y/dF1uMy5IxYoLUu5rMXKxUokAaNooeT2DvD 33gnWVrk5kA59z9/SmFaelWepTHXl5bpc11vdpTMPXVrMUxdsHhRBXUcYzp+X2k4 h89pOfzu6kI5spgP6FBHMGaoiPv0NKbBpotIhPknKNz3tMey9i59Zwj/SxgtD7ER RdT3ppHqabiOpo7O9wjKciWLhN+Q24uVEYj+Yf4OnhiLOAyMqGD4vC/3FvsSXaLX WQTNSIcBgn9cElLzjH7spF6DH8oRgqdYfro+JfoWoxosR8ljCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLJHPMulhadyGpFd/dbTyu5raqj+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0 YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4ZmZlMjNiZGQvMjk1NGI4YTEtNjlkZS00 NjMwLTgwMDYtNGRjOGZmZTIzYmRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjk1NGI4YTEtNjlkZS00NjMwLTgw MDYtNGRjOGZmZTIzYmRkLzI5NTRiOGExLTY5ZGUtNDYzMC04MDA2LTRkYzhmZmUy M2JkZC5jcmwwHwYDVR0jBBgwFoAUCtV6etttzc0D69uV89EzrhnHBgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4 ZmZlMjNiZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIl+5KnxeKzQuS7BSCKYeh Z2LpEPw2bTJsGHtlJCVWiIiwawWTLOqBFzsw3rX21AGQz22gu1xTm5xQu02Juaj/ LONmZu0Nk6gCCaR/fbRwELNgGBqdXXSfQnUEN2kao1TGww1xIvKb29m6amBlJpQ7 f7MUwpq01uGvAMiRJXOJXsI7syg9t+bUtef/RMTdl5RqhjFiQmzvTG7SCh2Um0nA ZuR+aaP504zi9xDuljfxU0VsDYzOsbqb3rGV6HmykYZJ/m3w6Lsymc3WmjzeT7Yq ThHFnPTY0ySMNe2E+pQMRheOCopIEWtmk9fejNDxzW3byojCfgenj3aZi6TOKkPe -----END CERTIFICATE-----Generated at Fri May 22 18:30:12 2026 by rpki-client