$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft File: 8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft (raw, json) Hash identifier: 4kDq4cF5+GBP2ayDRkf8w1cwBiPRIp/Sj9bpHQWKzfI= Subject key identifier: E8:9A:5A:03:30:CB:BC:A2:66:1C:5C:DE:4F:F6:2E:26:95:48:4C:F9 Authority key identifier: C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 Certificate issuer: /CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Certificate serial: 010D0C9F4328584DEA099CF11761090EBC9DCB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft Manifest number: 010D0C9F4328584AB5537149436C417DA953376D Signing time: Fri 22 May 2026 04:00:04 +0000 Manifest this update: Fri 22 May 2026 04:00:04 +0000 Manifest next update: Mon 25 May 2026 04:00:00 +0000 Files and hashes: 1: 09568afc-1b7f-31a0-b7ef-b103efdcc17b.roa (hash: iajALywgfqb4dmBmw1lvR/636kjdyT9CdGpP37HGP3o=) 2: 8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl (hash: qiWewo5ipgDKyRTmcuCXHrx6ErcWg4iW+0w7rg/aCTU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ea:09:9c:f1:17:61:09:0e:bc:9d:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Validity Not Before: May 22 04:00:04 2026 GMT Not After : May 25 04:00:00 2026 GMT Subject: CN=1e7f9aef-993a-4c84-b622-802c8a85c252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:31:05:98:c5:11:4b:61:05:54:36:e1:97:05: a3:87:f0:b8:67:76:be:2f:8f:83:65:6a:0b:aa:74: 7a:53:af:c2:7d:98:f1:85:d8:1e:ad:6b:e4:05:37: 81:d8:92:cb:c9:7c:f1:cf:1a:27:08:93:2c:a4:36: ed:c5:35:53:5b:a5:aa:fe:f4:0a:48:dc:a6:89:f0: 62:13:0d:c3:20:1c:93:6f:85:2d:ae:f5:82:cb:e8: 38:f2:39:9a:fc:33:8f:03:60:5d:ba:cb:5d:cf:b0: dc:ab:ea:da:19:fa:89:fc:ad:c5:bd:5b:64:a6:cf: ad:d6:f9:20:dc:e8:7c:96:e5:01:9d:b7:ba:43:ae: 61:94:ec:f0:45:80:e5:46:da:5f:f9:64:bf:84:3b: 47:bf:b7:66:50:94:23:2e:f5:41:4c:e2:4c:0e:6a: ef:f5:98:bd:6b:0e:3a:d6:aa:44:24:e0:0f:2a:c6: 06:14:a9:96:4f:64:cd:51:ec:cc:fb:64:79:8d:12: 03:7b:3d:64:b3:b0:f3:00:77:fe:a6:4a:0a:f7:27: e0:c4:85:01:86:31:36:f6:3f:c8:c3:b0:ca:84:78: 93:cf:26:d0:26:d8:cb:26:d9:e9:67:e0:e2:ec:bf: cf:de:d6:8b:11:bf:57:33:58:28:51:ce:fa:bf:10: c7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9A:5A:03:30:CB:BC:A2:66:1C:5C:DE:4F:F6:2E:26:95:48:4C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl X509v3 Authority Key Identifier: keyid:C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:67:e1:a6:31:25:ac:34:fd:2d:fe:48:50:b8:3b:d7:82:38: c1:0f:19:2f:92:02:3e:30:e7:34:6a:23:dc:c8:36:78:fc:46: 72:51:15:cc:66:46:17:49:e4:af:f5:a7:3b:22:93:f0:53:5f: 4b:c4:bb:df:e2:45:18:3d:90:ab:c2:42:1a:9a:48:de:40:80: 34:5b:b6:fb:6d:29:e7:7a:fe:0a:5f:aa:48:82:19:b4:fa:ed: 1d:c0:f7:29:29:63:c7:1d:00:61:c0:c6:e4:fd:65:ed:62:1d: 31:0b:1f:49:b3:15:5f:0f:13:d1:1b:04:5f:e7:cb:a5:10:ac: 36:c3:75:b5:45:07:e3:9f:53:b5:c1:5e:3d:84:d9:54:a7:ec: be:b0:56:66:b0:a7:1a:84:1c:11:59:69:d1:82:85:e4:ca:e8: 4d:88:68:16:6c:8f:fb:6b:f2:de:43:f4:9f:0e:0f:6d:ca:33: f4:e3:d9:c1:52:24:52:24:75:96:99:1a:83:de:ec:47:8e:ef: 65:7e:2d:b7:8c:89:a7:76:38:0d:4f:cd:32:24:f4:91:2b:a2: 67:56:81:eb:ac:4f:54:6d:34:1e:23:3e:fb:72:af:de:53:26: 1b:84:65:36:e5:b4:f8:66:28:bd:ea:d0:e0:86:71:9d:ce:58: 96:21:ce:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3qCZzxF2EJDrydywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlMDg5MzUtYmQ1OC00ZjgwLWFjZjktYTY2YTVkNzRm NTJlMB4XDTI2MDUyMjA0MDAwNFoXDTI2MDUyNTA0MDAwMFowLzEtMCsGA1UEAxMk MWU3ZjlhZWYtOTkzYS00Yzg0LWI2MjItODAyYzhhODVjMjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjEFmMURS2EFVDbhlwWjh/C4Z3a+L4+DZWoL qnR6U6/CfZjxhdgerWvkBTeB2JLLyXzxzxonCJMspDbtxTVTW6Wq/vQKSNymifBi Ew3DIByTb4UtrvWCy+g48jma/DOPA2Bdustdz7Dcq+raGfqJ/K3FvVtkps+t1vkg 3Oh8luUBnbe6Q65hlOzwRYDlRtpf+WS/hDtHv7dmUJQjLvVBTOJMDmrv9Zi9aw46 1qpEJOAPKsYGFKmWT2TNUezM+2R5jRIDez1ks7DzAHf+pkoK9yfgxIUBhjE29j/I w7DKhHiTzybQJtjLJtnpZ+Di7L/P3taLEb9XM1goUc76vxDHHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOiaWgMwy7yiZhxc3k/2LiaVSEz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84Y2Uw ODkzNS1iZDU4LTRmODAtYWNmOS1hNjZhNWQ3NGY1MmUvOGNlMDg5MzUtYmQ1OC00 ZjgwLWFjZjktYTY2YTVkNzRmNTJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGNlMDg5MzUtYmQ1OC00ZjgwLWFj ZjktYTY2YTVkNzRmNTJlLzhjZTA4OTM1LWJkNTgtNGY4MC1hY2Y5LWE2NmE1ZDc0 ZjUyZS5jcmwwHwYDVR0jBBgwFoAUyE1zflHTU+HxMZgortnLZcKziQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84Y2UwODkzNS1iZDU4LTRmODAtYWNmOS1hNjZh NWQ3NGY1MmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBZ+GmMSWsNP0t/khQuDvX gjjBDxkvkgI+MOc0aiPcyDZ4/EZyURXMZkYXSeSv9ac7IpPwU19LxLvf4kUYPZCr wkIamkjeQIA0W7b7bSnnev4KX6pIghm0+u0dwPcpKWPHHQBhwMbk/WXtYh0xCx9J sxVfDxPRGwRf58ulEKw2w3W1RQfjn1O1wV49hNlUp+y+sFZmsKcahBwRWWnRgoXk yuhNiGgWbI/7a/LeQ/SfDg9tyjP049nBUiRSJHWWmRqD3uxHju9lfi23jImndjgN T80yJPSRK6JnVoHrrE9UbTQeIz77cq/eUyYbhGU25bT4Zii96tDghnGdzliWIc65 -----END CERTIFICATE-----Generated at Fri May 22 18:30:13 2026 by rpki-client