$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft File: 9a3bcf43-7033-48e8-975e-f90913b5cbab.mft (raw, json) Hash identifier: VhdZ777D8J8Km8pw0ixzOmM2Mp7FmXpeQNupYwwTHC8= Subject key identifier: 91:2F:75:01:BE:D3:FF:68:E8:D1:29:50:65:49:A0:78:8C:7A:16:29 Authority key identifier: C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 Certificate issuer: /CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Certificate serial: 010D0C9F4328584DE956F36472A558604BBC0C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft Manifest number: 010D0C9F4328584A7A035488580EA9159B8FACC2 Signing time: Thu 21 May 2026 22:00:03 +0000 Manifest this update: Thu 21 May 2026 22:00:03 +0000 Manifest next update: Sat 23 May 2026 22:00:00 +0000 Files and hashes: 1: 9a3bcf43-7033-48e8-975e-f90913b5cbab.crl (hash: GwKTp0i0mQuLyolg9sz851xBjEzZEFx7rAc0f1rMEsI=) 2: f980f0c8-76ae-31c6-aafd-f441e9465a97.roa (hash: WANSZim+EpRyVYMOFDXcDLCeV9llZK9KSpKxplaDkE4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:56:f3:64:72:a5:58:60:4b:bc:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Validity Not Before: May 21 22:00:03 2026 GMT Not After : May 23 22:00:00 2026 GMT Subject: CN=aaa786f1-7312-4df2-adca-a1507b6581cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:63:d5:d6:a9:55:9b:dd:20:f5:6f:ba:6d: 07:88:83:b8:77:52:0e:73:7b:b0:b2:ad:e6:4e:0b: 61:60:c4:b8:7a:e8:9f:04:29:5f:40:18:a7:91:57: 10:f6:2b:63:9d:32:9c:82:3a:f3:17:ae:d5:94:e7: 7c:08:e3:bb:e3:e3:a6:82:c5:b7:33:1e:88:a9:b1: 6b:a0:3c:c7:e5:cf:93:74:20:9c:23:83:53:22:2a: f8:22:84:1e:69:9f:95:db:6b:51:6e:a3:07:0d:29: bb:06:fd:0c:65:27:80:a2:5a:bb:e5:71:ab:04:69: 42:11:57:2b:79:4d:fd:b3:07:d7:e3:b0:44:94:a7: 2d:0b:11:69:a9:e9:29:c4:4d:53:69:68:25:3c:da: 36:8d:3a:d4:df:6b:c9:fb:96:2f:7d:f4:b3:4c:08: 01:ad:41:8d:e3:ea:7f:c1:81:87:d0:e4:e2:b1:9d: d1:d7:4e:19:44:b3:0c:32:ea:17:e1:72:1c:2d:92: 63:2a:be:bd:38:f9:d5:1c:8f:44:46:73:ff:55:d3: 63:58:40:cd:62:da:13:51:00:ce:53:06:97:61:c2: e3:e1:af:b0:86:9e:c4:b2:c7:af:5c:c8:f9:39:e8: 74:39:14:0a:fb:de:96:49:ef:85:ac:c7:0b:56:5f: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2F:75:01:BE:D3:FF:68:E8:D1:29:50:65:49:A0:78:8C:7A:16:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl X509v3 Authority Key Identifier: keyid:C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e5:39:01:c1:55:9f:03:58:76:1b:6b:a6:79:7b:19:1d:62: b2:9a:ac:58:5a:fb:ee:a8:3b:f6:26:da:23:83:3b:78:e8:6a: ce:7d:64:cf:b3:f8:e8:80:51:a7:4d:63:31:fc:0d:e0:75:78: ff:e2:c3:d9:10:e8:07:8c:01:82:a6:04:ab:8e:f8:91:59:b2: 45:da:fd:91:5d:09:5b:30:9f:16:5e:ae:64:95:23:81:ed:33: 0f:d7:92:a7:99:bc:b5:8d:67:bf:8b:61:ad:2d:3e:88:5e:2d: 1f:22:5a:cc:35:f2:c2:9f:73:54:1f:70:e1:e5:c7:ba:ce:b4: a4:47:a8:89:c0:c7:8d:48:5e:47:d6:c5:d9:18:97:51:50:a3: a2:24:42:b7:d4:8c:80:08:b0:b2:4b:0c:61:ae:49:59:21:14: a5:f1:25:b1:e0:6d:1d:47:f4:11:5b:6d:ad:9c:8a:dc:36:c4: 29:b0:6b:41:e8:79:98:19:fc:18:bb:4a:f0:ca:85:32:de:99: b0:3d:c5:77:e9:97:6d:22:ed:e1:50:19:11:6f:cb:57:38:6e: f1:c5:92:2e:03:d6:d2:ac:eb:a1:98:2b:42:2f:02:d7:1f:57: 2c:92:d7:f8:c6:25:d4:e2:a6:b8:ef:af:20:86:8c:f6:c5:f9: f5:1c:e7:dc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3pVvNkcqVYYEu8DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWEzYmNmNDMtNzAzMy00OGU4LTk3NWUtZjkwOTEzYjVj YmFiMB4XDTI2MDUyMTIyMDAwM1oXDTI2MDUyMzIyMDAwMFowLzEtMCsGA1UEAxMk YWFhNzg2ZjEtNzMxMi00ZGYyLWFkY2EtYTE1MDdiNjU4MWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2pj1dapVZvdIPVvum0HiIO4d1IOc3uwsq3m TgthYMS4euifBClfQBinkVcQ9itjnTKcgjrzF67VlOd8COO74+OmgsW3Mx6IqbFr oDzH5c+TdCCcI4NTIir4IoQeaZ+V22tRbqMHDSm7Bv0MZSeAolq75XGrBGlCEVcr eU39swfX47BElKctCxFpqekpxE1TaWglPNo2jTrU32vJ+5YvffSzTAgBrUGN4+p/ wYGH0OTisZ3R104ZRLMMMuoX4XIcLZJjKr69OPnVHI9ERnP/VdNjWEDNYtoTUQDO UwaXYcLj4a+whp7EssevXMj5Oeh0ORQK+96WSe+FrMcLVl8klQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJEvdQG+0/9o6NEpUGVJoHiMehYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YTNi Y2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5MTNiNWNiYWIvOWEzYmNmNDMtNzAzMy00 OGU4LTk3NWUtZjkwOTEzYjVjYmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWEzYmNmNDMtNzAzMy00OGU4LTk3 NWUtZjkwOTEzYjVjYmFiLzlhM2JjZjQzLTcwMzMtNDhlOC05NzVlLWY5MDkxM2I1 Y2JhYi5jcmwwHwYDVR0jBBgwFoAUxogfkjZN55bUqUCDxWJWd+6ebyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YTNiY2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5 MTNiNWNiYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAq5TkBwVWfA1h2G2umeXsZ HWKymqxYWvvuqDv2Jtojgzt46GrOfWTPs/jogFGnTWMx/A3gdXj/4sPZEOgHjAGC pgSrjviRWbJF2v2RXQlbMJ8WXq5klSOB7TMP15Knmby1jWe/i2GtLT6IXi0fIlrM NfLCn3NUH3Dh5ce6zrSkR6iJwMeNSF5H1sXZGJdRUKOiJEK31IyACLCySwxhrklZ IRSl8SWx4G0dR/QRW22tnIrcNsQpsGtB6HmYGfwYu0rwyoUy3pmwPcV36ZdtIu3h UBkRb8tXOG7xxZIuA9bSrOuhmCtCLwLXH1csktf4xiXU4qa4768ghoz2xfn1HOfc -----END CERTIFICATE-----Generated at Fri May 22 16:56:35 2026 by rpki-client