$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft File: a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft (raw, json) Hash identifier: 8cZzH3Lf5E6olCJSo3XyD3dhE7Mek+vWF3PY/IJJJKw= Subject key identifier: A0:A5:60:3F:DF:A3:2A:99:B8:29:FB:20:A9:C7:E9:94:D0:BA:4B:1F Authority key identifier: 34:41:E4:5E:3F:ED:3C:C7:72:52:1E:31:2B:50:81:E6:B0:BD:67:59 Certificate issuer: /CN=a290c80a-d6fb-4b33-a574-d5eb1b510d00 Certificate serial: 010D0C9F4328584DE8FD9E56D20676C4D9E6A510 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft Manifest number: 010D0C9F4328584B66F92A46BDA7C1973DEC99A6 Signing time: Thu 21 May 2026 19:00:03 +0000 Manifest this update: Thu 21 May 2026 19:00:03 +0000 Manifest next update: Sun 24 May 2026 19:00:00 +0000 Files and hashes: 1: a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl (hash: giSn4QFfxaJOjVkBVZT2tUbuy5rVP6gICSgRkHmetsY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:fd:9e:56:d2:06:76:c4:d9:e6:a5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a290c80a-d6fb-4b33-a574-d5eb1b510d00 Validity Not Before: May 21 19:00:03 2026 GMT Not After : May 24 19:00:00 2026 GMT Subject: CN=dfbb426a-0081-4a46-bfd2-f2e1ed89b8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:84:77:fa:7c:2e:74:de:78:ba:ae:9c:04: 65:6b:c8:aa:88:9e:bc:23:8e:5b:09:82:bf:6c:32: a7:6c:3b:c8:ce:67:c7:97:62:3c:43:04:80:78:be: c8:16:af:23:77:93:83:46:37:90:04:7c:e1:6d:24: 8a:57:54:c7:68:88:25:07:d1:44:03:b3:78:eb:2d: 4a:11:e7:90:08:e9:9a:24:9a:c5:df:36:3c:ce:cb: c0:4d:fc:42:83:c3:e9:55:47:47:24:0a:d2:26:82: 9e:0a:4d:b7:c7:98:3e:d9:06:94:16:85:60:6e:01: f3:59:56:a5:9a:64:c9:8a:0a:2f:de:c0:35:58:90: 12:56:09:89:56:3d:58:62:67:56:51:03:3d:4e:eb: 54:2e:b8:b9:21:5e:bf:54:92:1f:76:b1:9d:50:68: b8:e9:bd:5e:08:26:82:a3:a1:12:ba:a4:a3:c8:1f: 67:a7:9b:a7:a5:de:08:81:1a:25:c7:c9:90:f3:05: 07:22:b6:f9:72:35:89:fd:3e:29:5e:3d:1d:d6:ef: 48:57:d4:3f:6d:27:a2:7c:93:e7:2d:b1:93:7e:53: e2:49:5a:d0:06:83:46:a5:a1:fa:5b:ec:60:b6:3b: 5a:5d:1d:b6:58:da:bc:ec:4c:b9:d2:22:24:1c:6d: 35:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A5:60:3F:DF:A3:2A:99:B8:29:FB:20:A9:C7:E9:94:D0:BA:4B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl X509v3 Authority Key Identifier: keyid:34:41:E4:5E:3F:ED:3C:C7:72:52:1E:31:2B:50:81:E6:B0:BD:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:fd:e1:df:6c:b3:ff:37:fa:e6:bb:a4:aa:15:37:25:7b:e1: ef:ff:e5:eb:3e:b0:2e:d8:94:2f:4f:1a:26:08:92:8a:06:19: e7:7e:82:c2:4a:c5:d6:85:82:b7:6a:ae:92:6f:f1:61:5f:cc: 5b:24:4a:dd:07:3c:fe:57:03:21:6a:b7:93:f3:e8:b2:54:76: 15:35:e9:76:8c:10:03:67:6f:8d:b7:06:42:3c:43:47:e8:f3: 12:0c:64:6a:f8:32:48:0a:99:40:97:aa:4f:88:13:f4:cd:0d: d0:4b:74:f1:b9:c5:e0:8e:6b:7f:58:81:bc:f9:fe:d6:38:29: 0d:27:73:e5:bb:08:f1:74:4b:76:cd:9f:ab:4f:05:b2:e9:0b: c0:fd:06:27:d9:42:7c:2c:2f:07:74:95:6a:9c:65:56:8b:43: 20:8d:e9:12:77:4e:5c:da:90:b4:5a:e7:c6:47:e8:be:ba:7b: fe:47:93:a0:ef:ee:d5:48:be:33:57:ca:1a:68:d6:a5:83:37: 30:a4:40:77:96:df:d3:b1:21:86:db:ed:87:b1:18:49:5e:8d: d8:15:7d:35:89:01:c8:5e:7f:7d:cd:cd:26:0b:03:3f:2b:5e: dc:b6:51:09:9f:b2:bf:fe:9c:c0:d3:3e:24:a0:99:42:9c:73: f3:00:72:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3o/Z5W0gZ2xNnmpRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5MGM4MGEtZDZmYi00YjMzLWE1NzQtZDVlYjFiNTEw ZDAwMB4XDTI2MDUyMTE5MDAwM1oXDTI2MDUyNDE5MDAwMFowLzEtMCsGA1UEAxMk ZGZiYjQyNmEtMDA4MS00YTQ2LWJmZDItZjJlMWVkODliOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusGEd/p8LnTeeLqunARla8iqiJ68I45bCYK/ bDKnbDvIzmfHl2I8QwSAeL7IFq8jd5ODRjeQBHzhbSSKV1THaIglB9FEA7N46y1K EeeQCOmaJJrF3zY8zsvATfxCg8PpVUdHJArSJoKeCk23x5g+2QaUFoVgbgHzWVal mmTJigov3sA1WJASVgmJVj1YYmdWUQM9TutULri5IV6/VJIfdrGdUGi46b1eCCaC o6ESuqSjyB9np5unpd4IgRolx8mQ8wUHIrb5cjWJ/T4pXj0d1u9IV9Q/bSeifJPn LbGTflPiSVrQBoNGpaH6W+xgtjtaXR22WNq87Ey50iIkHG01dQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKClYD/foyqZuCn7IKnH6ZTQuksfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMjkw YzgwYS1kNmZiLTRiMzMtYTU3NC1kNWViMWI1MTBkMDAvYTI5MGM4MGEtZDZmYi00 YjMzLWE1NzQtZDVlYjFiNTEwZDAwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTI5MGM4MGEtZDZmYi00YjMzLWE1 NzQtZDVlYjFiNTEwZDAwL2EyOTBjODBhLWQ2ZmItNGIzMy1hNTc0LWQ1ZWIxYjUx MGQwMC5jcmwwHwYDVR0jBBgwFoAUNEHkXj/tPMdyUh4xK1CB5rC9Z1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMjkwYzgwYS1kNmZiLTRiMzMtYTU3NC1kNWVi MWI1MTBkMDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAA/eHfbLP/N/rmu6SqFTcl e+Hv/+XrPrAu2JQvTxomCJKKBhnnfoLCSsXWhYK3aq6Sb/FhX8xbJErdBzz+VwMh areT8+iyVHYVNel2jBADZ2+NtwZCPENH6PMSDGRq+DJICplAl6pPiBP0zQ3QS3Tx ucXgjmt/WIG8+f7WOCkNJ3PluwjxdEt2zZ+rTwWy6QvA/QYn2UJ8LC8HdJVqnGVW i0MgjekSd05c2pC0WufGR+i+unv+R5Og7+7VSL4zV8oaaNalgzcwpEB3lt/TsSGG 2+2HsRhJXo3YFX01iQHIXn99zc0mCwM/K17ctlEJn7K//pzA0z4koJlCnHPzAHJI -----END CERTIFICATE-----Generated at Fri May 22 16:54:46 2026 by rpki-client