$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.mft File: debe33c0-a52c-4362-ae80-4f1fc15922a1.mft (raw, json) Hash identifier: mA5FzISFYBhq9KShvvHVUn5MEbq5uKEetNEckLDW/uk= Subject key identifier: 21:51:17:33:AF:03:C4:14:AD:CC:2B:45:3C:CB:17:6B:AD:54:C3:AB Authority key identifier: 02:82:39:17:60:8D:38:84:E7:DE:6C:0E:F1:9F:63:3E:50:CA:6C:55 Certificate issuer: /CN=debe33c0-a52c-4362-ae80-4f1fc15922a1 Certificate serial: 010D0C9F4328584DEB159F7F6BB47BB30C517B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.mft Manifest number: 010D0C9F4328584B52C0A09E7BD91B6DDACF2193 Signing time: Fri 22 May 2026 13:00:03 +0000 Manifest this update: Fri 22 May 2026 13:00:03 +0000 Manifest next update: Mon 25 May 2026 13:00:00 +0000 Files and hashes: 1: 03f19a76-74c9-3cd3-ae39-f6cf85a5679e.roa (hash: chVRLoQbo5hQHiF6Ds8noxvLR1pngKbMCVwNdpNzicw=) 2: debe33c0-a52c-4362-ae80-4f1fc15922a1.crl (hash: KcubqE184rlnHuEKz1TfSLrXvNh143cNDQB25hunNwE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:eb:15:9f:7f:6b:b4:7b:b3:0c:51:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=debe33c0-a52c-4362-ae80-4f1fc15922a1 Validity Not Before: May 22 13:00:03 2026 GMT Not After : May 25 13:00:00 2026 GMT Subject: CN=490bfc48-ff79-410f-b088-95c326519d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:1b:6e:f6:2c:cf:0b:7b:9d:fa:26:6f:cc: 94:0d:31:10:e0:80:6a:62:e0:b8:82:2a:7c:7f:bb: db:31:9f:c7:47:ac:51:46:38:2f:1a:17:eb:d1:8b: 7e:e5:5b:ea:09:dc:44:eb:b2:89:dc:48:cb:f8:36: ca:8d:a8:aa:24:7e:6d:da:1b:b0:7a:fc:5e:ff:31: 04:ce:86:6e:08:8d:f6:d1:0c:0d:44:ff:5f:25:a7: bd:30:7f:6d:f8:37:5b:1f:dc:d3:90:8a:13:e2:4d: 0e:cb:63:cb:f2:0e:2c:c4:ca:82:f2:fc:37:bd:64: 65:1b:6c:a0:9d:68:5c:f4:0f:e3:e8:ef:7f:c0:17: 9b:a5:21:a6:41:b9:54:3a:31:78:7f:2e:34:85:11: 1b:b9:bb:9a:eb:16:01:fa:b9:db:a1:35:47:87:28: f4:87:53:51:4c:db:ef:b7:21:cf:6c:64:71:ac:09: 95:d8:05:90:71:8f:23:f7:a7:75:40:8d:20:40:fb: 82:af:28:19:67:28:4f:c4:38:2a:40:f9:9f:fb:53: c3:98:b9:8a:17:a7:df:05:a9:46:b5:ee:70:ab:f9: c4:1b:14:1c:4c:44:95:1a:81:34:1a:6f:4d:66:e4: 48:9a:6d:44:2f:6a:c9:46:d0:2f:5e:3d:e6:1f:34: ad:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:51:17:33:AF:03:C4:14:AD:CC:2B:45:3C:CB:17:6B:AD:54:C3:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.crl X509v3 Authority Key Identifier: keyid:02:82:39:17:60:8D:38:84:E7:DE:6C:0E:F1:9F:63:3E:50:CA:6C:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:13:8e:0d:fa:38:10:be:76:3d:67:96:ac:3a:b5:eb:bd:5f: e5:f1:4e:f7:eb:f5:49:99:7e:0d:24:bb:03:e7:0b:f3:55:06: c5:57:06:96:b9:6a:d8:80:5d:66:32:38:40:41:af:8a:d3:e3: 3f:87:51:68:52:49:8b:eb:0b:6d:b4:b8:5b:a5:90:aa:5a:6f: 23:05:23:44:51:6b:b8:86:dd:51:9a:7d:30:de:38:be:9f:d3: 2d:ab:97:52:4a:7c:5b:ba:49:a2:81:f2:08:cd:a6:48:82:00: 9d:11:17:a2:9b:4b:1e:20:56:f8:76:eb:40:4d:1b:29:e5:35: 96:43:ce:83:99:e3:d0:15:f4:ae:72:b5:d5:ae:91:b6:94:4b: c2:76:58:7b:34:29:cf:63:a4:ea:a6:16:6b:06:bf:41:56:6f: e9:a8:59:4a:6a:8c:9a:84:a3:b2:4a:68:2d:c4:b5:a6:af:59: f1:fd:22:9c:5a:79:61:13:71:ca:56:00:9a:02:d6:cc:45:89: e5:37:36:2d:0a:67:8c:c7:ea:9a:67:eb:68:a4:2d:78:c2:b2: 46:be:f6:ae:b4:96:c6:de:6f:d5:d0:33:f5:3b:25:96:24:f9: fd:1e:66:26:64:44:7d:24:a3:e9:c9:7b:ef:55:09:0e:c7:1a: 69:f5:77:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3rFZ9/a7R7swxRewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGViZTMzYzAtYTUyYy00MzYyLWFlODAtNGYxZmMxNTky MmExMB4XDTI2MDUyMjEzMDAwM1oXDTI2MDUyNTEzMDAwMFowLzEtMCsGA1UEAxMk NDkwYmZjNDgtZmY3OS00MTBmLWIwODgtOTVjMzI2NTE5ZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa8bbvYszwt7nfomb8yUDTEQ4IBqYuC4gip8 f7vbMZ/HR6xRRjgvGhfr0Yt+5VvqCdxE67KJ3EjL+DbKjaiqJH5t2huwevxe/zEE zoZuCI320QwNRP9fJae9MH9t+DdbH9zTkIoT4k0Oy2PL8g4sxMqC8vw3vWRlG2yg nWhc9A/j6O9/wBebpSGmQblUOjF4fy40hREbubua6xYB+rnboTVHhyj0h1NRTNvv tyHPbGRxrAmV2AWQcY8j96d1QI0gQPuCrygZZyhPxDgqQPmf+1PDmLmKF6ffBalG te5wq/nEGxQcTESVGoE0Gm9NZuRImm1EL2rJRtAvXj3mHzStVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCFRFzOvA8QUrcwrRTzLF2utVMOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZWJl MzNjMC1hNTJjLTQzNjItYWU4MC00ZjFmYzE1OTIyYTEvZGViZTMzYzAtYTUyYy00 MzYyLWFlODAtNGYxZmMxNTkyMmExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGViZTMzYzAtYTUyYy00MzYyLWFl ODAtNGYxZmMxNTkyMmExL2RlYmUzM2MwLWE1MmMtNDM2Mi1hZTgwLTRmMWZjMTU5 MjJhMS5jcmwwHwYDVR0jBBgwFoAUAoI5F2CNOITn3mwO8Z9jPlDKbFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZWJlMzNjMC1hNTJjLTQzNjItYWU4MC00ZjFm YzE1OTIyYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOE44N+jgQvnY9Z5asOrXr vV/l8U736/VJmX4NJLsD5wvzVQbFVwaWuWrYgF1mMjhAQa+K0+M/h1FoUkmL6wtt tLhbpZCqWm8jBSNEUWu4ht1Rmn0w3ji+n9Mtq5dSSnxbukmigfIIzaZIggCdERei m0seIFb4dutATRsp5TWWQ86DmePQFfSucrXVrpG2lEvCdlh7NCnPY6TqphZrBr9B Vm/pqFlKaoyahKOySmgtxLWmr1nx/SKcWnlhE3HKVgCaAtbMRYnlNzYtCmeMx+qa Z+topC14wrJGvvautJbG3m/V0DP1OyWWJPn9HmYmZER9JKPpyXvvVQkOxxpp9XcX -----END CERTIFICATE-----Generated at Fri May 22 18:31:19 2026 by rpki-client