$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft File: 0af21de0-2cae-45f7-b42c-9598c4271ef0.mft (raw, json) Hash identifier: bwIG6m3coeke4Zpq0jrIz0XN9PkBvf8a4VX7e2qch78= Subject key identifier: 52:17:C6:40:E8:CF:57:C9:F9:84:5F:88:02:69:BE:DF:E3:A1:36:4F Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584E26C2382804F666DF5EA74400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft Manifest number: 010D0C9F4328584200D9C72B5C6113CC8D160935 Signing time: Fri 12 Jun 2026 22:00:23 +0000 Manifest this update: Fri 12 Jun 2026 22:00:23 +0000 Manifest next update: Mon 15 Jun 2026 22:00:00 +0000 Files and hashes: 1: 0af21de0-2cae-45f7-b42c-9598c4271ef0.crl (hash: P9Lkt6qSEUqeveJCBX2fBmjMyMN/0dayQdHBIMXWdGU=) 2: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (hash: I/8Xm7aNYWAd29Hnzu89UQ/naRrrIhS5NsXhii18aQk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:26:c2:38:28:04:f6:66:df:5e:a7:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Jun 12 22:00:23 2026 GMT Not After : Jun 15 22:00:00 2026 GMT Subject: CN=2663f9f3-e72e-4468-9d6c-6416d101bf78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1c:b4:ca:04:da:ed:ce:05:b5:0e:4e:28:0e: c9:3e:5b:00:91:7c:0a:af:f9:fc:7e:93:76:54:6f: 39:2c:dd:51:2e:0f:52:7d:85:77:d0:c6:3a:95:f0: 3a:36:74:7b:d8:63:55:a3:64:1c:b6:49:f4:80:f0: 6b:d9:8e:ca:af:a0:ea:65:71:e1:df:e3:7e:4f:d3: f1:eb:ac:cb:41:0f:ba:67:f5:c0:c3:51:70:a9:74: fd:1b:6b:6f:84:26:fb:80:c4:a2:cf:22:9c:57:2f: 71:86:90:bb:90:f0:e9:c2:d7:e2:73:e0:30:c5:9c: 5f:27:b2:31:0c:67:91:89:d6:a5:8a:4c:78:c2:58: 39:ae:2c:7b:4b:89:ce:22:09:3f:6b:fb:69:f2:44: 78:ae:a9:8a:f0:19:2c:09:04:b6:1b:8e:d0:f2:ba: 6d:bb:c4:eb:e5:ed:dd:58:3a:43:44:12:03:b4:28: d4:27:4c:93:5c:44:4a:2b:fd:0f:cc:fc:f7:3d:ad: 1a:c1:2c:df:e2:43:6f:8b:a8:20:72:46:dc:6d:27: 33:ec:95:50:c3:e6:bc:d8:de:f0:bb:76:33:90:c0: 3b:c4:0e:4e:56:e8:31:1d:ed:98:fc:d6:e5:04:fc: 5e:19:ff:2f:f8:4f:04:64:37:5f:42:1c:72:06:c5: 1d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:17:C6:40:E8:CF:57:C9:F9:84:5F:88:02:69:BE:DF:E3:A1:36:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:63:4a:d0:1c:0f:37:31:51:5a:d4:a9:b4:69:60:28:bb:3b: de:b7:e9:1e:bf:60:e3:1f:e4:df:39:e4:d2:3e:a2:e9:36:7d: b8:ba:41:c7:43:ad:9e:3e:75:d7:04:f4:62:28:d1:a5:a6:40: 79:c3:78:55:77:cc:12:6b:88:f2:0d:bc:a9:04:bc:30:ad:78: 8e:87:07:59:55:d1:91:b1:24:33:32:4f:c3:88:4d:0c:76:c2: e8:b6:43:2c:70:91:58:1e:44:aa:39:f1:bc:72:12:31:cd:ab: 4c:cc:2a:9d:cb:75:ef:1b:65:3c:12:4d:89:9b:28:9b:12:bf: af:15:83:c5:65:d1:05:4d:6a:45:0c:6f:55:c1:7c:59:f1:18: cb:8c:45:ff:a5:99:c7:be:59:97:14:97:6d:dc:a1:12:63:2b: 63:51:0b:07:10:9f:3f:59:14:1b:55:d8:6b:30:18:87:f0:5a: f5:89:f1:20:8c:75:67:c1:00:94:32:96:d3:58:96:59:ec:a6: de:bb:5d:ac:58:73:72:30:5b:1e:95:dc:6d:44:f9:35:9b:d2: 58:29:71:84:42:28:e0:da:49:f0:8d:9f:b9:43:89:1d:e6:b1: 2c:00:43:5d:3d:f4:3a:14:95:78:c8:4c:5b:0b:41:c9:a1:a5: fa:1d:29:b2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE4mwjgoBPZm316nRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI2MDYxMjIyMDAyM1oXDTI2MDYxNTIyMDAwMFowLzEtMCsGA1UEAxMk MjY2M2Y5ZjMtZTcyZS00NDY4LTlkNmMtNjQxNmQxMDFiZjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBy0ygTa7c4FtQ5OKA7JPlsAkXwKr/n8fpN2 VG85LN1RLg9SfYV30MY6lfA6NnR72GNVo2Qctkn0gPBr2Y7Kr6DqZXHh3+N+T9Px 66zLQQ+6Z/XAw1FwqXT9G2tvhCb7gMSizyKcVy9xhpC7kPDpwtfic+AwxZxfJ7Ix DGeRidalikx4wlg5rix7S4nOIgk/a/tp8kR4rqmK8BksCQS2G47Q8rptu8Tr5e3d WDpDRBIDtCjUJ0yTXERKK/0PzPz3Pa0awSzf4kNvi6ggckbcbScz7JVQw+a82N7w u3YzkMA7xA5OVugxHe2Y/NblBPxeGf8v+E8EZDdfQhxyBsUd/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFIXxkDoz1fJ+YRfiAJpvt/joTZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvMGFmMjFkZTAtMmNhZS00 NWY3LWI0MmMtOTU5OGM0MjcxZWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPY0rQHA83MVFa1Km0aWAo uzvet+kev2DjH+TfOeTSPqLpNn24ukHHQ62ePnXXBPRiKNGlpkB5w3hVd8wSa4jy DbypBLwwrXiOhwdZVdGRsSQzMk/DiE0MdsLotkMscJFYHkSqOfG8chIxzatMzCqd y3XvG2U8Ek2JmyibEr+vFYPFZdEFTWpFDG9VwXxZ8RjLjEX/pZnHvlmXFJdt3KES YytjUQsHEJ8/WRQbVdhrMBiH8Fr1ifEgjHVnwQCUMpbTWJZZ7Kbeu12sWHNyMFse ldxtRPk1m9JYKXGEQijg2knwjZ+5Q4kd5rEsAENdPfQ6FJV4yExbC0HJoaX6HSmy -----END CERTIFICATE-----Generated at Sat Jun 13 07:26:14 2026 by rpki-client