$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft File: 2149afff-d907-4d42-a1e9-e162fad34f0d.mft (raw, json) Hash identifier: KFXapimgfO9mXIoUyYN7dIennhPG05XNV8K1xc41LiA= Subject key identifier: DA:2B:BB:D8:3B:5E:5C:08:67:49:0D:76:C9:8A:24:D8:B9:CD:93:6F Authority key identifier: 2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 Certificate issuer: /CN=2149afff-d907-4d42-a1e9-e162fad34f0d Certificate serial: 010D0C9F4328584EA67B05EB8477E73E66393E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft Manifest number: 010D0C9F432858449B57AC092D104FF3C5F044D9 Signing time: Tue 28 Jul 2026 16:00:22 +0000 Manifest this update: Tue 28 Jul 2026 16:00:22 +0000 Manifest next update: Thu 30 Jul 2026 16:00:00 +0000 Files and hashes: 1: 2149afff-d907-4d42-a1e9-e162fad34f0d.crl (hash: FwRTiWMe35uPObVqeIyCKQinbj86Dp+Im4g5FYeJ5xQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:7b:05:eb:84:77:e7:3e:66:39:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2149afff-d907-4d42-a1e9-e162fad34f0d Validity Not Before: Jul 28 16:00:22 2026 GMT Not After : Jul 30 16:00:00 2026 GMT Subject: CN=ebfbf28b-5148-4789-8a67-d95c7d45367a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:27:9f:4f:d9:48:61:ea:1a:20:f9:a5:80:85: a8:4e:bb:c5:90:ef:df:52:a2:91:56:ce:ea:5d:07: f9:5d:3c:0d:8e:a3:f8:94:b8:4e:9a:f4:39:22:21: e0:1f:ff:42:3d:7f:f1:cd:87:15:b9:72:54:6e:da: d7:7a:4d:00:d3:64:9f:2c:09:ae:d0:06:74:6e:8c: f3:dc:f5:15:1f:29:97:ae:2f:42:1d:05:26:4b:01: 9c:e8:02:aa:81:8f:3b:b7:4f:a0:d2:93:fa:2a:ad: df:f7:07:16:fb:5f:03:c6:44:c3:54:23:2f:30:a1: 3e:be:f7:c3:c1:6b:04:73:c5:08:52:97:9c:01:df: d3:c7:85:8a:c3:19:6d:8b:6c:05:2d:c6:f0:df:e8: bd:a1:9b:15:7d:94:ca:2b:f9:3b:89:9d:83:ba:7f: c2:09:cb:12:89:a4:65:1e:30:61:86:99:b3:11:69: b4:85:3f:74:a1:46:5b:63:cd:53:0f:da:33:d4:7c: 8f:73:7d:fe:75:c5:18:6f:97:b3:31:9b:c5:d6:bb: 58:7c:37:06:a9:d1:c3:e3:25:0c:9b:75:e7:5c:1f: 07:1c:36:1f:2e:50:58:32:8d:ef:e7:87:29:c9:76: 91:66:fd:66:08:8a:f7:4e:f1:b0:89:c6:35:af:65: 71:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2B:BB:D8:3B:5E:5C:08:67:49:0D:76:C9:8A:24:D8:B9:CD:93:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl X509v3 Authority Key Identifier: keyid:2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f5:bc:2b:46:98:f6:bc:1a:80:d2:7e:ff:16:b5:81:d3:95: c1:26:7a:9d:99:c0:f5:56:c4:a2:13:6b:9a:95:cf:ea:19:3c: 48:41:a6:a8:27:3e:28:27:a0:ab:11:a4:f6:b1:86:cf:7a:6f: 60:46:78:4f:ff:06:09:6f:41:ea:71:a6:da:e4:fd:38:16:c5: 4e:27:2b:3c:97:de:2d:9e:ac:e1:31:02:32:ce:f1:f7:58:f7: 17:72:bb:88:36:9b:0d:d5:d8:68:3c:6d:c1:f7:5c:08:05:82: 09:6f:0d:4e:9c:66:0c:14:af:63:bf:0a:00:b5:d1:20:b1:02: 78:e9:de:1d:48:51:08:28:38:a4:66:e4:91:9f:d6:ab:4b:7e: d8:38:d2:7e:2e:88:45:90:3a:99:48:5e:dd:4d:85:5f:4f:25: 28:48:43:db:5f:96:b3:21:44:ed:13:fb:b1:9c:72:bf:31:d3: 9b:c6:67:0f:c4:1d:7e:79:20:13:c9:18:a2:32:24:78:62:7d: 40:a7:fb:75:cc:10:fa:05:c0:39:38:c3:23:f8:2f:86:6f:55: 52:b9:ad:76:7d:24:06:ee:98:1d:71:68:58:28:29:74:90:67: f8:3c:69:6d:62:d1:89:16:65:08:02:2c:82:b8:cb:a0:d5:bf: dd:b0:24:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6mewXrhHfnPmY5PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0OWFmZmYtZDkwNy00ZDQyLWExZTktZTE2MmZhZDM0 ZjBkMB4XDTI2MDcyODE2MDAyMloXDTI2MDczMDE2MDAwMFowLzEtMCsGA1UEAxMk ZWJmYmYyOGItNTE0OC00Nzg5LThhNjctZDk1YzdkNDUzNjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyefT9lIYeoaIPmlgIWoTrvFkO/fUqKRVs7q XQf5XTwNjqP4lLhOmvQ5IiHgH/9CPX/xzYcVuXJUbtrXek0A02SfLAmu0AZ0bozz 3PUVHymXri9CHQUmSwGc6AKqgY87t0+g0pP6Kq3f9wcW+18DxkTDVCMvMKE+vvfD wWsEc8UIUpecAd/Tx4WKwxlti2wFLcbw3+i9oZsVfZTKK/k7iZ2Dun/CCcsSiaRl HjBhhpmzEWm0hT90oUZbY81TD9oz1HyPc33+dcUYb5ezMZvF1rtYfDcGqdHD4yUM m3XnXB8HHDYfLlBYMo3v54cpyXaRZv1mCIr3TvGwicY1r2VxzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNoru9g7XlwIZ0kNdsmKJNi5zZNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5 YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYyZmFkMzRmMGQvMjE0OWFmZmYtZDkwNy00 ZDQyLWExZTktZTE2MmZhZDM0ZjBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjE0OWFmZmYtZDkwNy00ZDQyLWEx ZTktZTE2MmZhZDM0ZjBkLzIxNDlhZmZmLWQ5MDctNGQ0Mi1hMWU5LWUxNjJmYWQz NGYwZC5jcmwwHwYDVR0jBBgwFoAUL1GdNS50NL4xJ5wiscUz17gfbkcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYy ZmFkMzRmMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB99bwrRpj2vBqA0n7/FrWB 05XBJnqdmcD1VsSiE2ualc/qGTxIQaaoJz4oJ6CrEaT2sYbPem9gRnhP/wYJb0Hq caba5P04FsVOJys8l94tnqzhMQIyzvH3WPcXcruINpsN1dhoPG3B91wIBYIJbw1O nGYMFK9jvwoAtdEgsQJ46d4dSFEIKDikZuSRn9arS37YONJ+LohFkDqZSF7dTYVf TyUoSEPbX5azIUTtE/uxnHK/MdObxmcPxB1+eSATyRiiMiR4Yn1Ap/t1zBD6BcA5 OMMj+C+Gb1VSua12fSQG7pgdcWhYKCl0kGf4PGltYtGJFmUIAiyCuMug1b/dsCS1 -----END CERTIFICATE-----Generated at Tue Jul 28 19:29:02 2026 by rpki-client