$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft File: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft (raw, json) Hash identifier: P1qJuoO6K98GakJWPi8RVPpuya0iB32p/KgmAt+xd7E= Subject key identifier: 38:87:E1:CB:C9:B9:D1:58:34:E0:59:69:47:89:95:71:45:AE:45:06 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584EA621A539FD28ED61E6D82900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft Manifest number: 010D0C9F4328584073A85689C6C67E2F0E4CA87F Signing time: Tue 28 Jul 2026 13:00:22 +0000 Manifest this update: Tue 28 Jul 2026 13:00:22 +0000 Manifest next update: Thu 30 Jul 2026 13:00:00 +0000 Files and hashes: 1: 0335608f-a9cd-3396-90f3-61164a83f73d.roa (hash: Qy+qXwRBcOlnobqOaRL8CE4SeAzPMMw4NIB/Ow9jAcg=) 2: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl (hash: KyOpKyxJTpI+Lkyc0rTaok4Hyb47sHYdGexZfz6QhVc=) 3: cd3cb7de-2625-3893-a323-d1bec7d259a0.roa (hash: xHyg420Pd563puNFl57cnWmJ/+KfpBJIyjKMtiX5hps=) 4: e4eb8e84-793c-33ec-9088-110eaf427f80.asa (hash: +o6RZmYcj+d1hPhhkfGOWXTtwFbzk7gVBTiccDrSdHY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:21:a5:39:fd:28:ed:61:e6:d8:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Jul 28 13:00:22 2026 GMT Not After : Jul 30 13:00:00 2026 GMT Subject: CN=c4d0d36a-afc7-42ab-8211-7628248005d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:34:1b:8d:b6:28:88:07:79:3d:d0:26:7a:af: 32:d7:f1:06:39:6a:97:d2:42:38:74:6f:42:d8:f9: 12:5b:a6:c5:a8:f4:e2:53:9f:c1:ab:e0:04:9c:78: 65:64:a3:52:76:98:9e:cb:22:91:29:e3:7c:ae:fb: 63:e0:bb:17:da:b3:a4:69:2a:1b:72:5e:ca:54:45: e3:4c:a3:0e:f1:42:82:f9:c3:f1:11:f1:65:46:56: 42:01:9e:42:ed:33:0b:5e:ec:90:5c:db:49:50:1b: b1:3b:e2:85:8c:1e:81:35:ed:bc:13:7d:ff:57:ef: 59:de:d6:4f:50:e5:a6:f3:f3:d5:ca:f2:7c:6f:13: 46:a6:ab:5e:6e:09:69:6f:d0:b0:77:26:e4:b9:fa: 69:28:74:a1:a6:c3:7f:56:cf:94:34:59:af:a7:95: cd:ff:b8:da:7c:09:92:52:b1:6f:2f:3d:cc:44:a7: 05:b6:f2:c1:05:09:a4:ff:d0:04:0c:dc:f9:21:4d: e3:ee:4a:6c:24:24:30:98:44:d0:3d:1c:1b:00:a9: d3:ae:13:ff:4c:d6:e0:9f:41:81:d9:de:50:04:fa: c1:54:1b:0c:c8:e6:c0:9d:4d:52:f2:9d:3b:93:0a: 7e:ea:4f:4b:75:7f:eb:60:94:7e:a0:f0:f8:f3:4e: e5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:87:E1:CB:C9:B9:D1:58:34:E0:59:69:47:89:95:71:45:AE:45:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e5:ba:6f:62:18:fb:e7:55:8f:18:b7:b4:5c:be:f4:5c:10: fc:3d:cc:23:18:a6:ce:07:c0:c4:18:8a:46:59:da:2e:1f:7e: 51:f1:88:e8:50:87:f1:bc:df:2f:21:8b:fd:04:a8:0e:c9:07: 19:8b:19:cc:47:2a:54:4d:2a:c3:cc:8c:98:a1:af:ec:46:cb: 6d:59:33:af:17:c0:8c:46:79:a6:37:1a:bc:b8:18:9e:a6:b3: f6:ec:60:1c:75:32:5c:d2:77:e8:47:89:f0:c0:cf:88:34:99: 5e:fd:a7:3c:0d:8a:02:7d:86:09:32:b7:e7:c9:e3:7e:f0:eb: 4f:a3:3a:29:0d:a9:45:10:b9:71:68:7c:92:f9:11:52:36:28: 2e:0e:eb:11:43:cb:91:ae:28:ef:4a:36:c3:55:05:c9:4f:9d: 90:e1:22:10:2b:fc:30:07:a5:0d:59:3f:22:af:cc:0c:a1:7f: c3:69:01:c3:cf:db:e3:08:e7:d1:de:43:4e:46:78:18:c8:48: 01:c8:af:2a:96:f8:9a:57:aa:f5:6d:13:90:3a:38:16:a8:f8: d0:f5:85:7a:df:03:25:d8:f0:59:90:53:b2:29:02:72:bc:5c: 00:0b:52:d2:ec:10:1c:37:a0:c7:5a:b6:5f:9a:bb:3b:86:75: e1:9f:e1:d5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6mIaU5/SjtYebYKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI2MDcyODEzMDAyMloXDTI2MDczMDEzMDAwMFowLzEtMCsGA1UEAxMk YzRkMGQzNmEtYWZjNy00MmFiLTgyMTEtNzYyODI0ODAwNWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzQbjbYoiAd5PdAmeq8y1/EGOWqX0kI4dG9C 2PkSW6bFqPTiU5/Bq+AEnHhlZKNSdpieyyKRKeN8rvtj4LsX2rOkaSobcl7KVEXj TKMO8UKC+cPxEfFlRlZCAZ5C7TMLXuyQXNtJUBuxO+KFjB6BNe28E33/V+9Z3tZP UOWm8/PVyvJ8bxNGpqtebglpb9CwdybkufppKHShpsN/Vs+UNFmvp5XN/7jafAmS UrFvLz3MRKcFtvLBBQmk/9AEDNz5IU3j7kpsJCQwmETQPRwbAKnTrhP/TNbgn0GB 2d5QBPrBVBsMyObAnU1S8p07kwp+6k9LdX/rYJR+oPD4807lnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDiH4cvJudFYNOBZaUeJlXFFrkUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMmExZTk3MzQtMGE3Zi00 OGU2LTg3ZDMtY2E3ZDgzN2Y0ZTUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBu5bpvYhj751WPGLe0XL70 XBD8PcwjGKbOB8DEGIpGWdouH35R8YjoUIfxvN8vIYv9BKgOyQcZixnMRypUTSrD zIyYoa/sRsttWTOvF8CMRnmmNxq8uBieprP27GAcdTJc0nfoR4nwwM+INJle/ac8 DYoCfYYJMrfnyeN+8OtPozopDalFELlxaHyS+RFSNiguDusRQ8uRrijvSjbDVQXJ T52Q4SIQK/wwB6UNWT8ir8wMoX/DaQHDz9vjCOfR3kNORngYyEgByK8qlviaV6r1 bROQOjgWqPjQ9YV63wMl2PBZkFOyKQJyvFwAC1LS7BAcN6DHWrZfmrs7hnXhn+HV -----END CERTIFICATE-----Generated at Tue Jul 28 20:38:55 2026 by rpki-client