$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft File: b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft (raw, json) Hash identifier: +P1+S0hj2CN9GfcZgtV+ZT/e90oiyaJkCAfMCF/+/20= Subject key identifier: B1:51:6E:87:05:2E:C6:77:46:41:5A:9C:D0:BE:46:C2:85:4B:6B:6E Authority key identifier: 4E:9F:56:1F:F4:8D:A5:0C:9E:85:9D:4C:8C:1C:45:9B:2A:87:74:22 Certificate issuer: /CN=b98c0149-e3cd-44a4-bb8a-5e41d4823c0d Certificate serial: 010D0C9F4328584EA4BC4F293C07CAD7BC1121C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft Manifest number: 010D0C9F4328584073A8344B79DA88D5249B5E95 Signing time: Tue 28 Jul 2026 01:00:23 +0000 Manifest this update: Tue 28 Jul 2026 01:00:23 +0000 Manifest next update: Thu 30 Jul 2026 01:00:00 +0000 Files and hashes: 1: b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.crl (hash: zc2lmsUxPdl9Ev9O+K7yAnpYuWkygmZHRDQAB29D5+g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:bc:4f:29:3c:07:ca:d7:bc:11:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b98c0149-e3cd-44a4-bb8a-5e41d4823c0d Validity Not Before: Jul 28 01:00:23 2026 GMT Not After : Jul 30 01:00:00 2026 GMT Subject: CN=2a7a20e6-63ca-4fed-9a4d-eac81e33ea38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:82:c0:2d:ff:85:43:61:13:83:ab:e1:09:33: 5c:59:83:7a:32:1a:71:09:f3:39:27:e9:b6:e2:3e: 51:45:ae:d2:f9:4e:37:36:3c:cb:57:86:f9:8c:77: 02:26:f9:43:73:57:19:aa:39:9b:76:e1:a6:04:41: a0:b7:e1:66:61:1d:4f:e2:5f:f6:85:4d:8c:f1:ac: 98:76:0f:7f:af:cc:04:15:5f:a0:35:8e:55:5a:46: 63:c9:d0:54:82:ea:30:96:55:f0:60:05:26:d0:06: 89:ae:25:ae:e2:57:4a:84:20:66:06:71:bb:98:e8: 07:7e:cc:e4:54:bd:8f:ea:bf:fd:43:84:d1:ee:8b: 3b:ea:6b:b6:0e:8f:bf:8f:0b:da:04:f0:2a:40:fd: af:8b:4c:9f:87:5b:05:ba:18:d2:0d:33:b6:aa:68: 0c:fa:ec:f9:f0:0c:39:82:15:51:4e:dc:18:d4:80: a6:fa:f6:9d:4c:77:63:87:f1:ed:eb:9c:e1:f9:b2: 4d:ce:d5:59:a1:4a:4e:18:03:f2:44:5d:02:76:bf: 2f:a7:6a:0a:23:c5:8d:be:dc:51:f2:5a:1c:85:8e: 04:a1:27:d1:79:0c:37:92:9c:0b:ba:c9:01:8e:54: 73:9a:51:34:27:77:27:52:b4:56:0b:f4:9b:ec:d6: 03:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:51:6E:87:05:2E:C6:77:46:41:5A:9C:D0:BE:46:C2:85:4B:6B:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.crl X509v3 Authority Key Identifier: keyid:4E:9F:56:1F:F4:8D:A5:0C:9E:85:9D:4C:8C:1C:45:9B:2A:87:74:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:45:aa:41:ec:a4:54:52:ea:de:3a:84:7e:e2:65:6f:f9:6a: bf:3a:0b:a1:c5:5e:6e:cd:0c:e5:34:1b:1a:22:1e:c7:39:f9: 73:1e:90:fa:c3:d0:82:7b:38:ed:02:87:df:03:51:7c:24:ff: 44:95:d6:f0:c6:1d:d1:3e:c1:9c:f2:5b:73:30:e0:42:8f:01: 2d:29:4c:57:c5:83:01:c5:ad:03:e9:11:c9:11:f3:52:36:22: f4:8e:e6:c8:7c:0b:23:41:fc:cd:3a:1f:c3:c5:33:f2:c6:bd: 41:c5:a0:61:2e:a7:72:82:00:ba:12:c8:5f:c5:5b:9e:12:a8: 99:99:e9:4a:21:38:c2:d2:39:d6:24:78:6e:f5:c0:c6:9e:b9: 92:62:79:2b:94:26:fa:51:f6:d7:c2:8c:a5:30:68:4d:5b:84: 25:0a:47:1c:f2:b5:76:85:4f:a1:20:84:df:44:8c:64:7e:4d: a9:91:cf:5c:7d:08:7e:8d:bc:de:02:11:48:9d:0f:a0:25:e2: fc:3e:cf:e0:60:82:eb:ff:52:58:c7:d8:d8:8d:61:c8:62:86: 83:d3:df:ab:c5:94:01:da:2e:d1:11:40:c6:1d:6f:e3:1e:75: 4e:81:82:0c:0a:32:aa:68:ac:b4:0b:4c:23:00:87:a2:3f:53: e7:aa:4a:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6kvE8pPAfK17wRIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4YzAxNDktZTNjZC00NGE0LWJiOGEtNWU0MWQ0ODIz YzBkMB4XDTI2MDcyODAxMDAyM1oXDTI2MDczMDAxMDAwMFowLzEtMCsGA1UEAxMk MmE3YTIwZTYtNjNjYS00ZmVkLTlhNGQtZWFjODFlMzNlYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4LALf+FQ2ETg6vhCTNcWYN6MhpxCfM5J+m2 4j5RRa7S+U43NjzLV4b5jHcCJvlDc1cZqjmbduGmBEGgt+FmYR1P4l/2hU2M8ayY dg9/r8wEFV+gNY5VWkZjydBUguowllXwYAUm0AaJriWu4ldKhCBmBnG7mOgHfszk VL2P6r/9Q4TR7os76mu2Do+/jwvaBPAqQP2vi0yfh1sFuhjSDTO2qmgM+uz58Aw5 ghVRTtwY1ICm+vadTHdjh/Ht65zh+bJNztVZoUpOGAPyRF0Cdr8vp2oKI8WNvtxR 8lochY4EoSfReQw3kpwLuskBjlRzmlE0J3cnUrRWC/Sb7NYDqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLFRbocFLsZ3RkFanNC+RsKFS2tuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iOThj MDE0OS1lM2NkLTQ0YTQtYmI4YS01ZTQxZDQ4MjNjMGQvYjk4YzAxNDktZTNjZC00 NGE0LWJiOGEtNWU0MWQ0ODIzYzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjk4YzAxNDktZTNjZC00NGE0LWJi OGEtNWU0MWQ0ODIzYzBkL2I5OGMwMTQ5LWUzY2QtNDRhNC1iYjhhLTVlNDFkNDgy M2MwZC5jcmwwHwYDVR0jBBgwFoAUTp9WH/SNpQyehZ1MjBxFmyqHdCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iOThjMDE0OS1lM2NkLTQ0YTQtYmI4YS01ZTQx ZDQ4MjNjMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8RapB7KRUUureOoR+4mVv +Wq/OguhxV5uzQzlNBsaIh7HOflzHpD6w9CCezjtAoffA1F8JP9Eldbwxh3RPsGc 8ltzMOBCjwEtKUxXxYMBxa0D6RHJEfNSNiL0jubIfAsjQfzNOh/DxTPyxr1BxaBh LqdyggC6EshfxVueEqiZmelKITjC0jnWJHhu9cDGnrmSYnkrlCb6UfbXwoylMGhN W4QlCkcc8rV2hU+hIITfRIxkfk2pkc9cfQh+jbzeAhFInQ+gJeL8Ps/gYILr/1JY x9jYjWHIYoaD09+rxZQB2i7REUDGHW/jHnVOgYIMCjKqaKy0C0wjAIeiP1PnqkoH -----END CERTIFICATE-----Generated at Tue Jul 28 18:25:45 2026 by rpki-client