$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: cWKRhVcCsUSnFqtW6O99uTkwhtt0JE1GJP1aEwYrVdc= Subject key identifier: D6:10:9D:09:60:5D:6D:F3:27:81:9B:82:2A:16:B7:A4:BB:2D:78:ED Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584EA480BC1C4C205401221D9A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70CBD5 Signing time: Mon 27 Jul 2026 23:00:22 +0000 Manifest this update: Mon 27 Jul 2026 23:00:22 +0000 Manifest next update: Wed 29 Jul 2026 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: 0xeo9DJ6J3gdInMEDv8ws8UL00fbmngOrk0YYv6QYcA=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: Lbo/s4ozU2MIVjUw7+zb5GDhztZ8BSa5J9+z6GTKp/Q=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: sAOycA6pKPExEdmunfwaNKqiWDdvGyxHHQT+ouffXII=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: IzUbjM3KRk9wfwZRh7/7pL1ru/Lw+jzV/lwonbVy5Cg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:80:bc:1c:4c:20:54:01:22:1d:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Jul 27 23:00:22 2026 GMT Not After : Jul 29 23:00:00 2026 GMT Subject: CN=5190b020-1540-4a47-afc4-ae5569dc0987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:17:54:97:80:61:bd:f7:fc:5e:05:6d:50: 72:e8:b6:e3:dc:31:24:33:42:c4:4b:30:0e:d8:43: e4:c6:de:db:40:ce:5f:9a:43:6d:77:fc:0b:b0:8f: 12:4c:ab:b1:27:a7:7a:01:9a:e1:95:73:9b:12:b6: dd:ca:d6:5a:5c:e3:b0:b8:d4:ce:47:71:ae:77:52: 62:8c:12:b9:73:19:5e:b6:f3:94:d7:c2:38:67:a0: 74:68:80:0b:32:97:34:ec:32:33:3b:0c:63:e8:db: 53:8e:11:55:fd:6a:9e:48:ab:9d:c7:82:bb:20:ee: 8f:4c:dd:d8:cf:25:11:20:0d:22:c3:ae:40:5e:54: b7:3b:c6:88:f6:15:9b:c8:4a:fe:c8:2c:0f:c3:83: 54:14:e6:a1:b2:eb:55:91:97:72:29:a8:44:9d:3d: b8:90:c3:25:df:85:8c:f2:46:2c:c2:f2:24:ab:aa: 99:c6:f0:a4:c6:e3:45:e2:37:49:e6:07:35:95:21: 20:6c:72:33:77:c2:e6:30:ed:05:a9:0a:f8:72:89: 5d:7e:0a:49:47:05:a3:ce:77:3f:54:fd:56:a8:08: 15:55:ff:d8:f7:21:ca:b8:4b:19:c0:23:16:04:b5: 68:f0:4e:51:ba:34:3d:b0:7a:77:36:6c:a2:28:e1: 40:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:10:9D:09:60:5D:6D:F3:27:81:9B:82:2A:16:B7:A4:BB:2D:78:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b6:a3:f2:66:e6:64:08:84:37:83:b2:ac:3b:fb:89:a5:95: 62:e0:8c:91:17:81:7f:d0:44:76:37:1b:54:1e:d4:87:e7:3e: 0d:d1:67:a6:6d:d2:04:79:04:12:a2:a4:5a:74:b3:49:db:eb: a7:53:c4:1f:28:6c:db:81:cf:bc:0e:48:7d:15:20:94:a0:c9: 48:50:54:a9:a4:f9:78:6f:3a:a4:3d:9d:c0:6c:b6:c1:91:b1: e2:22:38:7c:b3:0f:19:dc:76:2f:f2:2c:2b:ae:b0:96:0b:27: 67:12:aa:ca:85:c3:cb:4d:f0:9c:ad:01:b2:5a:72:0d:fd:4d: 1a:50:8b:1a:4e:9e:47:a8:78:06:07:ef:ca:86:be:c4:1b:4e: f8:01:f9:21:c8:59:ae:15:cb:11:1e:eb:4d:fc:fa:fe:d2:f4: 0a:26:99:7e:bb:c7:89:90:f6:6e:ca:3f:01:f2:f8:77:6d:83: 48:24:f6:d3:de:41:65:82:6d:ba:b7:6f:70:39:07:36:6c:81: 6c:81:ca:12:e4:4e:87:82:03:26:b2:aa:f1:97:2d:be:e6:d0: ad:de:9b:bf:49:5e:40:9d:32:9b:f7:2c:44:24:9a:6f:28:52: ad:aa:88:44:df:07:c6:01:5e:28:78:3c:cd:4b:60:31:df:d5: 95:5f:8a:cc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6kgLwcTCBUASIdmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI2MDcyNzIzMDAyMloXDTI2MDcyOTIzMDAwMFowLzEtMCsGA1UEAxMk NTE5MGIwMjAtMTU0MC00YTQ3LWFmYzQtYWU1NTY5ZGMwOTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkMXVJeAYb33/F4FbVBy6Lbj3DEkM0LESzAO 2EPkxt7bQM5fmkNtd/wLsI8STKuxJ6d6AZrhlXObErbdytZaXOOwuNTOR3Gud1Ji jBK5cxletvOU18I4Z6B0aIALMpc07DIzOwxj6NtTjhFV/WqeSKudx4K7IO6PTN3Y zyURIA0iw65AXlS3O8aI9hWbyEr+yCwPw4NUFOahsutVkZdyKahEnT24kMMl34WM 8kYswvIkq6qZxvCkxuNF4jdJ5gc1lSEgbHIzd8LmMO0FqQr4coldfgpJRwWjznc/ VP1WqAgVVf/Y9yHKuEsZwCMWBLVo8E5RujQ9sHp3NmyiKOFAhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNYQnQlgXW3zJ4GbgioWt6S7LXjtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4tqPyZuZkCIQ3g7KsO/uJ pZVi4IyRF4F/0ER2NxtUHtSH5z4N0WembdIEeQQSoqRadLNJ2+unU8QfKGzbgc+8 Dkh9FSCUoMlIUFSppPl4bzqkPZ3AbLbBkbHiIjh8sw8Z3HYv8iwrrrCWCydnEqrK hcPLTfCcrQGyWnIN/U0aUIsaTp5HqHgGB+/Khr7EG074AfkhyFmuFcsRHutN/Pr+ 0vQKJpl+u8eJkPZuyj8B8vh3bYNIJPbT3kFlgm26t29wOQc2bIFsgcoS5E6HggMm sqrxly2+5tCt3pu/SV5AnTKb9yxEJJpvKFKtqohE3wfGAV4oeDzNS2Ax39WVX4rM -----END CERTIFICATE-----Generated at Tue Jul 28 19:51:40 2026 by rpki-client