$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft File: aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft (raw, json) Hash identifier: yQNQiL+RXZbsNfhJF6xA5UOrE0+/7Z7D6s0smUg8Q9Q= Subject key identifier: 85:E6:4D:5A:6D:2A:A6:3F:16:71:D4:74:EE:6B:F0:F7:D1:24:E2:54 Authority key identifier: 33:67:08:05:95:F8:CB:22:BC:11:35:A5:B5:3E:0F:59:0F:DA:FD:70 Certificate issuer: /CN=aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2 Certificate serial: 010D0C9F4328584EA5AA8BDCD8B3FDBF25A98180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft Manifest number: 010D0C9F432858425E3306748870EF88DC1C9166 Signing time: Tue 28 Jul 2026 09:00:22 +0000 Manifest this update: Tue 28 Jul 2026 09:00:22 +0000 Manifest next update: Fri 31 Jul 2026 09:00:00 +0000 Files and hashes: 1: aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl (hash: d3jUEJVswBY8irM7ks/1b4FWeXAjgWlvp68MQs45bQs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:8b:dc:d8:b3:fd:bf:25:a9:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2 Validity Not Before: Jul 28 09:00:22 2026 GMT Not After : Jul 31 09:00:00 2026 GMT Subject: CN=7e115d6a-c9cb-46c5-b068-fecb7b3b5346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ab:41:f5:2c:03:74:b9:b2:99:e1:3c:cd:ae: e9:22:ad:0d:a0:0c:7f:41:67:e2:79:84:4e:99:2c: 5a:6a:f9:da:43:ec:3a:e4:54:33:ea:60:3c:fd:e4: d8:74:e8:e9:b1:b1:e2:f7:41:35:b7:b4:77:ef:37: f6:29:13:c7:11:e4:d0:d7:10:dd:b9:0d:e8:1e:6c: 47:0d:cb:39:14:bc:37:55:46:d3:66:81:b1:a3:ab: 61:67:1b:ac:88:0f:59:5a:92:0c:2e:b8:4d:b3:15: 2e:75:d4:bd:ad:73:3d:6f:2b:af:a8:ce:94:a8:7e: 1c:e8:b4:ef:5f:90:de:7a:fd:09:24:f8:8c:e5:75: 08:4e:1e:34:c1:37:83:ad:d4:0a:cd:1d:9b:77:a1: 3b:bd:49:96:13:92:e5:72:3e:8c:74:a9:b0:63:35: 4d:e0:68:0a:6c:a7:a7:86:cf:27:6e:06:fd:09:66: 7c:e7:2f:e6:ea:01:a7:35:a9:9e:8d:8e:e6:ce:ef: 36:06:d8:97:d6:b9:72:f9:30:a6:05:15:bc:f8:df: 21:1a:39:9f:43:9b:2d:60:7d:c9:2e:e9:76:c3:fc: c2:73:88:44:80:d2:c8:bd:a3:5d:f0:9e:01:6b:3c: a7:a3:b9:3f:ed:c3:80:38:29:4b:bc:c4:d1:39:75: b2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E6:4D:5A:6D:2A:A6:3F:16:71:D4:74:EE:6B:F0:F7:D1:24:E2:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl X509v3 Authority Key Identifier: keyid:33:67:08:05:95:F8:CB:22:BC:11:35:A5:B5:3E:0F:59:0F:DA:FD:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:14:25:13:16:2f:04:77:76:dd:cc:80:2e:46:e3:b7:e8:8b: f6:a4:bf:18:8a:36:64:e6:ae:b8:00:35:ff:ca:3f:40:aa:dd: d4:f3:4f:7d:6e:21:1d:be:53:bf:46:87:13:3e:47:c4:4c:3f: 60:18:e8:28:54:42:33:b2:e2:ae:ce:d1:39:81:4f:9b:13:4b: 1f:d9:a0:0d:87:4b:e7:38:5e:97:14:f5:7b:a6:36:07:54:ae: 05:24:2c:fe:3d:48:c8:75:13:ec:cc:83:bb:cd:6a:61:af:a6: 53:3b:ac:58:cb:80:5d:de:88:20:30:f9:7d:8f:b9:42:13:3c: 23:39:57:85:34:07:0a:c1:79:2c:83:05:2e:77:f2:05:39:8e: 92:aa:5f:ec:00:19:3f:ff:5a:ce:99:24:b8:5a:59:89:f3:ce: 2e:30:10:cd:dd:26:c3:7d:49:16:b1:dd:49:df:f4:1c:08:04: 65:1b:48:16:ea:ee:04:17:8d:d3:6f:76:e0:1f:2e:e5:5f:98: 8a:08:e6:87:62:0d:9b:ee:36:11:a7:f8:d6:09:47:ae:f9:8f: fb:7e:7d:cf:36:b7:43:2b:e5:4e:96:46:23:bc:8d:bf:ac:b2: 66:ea:d7:fd:70:d8:f8:34:01:bb:ca:4c:b5:84:01:62:4c:02: 4d:8e:fb:59 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6lqovc2LP9vyWpgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ODQ4YWQtNWVmOS00OGIxLTkxYzUtN2ZhZjY5ZTlm NmEyMB4XDTI2MDcyODA5MDAyMloXDTI2MDczMTA5MDAwMFowLzEtMCsGA1UEAxMk N2UxMTVkNmEtYzljYi00NmM1LWIwNjgtZmVjYjdiM2I1MzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qtB9SwDdLmymeE8za7pIq0NoAx/QWfieYRO mSxaavnaQ+w65FQz6mA8/eTYdOjpsbHi90E1t7R37zf2KRPHEeTQ1xDduQ3oHmxH Dcs5FLw3VUbTZoGxo6thZxusiA9ZWpIMLrhNsxUuddS9rXM9byuvqM6UqH4c6LTv X5Deev0JJPiM5XUITh40wTeDrdQKzR2bd6E7vUmWE5Llcj6MdKmwYzVN4GgKbKen hs8nbgb9CWZ85y/m6gGnNamejY7mzu82BtiX1rly+TCmBRW8+N8hGjmfQ5stYH3J Lul2w/zCc4hEgNLIvaNd8J4Bazyno7k/7cOAOClLvMTROXWy4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIXmTVptKqY/FnHUdO5r8PfRJOJUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYTk4 NDhhZC01ZWY5LTQ4YjEtOTFjNS03ZmFmNjllOWY2YTIvYWE5ODQ4YWQtNWVmOS00 OGIxLTkxYzUtN2ZhZjY5ZTlmNmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWE5ODQ4YWQtNWVmOS00OGIxLTkx YzUtN2ZhZjY5ZTlmNmEyL2FhOTg0OGFkLTVlZjktNDhiMS05MWM1LTdmYWY2OWU5 ZjZhMi5jcmwwHwYDVR0jBBgwFoAUM2cIBZX4yyK8ETWltT4PWQ/a/XAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYTk4NDhhZC01ZWY5LTQ4YjEtOTFjNS03ZmFm NjllOWY2YTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkFCUTFi8Ed3bdzIAuRuO3 6Iv2pL8YijZk5q64ADX/yj9Aqt3U8099biEdvlO/RocTPkfETD9gGOgoVEIzsuKu ztE5gU+bE0sf2aANh0vnOF6XFPV7pjYHVK4FJCz+PUjIdRPszIO7zWphr6ZTO6xY y4Bd3oggMPl9j7lCEzwjOVeFNAcKwXksgwUud/IFOY6Sql/sABk//1rOmSS4WlmJ 884uMBDN3SbDfUkWsd1J3/QcCARlG0gW6u4EF43Tb3bgHy7lX5iKCOaHYg2b7jYR p/jWCUeu+Y/7fn3PNrdDK+VOlkYjvI2/rLJm6tf9cNj4NAG7yky1hAFiTAJNjvtZ -----END CERTIFICATE-----Generated at Tue Jul 28 19:29:33 2026 by rpki-client