$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft File: ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft (raw, json) Hash identifier: u/yKO9IuJC1y1JIPhMHPrGUf9mNeqeXdJ2RW7VvHzpc= Subject key identifier: 84:24:47:70:53:30:2F:1E:EF:13:93:4F:CF:5F:78:D0:61:8A:27:F9 Authority key identifier: 76:8F:EA:CF:C0:A2:28:93:9E:CD:8A:8A:3B:E3:9A:2D:0A:48:36:F0 Certificate issuer: /CN=ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e Certificate serial: 010D0C9F4328584EA6F217F472076928075F4400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft Manifest number: 010D0C9F432858479E50A350BF51B81F78124785 Signing time: Tue 28 Jul 2026 20:00:22 +0000 Manifest this update: Tue 28 Jul 2026 20:00:22 +0000 Manifest next update: Thu 30 Jul 2026 20:00:00 +0000 Files and hashes: 1: ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl (hash: AlaBDhvxpePj20Rt/Teztc1F8tua8W4NXPzq4bpbDfQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:f2:17:f4:72:07:69:28:07:5f:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e Validity Not Before: Jul 28 20:00:22 2026 GMT Not After : Jul 30 20:00:00 2026 GMT Subject: CN=25ef8535-469c-4d3e-ae45-f4a0a3990008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:00:ee:bb:3f:d8:e1:84:5a:d7:e8:64:5f:7e: 9b:84:02:7b:d5:06:39:8b:0b:20:91:d9:bf:24:1a: 38:0d:dc:90:fc:df:87:e3:bf:f5:42:3e:22:cc:29: 27:6b:98:1e:21:ff:a4:2e:34:9d:01:18:cf:c6:ed: 63:a9:a0:73:41:80:86:41:c6:96:1b:6d:e2:79:a0: 7a:e0:f0:cb:b0:f3:98:45:ca:77:63:87:7f:59:c6: 39:ef:e5:27:f3:21:4a:94:ba:dc:66:9a:63:b5:d0: 1f:9b:5d:8a:ea:d0:af:c4:d1:48:fb:75:62:45:6e: cb:f1:d4:ca:45:59:38:19:23:e5:5d:9e:2f:d0:f4: ed:32:88:8c:50:51:0a:ac:9e:fe:dd:3a:de:93:4f: 90:e4:f0:7b:d2:80:9a:26:97:a6:56:37:77:c7:66: 88:0e:d4:01:cd:60:c7:82:62:c2:a1:48:d8:a4:82: 6f:87:79:61:0d:32:53:18:ce:29:7a:f1:c0:38:b4: 41:41:1b:d3:da:c2:a0:e8:5b:4c:23:60:9e:4c:69: 5f:df:bd:96:f2:9f:78:e6:2f:a8:a2:8d:d6:4b:29: 2c:cd:ad:3f:24:82:34:a0:75:80:66:73:bc:7f:2a: 34:c5:71:81:9d:89:48:10:66:9b:92:45:0c:39:90: ff:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:24:47:70:53:30:2F:1E:EF:13:93:4F:CF:5F:78:D0:61:8A:27:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl X509v3 Authority Key Identifier: keyid:76:8F:EA:CF:C0:A2:28:93:9E:CD:8A:8A:3B:E3:9A:2D:0A:48:36:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ed:09:60:b5:d8:dc:0d:44:b9:ab:36:e1:c2:0d:c7:16:16: f2:4a:d7:78:77:57:f9:67:49:ee:a6:d0:3e:13:aa:4b:5b:3a: a4:f3:d4:33:3e:09:d6:89:76:0f:44:c6:53:6f:d5:74:09:7d: 90:c8:eb:20:a8:aa:f7:16:6b:3f:f5:06:98:e5:2a:aa:51:b9: f7:43:57:09:5f:91:a7:10:7d:06:70:a9:f6:92:ee:c1:cd:bb: 56:0e:a5:ec:0b:64:53:04:73:4c:88:df:13:a3:93:ed:77:0c: 44:2a:46:88:4d:97:ef:35:ac:e2:96:66:66:16:bb:f9:79:76: 0f:3a:e6:46:33:c1:5a:4c:87:3f:f1:c3:67:4b:aa:d9:ff:9b: 72:77:05:b2:52:1c:0d:94:f9:b3:aa:68:46:fa:a7:e3:ab:57: c9:e0:2a:49:a0:a4:6a:e1:d0:d2:41:ec:f9:d4:c5:58:b4:54: cf:f4:5e:06:52:f1:51:98:03:c3:22:e4:e0:0c:34:96:53:c5: b2:9d:2c:1d:8a:f8:8e:1c:35:59:8b:da:15:b7:4b:da:b0:e8: c7:22:85:47:47:e2:55:bf:22:a0:72:01:22:29:96:ba:97:55: 22:19:b5:1c:54:8b:34:84:3e:6b:f8:a8:32:af:1f:26:b7:95: c0:f8:d1:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6m8hf0cgdpKAdfRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNmMWJjZWEtOWJhZi00ZWVlLTk5NzktMjRiYzFmYmRm ZTFlMB4XDTI2MDcyODIwMDAyMloXDTI2MDczMDIwMDAwMFowLzEtMCsGA1UEAxMk MjVlZjg1MzUtNDY5Yy00ZDNlLWFlNDUtZjRhMGEzOTkwMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gDuuz/Y4YRa1+hkX36bhAJ71QY5iwsgkdm/ JBo4DdyQ/N+H47/1Qj4izCkna5geIf+kLjSdARjPxu1jqaBzQYCGQcaWG23ieaB6 4PDLsPOYRcp3Y4d/WcY57+Un8yFKlLrcZppjtdAfm12K6tCvxNFI+3ViRW7L8dTK RVk4GSPlXZ4v0PTtMoiMUFEKrJ7+3Trek0+Q5PB70oCaJpemVjd3x2aIDtQBzWDH gmLCoUjYpIJvh3lhDTJTGM4pevHAOLRBQRvT2sKg6FtMI2CeTGlf372W8p945i+o oo3WSyksza0/JII0oHWAZnO8fyo0xXGBnYlIEGabkkUMOZD/FQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIQkR3BTMC8e7xOTT89feNBhiif5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lY2Yx YmNlYS05YmFmLTRlZWUtOTk3OS0yNGJjMWZiZGZlMWUvZWNmMWJjZWEtOWJhZi00 ZWVlLTk5NzktMjRiYzFmYmRmZTFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWNmMWJjZWEtOWJhZi00ZWVlLTk5 NzktMjRiYzFmYmRmZTFlL2VjZjFiY2VhLTliYWYtNGVlZS05OTc5LTI0YmMxZmJk ZmUxZS5jcmwwHwYDVR0jBBgwFoAUdo/qz8CiKJOezYqKO+OaLQpINvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lY2YxYmNlYS05YmFmLTRlZWUtOTk3OS0yNGJj MWZiZGZlMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAL7QlgtdjcDUS5qzbhwg3H FhbyStd4d1f5Z0nuptA+E6pLWzqk89QzPgnWiXYPRMZTb9V0CX2QyOsgqKr3Fms/ 9QaY5SqqUbn3Q1cJX5GnEH0GcKn2ku7BzbtWDqXsC2RTBHNMiN8To5PtdwxEKkaI TZfvNazilmZmFrv5eXYPOuZGM8FaTIc/8cNnS6rZ/5tydwWyUhwNlPmzqmhG+qfj q1fJ4CpJoKRq4dDSQez51MVYtFTP9F4GUvFRmAPDIuTgDDSWU8WynSwdiviOHDVZ i9oVt0vasOjHIoVHR+JVvyKgcgEiKZa6l1UiGbUcVIs0hD5r+Kgyrx8mt5XA+NGT -----END CERTIFICATE-----Generated at Wed Jul 29 09:48:50 2026 by rpki-client