$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft File: dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft (raw, json) Hash identifier: nWXVBqdpXo0LjGmyGlFDG/FA6k9xJ3BsbrYPAwCnA6g= Subject key identifier: 61:D7:93:A9:27:18:D8:B6:6D:F8:B1:35:0C:01:7C:D4:D3:0D:14:D3 Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC Certificate issuer: /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Certificate serial: 010D0C9F4328584EA39286CF58969829B6F5CF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft Manifest number: 010D0C9F43285842D168A689DC7162ABC892185F Signing time: Mon 27 Jul 2026 15:00:23 +0000 Manifest this update: Mon 27 Jul 2026 15:00:23 +0000 Manifest next update: Thu 30 Jul 2026 15:00:00 +0000 Files and hashes: 1: 10315c07-19e5-332a-9619-ac334b5ed2bc.roa (hash: AuhUOgGabome/58yxA0MLpge/7YGJYP8ZX2OEn59ujE=) 2: 33cbc354-d185-3748-a67e-8b940dc311d1.roa (hash: aN+2ukKEJDubWYYyp7+bQZoHwz8e/nKRft5sN8gZO18=) 3: b32af959-6588-30ef-ac6a-e1c8ea97071b.roa (hash: jl3mX6AEn3nmLGJ0xMiUpcR3BAoJeQ0xupK38EJDXYg=) 4: dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl (hash: H+s0rFiWzXHL+eofn8Eyf7jpbuig6YqS/8iCwKopjZ0=) 5: e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa (hash: JemPhsJW4PhDPKVDnArFP8lL16KZ6PUL7nb6KoRYMj8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a3:92:86:cf:58:96:98:29:b6:f5:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Validity Not Before: Jul 27 15:00:23 2026 GMT Not After : Jul 30 15:00:00 2026 GMT Subject: CN=8da8be1a-b0c5-475d-a198-523bcc95ac25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:8b:c2:bd:ee:65:38:b3:f4:a4:16:1c:8d: 57:dd:ab:42:ea:d1:cc:47:f8:f6:27:fa:9c:02:41: 44:a9:30:42:d3:62:a0:b0:74:52:1f:69:80:f2:9a: 91:77:77:c0:96:ed:9b:e7:83:6a:8c:f2:9f:23:13: 5e:f4:19:0e:eb:2c:38:a0:24:6a:62:47:42:73:a3: b9:96:a3:e3:27:98:47:2a:1b:8b:0a:84:83:d0:dc: 08:b4:f3:69:4a:5c:cc:08:86:22:3a:e0:7b:55:d0: d5:e4:24:44:68:7f:47:f5:ab:d8:dc:c8:ec:0d:e8: 4b:21:2d:ee:50:ff:8d:2e:96:01:11:b6:69:2b:d1: 43:62:2c:5e:d1:ed:01:50:b6:32:40:da:38:0c:6b: b6:6e:bc:a3:cd:00:c2:2e:df:bc:90:1d:84:79:b5: 95:2a:f4:3a:2c:a6:9a:ca:5c:de:6c:0b:d1:be:33: 34:9a:f6:c5:6a:41:33:e4:a3:28:da:ce:62:4d:a7: 19:94:5c:70:47:5e:fd:0a:56:67:a5:6c:18:e1:dd: 73:aa:d3:bb:53:f7:85:bf:8c:b9:9b:c1:36:ad:67: 8f:15:35:88:4b:5d:48:a2:07:6b:b5:ca:a3:c8:c1: e8:31:5c:12:00:2e:2a:d0:26:6c:6d:a4:f8:b5:c2: 3f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D7:93:A9:27:18:D8:B6:6D:F8:B1:35:0C:01:7C:D4:D3:0D:14:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl X509v3 Authority Key Identifier: keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:00:e3:16:e0:90:44:a8:7d:cd:3f:59:97:fe:9c:9d:33:fb: a7:58:a6:fd:98:c6:b2:c2:fc:7e:93:4e:13:0a:f9:be:e5:d6: 90:0f:66:14:63:cc:53:9d:55:6a:32:c9:ae:66:be:8d:14:da: 6b:40:47:3c:8b:78:3d:66:19:e9:1b:c8:ff:de:78:a7:24:36: d8:80:eb:b0:37:c7:a1:28:75:f8:2c:43:63:ec:2e:95:91:a6: 77:a8:0f:ab:79:3d:5b:6a:77:ca:c9:3f:67:25:04:3c:4f:1d: d6:ec:bb:e5:1e:d3:fa:27:29:32:31:15:8c:fc:c9:e0:2e:2f: c3:3c:63:67:9f:45:5f:54:c8:73:33:c7:1a:f2:5b:80:01:f6: 65:af:05:1a:ec:7c:15:b0:69:09:c8:a6:33:61:a8:9f:fd:a2: 99:1f:32:38:50:e8:e5:68:91:fd:93:10:21:9e:d3:de:1c:bf: b2:80:7e:10:fe:3e:0d:6a:ec:61:66:c3:8e:5a:2d:37:ac:1d: 29:4e:6c:d6:f7:e2:da:e4:21:f4:b3:e8:9e:79:7f:13:53:6f: d1:17:81:7e:a7:9c:6e:7e:84:08:a9:c8:48:09:0a:7e:af:e8: ae:06:bf:4e:c2:23:fa:8e:ec:da:ea:58:de:1d:7f:f8:15:49: 0c:a2:16:ae -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6jkobPWJaYKbb1z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj N2JlMB4XDTI2MDcyNzE1MDAyM1oXDTI2MDczMDE1MDAwMFowLzEtMCsGA1UEAxMk OGRhOGJlMWEtYjBjNS00NzVkLWExOTgtNTIzYmNjOTVhYzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqySLwr3uZTiz9KQWHI1X3atC6tHMR/j2J/qc AkFEqTBC02KgsHRSH2mA8pqRd3fAlu2b54NqjPKfIxNe9BkO6yw4oCRqYkdCc6O5 lqPjJ5hHKhuLCoSD0NwItPNpSlzMCIYiOuB7VdDV5CREaH9H9avY3MjsDehLIS3u UP+NLpYBEbZpK9FDYixe0e0BULYyQNo4DGu2bryjzQDCLt+8kB2EebWVKvQ6LKaa ylzebAvRvjM0mvbFakEz5KMo2s5iTacZlFxwR179ClZnpWwY4d1zqtO7U/eFv4y5 m8E2rWePFTWIS11IogdrtcqjyMHoMVwSAC4q0CZsbaT4tcI/1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGHXk6knGNi2bfixNQwBfNTTDRTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4 Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvZGQ2OGNiOGItMGQ5MS00 YTBlLTlmMDQtYTNjNzhlNTVjN2JlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1 YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3 OGU1NWM3YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1AOMW4JBEqH3NP1mX/pyd M/unWKb9mMaywvx+k04TCvm+5daQD2YUY8xTnVVqMsmuZr6NFNprQEc8i3g9Zhnp G8j/3ninJDbYgOuwN8ehKHX4LENj7C6VkaZ3qA+reT1banfKyT9nJQQ8Tx3W7Lvl HtP6JykyMRWM/MngLi/DPGNnn0VfVMhzM8ca8luAAfZlrwUa7HwVsGkJyKYzYaif /aKZHzI4UOjlaJH9kxAhntPeHL+ygH4Q/j4NauxhZsOOWi03rB0pTmzW9+La5CH0 s+ieeX8TU2/RF4F+p5xufoQIqchICQp+r+iuBr9OwiP6juza6ljeHX/4FUkMohau -----END CERTIFICATE-----Generated at Tue Jul 28 16:05:27 2026 by rpki-client