$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft File: 688165c5-c42e-4c66-a760-e605ebd8b2a3.mft (raw, json) Hash identifier: qS0rMjnxUNxF0KFnwSQZIcyuh6gjpVabWMfPl/zF3sA= Subject key identifier: D1:1C:99:A9:E2:E0:B1:30:DC:0C:3B:F0:D3:69:26:5F:6F:7D:8F:35 Authority key identifier: 08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68 Certificate issuer: /CN=688165c5-c42e-4c66-a760-e605ebd8b2a3 Certificate serial: 010D0C9F4328584EA72DA7A378F7FDAF0D65FE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft Manifest number: 010D0C9F43285843EC2A3DFC3E071D3540005D71 Signing time: Tue 28 Jul 2026 22:00:22 +0000 Manifest this update: Tue 28 Jul 2026 22:00:22 +0000 Manifest next update: Fri 31 Jul 2026 22:00:00 +0000 Files and hashes: 1: 4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa (hash: GQgvX3sv+InetTobzdRHRmoCo+ASXlMlhnrek6FLaEg=) 2: 688165c5-c42e-4c66-a760-e605ebd8b2a3.crl (hash: UI9N2TEP2Gt7NQpxH/3SSoox/yck5947Vm3D1tN10O8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:2d:a7:a3:78:f7:fd:af:0d:65:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688165c5-c42e-4c66-a760-e605ebd8b2a3 Validity Not Before: Jul 28 22:00:22 2026 GMT Not After : Jul 31 22:00:00 2026 GMT Subject: CN=c5747d9c-c41e-4a21-bb81-325e07be39d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ea:6f:53:f3:a9:a5:ae:16:34:9d:11:68:17: bb:c9:9e:9e:24:5f:3e:a9:00:87:2b:bc:30:8f:34: 6d:dc:6e:e5:25:f4:b3:3f:94:8f:90:ba:e4:47:5c: 30:d8:68:db:bd:20:ff:4d:27:dd:b8:23:b1:39:3a: b3:5b:fd:d3:6f:00:d6:69:be:a8:2a:b0:25:f9:2c: d1:61:6b:71:5f:17:3f:34:09:82:60:41:8c:42:16: d6:fb:b6:70:d3:4d:4c:cf:3c:ec:d2:fa:22:61:a2: 27:dd:d7:12:aa:40:cb:a0:0f:c5:60:33:43:c5:53: 93:95:0f:96:4b:ec:5c:3d:65:53:10:90:af:ed:9c: 9e:04:1f:a3:68:5a:0f:9e:40:db:b0:41:2d:46:a4: de:a1:b5:c5:82:9d:3e:a2:60:57:bc:54:71:69:17: bd:13:41:e6:0e:e8:5a:13:f8:07:fd:70:79:c1:73: 0c:0e:9b:f7:44:f2:de:ea:96:ec:7e:8f:b9:93:d9: 64:77:09:ea:d7:42:cf:91:30:e6:94:4a:cc:62:a6: 50:06:bb:7f:ea:9b:1c:4d:15:8b:37:c6:d8:c6:4b: bb:c3:dc:db:bc:54:c5:dd:28:39:68:3e:34:e7:b5: 3c:6f:5b:46:1c:40:4a:83:78:4f:80:58:02:4f:59: 07:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1C:99:A9:E2:E0:B1:30:DC:0C:3B:F0:D3:69:26:5F:6F:7D:8F:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.crl X509v3 Authority Key Identifier: keyid:08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ab:e1:f6:18:d9:a8:00:d9:f1:b8:3f:a7:51:e1:9b:fb:fb: bc:3f:f6:97:b0:91:48:a0:8d:2e:e6:e4:a9:33:83:33:88:ba: a4:21:88:18:1c:64:3e:66:f5:06:71:cf:46:70:d4:2e:cd:04: 9a:3f:15:c6:ef:8f:8f:36:1e:81:bf:95:48:fa:70:ae:2e:b4: 68:cb:26:92:35:e0:b0:f3:38:92:03:bd:4b:24:c0:58:bd:92: 88:ba:ca:5d:6a:71:61:d7:ce:77:45:07:54:68:33:6a:ef:1c: c6:92:80:f5:df:23:b0:d0:4d:94:37:61:cc:44:1c:fb:18:95: 26:69:96:4d:81:0e:79:09:3b:84:06:e6:88:70:10:dd:e0:a3: 3e:1f:7b:48:7e:b3:ff:41:60:f6:1c:a3:9e:4d:cf:25:55:eb: 40:5b:4d:b3:13:9c:28:b9:85:7c:bd:22:5d:79:9b:0c:72:38: c8:c2:c7:29:84:d6:1b:c3:66:53:a6:d1:8e:7f:d4:43:8d:27: 82:b2:94:d9:e8:7e:d6:2e:03:a1:f3:ab:90:c9:05:5d:07:5b: 7e:22:22:7a:61:a8:e7:96:9f:5b:f6:22:2f:a2:eb:9e:bf:a4: 26:aa:48:b2:f4:a3:2e:78:90:bc:1d:97:5b:25:ae:92:0d:53: 1d:8e:55:8f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6nLaejePf9rw1l/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4MTY1YzUtYzQyZS00YzY2LWE3NjAtZTYwNWViZDhi MmEzMB4XDTI2MDcyODIyMDAyMloXDTI2MDczMTIyMDAwMFowLzEtMCsGA1UEAxMk YzU3NDdkOWMtYzQxZS00YTIxLWJiODEtMzI1ZTA3YmUzOWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOpvU/Oppa4WNJ0RaBe7yZ6eJF8+qQCHK7ww jzRt3G7lJfSzP5SPkLrkR1ww2GjbvSD/TSfduCOxOTqzW/3TbwDWab6oKrAl+SzR YWtxXxc/NAmCYEGMQhbW+7Zw001Mzzzs0voiYaIn3dcSqkDLoA/FYDNDxVOTlQ+W S+xcPWVTEJCv7ZyeBB+jaFoPnkDbsEEtRqTeobXFgp0+omBXvFRxaRe9E0HmDuha E/gH/XB5wXMMDpv3RPLe6pbsfo+5k9lkdwnq10LPkTDmlErMYqZQBrt/6pscTRWL N8bYxku7w9zbvFTF3Sg5aD4057U8b1tGHEBKg3hPgFgCT1kHuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNEcmani4LEw3Aw78NNpJl9vfY81MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82ODgx NjVjNS1jNDJlLTRjNjYtYTc2MC1lNjA1ZWJkOGIyYTMvNjg4MTY1YzUtYzQyZS00 YzY2LWE3NjAtZTYwNWViZDhiMmEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjg4MTY1YzUtYzQyZS00YzY2LWE3 NjAtZTYwNWViZDhiMmEzLzY4ODE2NWM1LWM0MmUtNGM2Ni1hNzYwLWU2MDVlYmQ4 YjJhMy5jcmwwHwYDVR0jBBgwFoAUCFKxuE4ZQXgKoxCx1kEM56sit2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82ODgxNjVjNS1jNDJlLTRjNjYtYTc2MC1lNjA1 ZWJkOGIyYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMq+H2GNmoANnxuD+nUeGb +/u8P/aXsJFIoI0u5uSpM4MziLqkIYgYHGQ+ZvUGcc9GcNQuzQSaPxXG74+PNh6B v5VI+nCuLrRoyyaSNeCw8ziSA71LJMBYvZKIuspdanFh1853RQdUaDNq7xzGkoD1 3yOw0E2UN2HMRBz7GJUmaZZNgQ55CTuEBuaIcBDd4KM+H3tIfrP/QWD2HKOeTc8l VetAW02zE5wouYV8vSJdeZsMcjjIwscphNYbw2ZTptGOf9RDjSeCspTZ6H7WLgOh 86uQyQVdB1t+IiJ6Yajnlp9b9iIvouuev6Qmqkiy9KMueJC8HZdbJa6SDVMdjlWP -----END CERTIFICATE-----Generated at Wed Jul 29 23:26:00 2026 by rpki-client