$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft File: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft (raw, json) Hash identifier: RyNheXDNhBes4t95zFyellaD6xLoLafBel6/Y006KFI= Subject key identifier: A2:AF:F8:B7:28:23:F2:54:68:52:6E:22:5C:F9:A2:DE:F0:6A:02:4A Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE Certificate issuer: /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Certificate serial: 010D0C9F4328584EA9636F1E91070E3DBC1E3800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft Manifest number: 010D0C9F43285843E05DB4B41D1D11863F6C3776 Signing time: Wed 29 Jul 2026 17:00:22 +0000 Manifest this update: Wed 29 Jul 2026 17:00:22 +0000 Manifest next update: Fri 31 Jul 2026 17:00:00 +0000 Files and hashes: 1: 4925d209-f003-3bb9-b12d-10cc44b06d40.roa (hash: Uju3VonhSnMedx8/XYf5d5TEeCNadNsSOQ30S3vtP7I=) 2: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl (hash: BDN01xfdGzgzGv2BURVD41k1IIj9sn0Hc6gvNVuOF+w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a9:63:6f:1e:91:07:0e:3d:bc:1e:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Validity Not Before: Jul 29 17:00:22 2026 GMT Not After : Jul 31 17:00:00 2026 GMT Subject: CN=658fd59c-9fec-4092-8f5c-9f82ebb63db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c2:20:7c:86:ad:aa:dc:bc:d1:1e:40:7b:e5: 24:79:a7:b8:7e:f8:60:ad:96:15:6d:f3:68:65:e7: b5:eb:f2:0b:24:d4:2e:d5:99:2e:43:54:e4:e3:46: c2:ee:7d:ee:b6:ac:4e:d9:41:a9:e1:8f:67:9b:9d: 8a:cf:31:37:a7:5c:47:a2:36:4c:a6:68:51:90:ad: 64:87:ea:28:33:45:d1:3a:0a:ed:47:08:ec:6d:f0: 02:7b:7f:12:67:3d:78:3e:a9:f2:10:d7:97:e3:ca: 7a:40:00:cf:a4:f7:5f:29:d1:a7:24:7e:54:c3:92: aa:46:5a:3d:e4:76:6d:8e:0f:05:62:b3:0d:df:24: a9:cb:22:9a:f6:ac:68:79:b8:38:31:f4:74:c3:e2: 04:d0:00:1f:e3:1e:34:9a:28:1a:4b:19:26:6c:a6: 4f:f5:be:6b:a3:ab:4c:61:13:c0:a5:03:28:52:5b: f4:0c:a0:61:d0:15:e9:7d:ce:91:02:6f:07:80:e8: b2:d6:76:e5:fa:f0:3c:00:aa:28:5a:62:b2:e9:6d: 96:54:52:f3:e5:ae:c3:d4:c8:b4:3f:7c:d8:06:a5: e6:1a:01:24:e0:87:b2:79:98:d4:fa:a2:f3:17:ca: 33:a3:bb:ca:2c:e3:4a:40:a4:5a:39:b1:fd:c8:ea: 14:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AF:F8:B7:28:23:F2:54:68:52:6E:22:5C:F9:A2:DE:F0:6A:02:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl X509v3 Authority Key Identifier: keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3a:7a:a2:e5:da:f3:f3:3c:e6:81:26:16:35:f9:c2:75:e2: be:91:81:0c:58:36:a6:00:a1:bc:a1:38:75:48:bf:e5:ba:66: 23:b5:98:11:38:0a:c8:d0:c5:7f:6e:70:c6:e3:f5:b4:27:a5: 9a:1d:7c:fc:21:21:17:38:0e:4a:c2:35:bb:b7:39:a9:c5:29: ff:bf:e9:ea:98:6a:43:a9:26:bc:03:14:56:98:e7:8a:3a:63: a8:7f:f4:54:2c:74:fd:f4:c7:34:63:f0:43:d7:27:46:64:97: 87:12:93:c4:db:72:2a:4d:b3:04:83:7c:19:53:e1:5c:1a:e3: e6:73:fb:f8:42:1b:b4:e3:a2:cc:93:5a:5c:c5:59:e7:55:84: d5:9f:91:76:f7:39:5a:8e:84:fe:15:ce:37:99:10:c6:b2:90: ea:d6:5a:3b:74:1a:28:ed:0e:f5:f2:c0:01:a8:84:1c:6e:52: c2:bc:ef:74:4b:1a:ee:7d:9a:8a:68:8d:12:ad:b2:55:83:73: f5:0a:22:5c:5e:5c:00:bd:df:03:37:00:b6:ce:eb:81:f5:b0: a9:75:fb:b8:d4:48:cf:bd:86:3a:d9:cc:a7:cf:6f:3f:23:ec: bb:6d:0a:cb:b2:e8:12:80:f9:83:a4:4f:c1:fc:1b:06:b5:98: fe:9c:36:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6pY28ekQcOPbweOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQwZmYyMjEtZjBjNC00YzU0LTk2ZDktNWYzZTBmMTZi OGUyMB4XDTI2MDcyOTE3MDAyMloXDTI2MDczMTE3MDAwMFowLzEtMCsGA1UEAxMk NjU4ZmQ1OWMtOWZlYy00MDkyLThmNWMtOWY4MmViYjYzZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08IgfIatqty80R5Ae+Ukeae4fvhgrZYVbfNo Zee16/ILJNQu1ZkuQ1Tk40bC7n3utqxO2UGp4Y9nm52KzzE3p1xHojZMpmhRkK1k h+ooM0XROgrtRwjsbfACe38SZz14PqnyENeX48p6QADPpPdfKdGnJH5Uw5KqRlo9 5HZtjg8FYrMN3ySpyyKa9qxoebg4MfR0w+IE0AAf4x40migaSxkmbKZP9b5ro6tM YRPApQMoUlv0DKBh0BXpfc6RAm8HgOiy1nbl+vA8AKooWmKy6W2WVFLz5a7D1Mi0 P3zYBqXmGgEk4IeyeZjU+qLzF8ozo7vKLONKQKRaObH9yOoU+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKKv+LcoI/JUaFJuIlz5ot7wagJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBm ZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNlMGYxNmI4ZTIvZGQwZmYyMjEtZjBjNC00 YzU0LTk2ZDktNWYzZTBmMTZiOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQwZmYyMjEtZjBjNC00YzU0LTk2 ZDktNWYzZTBmMTZiOGUyL2RkMGZmMjIxLWYwYzQtNGM1NC05NmQ5LTVmM2UwZjE2 YjhlMi5jcmwwHwYDVR0jBBgwFoAUr/lVUKXBkBjOWn14MlY8OgsCrd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBmZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNl MGYxNmI4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuOnqi5drz8zzmgSYWNfnC deK+kYEMWDamAKG8oTh1SL/lumYjtZgROArI0MV/bnDG4/W0J6WaHXz8ISEXOA5K wjW7tzmpxSn/v+nqmGpDqSa8AxRWmOeKOmOof/RULHT99Mc0Y/BD1ydGZJeHEpPE 23IqTbMEg3wZU+FcGuPmc/v4Qhu046LMk1pcxVnnVYTVn5F29zlajoT+Fc43mRDG spDq1lo7dBoo7Q718sABqIQcblLCvO90SxrufZqKaI0SrbJVg3P1CiJcXlwAvd8D NwC2zuuB9bCpdfu41EjPvYY62cynz28/I+y7bQrLsugSgPmDpE/B/BsGtZj+nDbU -----END CERTIFICATE-----Generated at Wed Jul 29 23:32:35 2026 by rpki-client