$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft File: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft (raw, json) Hash identifier: 2oGvByOKTySyiRcNscpYBoLjOwCZ4LB183WrbbHMta0= Subject key identifier: 09:3A:5B:28:C7:DD:97:9D:29:59:E4:BC:7C:7A:E1:20:F1:95:23:06 Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 Certificate issuer: /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Certificate serial: 010D0C9F4328584EA698CA8FA3AD21DDB0A1AC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft Manifest number: 010D0C9F4328584073A81F41A8F9BAE8BF3A889D Signing time: Tue 28 Jul 2026 17:00:22 +0000 Manifest this update: Tue 28 Jul 2026 17:00:22 +0000 Manifest next update: Fri 31 Jul 2026 17:00:00 +0000 Files and hashes: 1: 97a9023c-3b6e-3158-89d8-efe63001f64e.roa (hash: sDt0bfQrN0M4E3BD7EJPxGHmgOwT2LW05sU4sSrnZ5A=) 2: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl (hash: 6K/4uvI/Ib6x0n4N3IXJg5KCqwzDCcrmbjkiINA0v6o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:98:ca:8f:a3:ad:21:dd:b0:a1:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Validity Not Before: Jul 28 17:00:22 2026 GMT Not After : Jul 31 17:00:00 2026 GMT Subject: CN=3e980757-3739-4252-901c-d59ef7f1942b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:11:03:0e:2a:ea:9b:25:b7:f3:d3:14:65:fc: 6d:48:7d:81:19:cc:96:e4:e2:54:db:8b:f8:55:ec: a2:86:9f:b6:fe:7b:7e:1e:f1:51:67:c4:18:78:2a: 9b:65:56:5c:c4:2c:a6:51:df:45:3c:0b:30:d0:f2: c1:03:f2:61:cd:2d:7c:87:2a:2f:e3:b8:3f:c2:dc: 4f:b3:08:7b:71:08:41:54:26:98:84:b4:ac:a1:be: 54:7b:d5:19:08:75:a9:5f:95:2e:ab:8d:1c:d4:d2: b6:1e:e5:a8:a6:cc:1d:6e:fb:ca:3e:25:9c:40:da: af:c6:f1:bc:30:18:1e:df:34:4b:7c:e9:df:85:7f: 1b:4c:2e:3a:6a:2a:87:a9:9f:f6:cd:ba:72:6a:3a: 63:9b:35:c2:42:00:72:20:f5:f8:07:4a:8b:80:03: ba:b5:25:c6:ba:fb:b9:e2:7d:04:25:85:c1:8f:ea: fa:f2:10:0f:e0:da:6b:a0:79:99:6a:c8:08:f9:c5: f4:f9:9f:1e:77:73:7c:2c:40:f1:b5:7c:29:c9:66: 87:40:79:f8:e9:73:72:e4:4f:c7:33:bb:26:d4:d7: 01:b8:16:b3:18:18:67:4c:fa:17:b7:d8:8c:21:2d: c4:1d:29:13:fa:10:c2:63:21:b4:eb:b8:42:b8:aa: 2a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3A:5B:28:C7:DD:97:9D:29:59:E4:BC:7C:7A:E1:20:F1:95:23:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl X509v3 Authority Key Identifier: keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:e2:bc:0d:a4:ec:32:a5:cc:93:76:41:cb:b4:a5:06:9b:be: 4b:5a:a4:b3:e3:74:89:39:00:d8:bb:ef:39:c7:cc:67:d9:b4: c9:43:3f:2c:2d:05:32:2c:4e:1b:93:91:d9:fb:e5:90:69:76: 19:39:ea:d2:64:e8:5d:12:22:6c:55:ea:9c:e3:a3:b0:5f:62: df:a5:f3:5d:84:c7:77:7b:31:30:d1:4f:0d:45:98:ec:fb:63: 09:2b:d7:af:34:26:b1:46:e4:b1:6f:e3:24:69:c2:6f:f3:2e: fa:79:1c:86:1d:7e:db:2b:43:cd:44:13:73:d5:1f:22:aa:a5: fb:b6:d1:16:ef:18:80:1c:32:ec:29:d3:3f:d0:f6:31:58:28: 29:c4:1a:4e:33:0e:e7:00:97:50:17:38:9f:e8:81:4b:08:86: 09:d9:59:5d:6a:38:2b:b2:5b:f6:3f:a7:bf:13:9c:62:3b:8a: 91:54:9a:dd:60:51:65:24:7d:99:fa:9b:c9:93:c3:fc:2d:b7: ad:28:8d:db:9b:dd:87:bc:ac:c2:01:4f:3c:68:06:45:4a:9c: ec:09:8b:de:ad:39:ad:88:36:ea:0b:1d:3a:93:6c:20:73:9c: 5f:dc:5c:68:75:fd:d2:28:c7:ec:b9:aa:a2:74:13:92:4e:0a: b4:f7:39:60 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6mmMqPo60h3bChrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZkNWYzNWQtNWIwMi00ODRhLThlMGUtYTczMGFiZDk4 ZmEyMB4XDTI2MDcyODE3MDAyMloXDTI2MDczMTE3MDAwMFowLzEtMCsGA1UEAxMk M2U5ODA3NTctMzczOS00MjUyLTkwMWMtZDU5ZWY3ZjE5NDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xEDDirqmyW389MUZfxtSH2BGcyW5OJU24v4 Veyihp+2/nt+HvFRZ8QYeCqbZVZcxCymUd9FPAsw0PLBA/JhzS18hyov47g/wtxP swh7cQhBVCaYhLSsob5Ue9UZCHWpX5Uuq40c1NK2HuWopswdbvvKPiWcQNqvxvG8 MBge3zRLfOnfhX8bTC46aiqHqZ/2zbpyajpjmzXCQgByIPX4B0qLgAO6tSXGuvu5 4n0EJYXBj+r68hAP4NproHmZasgI+cX0+Z8ed3N8LEDxtXwpyWaHQHn46XNy5E/H M7sm1NcBuBazGBhnTPoXt9iMIS3EHSkT+hDCYyG067hCuKoqjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAk6WyjH3ZedKVnkvHx64SDxlSMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1 ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMwYWJkOThmYTIvZGZkNWYzNWQtNWIwMi00 ODRhLThlMGUtYTczMGFiZDk4ZmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZkNWYzNWQtNWIwMi00ODRhLThl MGUtYTczMGFiZDk4ZmEyL2RmZDVmMzVkLTViMDItNDg0YS04ZTBlLWE3MzBhYmQ5 OGZhMi5jcmwwHwYDVR0jBBgwFoAUGqPjaFCuyycxWd2nix8QwlkQm0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMw YWJkOThmYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCT4rwNpOwypcyTdkHLtKUG m75LWqSz43SJOQDYu+85x8xn2bTJQz8sLQUyLE4bk5HZ++WQaXYZOerSZOhdEiJs Veqc46OwX2LfpfNdhMd3ezEw0U8NRZjs+2MJK9evNCaxRuSxb+MkacJv8y76eRyG HX7bK0PNRBNz1R8iqqX7ttEW7xiAHDLsKdM/0PYxWCgpxBpOMw7nAJdQFzif6IFL CIYJ2Vldajgrslv2P6e/E5xiO4qRVJrdYFFlJH2Z+pvJk8P8LbetKI3bm92HvKzC AU88aAZFSpzsCYverTmtiDbqCx06k2wgc5xf3Fxodf3SKMfsuaqidBOSTgq09zlg -----END CERTIFICATE-----Generated at Tue Jul 28 19:24:25 2026 by rpki-client