$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft File: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft (raw, json) Hash identifier: wmt2m6bv+9QBD3Ca+hXq0RDdun4GtjRJkPpadGq0efk= Subject key identifier: 31:CB:BB:91:29:93:E8:F6:47:6A:F6:16:59:1A:93:AE:D7:7C:D8:91 Authority key identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Certificate issuer: /CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Certificate serial: 010D0C9F4328584EA6B68916AF5B8912F94E07C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft Manifest number: 010D0C9F4328584A0F6F5277F198146B052F7D30 Signing time: Tue 28 Jul 2026 18:00:22 +0000 Manifest this update: Tue 28 Jul 2026 18:00:22 +0000 Manifest next update: Thu 30 Jul 2026 18:00:00 +0000 Files and hashes: 1: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl (hash: mypi09iSD9rTOxQRg6sKjJAswVjiRgH/wajZARqQtdo=) 2: 7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa (hash: OTd4U8x/MOB7PHJVsaVZMiQVYF599ZPBthvg1jlGJuU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:b6:89:16:af:5b:89:12:f9:4e:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Validity Not Before: Jul 28 18:00:22 2026 GMT Not After : Jul 30 18:00:00 2026 GMT Subject: CN=a4bcfc63-d86f-4482-a643-8239e24eac77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:74:8a:52:2e:99:04:04:a8:d5:1c:22:ee:48: 5f:8e:b4:20:14:c6:db:ce:8f:6c:96:27:e4:96:33: e2:8a:67:bb:91:f7:05:08:9b:5e:d0:df:8d:94:87: 20:a4:b5:ee:d7:d0:d8:75:be:c8:9d:1f:30:7a:d3: ca:16:0d:5d:f4:f1:37:a4:ac:7e:41:54:96:6f:e2: 29:51:cc:cc:b0:2e:82:f3:1b:4d:54:b0:e6:98:df: ee:9b:4f:d3:2f:1b:61:61:b4:3c:cf:07:6d:1c:16: f3:59:cc:99:38:77:2e:02:af:07:22:ff:1b:e6:98: 06:d0:9e:a0:32:ae:08:c3:bf:91:50:91:8b:4c:9c: 0d:c3:7d:d3:5e:32:db:74:93:45:d7:f0:32:16:8c: 5d:6c:69:8c:4d:66:ee:91:2d:60:ae:98:0a:7d:0d: a4:5f:b6:59:3a:59:69:71:56:ac:2c:e6:54:24:20: a1:26:15:e0:9b:2f:25:f0:9f:75:90:d0:d7:67:78: 03:d4:94:0d:f1:51:fa:37:e1:f1:0b:4c:76:7c:2d: c0:16:47:a1:1b:12:2d:6b:3f:5a:f2:37:1d:4e:ae: 84:91:ba:0d:13:1b:4d:bf:a9:ae:a9:ed:0c:72:2d: c8:98:3c:96:b2:39:02:15:af:48:17:6c:9a:cb:78: de:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CB:BB:91:29:93:E8:F6:47:6A:F6:16:59:1A:93:AE:D7:7C:D8:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl X509v3 Authority Key Identifier: keyid:7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ba:9b:c9:a5:d9:c5:01:f1:63:98:f4:d6:04:99:a4:b4:20: 2f:3d:2c:ab:a6:ed:3f:b4:0c:c3:a6:75:39:d1:e1:89:2e:25: 4d:27:63:85:38:79:0d:f9:0c:88:62:f0:b0:13:44:57:a7:72: 17:53:98:4b:52:2d:a6:ea:97:86:84:51:97:8c:d9:5d:aa:25: c2:61:9b:f7:9c:33:ef:f1:80:ae:b6:56:ed:38:29:17:7d:aa: 78:d6:97:59:ce:0a:83:99:1e:86:67:5b:9f:49:21:5e:91:37: d9:2c:b3:25:e5:05:7e:a6:97:a6:bc:ff:ba:8d:02:c2:a7:2d: 0a:03:8f:6a:a7:de:21:aa:66:fd:2c:43:96:69:98:9b:0f:45: a0:e2:32:e8:c0:06:b9:94:36:8e:49:aa:32:6f:82:49:f0:d8: 07:a5:73:b3:b6:9c:cf:ae:b3:da:dd:28:79:9b:23:63:75:92: dd:4b:82:f5:a3:a3:44:6e:3d:cc:6c:97:c2:df:fe:bc:ad:13: 21:97:b3:ff:1f:de:35:53:7a:53:87:c4:2b:40:49:a1:b8:e1: 9d:03:98:70:4a:7a:e1:b0:66:d0:a2:62:9b:b3:ec:96:ba:cc: 5c:11:e4:c9:bf:48:61:36:d9:d6:3a:b3:37:0f:04:24:b7:b6: 6d:c8:2d:d8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6mtokWr1uJEvlOB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYTk4ZTEtMGNiOS00ZTIzLTkxMGUtMjBlYzVkZmU4 YmVjMB4XDTI2MDcyODE4MDAyMloXDTI2MDczMDE4MDAwMFowLzEtMCsGA1UEAxMk YTRiY2ZjNjMtZDg2Zi00NDgyLWE2NDMtODIzOWUyNGVhYzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinSKUi6ZBASo1Rwi7khfjrQgFMbbzo9slifk ljPiime7kfcFCJte0N+NlIcgpLXu19DYdb7InR8wetPKFg1d9PE3pKx+QVSWb+Ip UczMsC6C8xtNVLDmmN/um0/TLxthYbQ8zwdtHBbzWcyZOHcuAq8HIv8b5pgG0J6g Mq4Iw7+RUJGLTJwNw33TXjLbdJNF1/AyFoxdbGmMTWbukS1grpgKfQ2kX7ZZOllp cVasLOZUJCChJhXgmy8l8J91kNDXZ3gD1JQN8VH6N+HxC0x2fC3AFkehGxItaz9a 8jcdTq6EkboNExtNv6muqe0Mci3ImDyWsjkCFa9IF2yay3jecQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDHLu5Epk+j2R2r2Flkak67XfNiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBh OThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRmZThiZWMvMDQwYTk4ZTEtMGNiOS00 ZTIzLTkxMGUtMjBlYzVkZmU4YmVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwYTk4ZTEtMGNiOS00ZTIzLTkx MGUtMjBlYzVkZmU4YmVjLzA0MGE5OGUxLTBjYjktNGUyMy05MTBlLTIwZWM1ZGZl OGJlYy5jcmwwHwYDVR0jBBgwFoAUfbz2tahyfAqCfGESBDb+hCvMHNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVj NWRmZThiZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVupvJpdnFAfFjmPTWBJmk tCAvPSyrpu0/tAzDpnU50eGJLiVNJ2OFOHkN+QyIYvCwE0RXp3IXU5hLUi2m6peG hFGXjNldqiXCYZv3nDPv8YCutlbtOCkXfap41pdZzgqDmR6GZ1ufSSFekTfZLLMl 5QV+ppemvP+6jQLCpy0KA49qp94hqmb9LEOWaZibD0Wg4jLowAa5lDaOSaoyb4JJ 8NgHpXOztpzPrrPa3Sh5myNjdZLdS4L1o6NEbj3MbJfC3/68rRMhl7P/H941U3pT h8QrQEmhuOGdA5hwSnrhsGbQomKbs+yWusxcEeTJv0hhNtnWOrM3DwQkt7ZtyC3Y -----END CERTIFICATE-----Generated at Wed Jul 29 08:55:58 2026 by rpki-client