$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft File: b8e407d7-863a-439f-a4f2-335e5aac995d.mft (raw, json) Hash identifier: cfQWO18rlk4RJj0rwi9PoOA1LIh7AvxHA9Yn0orp2Tg= Subject key identifier: 2E:76:5D:A6:9A:54:13:23:1B:DB:59:84:B2:BA:45:AF:61:0D:67:EC Authority key identifier: 10:29:1A:9E:BD:00:1C:6C:73:FE:20:B5:CC:D2:6C:BB:26:D4:06:0C Certificate issuer: /CN=b8e407d7-863a-439f-a4f2-335e5aac995d Certificate serial: 010D0C9F4328584EA621A582A334BDBC87615D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft Manifest number: 010D0C9F4328584B52B3B9163D8559A7CAD9B1B8 Signing time: Tue 28 Jul 2026 13:00:22 +0000 Manifest this update: Tue 28 Jul 2026 13:00:22 +0000 Manifest next update: Thu 30 Jul 2026 13:00:00 +0000 Files and hashes: 1: 53328d6f-6f09-364a-837e-4b73e3ce96f9.roa (hash: qGORe+F2NqdJ5RZhXZMLdJvRaaneW94c0CEczikWGZ8=) 2: b8e407d7-863a-439f-a4f2-335e5aac995d.crl (hash: TtFcG3umrkiGzzaAeXBEcKCya9WmqtWVDQPsygXFeyk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:21:a5:82:a3:34:bd:bc:87:61:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e407d7-863a-439f-a4f2-335e5aac995d Validity Not Before: Jul 28 13:00:22 2026 GMT Not After : Jul 30 13:00:00 2026 GMT Subject: CN=1e23344a-f4b4-4693-8c52-4aa3983b0762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5e:02:02:3a:ea:b9:1f:66:0d:41:5e:79:7a: 2f:fe:c8:af:40:51:8a:0e:be:62:a1:d9:9a:97:52: d9:18:eb:8c:69:48:8d:55:36:8c:19:c9:86:64:7b: 96:1a:8d:fa:a2:28:71:49:8d:f7:05:00:4f:3c:7c: 99:98:b2:c7:5e:da:47:e7:1d:90:9a:7e:f6:64:7c: e1:1c:67:8a:24:6a:2d:3e:0d:83:75:61:b5:21:c2: 28:5b:f5:b8:0e:fc:bb:b9:05:73:de:c5:c6:b5:1b: 0e:fc:f4:26:a5:7f:7e:c7:b0:eb:a9:f8:c6:27:b8: 7e:be:23:78:15:10:df:ce:16:16:16:3e:83:d4:bb: fb:b5:0e:24:90:ab:7a:17:7a:07:b9:d5:07:6b:dd: 48:39:b9:63:5c:dc:31:91:cc:e6:1c:ba:a3:54:3f: 7f:bf:56:7b:bc:bb:ac:00:9e:3f:65:91:e2:d0:a6: ec:95:3a:b4:09:5c:0a:44:e5:2a:ee:79:27:f0:ec: 89:27:4f:73:df:7f:fe:8f:39:00:91:e8:01:ba:1a: 33:ab:b4:86:3d:de:44:ef:bc:77:c1:2f:c7:e3:97: 28:7a:0c:0b:03:08:73:4b:86:5b:98:cd:18:73:37: de:0e:3d:e6:ae:e4:4b:31:38:4a:9c:a9:0d:ee:42: 3e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:76:5D:A6:9A:54:13:23:1B:DB:59:84:B2:BA:45:AF:61:0D:67:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.crl X509v3 Authority Key Identifier: keyid:10:29:1A:9E:BD:00:1C:6C:73:FE:20:B5:CC:D2:6C:BB:26:D4:06:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:63:19:e2:08:4d:45:7b:95:71:a7:03:89:16:4e:83:05:ee: 4a:c2:df:95:68:ef:ee:fb:2f:bd:cf:02:58:e4:da:19:3d:62: fc:1e:31:19:85:96:77:56:a5:60:fb:2b:90:65:f1:8c:f8:88: 83:1b:b8:af:b3:b4:58:69:48:19:73:d7:e1:e9:4a:48:e2:3c: da:a4:7d:87:69:87:25:a5:a3:43:db:28:49:7b:8f:aa:51:59: de:6c:67:0c:10:06:35:fb:26:a2:e8:68:96:b9:92:78:24:e6: a2:f1:29:9a:08:52:28:46:f2:59:8f:ea:d7:1f:48:fe:98:88: b8:03:30:b3:30:eb:4d:93:35:9a:e6:77:9c:61:d8:98:92:85: a5:52:27:40:6d:9e:4e:91:0d:40:28:92:96:44:3b:04:e3:2a: 6b:08:3b:78:92:35:f4:0c:c2:a3:e7:66:d7:56:a2:f0:ed:d0: 88:b6:d8:46:67:e5:d5:2b:f6:59:e3:df:e1:99:a6:9c:08:77: d0:ca:63:e1:31:72:d0:08:fb:bc:e8:19:73:7e:a8:94:61:5c: a1:96:d7:81:9d:ca:fa:ef:8d:0d:4c:06:39:47:27:dc:fc:d4: 0e:d0:98:a4:8d:cc:4e:ba:b0:25:1e:d5:6b:b7:55:c6:cb:69: 41:e5:9f:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6mIaWCozS9vIdhXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhlNDA3ZDctODYzYS00MzlmLWE0ZjItMzM1ZTVhYWM5 OTVkMB4XDTI2MDcyODEzMDAyMloXDTI2MDczMDEzMDAwMFowLzEtMCsGA1UEAxMk MWUyMzM0NGEtZjRiNC00NjkzLThjNTItNGFhMzk4M2IwNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV4CAjrquR9mDUFeeXov/sivQFGKDr5iodma l1LZGOuMaUiNVTaMGcmGZHuWGo36oihxSY33BQBPPHyZmLLHXtpH5x2Qmn72ZHzh HGeKJGotPg2DdWG1IcIoW/W4Dvy7uQVz3sXGtRsO/PQmpX9+x7DrqfjGJ7h+viN4 FRDfzhYWFj6D1Lv7tQ4kkKt6F3oHudUHa91IObljXNwxkczmHLqjVD9/v1Z7vLus AJ4/ZZHi0KbslTq0CVwKROUq7nkn8OyJJ09z33/+jzkAkegBuhozq7SGPd5E77x3 wS/H45coegwLAwhzS4ZbmM0YczfeDj3mruRLMThKnKkN7kI+wwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC52XaaaVBMjG9tZhLK6Ra9hDWfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iOGU0 MDdkNy04NjNhLTQzOWYtYTRmMi0zMzVlNWFhYzk5NWQvYjhlNDA3ZDctODYzYS00 MzlmLWE0ZjItMzM1ZTVhYWM5OTVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjhlNDA3ZDctODYzYS00MzlmLWE0 ZjItMzM1ZTVhYWM5OTVkL2I4ZTQwN2Q3LTg2M2EtNDM5Zi1hNGYyLTMzNWU1YWFj OTk1ZC5jcmwwHwYDVR0jBBgwFoAUECkanr0AHGxz/iC1zNJsuybUBgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iOGU0MDdkNy04NjNhLTQzOWYtYTRmMi0zMzVl NWFhYzk5NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApYxniCE1Fe5VxpwOJFk6D Be5Kwt+VaO/u+y+9zwJY5NoZPWL8HjEZhZZ3VqVg+yuQZfGM+IiDG7ivs7RYaUgZ c9fh6UpI4jzapH2HaYclpaND2yhJe4+qUVnebGcMEAY1+yai6GiWuZJ4JOai8Sma CFIoRvJZj+rXH0j+mIi4AzCzMOtNkzWa5necYdiYkoWlUidAbZ5OkQ1AKJKWRDsE 4yprCDt4kjX0DMKj52bXVqLw7dCItthGZ+XVK/ZZ49/hmaacCHfQymPhMXLQCPu8 6BlzfqiUYVyhlteBncr6740NTAY5Ryfc/NQO0JikjcxOurAlHtVrt1XGy2lB5Z9h -----END CERTIFICATE-----Generated at Tue Jul 28 20:39:56 2026 by rpki-client