$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft File: ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft (raw, json) Hash identifier: ZHNkWMhZsp+XYdaIbL1VAb9s0vPjADTclhwtwSiUWDg= Subject key identifier: 9A:A1:97:5F:A6:F9:05:3F:CF:22:C1:58:58:43:44:D8:54:A9:13:81 Authority key identifier: F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 Certificate issuer: /CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Certificate serial: 010D0C9F4328584E9113C39224CB8E47107634D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft Manifest number: 010D0C9F43285849286C32D062B377DCDAAACE7D Signing time: Tue 21 Jul 2026 00:00:23 +0000 Manifest this update: Tue 21 Jul 2026 00:00:23 +0000 Manifest next update: Fri 24 Jul 2026 00:00:00 +0000 Files and hashes: 1: ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl (hash: RvDIZFN30CHoU3V5PJXrtRA9ZQXwj31k/YHzE84C8zI=) 2: f17090ed-14f3-32d9-9d34-9fc6bed092d1.roa (hash: FejnKi3yoU14rOkrf//qMLDEkrkbDfNFmfNhnzosjSA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:91:13:c3:92:24:cb:8e:47:10:76:34:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Validity Not Before: Jul 21 00:00:23 2026 GMT Not After : Jul 24 00:00:00 2026 GMT Subject: CN=7cbf7a46-277f-44c1-b5f3-e86b08dfcccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:95:78:d8:e9:6b:12:f0:93:d4:19:8b:70:4f: a2:cf:e6:83:eb:ad:16:13:8a:c8:a3:e0:bd:38:96: 8e:8a:a2:66:37:47:6a:0b:b8:f2:33:e3:df:72:b4: d0:5a:e2:e4:a4:79:2f:82:4d:4b:c8:f4:2b:c4:77: 76:26:0c:e4:34:59:d3:b8:cd:ed:63:21:c8:8d:78: 66:db:92:35:7e:d5:91:90:79:84:ec:24:dd:65:c5: d5:5e:a0:3f:47:82:e2:a5:2a:ad:a7:34:95:66:80: c2:e4:e4:0d:dd:19:52:bd:c5:2b:3f:79:94:0f:c0: 9f:15:0a:fc:c9:70:a4:5b:62:3f:0c:02:ad:4c:4c: 39:8a:19:aa:36:89:0a:0b:80:f3:0e:26:80:34:d1: 97:5f:57:9b:39:1a:94:0b:c0:59:c4:0b:51:68:6a: bb:54:51:fa:0f:b4:a1:d1:d4:41:af:a1:0c:c9:5b: 07:3c:c7:e0:7f:c0:af:7c:16:57:6a:2b:19:cf:0c: 0b:eb:31:5c:b7:65:b5:85:16:42:a4:3e:2f:53:f4: c6:8c:4e:62:5d:3b:8f:db:1b:ac:4d:86:d3:3e:e7: b9:b7:2b:ab:de:61:f5:9a:d8:61:91:50:c8:32:66: 7d:c2:4c:46:c1:b1:7c:6d:28:82:88:bd:85:78:28: 7f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A1:97:5F:A6:F9:05:3F:CF:22:C1:58:58:43:44:D8:54:A9:13:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl X509v3 Authority Key Identifier: keyid:F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ff:1b:c3:97:4e:72:eb:67:b0:5b:6f:f9:94:5b:cf:b4:c3: 1a:eb:90:58:40:45:c8:f6:72:47:de:35:93:1c:4c:5d:92:87: 9b:68:ac:b8:0b:77:89:ac:a2:91:24:03:33:0b:2e:61:f1:8d: 31:96:31:3b:58:ed:45:70:73:24:81:4f:c7:67:ab:5c:4b:7d: 7c:87:bc:b8:fd:48:a8:a5:f7:2b:2d:b2:b6:b7:4a:e1:a7:40: 7b:5e:02:bf:85:0a:48:65:da:b2:a1:ad:b0:3b:8b:93:a8:c6: 5b:a5:cb:d7:9e:90:e3:11:a3:07:27:76:bb:75:d1:65:51:39: 36:eb:ea:40:34:82:62:57:29:ad:07:16:9a:3a:98:8b:61:ac: e8:72:71:b2:c4:04:0e:d7:a9:2c:15:9a:56:33:fd:2a:03:c7: 4e:a7:6d:09:54:e1:d5:7f:61:f9:5e:e7:de:e0:0e:c8:ce:09: 68:8b:bc:7a:6f:f0:32:1b:0d:3d:a7:65:39:5a:ac:0a:c3:83: 39:b7:6d:ad:82:18:87:77:7b:32:ce:b6:6c:cc:69:07:21:59: da:17:fe:18:0a:e6:e0:a6:6a:f4:40:c0:b1:9f:b4:1b:fa:16: 97:87:28:c6:23:c6:23:b9:10:2c:35:01:80:c7:17:60:66:b9: 51:35:9c:f6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6RE8OSJMuORxB2NNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRmOThjN2EtZWUyMi00NjkzLTgxNzAtYzliMTk3YmM5 ZGEwMB4XDTI2MDcyMTAwMDAyM1oXDTI2MDcyNDAwMDAwMFowLzEtMCsGA1UEAxMk N2NiZjdhNDYtMjc3Zi00NGMxLWI1ZjMtZTg2YjA4ZGZjY2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZV42OlrEvCT1BmLcE+iz+aD660WE4rIo+C9 OJaOiqJmN0dqC7jyM+PfcrTQWuLkpHkvgk1LyPQrxHd2JgzkNFnTuM3tYyHIjXhm 25I1ftWRkHmE7CTdZcXVXqA/R4LipSqtpzSVZoDC5OQN3RlSvcUrP3mUD8CfFQr8 yXCkW2I/DAKtTEw5ihmqNokKC4DzDiaANNGXX1ebORqUC8BZxAtRaGq7VFH6D7Sh 0dRBr6EMyVsHPMfgf8CvfBZXaisZzwwL6zFct2W1hRZCpD4vU/TGjE5iXTuP2xus TYbTPue5tyur3mH1mthhkVDIMmZ9wkxGwbF8bSiCiL2FeCh/eQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJqhl1+m+QU/zyLBWFhDRNhUqROBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5 OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIxOTdiYzlkYTAvZGRmOThjN2EtZWUyMi00 NjkzLTgxNzAtYzliMTk3YmM5ZGEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRmOThjN2EtZWUyMi00NjkzLTgx NzAtYzliMTk3YmM5ZGEwL2RkZjk4YzdhLWVlMjItNDY5My04MTcwLWM5YjE5N2Jj OWRhMC5jcmwwHwYDVR0jBBgwFoAU9lYTxhcbMI3ihtZCrCsd+DzeQ3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIx OTdiYzlkYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCK/xvDl05y62ewW2/5lFvP tMMa65BYQEXI9nJH3jWTHExdkoebaKy4C3eJrKKRJAMzCy5h8Y0xljE7WO1FcHMk gU/HZ6tcS318h7y4/UiopfcrLbK2t0rhp0B7XgK/hQpIZdqyoa2wO4uTqMZbpcvX npDjEaMHJ3a7ddFlUTk26+pANIJiVymtBxaaOpiLYazocnGyxAQO16ksFZpWM/0q A8dOp20JVOHVf2H5Xufe4A7Izgloi7x6b/AyGw09p2U5WqwKw4M5t22tghiHd3sy zrZszGkHIVnaF/4YCubgpmr0QMCxn7Qb+haXhyjGI8YjuRAsNQGAxxdgZrlRNZz2 -----END CERTIFICATE-----Generated at Tue Jul 21 20:50:05 2026 by rpki-client