$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.mft File: 0cebf4b3-f223-4dcf-b466-5757dc91a10d.mft (raw, json) Hash identifier: E2/SYc7cHiY8q6HNQNJEaArI3ZWpb4gfLVtnHpawtrI= Subject key identifier: 2E:BF:02:91:B4:07:90:C0:20:F4:8D:24:F7:63:43:2F:DC:50:0B:A3 Authority key identifier: 2C:B1:C6:6F:30:76:4D:ED:BC:60:2E:48:E6:39:C0:66:25:09:3B:FA Certificate issuer: /CN=0cebf4b3-f223-4dcf-b466-5757dc91a10d Certificate serial: 010D0C9F4328584EF82380C78418895861405980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.mft Manifest number: 010D0C9F4328584073A82A40CF0ED76A73703119 Signing time: Wed 26 Aug 2026 22:00:23 +0000 Manifest this update: Wed 26 Aug 2026 22:00:23 +0000 Manifest next update: Fri 28 Aug 2026 22:00:00 +0000 Files and hashes: 1: 04d911aa-036c-302e-aec4-a9fdfb56ac50.roa (hash: 1nW+2KHm4nVEn33Dl7Vp8s3dsUcKG+HOxAk4xlS3w6M=) 2: 0cebf4b3-f223-4dcf-b466-5757dc91a10d.crl (hash: BRMLWRMrb4M3CPNipQs4mrbDBYRjoJTLvg5X16DpGXc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:23:80:c7:84:18:89:58:61:40:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cebf4b3-f223-4dcf-b466-5757dc91a10d Validity Not Before: Aug 26 22:00:23 2026 GMT Not After : Aug 28 22:00:00 2026 GMT Subject: CN=1a0fdbb9-fd5c-430d-8dba-1fe44af2936b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:9f:6d:8f:0e:2e:13:dd:b6:53:d5:3d:b5: c1:f0:6b:03:db:65:53:71:f6:71:72:77:40:70:de: 86:91:a9:c6:0b:8c:14:34:cd:a7:0e:a5:8b:88:c8: 9c:c7:b6:aa:37:e2:09:b2:28:68:e9:cb:68:96:13: 04:10:23:93:04:28:3d:1e:a9:8e:e4:bc:11:bd:e8: b3:4b:26:56:a9:09:89:c3:04:70:09:81:0a:59:6a: 7c:3c:29:02:9d:44:e6:a6:ab:ed:41:ae:ef:b2:ae: 69:94:fb:2f:1a:25:48:b8:21:3c:df:b8:29:74:8e: 81:14:24:dd:64:cc:31:d6:40:0a:f4:38:ad:0f:c6: a8:93:1e:00:68:08:94:9c:79:8b:80:71:24:75:70: 04:3f:1b:be:5f:fd:18:20:d7:6b:3a:7d:67:0b:79: 1b:df:d0:f2:1c:27:51:cb:be:8e:6f:97:bf:97:e5: 87:dc:c7:31:fc:86:c9:b8:58:2a:de:54:cd:cd:cc: 98:f3:f4:73:e7:bc:aa:5d:6b:d6:4e:5c:b9:ad:33: 4c:5a:3e:c0:55:0f:7c:58:50:a9:f2:2b:e1:9a:62: 7f:c2:90:2e:82:83:71:d9:1b:62:b2:93:65:4d:62: 92:d3:b1:9a:1d:aa:05:13:23:25:38:06:56:cf:1f: 3e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BF:02:91:B4:07:90:C0:20:F4:8D:24:F7:63:43:2F:DC:50:0B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.crl X509v3 Authority Key Identifier: keyid:2C:B1:C6:6F:30:76:4D:ED:BC:60:2E:48:E6:39:C0:66:25:09:3B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:02:12:59:db:c7:0d:0e:5b:a7:1a:c2:dd:fe:07:b7:73:0a: 0a:43:97:ff:d7:5c:c7:ac:02:eb:87:f9:7f:23:af:87:54:d3: d9:e9:0f:9e:c9:97:03:28:af:33:af:af:7a:0f:a9:58:d0:d9: b7:33:b4:61:af:43:46:8a:96:dd:41:7c:84:c8:26:57:e0:d6: ab:21:72:a2:6d:91:46:25:d8:ed:c5:b1:82:10:1e:bb:86:10: fe:a0:67:d7:12:85:78:49:e0:27:87:69:e9:30:55:37:1e:18: 4e:3b:86:21:b4:d7:f3:59:1c:7d:84:99:a6:96:79:d6:46:09: cb:cf:fb:7e:0d:62:a5:03:45:fc:09:50:22:a5:35:29:fb:dc: 8f:da:72:98:21:f7:9b:c9:6e:02:44:ee:7a:f4:fc:13:50:21: da:52:e7:45:fe:fb:52:29:7f:1a:dd:d5:65:e9:24:d2:2c:08: ab:9b:16:c9:9c:d1:93:52:f3:47:70:32:e3:8f:c2:c3:a6:2b: 05:c9:d8:80:b4:07:47:b4:db:2c:68:a9:32:e4:27:99:e8:78: 0c:5a:17:09:e1:d9:4a:80:62:9f:42:f7:c8:4b:82:26:a6:61: c7:13:42:ae:c6:96:d6:92:9d:66:af:56:b4:45:8e:88:09:e0: a1:af:ec:37 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE74I4DHhBiJWGFAWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNlYmY0YjMtZjIyMy00ZGNmLWI0NjYtNTc1N2RjOTFh MTBkMB4XDTI2MDgyNjIyMDAyM1oXDTI2MDgyODIyMDAwMFowLzEtMCsGA1UEAxMk MWEwZmRiYjktZmQ1Yy00MzBkLThkYmEtMWZlNDRhZjI5MzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE6fbY8OLhPdtlPVPbXB8GsD22VTcfZxcndA cN6GkanGC4wUNM2nDqWLiMicx7aqN+IJsiho6ctolhMEECOTBCg9HqmO5LwRveiz SyZWqQmJwwRwCYEKWWp8PCkCnUTmpqvtQa7vsq5plPsvGiVIuCE837gpdI6BFCTd ZMwx1kAK9DitD8aokx4AaAiUnHmLgHEkdXAEPxu+X/0YINdrOn1nC3kb39DyHCdR y76Ob5e/l+WH3Mcx/IbJuFgq3lTNzcyY8/Rz57yqXWvWTly5rTNMWj7AVQ98WFCp 8ivhmmJ/wpAugoNx2RtispNlTWKS07GaHaoFEyMlOAZWzx8+KQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC6/ApG0B5DAIPSNJPdjQy/cUAujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wY2Vi ZjRiMy1mMjIzLTRkY2YtYjQ2Ni01NzU3ZGM5MWExMGQvMGNlYmY0YjMtZjIyMy00 ZGNmLWI0NjYtNTc1N2RjOTFhMTBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGNlYmY0YjMtZjIyMy00ZGNmLWI0 NjYtNTc1N2RjOTFhMTBkLzBjZWJmNGIzLWYyMjMtNGRjZi1iNDY2LTU3NTdkYzkx YTEwZC5jcmwwHwYDVR0jBBgwFoAULLHGbzB2Te28YC5I5jnAZiUJO/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wY2ViZjRiMy1mMjIzLTRkY2YtYjQ2Ni01NzU3 ZGM5MWExMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLAhJZ28cNDlunGsLd/ge3 cwoKQ5f/11zHrALrh/l/I6+HVNPZ6Q+eyZcDKK8zr696D6lY0Nm3M7Rhr0NGipbd QXyEyCZX4NarIXKibZFGJdjtxbGCEB67hhD+oGfXEoV4SeAnh2npMFU3HhhOO4Yh tNfzWRx9hJmmlnnWRgnLz/t+DWKlA0X8CVAipTUp+9yP2nKYIfebyW4CRO569PwT UCHaUudF/vtSKX8a3dVl6STSLAirmxbJnNGTUvNHcDLjj8LDpisFydiAtAdHtNss aKky5CeZ6HgMWhcJ4dlKgGKfQvfIS4ImpmHHE0KuxpbWkp1mr1a0RY6ICeChr+w3 -----END CERTIFICATE-----Generated at Thu Aug 27 16:12:01 2026 by rpki-client