$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft File: d9e22f6d-5551-4712-9f95-3008c51223ec.mft (raw, json) Hash identifier: AJNG6pTKzQQekPNBwDU00ib6sF85HWmj7O/aAtZgcEQ= Subject key identifier: 74:3B:8E:48:F1:39:3D:80:10:31:64:50:0D:DD:3C:FB:5F:CC:BA:83 Authority key identifier: 28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77 Certificate issuer: /CN=d9e22f6d-5551-4712-9f95-3008c51223ec Certificate serial: 010D0C9F4328584E6B814BD7684A433B8EF08000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft Manifest number: 010D0C9F43285841E6A4ADE0B31162520C965E39 Signing time: Tue 07 Jul 2026 13:00:22 +0000 Manifest this update: Tue 07 Jul 2026 13:00:22 +0000 Manifest next update: Fri 10 Jul 2026 13:00:00 +0000 Files and hashes: 1: 8357b082-17dc-3d36-87f1-8e0746d54610.roa (hash: AW2SlKxejgztAQTLaOfwIJB4Xr67czW3gf+c1ofaXGY=) 2: d9e22f6d-5551-4712-9f95-3008c51223ec.crl (hash: 7dTbADanCeo9Dj2QsL713O3llZhUXLMu6lEKf9PHvzU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:81:4b:d7:68:4a:43:3b:8e:f0:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9e22f6d-5551-4712-9f95-3008c51223ec Validity Not Before: Jul 7 13:00:22 2026 GMT Not After : Jul 10 13:00:00 2026 GMT Subject: CN=64fb918e-7988-40c1-857a-a296b4184d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:23:48:bb:b5:cd:75:4f:d6:20:62:22:98: 23:f4:df:d8:e3:ac:f1:3f:fd:8a:33:0b:f4:4c:6e: a5:98:a9:1e:c8:43:12:66:02:7e:d1:a6:bf:18:35: f0:ad:22:cf:31:50:05:f0:96:fe:b2:d9:2d:78:eb: 95:c6:c2:ea:cf:ce:e6:87:21:dc:8b:f7:59:fc:2d: df:74:15:8d:47:43:66:7e:33:bd:08:98:5d:c1:a8: 4d:86:c7:21:cb:41:c8:69:a5:40:63:c0:04:a8:1a: 72:de:2f:e8:36:c7:fe:ca:f9:10:98:92:22:04:3a: d3:8e:f5:9d:89:fd:69:35:2f:08:1f:9f:91:3d:41: 48:63:06:07:98:2e:2e:f3:2f:b3:92:af:47:5b:cb: 4e:e1:08:d6:19:09:d3:6c:0e:85:0a:8d:2b:e6:04: 24:81:04:ae:f2:67:44:e1:86:55:c8:8d:41:0c:c4: f8:6d:5e:99:a7:14:b4:08:27:e3:95:eb:1b:73:27: 09:55:e6:1c:b3:ca:4e:31:bd:f5:48:85:d2:72:64: 23:b5:da:a4:a8:c0:23:13:44:26:6c:77:d9:5b:ca: 18:b8:84:c6:47:c4:90:58:0e:44:f7:82:9e:bb:82: 7d:3c:9e:8a:64:d5:bd:e8:67:f1:0b:94:80:2f:72: eb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3B:8E:48:F1:39:3D:80:10:31:64:50:0D:DD:3C:FB:5F:CC:BA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl X509v3 Authority Key Identifier: keyid:28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:0a:5a:e7:67:9b:02:77:25:6d:cd:64:91:53:18:d5:c2:5c: f5:1f:54:64:f1:1e:f9:a9:78:8c:c3:15:59:71:2c:84:73:32: f1:df:4b:bf:bc:47:6e:f9:1a:27:24:a5:aa:93:1f:92:41:d1: 46:2b:28:74:52:96:1a:59:47:f3:2f:b5:df:d3:fd:bc:0e:70: 72:72:5e:c6:53:d9:8c:3d:a3:b1:a9:31:67:5b:11:51:7b:56: 33:ee:0b:0a:c0:fe:04:17:70:18:65:ec:a7:4b:30:51:f2:f7: 3d:64:5c:93:96:e3:b3:42:61:36:c0:93:1a:10:73:5c:76:81: 6b:55:7c:46:df:26:2a:e0:5c:6a:94:22:d9:7d:4b:bb:a4:bf: 2e:37:af:05:09:b8:39:85:89:2c:ef:f6:39:d5:56:85:8c:2e: 5e:ea:47:b0:a1:9c:a1:88:3b:67:56:68:cc:1b:84:2b:36:06: cf:02:cd:ce:8a:dd:41:43:79:25:c6:4d:c8:91:48:97:21:31: a6:77:0f:0d:3d:d1:c9:59:61:39:68:8a:2b:1d:67:3e:d7:bb: d3:c5:57:6d:fc:36:a3:ef:c0:92:22:2f:ff:01:21:cf:bd:6d: d3:24:12:eb:06:cf:61:a3:9c:5a:22:a0:e2:be:8b:c5:e0:d1: 3b:bf:78:ac -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE5rgUvXaEpDO47wgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDllMjJmNmQtNTU1MS00NzEyLTlmOTUtMzAwOGM1MTIy M2VjMB4XDTI2MDcwNzEzMDAyMloXDTI2MDcxMDEzMDAwMFowLzEtMCsGA1UEAxMk NjRmYjkxOGUtNzk4OC00MGMxLTg1N2EtYTI5NmI0MTg0ZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsigjSLu1zXVP1iBiIpgj9N/Y46zxP/2KMwv0 TG6lmKkeyEMSZgJ+0aa/GDXwrSLPMVAF8Jb+stkteOuVxsLqz87mhyHci/dZ/C3f dBWNR0NmfjO9CJhdwahNhschy0HIaaVAY8AEqBpy3i/oNsf+yvkQmJIiBDrTjvWd if1pNS8IH5+RPUFIYwYHmC4u8y+zkq9HW8tO4QjWGQnTbA6FCo0r5gQkgQSu8mdE 4YZVyI1BDMT4bV6ZpxS0CCfjlesbcycJVeYcs8pOMb31SIXScmQjtdqkqMAjE0Qm bHfZW8oYuITGR8SQWA5E94Keu4J9PJ6KZNW96GfxC5SAL3LrrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHQ7jkjxOT2AEDFkUA3dPPtfzLqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWUy MmY2ZC01NTUxLTQ3MTItOWY5NS0zMDA4YzUxMjIzZWMvZDllMjJmNmQtNTU1MS00 NzEyLTlmOTUtMzAwOGM1MTIyM2VjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDllMjJmNmQtNTU1MS00NzEyLTlm OTUtMzAwOGM1MTIyM2VjL2Q5ZTIyZjZkLTU1NTEtNDcxMi05Zjk1LTMwMDhjNTEy MjNlYy5jcmwwHwYDVR0jBBgwFoAUKMgwTb3YSsAeO4Ye5UoxZba3l3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWUyMmY2ZC01NTUxLTQ3MTItOWY5NS0zMDA4 YzUxMjIzZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC2ClrnZ5sCdyVtzWSRUxjV wlz1H1Rk8R75qXiMwxVZcSyEczLx30u/vEdu+RonJKWqkx+SQdFGKyh0UpYaWUfz L7Xf0/28DnBycl7GU9mMPaOxqTFnWxFRe1Yz7gsKwP4EF3AYZeynSzBR8vc9ZFyT luOzQmE2wJMaEHNcdoFrVXxG3yYq4FxqlCLZfUu7pL8uN68FCbg5hYks7/Y51VaF jC5e6kewoZyhiDtnVmjMG4QrNgbPAs3Oit1BQ3klxk3IkUiXITGmdw8NPdHJWWE5 aIorHWc+17vTxVdt/Daj78CSIi//ASHPvW3TJBLrBs9ho5xaIqDivovF4NE7v3is -----END CERTIFICATE-----Generated at Tue Jul 7 19:04:29 2026 by rpki-client