$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/0649be86-b5a4-4814-9f95-9a7f71de1d50.mft File: 0649be86-b5a4-4814-9f95-9a7f71de1d50.mft (raw, json) Hash identifier: JE++g5ThsZJQHduv75kzuScH9i0dThd2hZsfaF40u6U= Subject key identifier: 90:E5:E8:8D:EA:CB:C7:EA:9A:FD:A5:37:01:1E:A3:46:F8:B1:36:BC Authority key identifier: 48:07:CE:94:71:1C:AE:04:FE:D1:A1:E9:75:FA:71:19:BC:EB:E7:AB Certificate issuer: /CN=0649be86-b5a4-4814-9f95-9a7f71de1d50 Certificate serial: 010D0C9F4328584E92F0329B3AA053387B3F86C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/0649be86-b5a4-4814-9f95-9a7f71de1d50.mft Manifest number: 010D0C9F4328584E60B2D6042D5A3F7F398F9532 Signing time: Tue 21 Jul 2026 16:00:22 +0000 Manifest this update: Tue 21 Jul 2026 16:00:22 +0000 Manifest next update: Fri 24 Jul 2026 16:00:00 +0000 Files and hashes: 1: 0649be86-b5a4-4814-9f95-9a7f71de1d50.crl (hash: OVnRQgx5AauVz7GbfsygMkud/mNQw4Y07ZXrL7WOUzQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/0649be86-b5a4-4814-9f95-9a7f71de1d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/0649be86-b5a4-4814-9f95-9a7f71de1d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:f0:32:9b:3a:a0:53:38:7b:3f:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0649be86-b5a4-4814-9f95-9a7f71de1d50 Validity Not Before: Jul 21 16:00:22 2026 GMT Not After : Jul 24 16:00:00 2026 GMT Subject: CN=3c16aa79-9b26-4463-86d5-a76d57f4f83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:e7:7f:f7:67:0b:28:3e:bc:cd:af:75:83: 33:bf:6a:c3:68:fe:f8:92:3d:b5:26:d0:13:33:8d: 39:18:8a:e8:76:ce:95:97:bf:ed:d0:55:4f:db:50: 8f:4a:17:57:d6:d7:2a:4c:b2:81:32:36:82:8f:54: f3:59:79:cc:ec:ba:34:1c:4f:95:28:9a:05:dc:2b: 37:dc:8f:40:9a:5a:f9:5f:4f:64:68:bf:11:01:ed: 47:4b:82:85:21:e9:05:a4:8f:08:5a:9c:48:08:21: d4:c9:a9:84:82:f2:89:d9:a5:1f:aa:7d:f7:6f:f1: d1:59:4f:c6:8d:ee:f5:63:9a:a9:24:23:6d:8f:51: 0d:03:93:86:41:54:52:09:c2:55:d5:b7:69:c8:80: d8:68:1f:d1:bc:6e:77:27:9b:8d:a7:87:87:bd:ef: f8:35:7f:80:a2:50:ad:0c:ca:bd:d8:b6:de:02:77: 71:87:0b:7f:32:33:6a:9f:5c:56:56:c9:f6:fd:05: 53:57:ae:79:8a:20:fe:df:0c:02:27:6c:ae:ff:09: 10:21:4c:16:f5:89:7f:16:e0:17:da:8b:44:c1:ec: 16:43:34:2b:36:c0:0d:1b:fb:a3:53:17:3a:40:8c: 5a:27:d9:6d:b2:d3:74:2c:16:c9:17:48:e5:a8:f8: dd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E5:E8:8D:EA:CB:C7:EA:9A:FD:A5:37:01:1E:A3:46:F8:B1:36:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/0649be86-b5a4-4814-9f95-9a7f71de1d50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/0649be86-b5a4-4814-9f95-9a7f71de1d50.crl X509v3 Authority Key Identifier: keyid:48:07:CE:94:71:1C:AE:04:FE:D1:A1:E9:75:FA:71:19:BC:EB:E7:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:07:5e:74:53:b9:6a:11:20:a0:18:55:71:9b:1d:a2:01:7f: 49:3e:9d:dc:a2:6b:c3:f6:ba:c7:bb:f5:61:45:f1:75:ca:b8: a1:aa:7f:20:01:e2:4b:72:47:68:75:9f:43:db:e0:d9:7f:61: fe:92:8f:a8:0f:09:bc:f7:d4:e0:bd:46:b9:c4:bc:59:d7:67: c0:0e:55:34:c6:60:54:68:a3:8e:30:d6:e8:74:84:58:ca:e3: d1:97:27:9a:ab:78:d9:0d:c7:d6:a0:2e:c4:fc:ca:6b:2f:5c: 24:b0:16:f4:d6:52:41:e8:8c:42:0e:80:0c:16:24:15:72:bc: 20:27:e3:2b:78:b2:06:dd:d2:6e:ae:65:c3:99:af:ba:3f:e3: 81:eb:26:b8:cf:68:60:9a:88:74:34:d9:1d:9e:14:1d:3e:0c: 11:11:81:7b:b9:95:45:e6:2e:d4:e8:09:39:a4:65:b8:23:61: df:61:64:68:32:0d:81:b6:4c:fd:03:a4:9a:ad:50:15:5e:b8: ee:e4:4c:9e:21:a7:d3:b7:40:a5:4b:95:f7:0b:b8:49:e5:6f: e0:67:5e:f6:a6:db:9f:a1:9f:51:8e:92:e8:8a:08:98:1f:90: 2d:77:37:0a:d2:0c:05:39:55:b4:78:63:ec:c6:ca:47:6e:d5: b3:56:4b:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6S8DKbOqBTOHs/hsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0OWJlODYtYjVhNC00ODE0LTlmOTUtOWE3ZjcxZGUx ZDUwMB4XDTI2MDcyMTE2MDAyMloXDTI2MDcyNDE2MDAwMFowLzEtMCsGA1UEAxMk M2MxNmFhNzktOWIyNi00NDYzLTg2ZDUtYTc2ZDU3ZjRmODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIbnf/dnCyg+vM2vdYMzv2rDaP74kj21JtAT M405GIrods6Vl7/t0FVP21CPShdX1tcqTLKBMjaCj1TzWXnM7Lo0HE+VKJoF3Cs3 3I9Amlr5X09kaL8RAe1HS4KFIekFpI8IWpxICCHUyamEgvKJ2aUfqn33b/HRWU/G je71Y5qpJCNtj1ENA5OGQVRSCcJV1bdpyIDYaB/RvG53J5uNp4eHve/4NX+AolCt DMq92LbeAndxhwt/MjNqn1xWVsn2/QVTV655iiD+3wwCJ2yu/wkQIUwW9Yl/FuAX 2otEwewWQzQrNsANG/ujUxc6QIxaJ9ltstN0LBbJF0jlqPjd/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJDl6I3qy8fqmv2lNwEeo0b4sTa8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wNjQ5 YmU4Ni1iNWE0LTQ4MTQtOWY5NS05YTdmNzFkZTFkNTAvMDY0OWJlODYtYjVhNC00 ODE0LTlmOTUtOWE3ZjcxZGUxZDUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDY0OWJlODYtYjVhNC00ODE0LTlm OTUtOWE3ZjcxZGUxZDUwLzA2NDliZTg2LWI1YTQtNDgxNC05Zjk1LTlhN2Y3MWRl MWQ1MC5jcmwwHwYDVR0jBBgwFoAUSAfOlHEcrgT+0aHpdfpxGbzr56swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wNjQ5YmU4Ni1iNWE0LTQ4MTQtOWY5NS05YTdm NzFkZTFkNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvB150U7lqESCgGFVxmx2i AX9JPp3comvD9rrHu/VhRfF1yrihqn8gAeJLckdodZ9D2+DZf2H+ko+oDwm899Tg vUa5xLxZ12fADlU0xmBUaKOOMNbodIRYyuPRlyeaq3jZDcfWoC7E/MprL1wksBb0 1lJB6IxCDoAMFiQVcrwgJ+MreLIG3dJurmXDma+6P+OB6ya4z2hgmoh0NNkdnhQd PgwREYF7uZVF5i7U6Ak5pGW4I2HfYWRoMg2Btkz9A6SarVAVXrju5EyeIafTt0Cl S5X3C7hJ5W/gZ172ptufoZ9RjpLoigiYH5AtdzcK0gwFOVW0eGPsxspHbtWzVkvj -----END CERTIFICATE-----Generated at Tue Jul 21 17:23:00 2026 by rpki-client