$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft File: 681d813c-8566-4f01-b8f3-989dcf8d983e.mft (raw, json) Hash identifier: kDLB4kqtPb0k71azNyZzHpKpZafjpVYtzU8VP0ha7dY= Subject key identifier: 95:E5:84:F9:11:F1:07:25:E5:7A:B5:59:01:E3:AC:9B:B2:F5:0A:76 Authority key identifier: 99:A5:0D:75:63:4A:1E:EF:E7:CD:0B:9D:7A:DA:64:0F:FD:82:38:71 Certificate issuer: /CN=681d813c-8566-4f01-b8f3-989dcf8d983e Certificate serial: 010D0C9F4328584E9061124B6AD8D052536BAB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft Manifest number: 010D0C9F4328584DBF038A7EB1FDDA5706A7E6CC Signing time: Mon 20 Jul 2026 18:00:23 +0000 Manifest this update: Mon 20 Jul 2026 18:00:23 +0000 Manifest next update: Wed 22 Jul 2026 18:00:00 +0000 Files and hashes: 1: 681d813c-8566-4f01-b8f3-989dcf8d983e.crl (hash: A9GJyrnQAvXGNyP80fXU+SgnL5QbhFJEe2lVKrMVPII=) 2: bd41b623-bbc6-3d69-adb3-afa7f5e7d9db.roa (hash: yupvJdwGUDMYNoDeqH3xKu9jG5BTkxhEcktfBvS1JhE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:61:12:4b:6a:d8:d0:52:53:6b:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681d813c-8566-4f01-b8f3-989dcf8d983e Validity Not Before: Jul 20 18:00:23 2026 GMT Not After : Jul 22 18:00:00 2026 GMT Subject: CN=debc4745-9986-48c6-8580-1c4a5f81b270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d8:3c:50:f9:d1:dd:4d:0a:d7:a9:6f:24:60: c6:7a:40:46:94:7f:8b:d1:87:a6:07:63:8d:91:94: a8:61:7c:7b:75:04:87:a8:82:25:b0:47:d8:7d:d9: 4a:b7:66:88:8d:2d:81:ce:4e:2e:2f:9e:59:03:21: 61:27:47:00:b1:29:50:98:d8:77:9b:e5:7d:c4:f9: a2:4f:bb:9b:27:95:4a:a2:c6:7b:2c:84:6c:1d:c5: ab:e9:25:78:a8:de:7f:42:3f:7f:c1:27:1d:99:36: 25:b4:c5:58:77:0f:da:bc:d5:ce:d5:42:63:28:68: 29:9e:8c:f0:cb:9e:25:f0:c2:9f:9f:0d:e6:0b:02: 58:b9:ae:c5:8f:2a:90:30:9b:ca:9e:36:6d:9c:ba: 28:2e:95:5d:d8:59:8e:00:0e:38:8b:24:17:33:b1: 6d:2b:88:11:d7:5d:d2:29:1e:65:56:8e:91:a5:44: 1b:09:d4:90:a3:6a:9e:df:54:2d:29:23:f4:96:a6: 5b:0b:53:f0:9f:10:ab:86:c3:95:d9:06:9a:bb:d7: be:38:4f:74:28:43:14:73:04:27:88:32:e0:15:fa: 24:48:7b:d3:e2:7e:23:88:4d:31:54:4b:58:2b:2b: ed:e2:1b:4b:ef:41:86:1b:57:da:ad:ee:b1:3d:0f: ed:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E5:84:F9:11:F1:07:25:E5:7A:B5:59:01:E3:AC:9B:B2:F5:0A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.crl X509v3 Authority Key Identifier: keyid:99:A5:0D:75:63:4A:1E:EF:E7:CD:0B:9D:7A:DA:64:0F:FD:82:38:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b8:d2:5c:ff:ec:88:4d:94:dc:bc:e8:8a:e9:52:53:8c:5e: f6:24:df:c3:e6:8a:73:51:81:81:d0:58:a1:c1:ee:e0:66:2b: f8:5e:49:26:5c:28:7e:7a:8e:75:c7:66:3b:af:bc:b6:1a:68: ec:42:ad:1e:a9:28:6d:02:4c:81:d1:d9:8e:79:53:ee:3d:06: 55:a0:8e:5b:89:8f:e5:a1:dd:e7:89:b3:37:53:7f:fc:09:a2: f0:b6:bb:c0:50:f5:cf:53:cc:68:29:3a:55:a2:e6:86:bd:86: 8f:fd:a1:7e:3d:b6:df:03:d6:dc:e7:1b:d8:91:3e:6f:5b:4b: 31:52:75:e0:90:81:55:e3:28:06:1d:9a:19:b9:37:75:8a:88: 62:8f:39:39:b4:59:14:c9:84:22:c2:f3:f4:d8:e2:57:80:66: 79:32:d4:9f:47:48:ba:53:b9:94:f3:93:2c:2c:d5:ed:1f:36: 7c:8c:71:17:18:aa:72:15:33:fa:33:6a:63:f1:83:b7:ce:b3: 12:7b:5d:6a:e0:68:a9:29:f0:76:42:93:e9:17:de:ad:29:65: 04:03:03:f1:17:b1:5f:eb:1c:8a:0e:0a:ce:88:4f:0d:bb:b2: c7:0b:4d:6c:6e:fa:b4:4a:cb:95:88:b5:49:8e:4b:60:10:32: eb:55:f6:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6QYRJLatjQUlNrqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjgxZDgxM2MtODU2Ni00ZjAxLWI4ZjMtOTg5ZGNmOGQ5 ODNlMB4XDTI2MDcyMDE4MDAyM1oXDTI2MDcyMjE4MDAwMFowLzEtMCsGA1UEAxMk ZGViYzQ3NDUtOTk4Ni00OGM2LTg1ODAtMWM0YTVmODFiMjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtg8UPnR3U0K16lvJGDGekBGlH+L0YemB2ON kZSoYXx7dQSHqIIlsEfYfdlKt2aIjS2Bzk4uL55ZAyFhJ0cAsSlQmNh3m+V9xPmi T7ubJ5VKosZ7LIRsHcWr6SV4qN5/Qj9/wScdmTYltMVYdw/avNXO1UJjKGgpnozw y54l8MKfnw3mCwJYua7FjyqQMJvKnjZtnLooLpVd2FmOAA44iyQXM7FtK4gR113S KR5lVo6RpUQbCdSQo2qe31QtKSP0lqZbC1PwnxCrhsOV2Qaau9e+OE90KEMUcwQn iDLgFfokSHvT4n4jiE0xVEtYKyvt4htL70GGG1fare6xPQ/tEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJXlhPkR8Qcl5Xq1WQHjrJuy9Qp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82ODFk ODEzYy04NTY2LTRmMDEtYjhmMy05ODlkY2Y4ZDk4M2UvNjgxZDgxM2MtODU2Ni00 ZjAxLWI4ZjMtOTg5ZGNmOGQ5ODNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjgxZDgxM2MtODU2Ni00ZjAxLWI4 ZjMtOTg5ZGNmOGQ5ODNlLzY4MWQ4MTNjLTg1NjYtNGYwMS1iOGYzLTk4OWRjZjhk OTgzZS5jcmwwHwYDVR0jBBgwFoAUmaUNdWNKHu/nzQudetpkD/2COHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82ODFkODEzYy04NTY2LTRmMDEtYjhmMy05ODlk Y2Y4ZDk4M2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARuNJc/+yITZTcvOiK6VJT jF72JN/D5opzUYGB0Fihwe7gZiv4XkkmXCh+eo51x2Y7r7y2GmjsQq0eqShtAkyB 0dmOeVPuPQZVoI5biY/lod3nibM3U3/8CaLwtrvAUPXPU8xoKTpVouaGvYaP/aF+ PbbfA9bc5xvYkT5vW0sxUnXgkIFV4ygGHZoZuTd1iohijzk5tFkUyYQiwvP02OJX gGZ5MtSfR0i6U7mU85MsLNXtHzZ8jHEXGKpyFTP6M2pj8YO3zrMSe11q4GipKfB2 QpPpF96tKWUEAwPxF7Ff6xyKDgrOiE8Nu7LHC01sbvq0SsuViLVJjktgEDLrVfaY -----END CERTIFICATE-----Generated at Tue Jul 21 17:41:36 2026 by rpki-client