$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft File: 838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft (raw, json) Hash identifier: EF0EXylPGupRtKiaqj1oKKqI8m8oOpg2vDIM2yGbGVY= Subject key identifier: A5:D7:A3:85:63:2B:87:07:78:CD:A4:FD:60:04:EE:39:FC:3C:14:8F Authority key identifier: DE:F8:1F:76:5A:25:D9:66:4A:7A:48:74:92:7E:15:29:92:58:68:E4 Certificate issuer: /CN=838c2b1f-f58f-4eda-b953-35c6e8e0a1d3 Certificate serial: 010D0C9F4328584E90BA7257117E85F908615100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft Manifest number: 010D0C9F4328584D92BADCE892FDF17C6A5FCE5E Signing time: Mon 20 Jul 2026 21:00:23 +0000 Manifest this update: Mon 20 Jul 2026 21:00:23 +0000 Manifest next update: Wed 22 Jul 2026 21:00:00 +0000 Files and hashes: 1: 838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl (hash: i+dvgHKe3qJ+tVLBGb6VpyTMA1RyzLgOOcx9VXFda4Q=) 2: f594481f-b71f-3694-9566-972e2d639987.roa (hash: RYFSHywIpjSVGJbyJgUhujJF9Fjwwvg1gEOo+t6L3+A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:72:57:11:7e:85:f9:08:61:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=838c2b1f-f58f-4eda-b953-35c6e8e0a1d3 Validity Not Before: Jul 20 21:00:23 2026 GMT Not After : Jul 22 21:00:00 2026 GMT Subject: CN=d62671f4-5343-4439-b36b-9ad697ac5548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b6:53:69:ef:19:5d:3e:2f:f6:cb:20:b8:59: fa:a1:99:d6:75:bf:51:7a:0a:33:18:11:c1:29:cb: 8e:34:8c:c7:78:6c:80:29:a4:27:b8:ad:b5:d1:ee: 38:f7:9c:9f:6e:ad:aa:55:f4:52:49:24:e2:2a:5a: 2c:3a:9b:4b:f6:13:27:ad:7f:cd:77:00:b9:4e:70: 37:8d:36:dc:a6:7f:a4:7c:2b:1d:56:41:c0:e5:38: aa:51:1d:50:89:13:56:8a:9b:7b:d3:0d:1a:3a:6e: 7e:7f:c3:7b:a3:78:4c:d6:cc:8a:cc:63:96:23:90: 7e:c8:b4:4d:c2:29:ba:89:ce:8b:dd:2a:aa:64:f7: 76:eb:e0:f7:5a:a5:6e:c8:a6:e2:ff:13:18:ce:6e: 1a:9d:d7:d2:ae:c9:f8:1d:e9:bb:46:c6:b7:55:91: df:ab:b5:22:39:f5:b5:7b:eb:f4:e2:27:a1:3b:48: 97:23:ab:63:23:05:cc:43:21:55:e0:7c:c4:13:60: 32:fb:cf:52:6b:67:d0:06:e0:cb:a8:ed:81:ff:52: 67:83:b1:d9:1a:c0:d2:23:e4:82:af:6d:1b:bd:95: 6c:6a:ff:ae:2a:25:91:b4:03:1c:42:dc:80:68:99: b7:1b:cd:02:a2:f5:17:14:96:be:39:dd:5d:b3:7e: 05:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D7:A3:85:63:2B:87:07:78:CD:A4:FD:60:04:EE:39:FC:3C:14:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl X509v3 Authority Key Identifier: keyid:DE:F8:1F:76:5A:25:D9:66:4A:7A:48:74:92:7E:15:29:92:58:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:3c:9b:8c:7a:19:b5:96:3e:50:8a:1a:17:86:ed:7a:db:6c: be:bb:d1:44:65:fd:58:a1:e4:0a:c1:d4:c3:ef:ba:b4:9d:95: c3:a8:f9:81:1c:b0:44:29:d4:df:98:f4:e1:a2:9e:f0:32:c0: e0:94:53:84:48:c7:a3:c5:cb:35:4f:b7:9f:4d:7b:c2:fc:b3: 9f:a1:40:87:3e:6c:d9:e1:e3:1d:bc:73:a2:a3:f5:06:69:80: 83:37:84:48:48:c8:6e:7a:9e:29:7c:e7:31:34:27:f0:03:72: 96:8f:c1:24:9d:7d:af:a9:fc:7b:28:2a:0c:39:81:1c:47:52: 92:f3:cc:bc:ca:46:8f:14:c6:4e:7f:a5:61:6a:e6:1a:2d:0b: 46:4c:ba:69:87:68:e7:f5:6b:74:ea:f2:c4:4d:b8:58:63:eb: 48:cf:7b:36:29:25:5e:e8:5e:0e:4b:45:8f:7a:86:4e:48:7e: 50:9d:e6:78:fc:af:5e:96:31:ef:a5:aa:e3:8e:34:b5:5c:49: 2a:07:e3:bf:38:de:48:12:3a:83:21:b9:b9:4d:f7:05:cc:6b: 23:ca:a3:ba:cc:b1:ed:ed:cf:68:80:7b:25:bc:d0:bd:90:0e: a2:40:a0:f0:bb:ec:9a:f5:0b:45:92:17:7f:22:c6:51:f6:4b: e1:3a:8a:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6QunJXEX6F+QhhUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM4YzJiMWYtZjU4Zi00ZWRhLWI5NTMtMzVjNmU4ZTBh MWQzMB4XDTI2MDcyMDIxMDAyM1oXDTI2MDcyMjIxMDAwMFowLzEtMCsGA1UEAxMk ZDYyNjcxZjQtNTM0My00NDM5LWIzNmItOWFkNjk3YWM1NTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LZTae8ZXT4v9ssguFn6oZnWdb9RegozGBHB KcuONIzHeGyAKaQnuK210e4495yfbq2qVfRSSSTiKlosOptL9hMnrX/NdwC5TnA3 jTbcpn+kfCsdVkHA5TiqUR1QiRNWipt70w0aOm5+f8N7o3hM1syKzGOWI5B+yLRN wim6ic6L3SqqZPd26+D3WqVuyKbi/xMYzm4andfSrsn4Hem7Rsa3VZHfq7UiOfW1 e+v04iehO0iXI6tjIwXMQyFV4HzEE2Ay+89Sa2fQBuDLqO2B/1Jng7HZGsDSI+SC r20bvZVsav+uKiWRtAMcQtyAaJm3G80CovUXFJa+Od1ds34FtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKXXo4VjK4cHeM2k/WAE7jn8PBSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Mzhj MmIxZi1mNThmLTRlZGEtYjk1My0zNWM2ZThlMGExZDMvODM4YzJiMWYtZjU4Zi00 ZWRhLWI5NTMtMzVjNmU4ZTBhMWQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODM4YzJiMWYtZjU4Zi00ZWRhLWI5 NTMtMzVjNmU4ZTBhMWQzLzgzOGMyYjFmLWY1OGYtNGVkYS1iOTUzLTM1YzZlOGUw YTFkMy5jcmwwHwYDVR0jBBgwFoAU3vgfdlol2WZKekh0kn4VKZJYaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84MzhjMmIxZi1mNThmLTRlZGEtYjk1My0zNWM2 ZThlMGExZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKPJuMehm1lj5QihoXhu16 22y+u9FEZf1YoeQKwdTD77q0nZXDqPmBHLBEKdTfmPThop7wMsDglFOESMejxcs1 T7efTXvC/LOfoUCHPmzZ4eMdvHOio/UGaYCDN4RISMhuep4pfOcxNCfwA3KWj8Ek nX2vqfx7KCoMOYEcR1KS88y8ykaPFMZOf6VhauYaLQtGTLpph2jn9Wt06vLETbhY Y+tIz3s2KSVe6F4OS0WPeoZOSH5QneZ4/K9eljHvparjjjS1XEkqB+O/ON5IEjqD Ibm5TfcFzGsjyqO6zLHt7c9ogHslvNC9kA6iQKDwu+ya9QtFkhd/IsZR9kvhOopt -----END CERTIFICATE-----Generated at Tue Jul 21 17:38:14 2026 by rpki-client