$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/8cb2cf59-f4a5-4440-8588-1f835a0e0201.mft File: 8cb2cf59-f4a5-4440-8588-1f835a0e0201.mft (raw, json) Hash identifier: oMMVQ0ohnFFm30xFYEwbtp1rrM9dxhgd90KqIETi6J4= Subject key identifier: F1:CB:51:95:83:44:D9:68:B9:B4:C4:78:A8:14:92:7B:80:C0:43:6D Authority key identifier: 31:79:91:C7:76:3C:9F:9D:FF:4C:BD:AC:92:D0:B4:35:BD:F2:65:3A Certificate issuer: /CN=8cb2cf59-f4a5-4440-8588-1f835a0e0201 Certificate serial: 010D0C9F4328584E907EE1846CF35B43C5A3CA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/8cb2cf59-f4a5-4440-8588-1f835a0e0201.mft Manifest number: 010D0C9F4328584E6C3BE8B24E1D2318B50CB14E Signing time: Mon 20 Jul 2026 19:00:21 +0000 Manifest this update: Mon 20 Jul 2026 19:00:21 +0000 Manifest next update: Wed 22 Jul 2026 19:00:00 +0000 Files and hashes: 1: 060a7d86-c23d-3c4e-8f16-8a2797116d92.roa (hash: XyGVPv/vNJIIlrujIDRP/MYHwf4zOUBDjdGVMm0z6y4=) 2: 8cb2cf59-f4a5-4440-8588-1f835a0e0201.crl (hash: x/l6M5NLKfTxSfI815DbY/wWJ1LyGP+bQbTHPyBBHM8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/8cb2cf59-f4a5-4440-8588-1f835a0e0201.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/8cb2cf59-f4a5-4440-8588-1f835a0e0201.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:7e:e1:84:6c:f3:5b:43:c5:a3:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cb2cf59-f4a5-4440-8588-1f835a0e0201 Validity Not Before: Jul 20 19:00:21 2026 GMT Not After : Jul 22 19:00:00 2026 GMT Subject: CN=94e03eef-afa3-4bd3-904e-a46d70a483ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0d:04:2e:f2:7c:54:e1:85:55:18:1c:4c:bb: 08:1f:b5:bd:70:e6:9a:a0:45:86:9a:d3:88:ae:a2: e1:75:6e:76:c4:a1:b6:06:2c:b8:bd:74:25:db:e6: 98:6d:ea:8f:36:6e:56:cc:57:00:94:74:e1:15:41: 44:80:6e:6f:3c:24:fa:a6:0e:bd:aa:9f:c6:cd:1f: e9:93:a7:4c:80:2a:78:bb:3d:70:af:ae:10:9e:38: 5b:17:99:f7:f1:a2:43:de:f9:2c:fb:d2:88:f2:c5: ae:c0:70:d8:70:78:60:c2:29:b0:2e:14:79:d5:95: 00:20:6d:02:f7:0e:aa:50:06:18:b8:2a:3c:5f:8c: d7:82:fa:93:fd:64:c8:71:06:c8:0f:37:c2:af:97: fc:25:05:35:8e:aa:a1:98:3b:47:0c:2a:d6:65:59: 68:37:49:bc:d1:28:4c:d1:51:89:03:18:db:cc:03: 64:a2:fe:30:42:02:9a:6a:7f:d4:a8:64:be:7c:36: 73:10:ef:cc:fa:ea:fd:ca:29:ee:57:c2:c1:7c:ee: c4:62:45:9c:8a:e7:41:8b:f8:a7:e4:0c:11:1a:33: 97:9d:30:48:d6:3a:f5:f7:25:49:94:42:93:6e:dd: db:5e:58:76:4d:b9:85:b9:02:ff:e7:39:07:bf:70: 55:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CB:51:95:83:44:D9:68:B9:B4:C4:78:A8:14:92:7B:80:C0:43:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/8cb2cf59-f4a5-4440-8588-1f835a0e0201.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/8cb2cf59-f4a5-4440-8588-1f835a0e0201.crl X509v3 Authority Key Identifier: keyid:31:79:91:C7:76:3C:9F:9D:FF:4C:BD:AC:92:D0:B4:35:BD:F2:65:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:15:b3:d7:0e:9d:61:da:2b:44:7f:ad:68:b6:d0:5c:ab:eb: 06:3e:b2:e8:97:9c:ee:b2:52:5b:03:1e:48:a5:d8:82:ce:78: 8c:48:10:a6:00:d6:05:58:6d:a4:ab:c0:8f:ea:2b:86:fe:47: a7:22:50:78:6a:17:b8:c8:16:49:e9:30:3d:28:f3:9d:cb:4a: 0b:77:52:44:5f:b5:54:bd:9e:9c:cd:18:29:c8:64:8a:b5:b2: bc:f0:24:67:0d:ed:72:6a:bb:37:0d:61:57:e9:65:d0:54:24: 5b:ed:35:06:e2:f7:3f:6a:1b:50:cd:e4:33:dd:93:75:9e:bb: ef:d1:c8:3d:b6:83:9b:a1:79:26:68:f5:86:36:08:51:b9:95: 80:50:f3:1d:8f:f3:46:86:60:9e:43:a0:8e:73:69:5d:0b:21: d1:4c:6d:61:df:ed:79:22:1f:22:df:9f:9a:cf:eb:ee:13:1e: 83:f0:3d:81:4a:b9:eb:83:12:31:42:37:66:ec:fa:ea:79:fa: 90:5b:55:f5:73:43:47:76:75:ed:08:ff:c5:56:cf:44:34:92: 4e:35:57:f8:2f:cf:d6:34:75:72:e0:d7:98:e0:60:bc:08:0e: 3a:db:6e:d8:58:40:9a:2a:f3:fd:df:e2:18:81:af:1d:6a:3f: 95:bc:99:9a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6QfuGEbPNbQ8WjyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNiMmNmNTktZjRhNS00NDQwLTg1ODgtMWY4MzVhMGUw MjAxMB4XDTI2MDcyMDE5MDAyMVoXDTI2MDcyMjE5MDAwMFowLzEtMCsGA1UEAxMk OTRlMDNlZWYtYWZhMy00YmQzLTkwNGUtYTQ2ZDcwYTQ4M2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg0ELvJ8VOGFVRgcTLsIH7W9cOaaoEWGmtOI rqLhdW52xKG2Biy4vXQl2+aYbeqPNm5WzFcAlHThFUFEgG5vPCT6pg69qp/GzR/p k6dMgCp4uz1wr64QnjhbF5n38aJD3vks+9KI8sWuwHDYcHhgwimwLhR51ZUAIG0C 9w6qUAYYuCo8X4zXgvqT/WTIcQbIDzfCr5f8JQU1jqqhmDtHDCrWZVloN0m80ShM 0VGJAxjbzANkov4wQgKaan/UqGS+fDZzEO/M+ur9yinuV8LBfO7EYkWciudBi/in 5AwRGjOXnTBI1jr19yVJlEKTbt3bXlh2TbmFuQL/5zkHv3BVSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPHLUZWDRNloubTEeKgUknuAwENtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Y2Iy Y2Y1OS1mNGE1LTQ0NDAtODU4OC0xZjgzNWEwZTAyMDEvOGNiMmNmNTktZjRhNS00 NDQwLTg1ODgtMWY4MzVhMGUwMjAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGNiMmNmNTktZjRhNS00NDQwLTg1 ODgtMWY4MzVhMGUwMjAxLzhjYjJjZjU5LWY0YTUtNDQ0MC04NTg4LTFmODM1YTBl MDIwMS5jcmwwHwYDVR0jBBgwFoAUMXmRx3Y8n53/TL2sktC0Nb3yZTowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Y2IyY2Y1OS1mNGE1LTQ0NDAtODU4OC0xZjgz NWEwZTAyMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkFbPXDp1h2itEf61ottBc q+sGPrLol5zuslJbAx5IpdiCzniMSBCmANYFWG2kq8CP6iuG/kenIlB4ahe4yBZJ 6TA9KPOdy0oLd1JEX7VUvZ6czRgpyGSKtbK88CRnDe1yars3DWFX6WXQVCRb7TUG 4vc/ahtQzeQz3ZN1nrvv0cg9toOboXkmaPWGNghRuZWAUPMdj/NGhmCeQ6COc2ld CyHRTG1h3+15Ih8i35+az+vuEx6D8D2BSrnrgxIxQjdm7PrqefqQW1X1c0NHdnXt CP/FVs9ENJJONVf4L8/WNHVy4NeY4GC8CA46227YWECaKvP93+IYga8daj+VvJma -----END CERTIFICATE-----Generated at Tue Jul 21 17:46:16 2026 by rpki-client