$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.mft File: bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.mft (raw, json) Hash identifier: 2/ldqkPu5HJORhw+XNucHVANK2HdsZ8kq53ekc6JOig= Subject key identifier: F6:1E:18:3B:09:6C:10:B8:F5:EE:34:A2:7B:7D:F8:E3:C1:83:42:60 Authority key identifier: 7A:9A:89:85:4C:03:25:2E:80:E6:C2:32:49:B4:15:86:E1:34:A0:94 Certificate issuer: /CN=bd4370d8-dcbf-4a76-8882-6d8829ae3e2b Certificate serial: 010D0C9F4328584E907EDCDE7B720EACF51B5660 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.mft Manifest number: 010D0C9F4328584DA8E4A92C6DE03B6A4937B488 Signing time: Mon 20 Jul 2026 19:00:21 +0000 Manifest this update: Mon 20 Jul 2026 19:00:21 +0000 Manifest next update: Wed 22 Jul 2026 19:00:00 +0000 Files and hashes: 1: 50610e90-9b59-326a-a735-b0efdc51b129.roa (hash: 61tHz2TbRwViEecijfrgprcLu0kSYOQMP+OUbO/pnlE=) 2: 9c04745e-22a4-3b9d-b55c-ab071bc22ecf.roa (hash: P7PDwQIifzY4IyA/eGPb5PoEA/qHAqzavYnGOz+X0ZI=) 3: bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.crl (hash: PnqlSoraRhbITMqEUDb2qOU8fcZBHAcaBJfLRdf5AXA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:7e:dc:de:7b:72:0e:ac:f5:1b:56:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4370d8-dcbf-4a76-8882-6d8829ae3e2b Validity Not Before: Jul 20 19:00:21 2026 GMT Not After : Jul 22 19:00:00 2026 GMT Subject: CN=251e3525-363e-4eb3-8e71-25503d53421e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5c:c7:95:3a:f6:4f:86:2f:75:1c:fe:64:45: 62:a5:5f:ae:9c:04:d2:56:77:d0:32:c0:2c:21:47: 85:5a:08:27:09:d4:a5:1c:37:71:d4:1b:5d:75:7a: 7e:5c:13:68:d6:44:dc:6a:19:2d:7e:a8:51:5b:c7: e0:1b:f4:ee:0c:4b:e3:4e:34:f5:1c:1b:fe:d6:43: f5:d1:e0:64:89:20:e9:d8:13:1f:32:f4:99:d2:45: 13:cf:ec:dd:43:71:c0:55:6f:7a:07:7c:49:b8:c2: 72:05:a9:fb:12:7f:e7:96:65:f3:98:1b:98:b2:07: 24:d5:16:7b:27:c1:16:cc:76:10:61:96:09:0f:3a: ba:93:88:a5:ce:3f:e6:d7:4c:86:8f:64:18:69:eb: f0:eb:c1:76:ae:c5:65:bf:82:16:a5:fa:02:60:cc: 57:87:ff:f3:2f:95:c8:2e:c6:97:27:ef:05:2e:c2: 21:91:a5:97:dc:31:ad:a2:b9:b4:47:72:84:62:eb: 01:cd:e5:0c:14:63:5c:ff:ca:3f:b7:7b:a4:18:b3: c9:36:6c:fe:29:09:bd:8c:76:2e:98:32:24:c5:da: 31:65:df:fc:5d:9e:e9:44:c0:38:25:8a:ca:b4:76: 00:41:39:51:55:fe:b2:53:49:c4:60:2d:66:7f:ca: 22:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1E:18:3B:09:6C:10:B8:F5:EE:34:A2:7B:7D:F8:E3:C1:83:42:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.crl X509v3 Authority Key Identifier: keyid:7A:9A:89:85:4C:03:25:2E:80:E6:C2:32:49:B4:15:86:E1:34:A0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:9e:8c:47:e5:1b:12:9d:ce:fb:c7:3f:1c:71:e8:28:8d:6b: 53:17:29:d8:42:4f:f7:d7:a5:7d:02:28:67:6c:e5:31:95:6c: 2e:17:29:92:ed:50:c1:51:02:23:58:d2:0e:3d:aa:c0:ff:51: 63:b7:4f:1b:65:48:c8:1c:32:8b:ba:91:64:3d:21:52:48:4e: 84:c1:d1:40:fd:d3:05:fa:ef:2e:b8:3f:4c:04:36:f2:f6:31: 19:86:2a:ba:68:00:b0:6a:89:bc:3e:5d:58:a2:97:bf:4f:2c: ed:15:41:1f:29:77:d9:71:de:09:96:f7:db:c4:4c:1e:61:0a: ff:d5:36:15:de:bb:f3:af:4e:aa:90:a1:48:db:4b:c4:bf:e8: 45:6f:41:0f:56:f8:c2:50:0b:14:ce:52:4d:8d:e1:5c:ac:b0: bb:5f:f4:ad:d8:76:8d:c9:6f:af:b9:89:ee:9c:7b:11:4d:68: a7:1e:ca:92:63:11:35:44:09:02:4e:14:b1:03:58:43:69:54: b0:7b:0a:63:db:df:8f:a1:a7:71:4e:a0:5b:b7:8e:fe:b2:7b: 37:4d:58:09:20:15:cb:99:cf:9c:81:b2:67:a7:c5:ec:dd:94: ab:d3:10:c9:ef:45:08:59:b9:13:0b:d6:d5:79:e6:bd:05:4d: 0f:cd:7f:c8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6Qftzee3IOrPUbVmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ0MzcwZDgtZGNiZi00YTc2LTg4ODItNmQ4ODI5YWUz ZTJiMB4XDTI2MDcyMDE5MDAyMVoXDTI2MDcyMjE5MDAwMFowLzEtMCsGA1UEAxMk MjUxZTM1MjUtMzYzZS00ZWIzLThlNzEtMjU1MDNkNTM0MjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVzHlTr2T4YvdRz+ZEVipV+unATSVnfQMsAs IUeFWggnCdSlHDdx1BtddXp+XBNo1kTcahktfqhRW8fgG/TuDEvjTjT1HBv+1kP1 0eBkiSDp2BMfMvSZ0kUTz+zdQ3HAVW96B3xJuMJyBan7En/nlmXzmBuYsgck1RZ7 J8EWzHYQYZYJDzq6k4ilzj/m10yGj2QYaevw68F2rsVlv4IWpfoCYMxXh//zL5XI LsaXJ+8FLsIhkaWX3DGtorm0R3KEYusBzeUMFGNc/8o/t3ukGLPJNmz+KQm9jHYu mDIkxdoxZd/8XZ7pRMA4JYrKtHYAQTlRVf6yU0nEYC1mf8oi4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPYeGDsJbBC49e40ont9+OPBg0JgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iZDQz NzBkOC1kY2JmLTRhNzYtODg4Mi02ZDg4MjlhZTNlMmIvYmQ0MzcwZDgtZGNiZi00 YTc2LTg4ODItNmQ4ODI5YWUzZTJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYmQ0MzcwZDgtZGNiZi00YTc2LTg4 ODItNmQ4ODI5YWUzZTJiL2JkNDM3MGQ4LWRjYmYtNGE3Ni04ODgyLTZkODgyOWFl M2UyYi5jcmwwHwYDVR0jBBgwFoAUepqJhUwDJS6A5sIySbQVhuE0oJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iZDQzNzBkOC1kY2JmLTRhNzYtODg4Mi02ZDg4 MjlhZTNlMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrnoxH5RsSnc77xz8ccego jWtTFynYQk/316V9AihnbOUxlWwuFymS7VDBUQIjWNIOParA/1Fjt08bZUjIHDKL upFkPSFSSE6EwdFA/dMF+u8uuD9MBDby9jEZhiq6aACwaom8Pl1Yope/TyztFUEf KXfZcd4JlvfbxEweYQr/1TYV3rvzr06qkKFI20vEv+hFb0EPVvjCUAsUzlJNjeFc rLC7X/St2HaNyW+vuYnunHsRTWinHsqSYxE1RAkCThSxA1hDaVSwewpj29+Poadx TqBbt47+sns3TVgJIBXLmc+cgbJnp8Xs3ZSr0xDJ70UIWbkTC9bVeea9BU0PzX/I -----END CERTIFICATE-----Generated at Tue Jul 21 17:59:18 2026 by rpki-client