$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/d87256b0-8122-4d03-a901-06b0556ada70.mft File: d87256b0-8122-4d03-a901-06b0556ada70.mft (raw, json) Hash identifier: K6LgxEP7i1kH54q0p5gi2p2JfPm2vZqL/hyZR3OvOJs= Subject key identifier: EB:E4:73:BD:39:6D:E6:B2:CC:AC:6E:DE:AE:C4:67:E1:DB:F6:9B:71 Authority key identifier: A9:8D:09:1A:86:55:7D:C2:FD:47:D1:21:D5:11:C3:ED:F0:6B:C0:9E Certificate issuer: /CN=d87256b0-8122-4d03-a901-06b0556ada70 Certificate serial: 010D0C9F4328584E91E437187DE09103B57AA780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/d87256b0-8122-4d03-a901-06b0556ada70.mft Manifest number: 010D0C9F4328584D911303BE877806AD9827A39E Signing time: Tue 21 Jul 2026 07:00:23 +0000 Manifest this update: Tue 21 Jul 2026 07:00:23 +0000 Manifest next update: Fri 24 Jul 2026 07:00:00 +0000 Files and hashes: 1: 61dbdfa1-3301-37b4-b771-25d5eccb2489.roa (hash: pEwBEUyN2WS9rQfia07Igy3hHN9JRuXtE6z6vSOlZnw=) 2: d87256b0-8122-4d03-a901-06b0556ada70.crl (hash: 1OAfOo+n57zDq6wiltftjXM1tfBAgoiRDz76YflQsSY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/d87256b0-8122-4d03-a901-06b0556ada70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/d87256b0-8122-4d03-a901-06b0556ada70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:91:e4:37:18:7d:e0:91:03:b5:7a:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d87256b0-8122-4d03-a901-06b0556ada70 Validity Not Before: Jul 21 07:00:23 2026 GMT Not After : Jul 24 07:00:00 2026 GMT Subject: CN=42b886b3-d5e6-43c6-ac5c-63b6cfa212c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:65:7f:99:1b:15:ce:37:8d:ea:ea:e8:d1: 7b:34:12:85:d1:12:0b:23:e5:1c:9e:7a:d2:ed:be: 16:dc:d4:5a:09:64:3f:03:f9:72:36:f3:8f:e7:7c: 3f:9a:d1:59:ec:81:09:ce:1f:cf:46:3e:57:de:3b: 5d:30:62:07:38:0c:2d:4a:67:fb:74:2d:3a:3b:10: 42:54:e9:73:c1:2e:f5:f9:20:b1:9c:4a:0d:b8:e5: 2d:80:17:bf:54:ec:18:6f:b8:06:07:04:40:58:27: a8:3b:df:94:ad:de:b5:c4:af:86:8b:96:ea:05:81: 22:9a:11:04:a1:62:42:ae:e2:85:b4:03:f0:68:62: f6:21:a0:dd:b3:b0:b5:d8:52:03:02:c9:06:66:3d: b0:65:98:af:f0:7e:be:47:54:ae:e8:17:b6:a7:5c: 2c:72:6f:68:9a:21:92:21:39:49:4e:c9:d0:a2:52: e3:5d:28:59:b8:fb:1c:8d:a6:46:06:fb:4b:30:f0: ad:6e:21:ab:a2:c7:41:b5:72:19:fb:e3:9b:74:73: 81:e1:65:97:92:dc:4d:cc:f6:d2:4c:f7:a8:9d:97: 94:fe:6e:fa:46:5b:d7:42:c8:1e:a0:c5:d2:a1:22: 5a:38:a8:4f:1f:0f:76:75:03:38:24:2b:f6:70:56: 2f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E4:73:BD:39:6D:E6:B2:CC:AC:6E:DE:AE:C4:67:E1:DB:F6:9B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/d87256b0-8122-4d03-a901-06b0556ada70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/d87256b0-8122-4d03-a901-06b0556ada70.crl X509v3 Authority Key Identifier: keyid:A9:8D:09:1A:86:55:7D:C2:FD:47:D1:21:D5:11:C3:ED:F0:6B:C0:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:13:d1:b7:22:97:fa:6b:c2:84:4e:a0:5c:86:3c:f1:ad:e1: 1c:55:c5:31:06:f1:f5:29:dc:22:9f:27:2b:38:eb:3a:66:98: ba:13:e0:15:f1:73:3e:17:eb:83:0b:bc:98:ba:27:d1:36:52: c7:b9:50:b0:51:6b:ab:d6:3e:02:47:dd:8b:32:20:57:60:0a: 5e:7d:c4:b5:9c:43:79:33:1f:8b:03:40:cc:c3:cb:60:2f:4e: c7:d9:12:d5:91:22:f3:f6:67:14:4b:02:3b:5b:4e:5a:db:29: 5b:0d:44:b1:15:49:bb:58:e5:32:cc:8c:32:76:b0:74:28:99: 90:ce:e8:b5:39:7e:8b:99:a8:cf:fc:86:7a:22:c4:23:20:22: 22:9c:6d:75:2e:03:9c:65:fe:e8:1e:fb:5f:66:01:1f:93:25: a2:d5:72:c8:1a:92:a5:ad:52:62:94:9c:4d:7e:fc:fb:04:f6: 27:1c:d8:22:21:8c:bc:0a:74:5e:e2:e5:a3:3e:ac:89:12:6e: e5:d2:ba:33:64:58:23:07:68:a9:c1:10:54:56:44:61:97:cb: fd:e9:62:d0:a2:f2:68:ef:30:7e:16:7e:ca:1d:44:5d:07:ad: b8:6a:aa:73:49:90:12:41:75:96:dd:17:d6:28:ba:cc:73:d3: 63:5a:e3:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6R5DcYfeCRA7V6p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg3MjU2YjAtODEyMi00ZDAzLWE5MDEtMDZiMDU1NmFk YTcwMB4XDTI2MDcyMTA3MDAyM1oXDTI2MDcyNDA3MDAwMFowLzEtMCsGA1UEAxMk NDJiODg2YjMtZDVlNi00M2M2LWFjNWMtNjNiNmNmYTIxMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtahlf5kbFc43jerq6NF7NBKF0RILI+UcnnrS 7b4W3NRaCWQ/A/lyNvOP53w/mtFZ7IEJzh/PRj5X3jtdMGIHOAwtSmf7dC06OxBC VOlzwS71+SCxnEoNuOUtgBe/VOwYb7gGBwRAWCeoO9+Urd61xK+Gi5bqBYEimhEE oWJCruKFtAPwaGL2IaDds7C12FIDAskGZj2wZZiv8H6+R1Su6Be2p1wscm9omiGS ITlJTsnQolLjXShZuPscjaZGBvtLMPCtbiGrosdBtXIZ++ObdHOB4WWXktxNzPbS TPeonZeU/m76RlvXQsgeoMXSoSJaOKhPHw92dQM4JCv2cFYvbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOvkc705beayzKxu3q7EZ+Hb9ptxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kODcy NTZiMC04MTIyLTRkMDMtYTkwMS0wNmIwNTU2YWRhNzAvZDg3MjU2YjAtODEyMi00 ZDAzLWE5MDEtMDZiMDU1NmFkYTcwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZDg3MjU2YjAtODEyMi00ZDAzLWE5 MDEtMDZiMDU1NmFkYTcwL2Q4NzI1NmIwLTgxMjItNGQwMy1hOTAxLTA2YjA1NTZh ZGE3MC5jcmwwHwYDVR0jBBgwFoAUqY0JGoZVfcL9R9Eh1RHD7fBrwJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kODcyNTZiMC04MTIyLTRkMDMtYTkwMS0wNmIw NTU2YWRhNzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxE9G3Ipf6a8KETqBchjzx reEcVcUxBvH1KdwinycrOOs6Zpi6E+AV8XM+F+uDC7yYuifRNlLHuVCwUWur1j4C R92LMiBXYApefcS1nEN5Mx+LA0DMw8tgL07H2RLVkSLz9mcUSwI7W05a2ylbDUSx FUm7WOUyzIwydrB0KJmQzui1OX6LmajP/IZ6IsQjICIinG11LgOcZf7oHvtfZgEf kyWi1XLIGpKlrVJilJxNfvz7BPYnHNgiIYy8CnRe4uWjPqyJEm7l0rozZFgjB2ip wRBUVkRhl8v96WLQovJo7zB+Fn7KHURdB624aqpzSZASQXWW3RfWKLrMc9NjWuPJ -----END CERTIFICATE-----Generated at Tue Jul 21 17:38:27 2026 by rpki-client