$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft File: 8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft (raw, json) Hash identifier: HQR5gysB59P1jcTAdte91U4tWUuaaQg4sXv5c5u6RO8= Subject key identifier: D9:00:90:9D:FB:D8:0E:BE:5C:8E:AC:38:3D:58:1F:79:E8:73:DE:87 Authority key identifier: F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 Certificate issuer: /CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Certificate serial: 010D0C9F4328584EAFAB86963A5A0A116C086660 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft Manifest number: 010D0C9F4328584482DE472669570C803182493C Signing time: Fri 31 Jul 2026 23:00:23 +0000 Manifest this update: Fri 31 Jul 2026 23:00:23 +0000 Manifest next update: Sun 02 Aug 2026 23:00:00 +0000 Files and hashes: 1: 8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl (hash: 29nuJAIQORdkj4VN5bVkq4onAlrpsj9EFXMElqayOW8=) 2: dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa (hash: GXg/I+yAxrQ8jp5ikw1vcQzxcwt49HlRCKz20rQMCvY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:ab:86:96:3a:5a:0a:11:6c:08:66:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Validity Not Before: Jul 31 23:00:23 2026 GMT Not After : Aug 2 23:00:00 2026 GMT Subject: CN=1aeba399-841d-435b-8d38-6938ae571087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:29:7e:d9:3d:3f:f6:76:be:5b:58:df:cb:a8: a7:dc:f5:e5:2b:a5:e8:d1:d3:b1:85:03:84:a7:b8: f3:f6:a8:8c:7a:97:76:27:7a:a0:5b:e2:b8:61:65: 18:62:49:c3:17:59:8e:da:5e:be:9d:55:50:f3:86: 78:87:f5:ee:b8:e7:11:b2:60:e8:d1:10:82:6a:91: 37:e2:66:d1:3a:a5:31:f4:d1:fb:89:61:39:7d:a7: 37:53:d1:36:49:99:00:fa:8f:ba:90:8c:a5:8a:45: 5e:79:13:06:48:55:13:b9:5d:d2:c5:45:56:e4:2d: f1:8b:15:1a:36:28:71:26:c0:41:58:3d:54:4c:7f: d3:98:9c:74:7c:89:8b:15:30:b1:07:26:4f:04:c8: fb:9e:3f:18:87:ca:fb:93:9d:d4:79:1c:fa:b9:2c: c1:07:92:58:d8:d9:e2:8c:25:1d:ad:49:e9:a5:f1: 4c:34:46:5e:6d:d0:b4:70:96:57:f0:12:93:c6:77: ae:43:35:bd:3c:ca:63:13:e1:34:64:8e:12:38:78: 5e:df:94:5c:5c:de:88:1e:10:9c:37:72:07:f6:f2: 69:95:d7:ad:0b:b1:ec:ad:49:60:5b:ad:1b:ad:1d: bc:d0:9a:46:28:86:54:0c:6d:ee:f3:9b:f1:ac:b5: 9f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:00:90:9D:FB:D8:0E:BE:5C:8E:AC:38:3D:58:1F:79:E8:73:DE:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl X509v3 Authority Key Identifier: keyid:F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:7e:3b:bd:b4:ec:57:63:ce:24:5d:95:c3:cf:be:0b:5f:13: c8:7d:7b:5a:6c:65:0f:9b:46:96:92:36:ce:19:b3:cd:7f:c3: d4:eb:a5:ed:ae:d0:fa:ff:be:f7:10:76:18:c0:1f:b0:34:ff: 74:19:6f:fd:56:4a:6f:98:3b:e0:e5:8d:8b:6c:a4:0f:99:31: d4:64:23:8a:0c:aa:b6:ee:c1:36:c9:b8:67:1b:76:6d:2a:f0: c6:44:6d:7b:74:f1:2c:b0:6c:2f:b7:89:8d:16:f6:d6:3c:eb: 67:3c:75:37:98:6a:6b:d3:54:13:f3:0f:db:c5:f1:13:e8:3d: 11:0d:b0:d2:d1:a5:91:67:be:77:65:3e:e5:cc:a2:16:34:f6: 27:4e:6c:68:a1:4c:be:29:d8:88:02:03:fd:80:f4:af:59:1b: 29:04:2c:97:c6:8f:6d:b8:75:72:5e:e4:bc:36:52:8f:fe:a2: 75:d0:95:14:eb:66:38:64:0e:3c:15:1e:2b:76:7a:70:54:ee: 96:ae:13:9a:97:fb:ec:03:2e:8d:57:bf:31:24:1b:2b:f8:1b: ba:44:00:f1:40:c5:c8:83:22:e0:ea:d3:78:0f:6f:75:5d:46: 36:07:90:c5:c5:5a:e6:fb:93:51:43:0f:63:ba:85:02:b6:83: ec:3e:5b:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6vq4aWOloKEWwIZmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ5NThjNDctYzE4Zi00NmUyLWEzYzMtZWQ0YmEyOWUx Yzk5MB4XDTI2MDczMTIzMDAyM1oXDTI2MDgwMjIzMDAwMFowLzEtMCsGA1UEAxMk MWFlYmEzOTktODQxZC00MzViLThkMzgtNjkzOGFlNTcxMDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyl+2T0/9na+W1jfy6in3PXlK6Xo0dOxhQOE p7jz9qiMepd2J3qgW+K4YWUYYknDF1mO2l6+nVVQ84Z4h/XuuOcRsmDo0RCCapE3 4mbROqUx9NH7iWE5fac3U9E2SZkA+o+6kIylikVeeRMGSFUTuV3SxUVW5C3xixUa NihxJsBBWD1UTH/TmJx0fImLFTCxByZPBMj7nj8Yh8r7k53UeRz6uSzBB5JY2Nni jCUdrUnppfFMNEZebdC0cJZX8BKTxneuQzW9PMpjE+E0ZI4SOHhe35RcXN6IHhCc N3IH9vJpldetC7HsrUlgW60brR280JpGKIZUDG3u85vxrLWfdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNkAkJ372A6+XI6sOD1YH3noc96HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZDk1 OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRiYTI5ZTFjOTkvOGQ5NThjNDctYzE4Zi00 NmUyLWEzYzMtZWQ0YmEyOWUxYzk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGQ5NThjNDctYzE4Zi00NmUyLWEz YzMtZWQ0YmEyOWUxYzk5LzhkOTU4YzQ3LWMxOGYtNDZlMi1hM2MzLWVkNGJhMjll MWM5OS5jcmwwHwYDVR0jBBgwFoAU81JdyNStSz3Ob5qF+sRRU2En/yQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZDk1OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRi YTI5ZTFjOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYfju9tOxXY84kXZXDz74L XxPIfXtabGUPm0aWkjbOGbPNf8PU66XtrtD6/773EHYYwB+wNP90GW/9VkpvmDvg 5Y2LbKQPmTHUZCOKDKq27sE2ybhnG3ZtKvDGRG17dPEssGwvt4mNFvbWPOtnPHU3 mGpr01QT8w/bxfET6D0RDbDS0aWRZ753ZT7lzKIWNPYnTmxooUy+KdiIAgP9gPSv WRspBCyXxo9tuHVyXuS8NlKP/qJ10JUU62Y4ZA48FR4rdnpwVO6WrhOal/vsAy6N V78xJBsr+Bu6RADxQMXIgyLg6tN4D291XUY2B5DFxVrm+5NRQw9juoUCtoPsPluc -----END CERTIFICATE-----Generated at Sat Aug 1 10:29:08 2026 by rpki-client