$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: qYmWXV3u9zpHDqYcpOLmnVGjsybCzaF8DdNifgQ8yJE= Subject key identifier: 1E:CE:3F:AC:41:11:DD:A8:CB:65:D8:10:F0:A1:11:7C:2A:D9:47:20 Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F4328584EE692FDD55932B4A423819500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C787 Signing time: Thu 20 Aug 2026 15:00:23 +0000 Manifest this update: Thu 20 Aug 2026 15:00:23 +0000 Manifest next update: Sat 22 Aug 2026 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: BnGjemGbgqc0mPbL+B7fv2qd/4mJk+ACxPZ/imEB4ps=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: 8mTf8kxbRfAQyz7nN2mSNNkpKSQmx0tFVeB5OQQVtLk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:92:fd:d5:59:32:b4:a4:23:81:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: Aug 20 15:00:23 2026 GMT Not After : Aug 22 15:00:00 2026 GMT Subject: CN=d9fc07c3-edf5-4116-90c9-f8483b03c855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:c8:8b:64:2d:d0:84:c6:2a:06:e3:91:1e: 4f:0a:50:b0:1b:22:22:de:2f:a3:44:8d:7c:c7:02: c5:44:bf:cc:f4:fc:c0:6d:ca:dc:70:38:96:5c:4d: 15:de:30:13:76:66:ec:06:d5:e0:e0:f7:29:a9:ae: de:e1:8e:96:b8:a2:85:1f:6c:a5:e7:98:33:c6:92: 88:73:b2:d9:6e:96:30:1e:2c:f5:ff:39:29:90:c0: cf:f8:f5:af:9e:f0:45:28:2c:44:9b:ea:79:71:41: 91:7c:8c:00:f6:8e:02:43:6d:57:09:c0:e7:98:aa: 69:33:45:92:a8:78:38:82:79:31:c1:d2:db:b1:d0: 4b:99:03:e8:3c:b5:31:2b:2f:26:5d:32:9d:14:3e: 2c:ad:69:f1:25:71:e0:78:f5:99:d2:1d:5e:c6:e3: 86:7d:4f:31:ea:b8:d6:11:c3:04:fe:96:07:0a:ae: 29:86:a6:8f:e6:39:6b:2d:7b:23:78:07:7b:39:70: 64:59:f8:d6:32:d9:a9:8f:22:56:cb:c7:a6:5f:56: cc:5d:e9:e7:71:7b:54:ef:d8:be:b2:ce:0d:e8:18: 25:74:51:ba:c3:db:56:2e:b2:ab:b9:fc:05:ed:57: 6a:22:b1:d2:84:23:9a:17:9b:18:57:22:e0:f3:ab: 8d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CE:3F:AC:41:11:DD:A8:CB:65:D8:10:F0:A1:11:7C:2A:D9:47:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:65:3b:a7:44:c4:6f:9c:0c:71:8e:08:48:53:94:3e:14:9e: f0:b7:c1:4e:3b:23:67:de:fa:04:59:a5:35:0f:16:1f:56:29: 1a:29:3e:b2:09:d2:15:2e:22:f4:b2:51:5e:76:f1:56:69:37: 50:89:ee:78:66:0b:55:71:28:8c:28:4d:fb:20:c8:da:29:82: 46:7b:19:23:05:a8:72:38:36:17:33:51:0b:dd:1c:c7:5f:16: d7:8d:b3:50:6c:e5:ac:d2:6a:f3:df:8a:84:f0:0f:3b:45:09: 88:95:2e:37:a2:bf:d8:74:60:94:da:9a:9e:b2:68:57:30:82: 59:f3:2c:1d:91:8a:20:bc:49:26:9a:27:2f:49:2d:66:69:85: c1:79:ca:49:b8:69:1e:f0:6c:8e:81:19:10:a7:53:86:89:9b: cc:71:b9:e4:8f:d3:1a:b9:e5:e3:82:8c:e3:27:8b:68:85:a4: 69:40:90:4f:05:c4:99:fa:b8:7b:1d:0f:95:33:6e:a1:74:44: 71:fc:90:b9:9e:24:67:a5:3d:06:7e:6a:5f:f7:ee:93:43:aa: a9:5f:e3:ee:ba:97:3b:95:02:23:88:b0:3b:51:5b:eb:97:55: 56:3c:d3:8a:5d:72:5e:54:1c:b6:74:dc:5b:e6:40:66:d0:8b: df:43:c2:7b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7mkv3VWTK0pCOBlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI2MDgyMDE1MDAyM1oXDTI2MDgyMjE1MDAwMFowLzEtMCsGA1UEAxMk ZDlmYzA3YzMtZWRmNS00MTE2LTkwYzktZjg0ODNiMDNjODU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYDIi2Qt0ITGKgbjkR5PClCwGyIi3i+jRI18 xwLFRL/M9PzAbcrccDiWXE0V3jATdmbsBtXg4Pcpqa7e4Y6WuKKFH2yl55gzxpKI c7LZbpYwHiz1/zkpkMDP+PWvnvBFKCxEm+p5cUGRfIwA9o4CQ21XCcDnmKppM0WS qHg4gnkxwdLbsdBLmQPoPLUxKy8mXTKdFD4srWnxJXHgePWZ0h1exuOGfU8x6rjW EcME/pYHCq4phqaP5jlrLXsjeAd7OXBkWfjWMtmpjyJWy8emX1bMXenncXtU79i+ ss4N6BgldFG6w9tWLrKrufwF7VdqIrHShCOaF5sYVyLg86uNOQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB7OP6xBEd2oy2XYEPChEXwq2UcgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZZTunRMRvnAxxjghIU5Q+ FJ7wt8FOOyNn3voEWaU1DxYfVikaKT6yCdIVLiL0slFedvFWaTdQie54ZgtVcSiM KE37IMjaKYJGexkjBahyODYXM1EL3RzHXxbXjbNQbOWs0mrz34qE8A87RQmIlS43 or/YdGCU2pqesmhXMIJZ8ywdkYogvEkmmicvSS1maYXBecpJuGke8GyOgRkQp1OG iZvMcbnkj9MaueXjgozjJ4tohaRpQJBPBcSZ+rh7HQ+VM26hdERx/JC5niRnpT0G fmpf9+6TQ6qpX+Puupc7lQIjiLA7UVvrl1VWPNOKXXJeVBy2dNxb5kBm0IvfQ8J7 -----END CERTIFICATE-----Generated at Fri Aug 21 06:04:28 2026 by rpki-client