$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: QX4FZYsd/E3KIz/LX79aCHmmVxHOeuEVCm+eVZDZfgM= Subject key identifier: 1A:F0:A6:B6:84:D6:48:86:87:EE:71:A8:90:A5:85:1F:47:D9:FE:BC Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F4328584E5AFCC6EE2663D0454EC98CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C754 Signing time: Wed 01 Jul 2026 15:00:22 +0000 Manifest this update: Wed 01 Jul 2026 15:00:22 +0000 Manifest next update: Fri 03 Jul 2026 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: qpglPdIXdO3JX6YriZnrA/V6gf0ZfzipZQ5oXeyxYnk=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: V9THA9+KDS6bO0WL6eEi1XMyUEDjOioQDc7Uodk1iPU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:fc:c6:ee:26:63:d0:45:4e:c9:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: Jul 1 15:00:22 2026 GMT Not After : Jul 3 15:00:00 2026 GMT Subject: CN=3a6a388a-3683-49bc-ba27-46d32043098e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1c:70:f0:77:20:00:19:40:1d:22:fa:65:bb: e7:9b:b2:ae:e4:74:13:8e:80:77:6e:91:ab:ab:52: c0:e7:8d:fc:a8:f5:f8:42:de:a3:4b:f2:d2:cc:b8: 13:d9:fa:ec:14:e7:ae:e2:3b:7a:15:68:8c:ad:1b: 10:f9:bb:90:bb:54:5f:12:31:cd:55:82:11:6a:ff: 6f:67:5a:e3:25:53:45:71:69:34:88:f3:9b:9c:3c: 8f:17:05:2c:cc:20:5d:61:26:1a:77:bf:da:f0:1a: 2b:bb:c4:3e:f4:41:df:43:b5:02:34:ec:fe:47:99: e0:ed:73:b6:89:d4:10:95:8c:37:1c:ea:05:71:9d: 52:57:4e:e1:30:a9:4c:f3:be:b4:17:e8:77:34:f9: 0f:41:14:d6:74:0d:bc:26:f2:f9:a4:ef:ee:cd:8f: e7:db:09:3b:7b:9e:f3:51:12:75:f9:01:71:a6:8a: 43:ea:0d:2c:9c:6d:b5:a3:3a:d3:85:0c:e1:cc:60: 68:62:f8:21:db:92:79:87:a2:65:88:00:68:3f:48: 05:56:22:16:22:7c:84:a9:f7:5a:c0:26:3f:dd:ab: d5:14:e8:7c:f4:b2:a1:40:6a:93:e7:c2:8a:63:b7: 76:a1:c5:20:56:f1:05:06:65:e8:bd:a5:e6:e5:a9: 34:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F0:A6:B6:84:D6:48:86:87:EE:71:A8:90:A5:85:1F:47:D9:FE:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d0:89:27:10:08:65:d0:43:ce:be:eb:6b:18:72:43:24:1a: 12:85:45:42:75:3f:e5:33:12:9e:1a:c7:7d:c2:40:fc:23:1b: 2b:43:29:11:39:a6:93:0b:28:9e:31:77:56:ee:ce:86:be:0c: 77:db:b1:31:6d:5f:d2:33:d7:f8:cf:1d:d7:a0:10:c3:4d:c5: 38:ec:51:19:1b:87:d7:2c:29:13:28:36:30:3a:c6:a1:74:61: 59:12:ab:4d:1d:3b:2e:da:55:c9:08:a8:00:a8:29:79:71:af: 10:27:1a:77:8a:96:72:cb:e5:d5:76:25:01:35:c3:a6:ca:89: 18:c4:92:c9:ba:62:0c:ff:ab:32:d8:39:a1:fe:f6:70:46:58: b9:88:d4:59:91:1f:04:b1:96:fd:48:e7:29:07:79:52:4e:8e: 9b:50:85:c7:b3:bc:84:f5:de:73:9a:5c:8c:aa:c8:e3:84:ad: 32:ec:e9:1e:e4:88:31:83:b3:83:e5:11:0f:07:ef:81:b6:02: be:15:ad:5a:ea:eb:8e:87:83:8f:27:d4:1a:d8:6e:d5:b2:4f: 76:0a:8a:e1:e2:db:a1:32:b3:c6:e6:e7:f4:8c:3b:30:c4:49: 4e:ec:dd:e7:8f:75:8e:fa:2f:0b:f6:cd:67:90:85:db:c7:5b: 02:d9:79:d5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE5a/MbuJmPQRU7JjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI2MDcwMTE1MDAyMloXDTI2MDcwMzE1MDAwMFowLzEtMCsGA1UEAxMk M2E2YTM4OGEtMzY4My00OWJjLWJhMjctNDZkMzIwNDMwOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hxw8HcgABlAHSL6Zbvnm7Ku5HQTjoB3bpGr q1LA5438qPX4Qt6jS/LSzLgT2frsFOeu4jt6FWiMrRsQ+buQu1RfEjHNVYIRav9v Z1rjJVNFcWk0iPObnDyPFwUszCBdYSYad7/a8Boru8Q+9EHfQ7UCNOz+R5ng7XO2 idQQlYw3HOoFcZ1SV07hMKlM8760F+h3NPkPQRTWdA28JvL5pO/uzY/n2wk7e57z URJ1+QFxpopD6g0snG21ozrThQzhzGBoYvgh25J5h6JliABoP0gFViIWInyEqfda wCY/3avVFOh89LKhQGqT58KKY7d2ocUgVvEFBmXovaXm5ak0JwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBrwpraE1kiGh+5xqJClhR9H2f68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAf0IknEAhl0EPOvutrGHJD JBoShUVCdT/lMxKeGsd9wkD8IxsrQykROaaTCyieMXdW7s6Gvgx327ExbV/SM9f4 zx3XoBDDTcU47FEZG4fXLCkTKDYwOsahdGFZEqtNHTsu2lXJCKgAqCl5ca8QJxp3 ipZyy+XVdiUBNcOmyokYxJLJumIM/6sy2Dmh/vZwRli5iNRZkR8EsZb9SOcpB3lS To6bUIXHs7yE9d5zmlyMqsjjhK0y7Oke5Igxg7OD5REPB++BtgK+Fa1a6uuOh4OP J9Qa2G7Vsk92Corh4tuhMrPG5uf0jDswxElO7N3nj3WO+i8L9s1nkIXbx1sC2XnV -----END CERTIFICATE-----Generated at Thu Jul 2 09:02:30 2026 by rpki-client