$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: C7CN5tp6NO9jJsGR2C2Du19EKjkOgR5o2rr9DDxBiBE= Subject key identifier: 34:1E:D5:60:66:03:41:83:DB:7C:B3:9B:20:EA:B6:CB:4D:E9:00:2C Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584E5084A97D2CF086BE5E9DC500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD079AF8 Signing time: Sat 27 Jun 2026 21:00:22 +0000 Manifest this update: Sat 27 Jun 2026 21:00:22 +0000 Manifest next update: Tue 30 Jun 2026 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: xvUWmYXKk8Kxhki+lXvmphcOfsMMHQ2HDoP275fmiK0=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: jv6KnbhuUiV1D0Nx9JhmgQ5muL7ORhAMVICZ8c5ftXQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:a9:7d:2c:f0:86:be:5e:9d:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Jun 27 21:00:22 2026 GMT Not After : Jun 30 21:00:00 2026 GMT Subject: CN=21e2b3b7-62da-482e-8b61-d8ae0ff0af6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:08:15:aa:49:6e:23:b5:42:ac:49:69:38:97: 57:c8:58:1b:bc:69:ae:fd:e8:2f:54:16:f1:94:76: c0:f3:76:66:80:e0:86:a9:8a:43:36:7f:db:2b:8a: 35:56:0a:6e:41:01:9e:05:09:83:e4:84:b8:41:35: f2:70:ed:a2:15:00:aa:3b:6c:25:9f:07:f6:52:0d: 46:30:f5:68:86:c9:74:5f:72:d7:bf:48:ea:ff:c9: 45:d5:cf:d5:e3:f3:33:87:fc:e4:32:6d:17:9e:45: 6d:0e:fe:0c:fa:1a:fa:a0:df:33:b1:39:d6:a1:c4: 3e:60:12:40:17:4f:96:66:0c:59:12:2d:ae:93:9c: 99:ba:5f:07:a3:97:b8:50:36:cc:bf:a9:5b:43:75: 74:c9:55:d9:df:60:b3:4b:75:a9:00:8a:e1:81:18: 9e:17:00:fe:eb:de:7f:44:b2:96:99:11:81:10:81: a4:2e:0f:d8:27:11:11:8c:4f:fc:89:ca:fd:a2:1a: c1:96:32:f8:3f:28:4c:57:6c:66:cc:ad:ca:2a:b8: 29:fd:3b:b5:64:07:71:16:9f:7e:04:81:74:f1:b6: 99:05:70:0c:42:80:ba:dd:cf:ab:a9:4b:5a:56:5f: e2:da:b6:ab:52:7e:2e:ad:14:f8:b9:7c:b7:2e:52: e1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1E:D5:60:66:03:41:83:DB:7C:B3:9B:20:EA:B6:CB:4D:E9:00:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:12:94:f5:10:ff:1d:a6:1f:24:1f:e4:2e:38:63:f2:e5:5a: b9:e7:99:5d:eb:7b:42:df:bf:05:d4:89:60:7d:fd:15:39:3b: 1d:86:53:33:32:dc:d3:44:62:97:9c:a4:77:ea:ff:b4:e9:f2: 82:b3:e1:33:df:a5:9d:85:2f:75:5a:20:82:fb:d3:03:f7:7c: ce:d9:b2:25:3b:13:c0:0f:51:5b:e9:0b:27:6d:b6:1f:5d:4e: 02:f3:ce:f3:22:c1:ef:fe:05:f0:2d:28:e7:75:0b:68:ba:47: c6:dc:0e:ad:28:1d:ee:37:29:5b:01:c0:6e:22:f6:55:60:65: a1:04:d4:2b:af:83:06:b9:20:68:ea:19:06:29:90:47:c6:67: 73:77:43:46:5e:b0:2c:5f:1d:05:5e:6a:8f:bb:8b:4d:08:bc: f6:06:f7:e8:dc:f3:bd:ea:ef:6f:2e:a5:d5:62:59:2e:53:63: 78:6b:0f:cf:43:6b:84:00:99:f0:89:62:a7:d4:65:51:b1:14: 1a:99:df:ea:01:36:0b:36:7c:da:4e:46:b0:3e:83:5c:8f:1a: 17:04:41:71:c5:30:b7:78:6c:24:31:91:9d:2b:87:45:ca:ea: 19:18:38:8c:e3:02:4e:99:3c:bb:b6:c3:f3:92:88:1f:d9:b4: da:57:af:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE5QhKl9LPCGvl6dxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI2MDYyNzIxMDAyMloXDTI2MDYzMDIxMDAwMFowLzEtMCsGA1UEAxMk MjFlMmIzYjctNjJkYS00ODJlLThiNjEtZDhhZTBmZjBhZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAgVqkluI7VCrElpOJdXyFgbvGmu/egvVBbx lHbA83ZmgOCGqYpDNn/bK4o1VgpuQQGeBQmD5IS4QTXycO2iFQCqO2wlnwf2Ug1G MPVohsl0X3LXv0jq/8lF1c/V4/Mzh/zkMm0XnkVtDv4M+hr6oN8zsTnWocQ+YBJA F0+WZgxZEi2uk5yZul8Ho5e4UDbMv6lbQ3V0yVXZ32CzS3WpAIrhgRieFwD+695/ RLKWmRGBEIGkLg/YJxERjE/8icr9ohrBljL4PyhMV2xmzK3KKrgp/Tu1ZAdxFp9+ BIF08baZBXAMQoC63c+rqUtaVl/i2rarUn4urRT4uXy3LlLhQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDQe1WBmA0GD23yzmyDqtstN6QAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFEpT1EP8dph8kH+QuOGPy 5Vq555ld63tC378F1Ilgff0VOTsdhlMzMtzTRGKXnKR36v+06fKCs+Ez36WdhS91 WiCC+9MD93zO2bIlOxPAD1Fb6QsnbbYfXU4C887zIsHv/gXwLSjndQtoukfG3A6t KB3uNylbAcBuIvZVYGWhBNQrr4MGuSBo6hkGKZBHxmdzd0NGXrAsXx0FXmqPu4tN CLz2Bvfo3PO96u9vLqXVYlkuU2N4aw/PQ2uEAJnwiWKn1GVRsRQamd/qATYLNnza TkawPoNcjxoXBEFxxTC3eGwkMZGdK4dFyuoZGDiM4wJOmTy7tsPzkogf2bTaV6/Z -----END CERTIFICATE-----Generated at Sun Jun 28 16:22:06 2026 by rpki-client