$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: Fzy6uTTI1r0Pl9FkavaZB8jgPTel4g59cKJ7TeCxQc0= Subject key identifier: 71:6E:C3:A6:61:1D:9B:6B:EF:AC:13:A5:1A:FD:4E:F6:59:10:EB:FD Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584EF3D5B97ECB869A7F300A2000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF0225D1 Signing time: Tue 25 Aug 2026 09:00:23 +0000 Manifest this update: Tue 25 Aug 2026 09:00:23 +0000 Manifest next update: Thu 27 Aug 2026 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: lLZYb6MOvVW3hR33tdckMZgxKNDciu5Qvr/whyjX01I=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: i8OhIyUHYLaOCYyTLqdV9ZP3t9QekZBo6S1u0GszRpI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f3:d5:b9:7e:cb:86:9a:7f:30:0a:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Aug 25 09:00:23 2026 GMT Not After : Aug 27 09:00:00 2026 GMT Subject: CN=c0296ce5-76ee-4b4a-b12a-dbbd9159ab0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fb:c1:ee:bc:71:d6:f5:a1:57:2a:81:3c:14: e1:64:4d:77:9f:a0:22:99:59:f0:54:be:64:82:ab: 9a:77:ce:7a:e8:87:e3:57:52:7d:32:4f:9f:e4:dc: bf:52:ad:1a:c8:cb:74:04:08:5d:af:a8:6c:e3:5b: 9f:82:c2:7e:59:8b:93:c6:f8:a9:49:38:84:1c:a1: 69:e2:73:c6:62:63:b1:c2:f6:38:61:b0:09:6c:95: 54:31:e9:82:92:ee:5d:af:2a:d1:8c:17:bd:5c:27: 4a:3c:0c:55:0e:da:f6:0e:ca:f8:79:50:b5:34:7a: 1f:92:9f:a9:7f:f7:1e:46:3a:0f:d6:dc:50:c5:41: d3:d3:ee:b4:53:7a:e2:54:f3:e4:97:5f:ae:21:1a: 12:2a:17:80:64:0d:e2:a4:dd:1f:97:82:6f:bb:1a: 09:8d:bb:85:d4:ef:9f:21:58:0a:0e:28:94:3d:62: d7:6b:1b:cf:6b:65:5a:46:f7:42:23:23:4f:48:a3: ac:14:ae:39:2a:89:06:d9:54:34:ec:81:3c:90:d1: 98:e5:6a:d4:0e:2d:7c:fd:10:f4:9a:c4:77:a8:a6: c7:2a:15:e1:79:c2:05:13:fc:93:e9:b3:21:42:92: ad:e2:30:4c:db:b1:7a:c2:b7:3f:f3:12:7a:32:b7: de:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6E:C3:A6:61:1D:9B:6B:EF:AC:13:A5:1A:FD:4E:F6:59:10:EB:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a7:bb:86:9d:bf:dc:43:fd:7d:3c:20:1d:7f:ba:03:a8:a0: cb:55:62:e7:af:11:3d:3b:b5:5d:81:e5:44:5e:80:21:b0:14: 88:14:00:8b:dc:3f:22:5c:3b:34:c0:37:e1:e2:9a:2e:8c:08: 6d:f8:07:e6:0e:af:be:0b:e5:25:97:38:1e:65:ba:e9:7f:7f: 82:5b:ed:b5:9d:45:76:16:f1:58:9d:69:b7:fd:da:4e:e7:41: b1:2e:09:c1:27:78:4b:02:b8:aa:a6:4a:5c:d5:75:e9:76:22: 45:a0:dd:89:a7:12:74:74:64:90:4d:2d:17:86:8a:1b:b7:f8: 17:91:76:4f:95:e0:ef:85:9d:0f:16:9a:25:53:65:05:e6:12: ad:42:57:b8:0e:d8:8d:b5:8d:55:69:40:a8:36:6b:95:82:68: a2:19:cb:e0:e6:3c:c1:3a:99:e9:d1:a3:8c:a9:87:f3:fa:f9: 38:fd:21:57:18:e7:60:2c:0b:64:97:3a:6e:47:58:0b:77:62: fc:20:a6:00:96:f6:df:bb:0d:9b:98:bf:37:a8:4e:b4:fd:91: 9a:41:fe:e6:8f:36:79:1b:a8:12:66:aa:ea:05:7c:a2:11:08: d2:f0:ec:7d:3e:7e:dc:7d:ea:e2:71:56:d2:6b:8d:05:38:5e: e9:8d:3c:e0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7z1bl+y4aafzAKIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI2MDgyNTA5MDAyM1oXDTI2MDgyNzA5MDAwMFowLzEtMCsGA1UEAxMk YzAyOTZjZTUtNzZlZS00YjRhLWIxMmEtZGJiZDkxNTlhYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPvB7rxx1vWhVyqBPBThZE13n6AimVnwVL5k gquad8566IfjV1J9Mk+f5Ny/Uq0ayMt0BAhdr6hs41ufgsJ+WYuTxvipSTiEHKFp 4nPGYmOxwvY4YbAJbJVUMemCku5dryrRjBe9XCdKPAxVDtr2Dsr4eVC1NHofkp+p f/ceRjoP1txQxUHT0+60U3riVPPkl1+uIRoSKheAZA3ipN0fl4JvuxoJjbuF1O+f IVgKDiiUPWLXaxvPa2VaRvdCIyNPSKOsFK45KokG2VQ07IE8kNGY5WrUDi18/RD0 msR3qKbHKhXhecIFE/yT6bMhQpKt4jBM27F6wrc/8xJ6MrfeLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHFuw6ZhHZtr76wTpRr9TvZZEOv9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYp7uGnb/cQ/19PCAdf7oD qKDLVWLnrxE9O7VdgeVEXoAhsBSIFACL3D8iXDs0wDfh4poujAht+AfmDq++C+Ul lzgeZbrpf3+CW+21nUV2FvFYnWm3/dpO50GxLgnBJ3hLAriqpkpc1XXpdiJFoN2J pxJ0dGSQTS0Xhoobt/gXkXZPleDvhZ0PFpolU2UF5hKtQle4DtiNtY1VaUCoNmuV gmiiGcvg5jzBOpnp0aOMqYfz+vk4/SFXGOdgLAtklzpuR1gLd2L8IKYAlvbfuw2b mL83qE60/ZGaQf7mjzZ5G6gSZqrqBXyiEQjS8Ox9Pn7cfericVbSa40FOF7pjTzg -----END CERTIFICATE-----Generated at Tue Aug 25 23:41:53 2026 by rpki-client