$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft (raw, json) Hash identifier: 3oYLGBC9E8LgKJJSDiQ9YTUySTrs3qIhNaJskMfG1lk= Subject key identifier: 54:97:F2:51:B6:0C:4F:61:EF:C8:AC:A9:95:71:27:5A:AE:8D:B2:57 Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F4328584EF44CD6DE2092F6D6C82A1E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft Manifest number: 010D0C9F432858467B3AE8B15C5CB25608060DBC Signing time: Tue 25 Aug 2026 13:00:23 +0000 Manifest this update: Tue 25 Aug 2026 13:00:23 +0000 Manifest next update: Thu 27 Aug 2026 13:00:00 +0000 Files and hashes: 1: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl (hash: FZ5qRimZpFvmK1bq41BeRKozdSyUxvE2kZyqfxM+VLA=) 2: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (hash: tyqgsksimb8RkLz86e0CJsVfR/oJk54SVjGVrtVpRH4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:d6:de:20:92:f6:d6:c8:2a:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: Aug 25 13:00:23 2026 GMT Not After : Aug 27 13:00:00 2026 GMT Subject: CN=ed4fedd9-1c54-4f38-b69c-6fd2b86f88b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:06:4f:15:1a:b3:e3:d0:42:59:a0:1d:a2: 47:1b:ce:48:71:85:3b:a6:77:2e:e1:fa:2f:90:68: 37:8b:0b:6a:a7:e7:c1:68:8b:7b:73:34:b5:c4:56: b0:57:ea:7f:82:97:cc:95:c1:17:4b:ad:5e:b2:d3: b5:43:ab:db:de:20:de:d2:bf:74:38:53:45:f2:c2: 73:38:81:86:45:a3:c8:db:31:dd:08:6e:30:f7:4c: 9a:24:54:b2:7f:1b:7a:5c:94:d1:d3:43:7d:47:a6: 48:22:91:12:0e:51:d1:ac:2e:be:5d:98:39:d9:c2: 81:78:ca:24:37:70:e1:90:5c:03:cf:15:a4:fc:42: b7:9e:83:8b:f6:86:d0:ce:60:b3:87:0f:f3:df:45: d1:ee:ca:69:bf:6c:1a:f4:eb:d1:06:4e:03:ae:49: 8f:c5:b5:63:28:59:ef:f2:62:e1:69:d7:11:59:74: 61:1a:77:30:cf:28:72:ec:1b:c9:d1:d8:3f:22:c5: c4:9d:68:aa:41:ce:9d:70:af:a5:ed:e8:df:14:34: 47:8d:20:12:d4:29:ad:3a:40:e9:4e:49:a9:46:1f: be:d2:a7:9e:f5:ed:f1:72:10:67:d9:a1:1a:56:1a: 9d:a4:fb:e7:0e:2b:bb:e9:0b:8d:37:fc:21:4f:cc: 05:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:97:F2:51:B6:0C:4F:61:EF:C8:AC:A9:95:71:27:5A:AE:8D:B2:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:70:af:99:e2:34:49:c9:f1:13:19:31:e9:f0:e5:f7:1c:d6: 2e:17:62:3b:a7:91:fe:2a:c2:88:6b:31:6b:c2:8c:fc:48:56: 43:cd:d7:ce:2e:2c:8a:7b:d5:1e:79:49:b7:c5:86:68:9a:0f: 7b:86:b1:b7:d9:73:16:5c:14:71:cb:46:4c:3c:49:d0:8c:8e: 17:1b:73:f0:d0:0f:b8:0f:34:c9:a5:fa:c1:68:eb:19:54:0d: 3b:05:48:67:c3:31:a1:f7:04:ed:68:7d:b1:5f:1a:73:b7:b4: 4b:a7:ca:3a:f7:9f:c9:dc:ce:4c:62:b6:69:1e:5c:9e:80:9a: 22:38:e7:f7:d9:3f:45:ce:96:ba:71:4d:12:65:35:1f:b6:82: 99:9c:35:db:d0:f0:7b:f2:65:da:67:d9:5a:1d:5f:cc:94:27: a9:62:04:00:e9:3f:76:74:ed:32:61:34:39:76:f9:3e:33:ed: ba:9d:d7:67:5b:f0:44:1e:83:c4:63:66:88:9a:11:42:2d:a5: be:c2:ee:cb:6c:24:de:0d:bd:81:52:08:04:52:b9:5e:86:fc: 46:33:86:47:8d:8c:3f:08:e8:c6:7a:47:4e:c7:d8:57:1d:dc: 67:3e:6d:52:38:d3:bf:66:e8:95:2b:a2:54:8a:45:1c:58:99: 48:82:9c:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE70TNbeIJL21sgqHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI2MDgyNTEzMDAyM1oXDTI2MDgyNzEzMDAwMFowLzEtMCsGA1UEAxMk ZWQ0ZmVkZDktMWM1NC00ZjM4LWI2OWMtNmZkMmI4NmY4OGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWwGTxUas+PQQlmgHaJHG85IcYU7pncu4fov kGg3iwtqp+fBaIt7czS1xFawV+p/gpfMlcEXS61estO1Q6vb3iDe0r90OFNF8sJz OIGGRaPI2zHdCG4w90yaJFSyfxt6XJTR00N9R6ZIIpESDlHRrC6+XZg52cKBeMok N3DhkFwDzxWk/EK3noOL9obQzmCzhw/z30XR7sppv2wa9OvRBk4DrkmPxbVjKFnv 8mLhadcRWXRhGncwzyhy7BvJ0dg/IsXEnWiqQc6dcK+l7ejfFDRHjSAS1CmtOkDp TkmpRh++0qee9e3xchBn2aEaVhqdpPvnDiu76QuNN/whT8wFfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFSX8lG2DE9h78isqZVxJ1qujbJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvNGM4NWU0MmQtMjE3MS00 ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLcK+Z4jRJyfETGTHp8OX3 HNYuF2I7p5H+KsKIazFrwoz8SFZDzdfOLiyKe9UeeUm3xYZomg97hrG32XMWXBRx y0ZMPEnQjI4XG3Pw0A+4DzTJpfrBaOsZVA07BUhnwzGh9wTtaH2xXxpzt7RLp8o6 95/J3M5MYrZpHlyegJoiOOf32T9Fzpa6cU0SZTUftoKZnDXb0PB78mXaZ9laHV/M lCepYgQA6T92dO0yYTQ5dvk+M+26nddnW/BEHoPEY2aImhFCLaW+wu7LbCTeDb2B UggEUrlehvxGM4ZHjYw/COjGekdOx9hXHdxnPm1SONO/ZuiVK6JUikUcWJlIgpyz -----END CERTIFICATE-----Generated at Tue Aug 25 23:43:17 2026 by rpki-client