$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft File: b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft (raw, json) Hash identifier: ERMj4mAugQ3BSwstZ8Xcd86zTL8YrU/kxKfo3QnwnLY= Subject key identifier: 8C:9D:99:CC:03:E2:20:5A:DF:5F:96:6B:0A:39:48:A6:8D:5A:92:8B Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Certificate serial: 010D0C9F4328584EF3B7EFB6F4C34BC6220F4810 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft Manifest number: 010D0C9F4328584073A848110A4299D6DF1F19FF Signing time: Tue 25 Aug 2026 08:00:22 +0000 Manifest this update: Tue 25 Aug 2026 08:00:22 +0000 Manifest next update: Thu 27 Aug 2026 08:00:00 +0000 Files and hashes: 1: 7955ed0f-1153-3896-a51e-5d367bf0cc64.roa (hash: NTKFwl9z9r/OGPJXuwxXlrzj2z2pQv8YXZ6tXWVMBqI=) 2: b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl (hash: /5g7rTanyNI06HgV+wm8PnKjpv14kLIgRUXAlmdrIG4=) 3: ee1a4e04-68da-38e4-9471-1d40d048b137.roa (hash: qT+DLf6gX1c2IoI6DYPjF5YM1AbfaQQmkJdES4XTelU=) 4: ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa (hash: LgGHme4J1ZsJoNNUjXAswpv6BnoJxcVoyasDnjlT5s4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f3:b7:ef:b6:f4:c3:4b:c6:22:0f:48:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Validity Not Before: Aug 25 08:00:22 2026 GMT Not After : Aug 27 08:00:00 2026 GMT Subject: CN=9ff9e1d3-c08f-45fa-995f-86963ecbaaae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:80:f7:eb:d6:c6:a5:53:d1:0b:c1:c5:cf: d2:fe:1e:2e:f0:31:92:fc:e6:68:e7:ab:aa:24:a5: fb:0b:65:da:2b:f3:e7:ae:d3:c3:35:4a:7c:92:ac: de:df:0d:28:82:07:36:72:a5:cd:da:11:5c:67:02: 45:1a:d6:02:25:e1:ae:21:db:c5:a1:21:ec:71:27: 17:9f:a8:a5:c6:9d:90:7c:9a:9f:e4:88:14:aa:2c: 92:36:1c:d0:cd:54:87:7e:f4:ab:e9:ea:d9:3f:c6: e1:21:fe:cd:d0:f4:e4:aa:3e:40:2b:66:9b:c8:e5: c6:fb:1e:92:b4:75:be:c1:bf:4e:fb:52:f2:4b:b1: 46:1e:5e:44:2f:ca:5d:f1:30:71:bd:aa:85:8e:6e: d0:8f:b6:f2:58:a8:f8:03:38:cb:ea:aa:cb:5f:9f: 8a:21:91:bc:8d:a2:1c:ba:8c:aa:79:69:47:cc:bc: a7:e0:b4:3f:59:8e:c3:ad:62:9e:07:2d:6d:13:2d: 3c:92:a8:d3:e9:39:5e:67:4f:c9:c0:a6:be:77:82: e9:0d:66:54:d0:59:4d:2b:d6:57:45:49:12:32:b3: 45:b0:33:3f:20:91:dd:66:46:ac:a7:a5:fa:3a:0d: b9:b0:24:c7:61:2a:cc:4f:e4:24:c4:4c:a8:e2:c1: 53:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9D:99:CC:03:E2:20:5A:DF:5F:96:6B:0A:39:48:A6:8D:5A:92:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl X509v3 Authority Key Identifier: keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a7:1e:2d:78:b4:80:af:72:a1:a1:e2:db:d5:dc:78:2a:68: 64:f0:da:47:05:f0:a3:f2:24:b8:06:bd:e4:8e:e4:17:c2:3f: fd:93:3e:01:f4:e7:eb:f5:b0:6e:05:e0:26:22:fa:dd:95:1b: 1b:07:f2:c0:b5:ab:60:5d:6c:e6:b8:00:c4:a8:d9:8e:15:57: e5:ff:09:bb:47:13:49:59:61:1d:de:6f:c9:1b:39:3a:8c:8f: 11:93:71:73:5f:77:7c:e8:d9:0c:ec:fd:37:c3:aa:ce:f1:e6: a4:a2:c2:c9:d6:32:fd:71:fb:38:d1:d4:09:67:bc:85:2d:7c: 9b:97:07:86:09:75:84:c3:ff:61:4b:81:dc:25:9b:fe:d3:4f: 31:6e:cf:37:ae:86:52:f8:22:1a:fc:71:e0:d9:ee:ed:75:ea: f0:b9:49:f5:45:6a:95:95:03:f0:1e:8d:d8:1d:31:ba:ce:8b: 0e:7c:67:cd:f6:77:a1:df:54:28:8c:cb:51:24:95:57:d7:76: 48:d1:5c:91:71:2c:1e:51:b3:67:23:be:7b:81:38:8b:a0:be: 39:e0:49:6b:6a:b4:bb:60:8f:e3:f4:ea:70:6e:d7:5d:1e:41: 49:a5:43:29:73:ca:ff:8e:a0:7d:b8:82:2a:d1:9f:f2:b1:d3: cf:87:c6:6b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7zt++29MNLxiIPSBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj MWQ2MB4XDTI2MDgyNTA4MDAyMloXDTI2MDgyNzA4MDAwMFowLzEtMCsGA1UEAxMk OWZmOWUxZDMtYzA4Zi00NWZhLTk5NWYtODY5NjNlY2JhYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq76A9+vWxqVT0QvBxc/S/h4u8DGS/OZo56uq JKX7C2XaK/PnrtPDNUp8kqze3w0oggc2cqXN2hFcZwJFGtYCJeGuIdvFoSHscScX n6ilxp2QfJqf5IgUqiySNhzQzVSHfvSr6erZP8bhIf7N0PTkqj5AK2abyOXG+x6S tHW+wb9O+1LyS7FGHl5EL8pd8TBxvaqFjm7Qj7byWKj4AzjL6qrLX5+KIZG8jaIc uoyqeWlHzLyn4LQ/WY7DrWKeBy1tEy08kqjT6TleZ0/JwKa+d4LpDWZU0FlNK9ZX RUkSMrNFsDM/IJHdZkasp6X6Og25sCTHYSrMT+QkxEyo4sFT+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIydmcwD4iBa31+Wawo5SKaNWpKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3 MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvYjRkNzFkYTktNmZmMS00 OWFiLWExZTUtNmM0OGY4ZjBjMWQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4 ZjhmMGMxZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7px4teLSAr3KhoeLb1dx4 Kmhk8NpHBfCj8iS4Br3kjuQXwj/9kz4B9Ofr9bBuBeAmIvrdlRsbB/LAtatgXWzm uADEqNmOFVfl/wm7RxNJWWEd3m/JGzk6jI8Rk3FzX3d86NkM7P03w6rO8eakosLJ 1jL9cfs40dQJZ7yFLXyblweGCXWEw/9hS4HcJZv+008xbs83roZS+CIa/HHg2e7t derwuUn1RWqVlQPwHo3YHTG6zosOfGfN9neh31QojMtRJJVX13ZI0VyRcSweUbNn I757gTiLoL454ElrarS7YI/j9OpwbtddHkFJpUMpc8r/jqB9uIIq0Z/ysdPPh8Zr -----END CERTIFICATE-----Generated at Tue Aug 25 22:59:32 2026 by rpki-client