$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: rco6Q5fDRsCJTcRvq0Oz4Og8bd0Lub69XX7bB2WA1/8= Subject key identifier: B4:5B:7B:85:DE:4F:36:97:5D:11:C0:05:5D:96:2F:26:62:18:32:C4 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584EF92F81347881B6A046A09500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A34D3 Signing time: Thu 27 Aug 2026 07:00:22 +0000 Manifest this update: Thu 27 Aug 2026 07:00:22 +0000 Manifest next update: Sat 29 Aug 2026 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: x/hh0yrWak6DU1Or049YYIdniPYzDqyT+wj8f1+9B1E=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: 97CpvpyaMq7u1J7PWJo47+S+K/3lKkm4FQyeCZgHTN4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:2f:81:34:78:81:b6:a0:46:a0:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Aug 27 07:00:22 2026 GMT Not After : Aug 29 07:00:00 2026 GMT Subject: CN=c1a8ea4d-488c-4bc1-a07f-fc658a2a9564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bf:91:93:ae:43:3a:27:ea:b8:00:9c:3a:eb: aa:f9:80:1c:f5:48:ca:35:49:4c:46:07:2b:2d:ef: 2c:60:49:31:81:c7:a7:d4:d1:c1:ba:c9:8b:0d:96: 20:11:0c:39:0d:0d:ec:94:9b:47:74:dc:bc:84:f7: c1:fa:0e:c2:09:a2:e1:07:ff:0c:86:2f:68:0d:d4: fa:81:57:82:4a:65:c2:b2:d0:23:68:74:7d:96:6a: 56:9c:c2:10:a4:18:72:0c:9c:2d:d0:3e:63:2e:87: 70:c8:09:db:61:84:dc:5a:2f:bd:87:6d:0c:00:2b: 27:ec:fd:1e:4b:d3:8b:ac:59:9c:80:d8:7b:eb:55: a6:10:66:16:d2:6d:99:d3:a5:c9:18:44:5c:53:45: 4b:8a:f1:27:64:ce:cc:bb:4b:f6:01:3f:f9:af:0f: 6b:ad:89:fb:7e:43:cb:88:5e:66:c6:6f:4a:af:43: ac:27:03:fc:51:82:81:15:0d:de:4b:31:4f:b2:d3: b4:a2:e5:ef:40:af:60:21:69:8e:85:a7:b2:63:10: 7b:2e:c4:fe:d4:57:da:1e:eb:68:2f:0a:a4:a3:67: 81:02:73:6f:85:74:46:71:93:fe:57:38:e1:53:06: 47:8e:59:b3:e8:9c:5f:75:fc:63:32:09:49:7a:43: 15:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5B:7B:85:DE:4F:36:97:5D:11:C0:05:5D:96:2F:26:62:18:32:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:0f:e6:0b:fb:2c:b5:55:dc:48:60:95:af:f7:ac:99:7b:65: 43:db:fa:ed:d3:b8:d3:4e:fb:2d:47:37:42:55:cc:78:62:8d: 5e:8a:b6:d3:2d:ad:27:52:a0:56:17:53:a1:e8:4d:d5:f5:49: 9b:01:91:46:4a:d6:a4:4e:3a:b5:70:48:77:31:3d:0e:56:cb: cf:60:4d:57:79:1f:bd:2a:ed:a3:21:b4:0e:dd:58:7d:ca:e2: 79:ce:ee:80:bd:e3:ee:c6:37:e6:2a:07:27:4d:1b:db:9c:ca: 72:e9:f1:d4:9d:d8:7d:b9:bf:18:86:85:09:35:47:92:e7:0d: f9:c2:e5:0b:37:4c:6c:65:49:df:7d:3a:5c:01:2f:29:69:6c: aa:e4:78:06:b4:f0:ec:51:36:29:45:1b:25:6f:bb:db:7f:31: 9d:3f:8a:2f:64:09:01:26:13:4e:1f:8b:a7:6e:e4:b1:df:d7: 8d:04:e6:66:02:1b:c1:c2:2a:a8:6d:ae:50:ed:cd:db:57:e2: c2:a7:eb:6b:23:89:26:3c:ab:25:ec:4a:aa:40:9a:87:53:1b: 35:eb:85:f8:55:04:14:0d:9c:30:32:89:af:cc:85:c8:96:66: 29:6d:64:78:8b:51:14:12:c1:2a:32:79:f4:1d:86:f3:b1:5d: a9:aa:59:54 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE75L4E0eIG2oEaglQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI2MDgyNzA3MDAyMloXDTI2MDgyOTA3MDAwMFowLzEtMCsGA1UEAxMk YzFhOGVhNGQtNDg4Yy00YmMxLWEwN2YtZmM2NThhMmE5NTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb+Rk65DOifquACcOuuq+YAc9UjKNUlMRgcr Le8sYEkxgcen1NHBusmLDZYgEQw5DQ3slJtHdNy8hPfB+g7CCaLhB/8Mhi9oDdT6 gVeCSmXCstAjaHR9lmpWnMIQpBhyDJwt0D5jLodwyAnbYYTcWi+9h20MACsn7P0e S9OLrFmcgNh761WmEGYW0m2Z06XJGERcU0VLivEnZM7Mu0v2AT/5rw9rrYn7fkPL iF5mxm9Kr0OsJwP8UYKBFQ3eSzFPstO0ouXvQK9gIWmOhaeyYxB7LsT+1FfaHuto Lwqko2eBAnNvhXRGcZP+VzjhUwZHjlmz6JxfdfxjMglJekMVxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLRbe4XeTzaXXRHABV2WLyZiGDLEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDOD+YL+yy1VdxIYJWv96yZ e2VD2/rt07jTTvstRzdCVcx4Yo1eirbTLa0nUqBWF1Oh6E3V9UmbAZFGStakTjq1 cEh3MT0OVsvPYE1XeR+9Ku2jIbQO3Vh9yuJ5zu6AvePuxjfmKgcnTRvbnMpy6fHU ndh9ub8YhoUJNUeS5w35wuULN0xsZUnffTpcAS8paWyq5HgGtPDsUTYpRRslb7vb fzGdP4ovZAkBJhNOH4unbuSx39eNBOZmAhvBwiqoba5Q7c3bV+LCp+trI4kmPKsl 7EqqQJqHUxs164X4VQQUDZwwMomvzIXIlmYpbWR4i1EUEsEqMnn0HYbzsV2pqllU -----END CERTIFICATE-----Generated at Thu Aug 27 17:04:44 2026 by rpki-client