$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft File: d7e20303-2390-47a7-b89c-842367be4584.mft (raw, json) Hash identifier: 3G43nhXeStHW1GPZjix1wfd8ZtyvQrlkL8K01pAJgqA= Subject key identifier: 27:79:6B:9A:20:34:18:2B:F5:7A:08:5F:0A:4C:45:65:73:25:18:A4 Authority key identifier: 38:30:39:91:69:F1:77:78:F8:70:56:79:18:39:02:C2:21:86:48:99 Certificate issuer: /CN=d7e20303-2390-47a7-b89c-842367be4584 Certificate serial: 010D0C9F4328584E51198BF1E8B16F4C3930BF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft Manifest number: 010D0C9F4328584073A836FD93F59394F8429102 Signing time: Sun 28 Jun 2026 02:00:22 +0000 Manifest this update: Sun 28 Jun 2026 02:00:22 +0000 Manifest next update: Tue 30 Jun 2026 02:00:00 +0000 Files and hashes: 1: 63ef6ba7c7a8be96cfb149135472cbd00aab8f29a31820d418.cer (hash: q21/fVY1xnjn/4j3EiTpqXEA5WBtWaTPeiAIeBFbMJw=) 2: d7e20303-2390-47a7-b89c-842367be4584.crl (hash: 5IQ1YRFoqFlo2y1w0OOW5Exi9eFsf2JcVtvq2YiK+w4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:19:8b:f1:e8:b1:6f:4c:39:30:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e20303-2390-47a7-b89c-842367be4584 Validity Not Before: Jun 28 02:00:22 2026 GMT Not After : Jun 30 02:00:00 2026 GMT Subject: CN=d8a09b2e-c508-44d3-a4c1-dcc1055f04bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:54:c6:e3:44:cd:62:76:9f:17:cd:b1:56: 20:82:9d:2a:9a:0f:4d:cd:0c:e5:23:07:af:dc:4d: 8c:e2:a8:70:6e:3c:58:6b:b3:8a:cf:b6:46:ef:ab: 74:7f:8c:83:93:3b:ac:ad:96:9f:e6:1c:b1:90:bb: 62:a3:53:53:53:63:9b:06:af:19:7a:7f:1c:e2:a1: dd:7f:f2:15:4d:82:c7:ee:bd:7e:95:5f:94:35:bc: 08:16:78:0a:fa:59:04:44:96:e5:b3:34:f4:18:e6: 14:b4:27:e2:92:ae:15:97:09:d4:4a:f3:64:9f:a2: d9:29:48:c2:04:24:a7:f3:af:9e:66:30:e7:c9:8d: 56:4a:fc:55:3d:04:42:ee:5e:65:43:e8:6e:73:4d: 41:0f:06:a6:4a:1b:f6:d6:80:56:cc:7c:0a:2c:ad: 3f:40:ca:bd:35:ad:5b:7f:1f:1f:ff:6b:66:31:56: 9c:1d:dc:d7:69:55:3d:50:51:4b:cf:4e:c0:32:d1: 93:41:31:86:8f:b5:ef:3e:f6:bc:45:54:22:33:e8: 4b:2f:69:7a:e1:b1:50:3a:8b:21:30:6d:38:47:9a: 82:d3:40:91:77:e3:41:3b:83:71:40:ab:53:c5:84: 74:c4:8c:5e:10:68:d8:4e:b3:44:52:8e:37:5a:68: 87:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:79:6B:9A:20:34:18:2B:F5:7A:08:5F:0A:4C:45:65:73:25:18:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.crl X509v3 Authority Key Identifier: keyid:38:30:39:91:69:F1:77:78:F8:70:56:79:18:39:02:C2:21:86:48:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:20:3c:4b:00:a7:81:f5:b2:21:87:bb:86:57:e5:e2:64:10: f3:ed:fd:59:22:b3:0c:16:2c:d1:e8:35:62:c7:a3:b4:7b:87: 0d:e3:30:67:e5:35:39:89:5b:1d:42:4b:1a:0c:48:a7:31:f4: 71:61:d3:2d:97:b2:ae:be:b3:89:c5:a8:23:5f:16:21:1f:02: b8:27:c7:18:c9:0d:12:9c:06:ab:57:97:05:3e:4d:6b:e7:a2: e8:07:9f:a1:37:b2:06:88:0a:3e:7b:c7:62:ee:e5:fb:c3:27: 91:8c:b2:83:7c:43:fc:04:85:bc:48:7f:3a:67:d1:9b:eb:13: 36:b7:7c:3a:06:a8:f9:6c:be:6d:32:f3:b0:1c:e3:84:1d:17: 0f:fe:cd:e3:71:78:d1:01:84:ae:42:1d:a1:15:89:c8:5a:fd: dc:75:c4:03:c7:74:50:e3:25:db:9a:d3:8a:a4:0c:4b:48:e6: 8c:21:91:92:94:02:80:8e:02:08:9e:61:40:e2:c3:ba:07:b4: fb:99:b6:b2:64:36:b1:1b:9f:29:c1:eb:82:8e:54:c3:3d:93: ca:c3:c0:a2:84:2b:27:26:39:ba:83:27:16:33:a1:16:0e:08: 8e:16:39:b9:dd:35:a8:e1:e1:06:df:8b:0b:8d:09:f8:de:a6: 90:4f:e1:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE5RGYvx6LFvTDkwvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlMjAzMDMtMjM5MC00N2E3LWI4OWMtODQyMzY3YmU0 NTg0MB4XDTI2MDYyODAyMDAyMloXDTI2MDYzMDAyMDAwMFowLzEtMCsGA1UEAxMk ZDhhMDliMmUtYzUwOC00NGQzLWE0YzEtZGNjMTA1NWYwNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZpUxuNEzWJ2nxfNsVYggp0qmg9NzQzlIwev 3E2M4qhwbjxYa7OKz7ZG76t0f4yDkzusrZaf5hyxkLtio1NTU2ObBq8Zen8c4qHd f/IVTYLH7r1+lV+UNbwIFngK+lkERJblszT0GOYUtCfikq4VlwnUSvNkn6LZKUjC BCSn86+eZjDnyY1WSvxVPQRC7l5lQ+huc01BDwamShv21oBWzHwKLK0/QMq9Na1b fx8f/2tmMVacHdzXaVU9UFFLz07AMtGTQTGGj7XvPva8RVQiM+hLL2l64bFQOosh MG04R5qC00CRd+NBO4NxQKtTxYR0xIxeEGjYTrNEUo43WmiHpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCd5a5ogNBgr9XoIXwpMRWVzJRikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Uy MDMwMy0yMzkwLTQ3YTctYjg5Yy04NDIzNjdiZTQ1ODQvZDdlMjAzMDMtMjM5MC00 N2E3LWI4OWMtODQyMzY3YmU0NTg0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdlMjAzMDMtMjM5MC00N2E3LWI4 OWMtODQyMzY3YmU0NTg0L2Q3ZTIwMzAzLTIzOTAtNDdhNy1iODljLTg0MjM2N2Jl NDU4NC5jcmwwHwYDVR0jBBgwFoAUODA5kWnxd3j4cFZ5GDkCwiGGSJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2UyMDMwMy0yMzkwLTQ3YTctYjg5Yy04NDIz NjdiZTQ1ODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkIDxLAKeB9bIhh7uGV+Xi ZBDz7f1ZIrMMFizR6DVix6O0e4cN4zBn5TU5iVsdQksaDEinMfRxYdMtl7KuvrOJ xagjXxYhHwK4J8cYyQ0SnAarV5cFPk1r56LoB5+hN7IGiAo+e8di7uX7wyeRjLKD fEP8BIW8SH86Z9Gb6xM2t3w6Bqj5bL5tMvOwHOOEHRcP/s3jcXjRAYSuQh2hFYnI Wv3cdcQDx3RQ4yXbmtOKpAxLSOaMIZGSlAKAjgIInmFA4sO6B7T7mbayZDaxG58p weuCjlTDPZPKw8CihCsnJjm6gycWM6EWDgiOFjm53TWo4eEG34sLjQn43qaQT+Ey -----END CERTIFICATE-----Generated at Sun Jun 28 16:32:39 2026 by rpki-client