$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: aV/izvfg3AiO3bLxodIP4kbHPXN6nJ7747NBNRLE2M8= Subject key identifier: E5:02:B0:8F:92:81:A5:01:B3:BD:35:2D:12:5F:DF:42:D1:86:96:9E Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584E50C047CFB801F654F99A2780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70CBB5 Signing time: Sat 27 Jun 2026 23:00:24 +0000 Manifest this update: Sat 27 Jun 2026 23:00:24 +0000 Manifest next update: Mon 29 Jun 2026 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: 0xeo9DJ6J3gdInMEDv8ws8UL00fbmngOrk0YYv6QYcA=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: AO5FVTVIB5s5m2DaZg2bSYuI8lA3FlL8Wyl41AHWGu4=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: Z7XTFAjUiqzdmXJfWaLhjiikeOZ5I5t5ID4FxV89IPU=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: ZhMZTLRNEjsbTp2VeJ8oZSomdrxpan3/98LiZSz1ELo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:c0:47:cf:b8:01:f6:54:f9:9a:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Jun 27 23:00:24 2026 GMT Not After : Jun 29 23:00:00 2026 GMT Subject: CN=b5522007-35ab-45fd-9d7d-e8ae0e9489ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:e4:5b:92:9d:d7:b8:7c:b8:9a:7c:06:d2: 78:7b:72:c8:b9:56:c8:24:e0:cf:bd:dc:fb:05:3d: f6:12:13:1e:ca:a6:37:6a:97:2f:c8:81:13:34:f7: 68:a1:92:db:f9:eb:64:fd:03:e8:5d:59:b8:e7:c1: 11:2e:f4:08:5d:33:c6:d1:cc:4d:df:5e:b7:60:09: 7c:df:6d:e6:dd:79:bb:09:31:3e:be:f0:72:ae:96: be:69:bc:2d:1a:bf:d3:7a:93:6e:15:7a:87:81:92: 2d:83:19:1c:67:d8:c0:c2:09:58:25:c9:00:40:3b: 58:a2:bb:64:94:65:29:51:b1:32:66:a4:c1:d2:97: c4:24:be:5a:3e:6a:76:93:cf:e5:06:93:67:c0:8f: 6a:ec:44:da:ac:f2:80:5a:d6:84:85:70:d9:a0:df: da:c7:3e:87:40:3c:04:6c:39:fe:f9:2a:3b:0d:9b: f8:7c:3e:3a:db:e5:22:75:4a:cf:10:d4:41:ff:d5: d1:5b:dc:73:b2:9f:fa:37:53:12:3d:43:45:31:a4: 99:86:65:68:b5:53:2d:76:e5:5f:e3:81:ed:1a:26: ff:5a:ab:09:d0:c4:4c:bd:e7:81:98:93:b0:06:a9: 56:b3:e7:88:78:e1:b4:02:70:8e:e6:f6:4f:c0:a7: f8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:02:B0:8F:92:81:A5:01:B3:BD:35:2D:12:5F:DF:42:D1:86:96:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:df:9d:2a:b7:9c:78:bd:a8:35:90:07:61:20:52:de:af:f5: 66:48:e0:1e:7e:23:12:ce:a8:a7:fd:31:ac:6f:02:80:68:18: 87:33:47:a0:bd:fd:cb:da:19:8b:1f:7b:d9:89:b0:df:9d:4e: 34:a0:c1:03:62:7e:5b:1c:36:56:ed:cc:17:a3:5f:0c:30:2e: ae:27:23:7b:c6:5d:0e:26:7f:88:4a:bd:71:ec:da:d6:52:e1: 52:b7:d2:ae:4f:58:c7:74:fd:19:48:92:bb:10:87:34:32:98: 56:4c:d0:df:50:02:0c:cc:19:56:82:1b:17:95:1e:66:f0:3f: 57:55:4b:b1:8e:10:eb:9b:1d:ed:77:04:74:a4:dd:91:5a:7d: 45:13:07:b3:02:e4:d9:e2:db:7a:0a:69:30:23:42:f1:ef:4f: 8d:37:78:fc:eb:1b:11:64:22:83:44:d3:c6:7d:32:6e:0f:e8: 81:af:f0:83:e5:a5:3c:69:ab:f7:b4:ad:26:bc:a4:1c:1c:c9: 11:56:4d:35:be:0c:3c:cd:e2:6d:00:4a:d0:bd:86:4b:65:84: f2:a9:9c:94:8b:eb:61:15:a7:6b:30:d5:0c:48:eb:ed:40:6d: 66:16:c5:bc:d7:7f:41:d9:ee:bb:8f:e9:e5:4b:f9:d6:e6:d3: 05:a8:cf:80 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE5QwEfPuAH2VPmaJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI2MDYyNzIzMDAyNFoXDTI2MDYyOTIzMDAwMFowLzEtMCsGA1UEAxMk YjU1MjIwMDctMzVhYi00NWZkLTlkN2QtZThhZTBlOTQ4OWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnbkW5Kd17h8uJp8BtJ4e3LIuVbIJODPvdz7 BT32EhMeyqY3apcvyIETNPdooZLb+etk/QPoXVm458ERLvQIXTPG0cxN3163YAl8 323m3Xm7CTE+vvByrpa+abwtGr/TepNuFXqHgZItgxkcZ9jAwglYJckAQDtYortk lGUpUbEyZqTB0pfEJL5aPmp2k8/lBpNnwI9q7ETarPKAWtaEhXDZoN/axz6HQDwE bDn++So7DZv4fD462+UidUrPENRB/9XRW9xzsp/6N1MSPUNFMaSZhmVotVMtduVf 44HtGib/WqsJ0MRMveeBmJOwBqlWs+eIeOG0AnCO5vZPwKf4pwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOUCsI+SgaUBs701LRJf30LRhpaeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBa350qt5x4vag1kAdhIFLe r/VmSOAefiMSzqin/TGsbwKAaBiHM0egvf3L2hmLH3vZibDfnU40oMEDYn5bHDZW 7cwXo18MMC6uJyN7xl0OJn+ISr1x7NrWUuFSt9KuT1jHdP0ZSJK7EIc0MphWTNDf UAIMzBlWghsXlR5m8D9XVUuxjhDrmx3tdwR0pN2RWn1FEwezAuTZ4tt6CmkwI0Lx 70+NN3j86xsRZCKDRNPGfTJuD+iBr/CD5aU8aav3tK0mvKQcHMkRVk01vgw8zeJt AErQvYZLZYTyqZyUi+thFadrMNUMSOvtQG1mFsW8139B2e67j+nlS/nW5tMFqM+A -----END CERTIFICATE-----Generated at Sun Jun 28 16:25:05 2026 by rpki-client