$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: yTJSvuB/sUhXNNCdC/9bMZvljSIbjKC2c3XPdYzn7gI= Subject key identifier: 53:F3:3D:94:F4:5D:22:45:72:91:CE:FF:C6:0B:E4:EC:B4:3E:41:B9 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584EF5B22D75DBB17D3D3D1B5C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70CBF4 Signing time: Wed 26 Aug 2026 01:00:23 +0000 Manifest this update: Wed 26 Aug 2026 01:00:23 +0000 Manifest next update: Fri 28 Aug 2026 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: NF4okbmdhvs6XDmqdzURYyVig6i0FtAdH+1Q9jyPq8I=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: Lbo/s4ozU2MIVjUw7+zb5GDhztZ8BSa5J9+z6GTKp/Q=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: /HzoaZ9j5YI5UFjDyQeZ0MqOMDwtssCNhW0sNmraGmQ=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: IzUbjM3KRk9wfwZRh7/7pL1ru/Lw+jzV/lwonbVy5Cg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:2d:75:db:b1:7d:3d:3d:1b:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Aug 26 01:00:23 2026 GMT Not After : Aug 28 23:00:00 2026 GMT Subject: CN=cdd12195-3aa9-497a-9234-510982a09f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b5:91:e4:6d:c8:8d:14:23:af:97:91:2b:ce: 7d:10:02:3f:0c:0c:88:1b:0c:3f:d4:7a:dc:04:41: 56:35:91:96:11:23:47:5b:4e:3b:ce:22:8b:69:36: 5c:93:8a:03:94:60:7e:49:f1:55:42:dc:e7:db:92: fd:c4:51:1e:3b:57:bd:da:cd:f1:0a:8d:62:b5:5b: 47:c0:9a:96:b4:16:53:b9:9c:03:2e:89:7d:e6:d5: de:e3:ad:d5:76:0c:f6:a0:65:d6:76:0d:f5:5b:d6: b9:8f:16:06:4e:68:a6:54:94:ea:3e:32:cc:8f:56: ee:5c:e0:b0:32:9e:12:a1:3e:7d:e8:b0:68:89:e0: 74:69:c7:7d:73:3a:c3:48:15:01:9a:72:23:e9:25: d6:6f:8b:0a:b8:d4:62:9e:b2:44:11:ed:86:b6:8f: 1c:a9:c8:8a:17:c1:0c:fd:ec:c4:df:51:5f:db:2c: ef:1b:a4:9d:ee:a9:df:95:d3:6e:8f:8b:b0:8c:47: c9:c6:0f:29:4f:08:a9:2f:a0:50:38:af:18:ac:ee: 19:1d:79:c2:a8:28:2f:50:b5:b8:01:66:13:2e:e6: 57:e1:2e:e1:fb:3d:c7:08:f3:2b:46:59:2b:2f:3e: bb:3d:12:13:e5:4b:39:8b:8e:e3:51:c2:83:12:d6: 45:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F3:3D:94:F4:5D:22:45:72:91:CE:FF:C6:0B:E4:EC:B4:3E:41:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:75:02:1f:f0:48:05:0d:01:ec:f1:9f:ac:3b:12:6c:25:d6: 3e:ac:d1:21:49:57:2e:d7:3f:1a:97:aa:d5:7c:52:30:97:f0: 32:f0:b9:56:ab:4f:50:71:4f:17:3a:23:61:0a:c3:0f:d6:23: f6:5d:15:b4:78:91:69:09:5c:69:3b:63:ec:19:9a:e1:89:ac: d1:0b:39:50:7f:4e:e9:de:1d:b2:0a:5d:b9:45:2e:74:3b:ec: a9:b0:ee:b6:a1:e6:38:77:5f:ac:89:77:70:bd:6f:95:90:90: a1:37:8c:8a:e8:d1:88:1a:cd:ea:16:e1:ba:ff:f5:4f:8d:8d: e3:c4:a2:06:3c:37:7a:b8:fe:c8:bb:25:06:c2:3f:b3:0e:cd: 5c:68:31:de:67:bd:85:0c:92:9b:5b:3a:2b:fb:a1:3a:0a:d0: a8:b6:71:6b:cb:9b:ea:77:40:37:d5:fa:25:0f:1f:1c:19:fe: 4d:89:d8:14:9a:3a:9d:28:56:fd:35:36:3b:40:03:d2:00:f5: 16:79:d0:25:b1:bc:8f:86:aa:cc:90:f3:91:bc:49:01:30:8a: 14:ca:11:a4:91:1a:d0:b9:77:29:02:b3:04:2a:b1:6c:21:a1: 28:8b:fc:96:31:e6:bd:f1:02:2e:8f:08:93:b9:9c:3c:06:04: b7:af:1f:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE71si1127F9PT0bXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI2MDgyNjAxMDAyM1oXDTI2MDgyODIzMDAwMFowLzEtMCsGA1UEAxMk Y2RkMTIxOTUtM2FhOS00OTdhLTkyMzQtNTEwOTgyYTA5ZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrWR5G3IjRQjr5eRK859EAI/DAyIGww/1Hrc BEFWNZGWESNHW047ziKLaTZck4oDlGB+SfFVQtzn25L9xFEeO1e92s3xCo1itVtH wJqWtBZTuZwDLol95tXe463Vdgz2oGXWdg31W9a5jxYGTmimVJTqPjLMj1buXOCw Mp4SoT596LBoieB0acd9czrDSBUBmnIj6SXWb4sKuNRinrJEEe2Gto8cqciKF8EM /ezE31Ff2yzvG6Sd7qnfldNuj4uwjEfJxg8pTwipL6BQOK8YrO4ZHXnCqCgvULW4 AWYTLuZX4S7h+z3HCPMrRlkrLz67PRIT5Us5i47jUcKDEtZFfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFPzPZT0XSJFcpHO/8YL5Oy0PkG5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9dQIf8EgFDQHs8Z+sOxJs JdY+rNEhSVcu1z8al6rVfFIwl/Ay8LlWq09QcU8XOiNhCsMP1iP2XRW0eJFpCVxp O2PsGZrhiazRCzlQf07p3h2yCl25RS50O+ypsO62oeY4d1+siXdwvW+VkJChN4yK 6NGIGs3qFuG6//VPjY3jxKIGPDd6uP7IuyUGwj+zDs1caDHeZ72FDJKbWzor+6E6 CtCotnFry5vqd0A31folDx8cGf5NidgUmjqdKFb9NTY7QAPSAPUWedAlsbyPhqrM kPORvEkBMIoUyhGkkRrQuXcpArMEKrFsIaEoi/yWMea98QIujwiTuZw8BgS3rx9z -----END CERTIFICATE-----Generated at Wed Aug 26 13:08:54 2026 by rpki-client