$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft File: 3228caa5-d014-404b-9e3d-61cdea1ff493.mft (raw, json) Hash identifier: O4nOV64VXgalDcoMWfD3iHcR7TDdLcrYBAzTHMSgL7s= Subject key identifier: 78:95:66:A5:33:C8:AD:06:B3:FB:AC:6C:57:75:43:84:F2:81:62:AC Authority key identifier: 61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E Certificate issuer: /CN=3228caa5-d014-404b-9e3d-61cdea1ff493 Certificate serial: 010D0C9F4328584E6BDAA7D34EBFA85A4B5C5C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft Manifest number: 010D0C9F43285847A625B9018F5C2B74B33CB13C Signing time: Tue 07 Jul 2026 16:00:21 +0000 Manifest this update: Tue 07 Jul 2026 16:00:21 +0000 Manifest next update: Thu 09 Jul 2026 16:00:00 +0000 Files and hashes: 1: 3228caa5-d014-404b-9e3d-61cdea1ff493.crl (hash: NZaR2ebXWFxPXGJJmRJPNf5JMDhB/VobV2KZxg/yVAY=) 2: 7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa (hash: UTY/y5lnBK9fnHF0z/e+CrP/KcJQ9I+jloqbgh0Gf0I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:da:a7:d3:4e:bf:a8:5a:4b:5c:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3228caa5-d014-404b-9e3d-61cdea1ff493 Validity Not Before: Jul 7 16:00:21 2026 GMT Not After : Jul 9 16:00:00 2026 GMT Subject: CN=70f571b9-559d-4f9d-b5e4-8eb2885bf3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:16:22:76:4f:e9:c8:65:79:52:4d:82:4f: 45:09:90:ab:21:69:25:6c:c8:43:71:e1:cd:04:db: 8d:5f:f7:30:19:0d:09:41:c4:ab:46:42:e2:98:69: 3c:97:3d:6d:f8:9a:29:b1:c1:af:90:4f:1b:53:80: 41:4d:c5:da:7c:d4:5b:c5:d0:f4:e8:24:f4:76:09: fa:34:2b:6e:be:a3:4b:14:36:05:62:0d:95:9a:4e: 14:8c:99:ac:5e:cd:3c:b4:f0:4e:4e:18:a5:c2:bf: ae:38:62:0d:ed:c7:18:b1:99:0f:a3:c2:77:27:7e: 70:cf:24:fa:7b:57:6f:12:8f:31:ec:27:f0:a5:a3: eb:1a:12:56:fc:65:ab:7b:da:11:9f:2c:ad:4d:84: f2:1f:00:3c:e4:9b:09:97:3e:3c:ce:02:0c:1e:0c: 7f:02:76:1f:c4:a2:24:63:45:86:9c:33:c5:29:13: 0f:14:12:b8:01:0c:31:e7:59:0a:ad:2b:b2:cb:3a: a1:7e:be:e4:96:77:fc:dd:ff:09:29:ba:8f:34:63: ba:d1:18:a4:6c:84:f4:dd:5a:17:1b:d3:b7:59:20: a0:5d:cc:70:b9:a4:6a:f9:68:bc:ab:8c:8b:30:66: 4a:ba:8b:5f:1d:c7:74:38:c7:0a:3a:91:0e:47:26: 73:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:95:66:A5:33:C8:AD:06:B3:FB:AC:6C:57:75:43:84:F2:81:62:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl X509v3 Authority Key Identifier: keyid:61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:9a:71:d4:a3:65:33:16:28:e6:36:9e:79:25:e7:a9:34:84: c4:08:8c:34:3b:f6:d2:64:45:22:2c:1e:6b:96:82:b0:45:2f: d2:af:df:52:4f:9b:17:0e:0e:6b:ab:70:3c:b0:7a:21:29:11: bd:5d:65:46:b7:d9:31:ce:ae:ad:a3:12:82:98:82:9c:14:3e: fd:5c:13:95:d7:e4:95:0a:27:ed:23:72:56:e0:4c:f0:df:8a: 8e:a2:51:b6:c5:42:33:cd:8e:1e:aa:4d:38:e8:aa:df:46:b8: 49:9e:74:58:72:59:ed:eb:0c:98:c5:5d:4b:77:c0:14:44:06: f4:38:27:52:5a:25:70:d2:5e:6e:68:ec:1c:71:7a:41:b7:f3: 8c:94:3a:48:c5:be:57:b1:eb:ff:03:94:88:ac:4b:22:74:cb: c6:6c:35:93:fb:2e:f2:17:1f:33:21:b7:21:e7:3f:c7:ef:da: a5:aa:3c:7d:a3:14:9b:52:31:53:72:44:9f:b3:fb:13:60:59: 56:98:ec:82:8c:88:72:54:81:45:ff:52:fe:19:71:f7:98:3a: 70:a0:27:b8:d8:1e:5a:88:be:cb:c1:14:c2:aa:b0:da:3e:df: 5b:2b:b9:84:cc:7d:ba:36:c1:df:ff:ae:8a:80:fa:25:58:ec: cd:49:3f:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE5r2qfTTr+oWktcXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyOGNhYTUtZDAxNC00MDRiLTllM2QtNjFjZGVhMWZm NDkzMB4XDTI2MDcwNzE2MDAyMVoXDTI2MDcwOTE2MDAwMFowLzEtMCsGA1UEAxMk NzBmNTcxYjktNTU5ZC00ZjlkLWI1ZTQtOGViMjg4NWJmM2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozsWInZP6chleVJNgk9FCZCrIWklbMhDceHN BNuNX/cwGQ0JQcSrRkLimGk8lz1t+JopscGvkE8bU4BBTcXafNRbxdD06CT0dgn6 NCtuvqNLFDYFYg2Vmk4UjJmsXs08tPBOThilwr+uOGIN7ccYsZkPo8J3J35wzyT6 e1dvEo8x7CfwpaPrGhJW/GWre9oRnyytTYTyHwA85JsJlz48zgIMHgx/AnYfxKIk Y0WGnDPFKRMPFBK4AQwx51kKrSuyyzqhfr7klnf83f8JKbqPNGO60RikbIT03VoX G9O3WSCgXcxwuaRq+Wi8q4yLMGZKuotfHcd0OMcKOpEORyZzswIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHiVZqUzyK0Gs/usbFd1Q4TygWKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4 Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNkZWExZmY0OTMvMzIyOGNhYTUtZDAxNC00 MDRiLTllM2QtNjFjZGVhMWZmNDkzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzIyOGNhYTUtZDAxNC00MDRiLTll M2QtNjFjZGVhMWZmNDkzLzMyMjhjYWE1LWQwMTQtNDA0Yi05ZTNkLTYxY2RlYTFm ZjQ5My5jcmwwHwYDVR0jBBgwFoAUYXuo2hdAn1AEK9DeedP/eynSfV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNk ZWExZmY0OTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbmnHUo2UzFijmNp55Jeep NITECIw0O/bSZEUiLB5rloKwRS/Sr99ST5sXDg5rq3A8sHohKRG9XWVGt9kxzq6t oxKCmIKcFD79XBOV1+SVCiftI3JW4Ezw34qOolG2xUIzzY4eqk046KrfRrhJnnRY clnt6wyYxV1Ld8AURAb0OCdSWiVw0l5uaOwccXpBt/OMlDpIxb5Xsev/A5SIrEsi dMvGbDWT+y7yFx8zIbch5z/H79qlqjx9oxSbUjFTckSfs/sTYFlWmOyCjIhyVIFF /1L+GXH3mDpwoCe42B5aiL7LwRTCqrDaPt9bK7mEzH26NsHf/66KgPolWOzNST/Z -----END CERTIFICATE-----Generated at Wed Jul 8 15:19:45 2026 by rpki-client