$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.mft File: a678b84f-a615-4754-9dcb-e51b04125026.mft (raw, json) Hash identifier: coaOuz66ijeZAQx45F6rze+gDJddzJXJJrg8xvAvNNo= Subject key identifier: D7:F3:D1:F1:6F:3C:32:20:91:E6:AC:D5:20:99:9D:65:A6:F0:A0:49 Authority key identifier: D3:9E:94:40:5E:55:0F:6B:1A:42:B4:FD:DD:48:3D:5C:90:F9:E1:E1 Certificate issuer: /CN=a678b84f-a615-4754-9dcb-e51b04125026 Certificate serial: 010D0C9F4328584EE9D4BF3FE26F00988038F980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.mft Manifest number: 010D0C9F43285846F3D248431601FE83D6761C76 Signing time: Fri 21 Aug 2026 19:00:22 +0000 Manifest this update: Fri 21 Aug 2026 19:00:22 +0000 Manifest next update: Mon 24 Aug 2026 19:00:00 +0000 Files and hashes: 1: a678b84f-a615-4754-9dcb-e51b04125026.crl (hash: p4YyiXcyHZdX4yUI7dMxkJy7m8kHd4e0nTZ1DLoFDNc=) 2: c40b8517-cb95-3d62-a746-1fc2642ef195.roa (hash: 5FKW3PVQ9ueCkyS9rBi8uAdVzHWBWZldb9J1QFK306U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:d4:bf:3f:e2:6f:00:98:80:38:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a678b84f-a615-4754-9dcb-e51b04125026 Validity Not Before: Aug 21 19:00:22 2026 GMT Not After : Aug 24 19:00:00 2026 GMT Subject: CN=cd7a27c5-5e90-467c-8314-b47a23306c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:b5:95:9e:df:21:ff:03:3f:8c:de:ac:eb: 28:09:ff:11:61:65:76:ff:0c:94:0c:b3:1f:6b:da: 18:f5:83:90:ee:78:39:87:eb:b2:42:cc:0a:7b:23: 56:f4:6f:9f:a8:ea:6e:0b:99:c1:43:60:eb:a4:9a: 41:50:0a:b0:29:83:fc:86:8c:25:5b:dd:a7:4f:3f: de:38:b9:07:18:2d:af:a6:27:20:53:0e:68:c0:1b: a0:d8:f0:a9:8b:ad:fd:60:4d:31:8e:fd:99:21:64: f5:32:e1:b0:89:5b:d0:4a:0c:80:67:81:ad:16:59: 7a:17:b1:4a:4b:37:89:e4:84:c4:ce:dc:88:f6:ff: d9:f4:93:e9:28:1e:26:03:e0:3a:1f:68:f4:a2:9d: 90:61:1a:1d:fa:88:ae:ca:40:3d:0d:57:93:44:cc: 44:22:6a:be:81:5d:f7:dc:c8:b9:1d:62:11:c8:00: 40:b7:8b:7a:d6:d6:2b:02:98:bf:bd:78:53:f5:4a: 95:d4:8b:46:c5:20:38:b2:0b:c1:b3:15:fe:1c:40: d8:93:d6:23:4a:56:6d:be:f9:90:80:11:1f:92:1e: 58:26:ca:3e:8f:9b:4e:ea:e5:46:cf:53:8c:12:83: 88:d9:30:d6:bd:65:79:06:4f:5a:17:46:d7:98:1c: de:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F3:D1:F1:6F:3C:32:20:91:E6:AC:D5:20:99:9D:65:A6:F0:A0:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.crl X509v3 Authority Key Identifier: keyid:D3:9E:94:40:5E:55:0F:6B:1A:42:B4:FD:DD:48:3D:5C:90:F9:E1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bf:89:d1:17:ec:e2:93:91:6d:c8:8b:15:02:99:86:37:1d: a1:f2:2a:f3:51:8b:c2:32:50:35:2f:e2:1f:b1:97:ce:0a:35: 6c:78:c0:e8:2d:e7:b3:d4:ca:63:aa:7b:dc:ff:8e:d8:01:da: d1:97:8e:58:be:16:22:8d:f3:61:46:f5:4c:d6:02:89:05:33: bf:3f:7f:26:1e:ca:d2:14:c9:01:0f:9a:3b:f1:50:5c:ca:f4: f9:c7:0f:b2:54:53:30:23:6d:ef:2a:9b:75:6f:6a:70:ee:23: 37:90:f2:9c:30:10:fa:bc:8f:80:c8:2d:ae:c2:c6:82:40:66: ad:b3:6a:ec:22:6c:da:f3:a7:dd:c4:3a:64:22:d9:83:bf:4f: 7f:ab:d4:09:d9:b7:85:d8:28:05:aa:9a:26:2b:78:9a:b9:5f: 28:ad:58:e5:c8:49:fb:5c:6e:41:69:c4:a8:f8:cf:4b:a7:9b: 29:9d:66:1c:8b:d2:38:1e:22:6e:9e:12:5d:b1:09:cb:ad:f1: 8f:94:ad:21:3e:9f:9c:dd:f1:9a:7c:e5:b8:f9:a7:a7:f4:33: b1:39:4a:5c:0c:ca:0c:5c:2d:5a:31:d5:a5:e6:34:f0:1c:e0: f2:4e:42:e1:b3:11:34:49:94:a6:ce:22:b1:bb:2e:e1:27:48: 45:05:b1:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7p1L8/4m8AmIA4+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY3OGI4NGYtYTYxNS00NzU0LTlkY2ItZTUxYjA0MTI1 MDI2MB4XDTI2MDgyMTE5MDAyMloXDTI2MDgyNDE5MDAwMFowLzEtMCsGA1UEAxMk Y2Q3YTI3YzUtNWU5MC00NjdjLTgzMTQtYjQ3YTIzMzA2YzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt61lZ7fIf8DP4zerOsoCf8RYWV2/wyUDLMf a9oY9YOQ7ng5h+uyQswKeyNW9G+fqOpuC5nBQ2DrpJpBUAqwKYP8howlW92nTz/e OLkHGC2vpicgUw5owBug2PCpi639YE0xjv2ZIWT1MuGwiVvQSgyAZ4GtFll6F7FK SzeJ5ITEztyI9v/Z9JPpKB4mA+A6H2j0op2QYRod+oiuykA9DVeTRMxEImq+gV33 3Mi5HWIRyABAt4t61tYrApi/vXhT9UqV1ItGxSA4sgvBsxX+HEDYk9YjSlZtvvmQ gBEfkh5YJso+j5tO6uVGz1OMEoOI2TDWvWV5Bk9aF0bXmBzeIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNfz0fFvPDIgkeas1SCZnWWm8KBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNjc4 Yjg0Zi1hNjE1LTQ3NTQtOWRjYi1lNTFiMDQxMjUwMjYvYTY3OGI4NGYtYTYxNS00 NzU0LTlkY2ItZTUxYjA0MTI1MDI2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTY3OGI4NGYtYTYxNS00NzU0LTlk Y2ItZTUxYjA0MTI1MDI2L2E2NzhiODRmLWE2MTUtNDc1NC05ZGNiLWU1MWIwNDEy NTAyNi5jcmwwHwYDVR0jBBgwFoAU056UQF5VD2saQrT93Ug9XJD54eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNjc4Yjg0Zi1hNjE1LTQ3NTQtOWRjYi1lNTFi MDQxMjUwMjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYv4nRF+zik5FtyIsVApmG Nx2h8irzUYvCMlA1L+IfsZfOCjVseMDoLeez1Mpjqnvc/47YAdrRl45YvhYijfNh RvVM1gKJBTO/P38mHsrSFMkBD5o78VBcyvT5xw+yVFMwI23vKpt1b2pw7iM3kPKc MBD6vI+AyC2uwsaCQGats2rsImza86fdxDpkItmDv09/q9QJ2beF2CgFqpomK3ia uV8orVjlyEn7XG5BacSo+M9Lp5spnWYci9I4HiJunhJdsQnLrfGPlK0hPp+c3fGa fOW4+aen9DOxOUpcDMoMXC1aMdWl5jTwHODyTkLhsxE0SZSmziKxuy7hJ0hFBbHi -----END CERTIFICATE-----Generated at Sat Aug 22 17:19:59 2026 by rpki-client