$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft File: 2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft (raw, json) Hash identifier: 1jFcGmf9OAgM26Hsu2dcJ5fT0/0nl3RvyNiC6J6+77w= Subject key identifier: A8:63:42:B0:0C:B0:FB:1E:37:2E:8C:8D:40:BE:98:A8:C4:12:7E:86 Authority key identifier: 10:C6:66:25:99:62:62:82:33:CF:65:60:00:5C:FD:90:F2:00:67:A5 Certificate issuer: /CN=2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0 Certificate serial: 010D0C9F4328584EBE8F29C8719E2DCCAB826E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft Manifest number: 010D0C9F4328584073A8466E0185068C437FF15E Signing time: Thu 06 Aug 2026 07:00:23 +0000 Manifest this update: Thu 06 Aug 2026 07:00:23 +0000 Manifest next update: Sun 09 Aug 2026 07:00:00 +0000 Files and hashes: 1: 2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl (hash: 5Q3rLECgZMRDBbBCqu20pHlH+yFpImY6oLEexRm2j68=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:be:8f:29:c8:71:9e:2d:cc:ab:82:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0 Validity Not Before: Aug 6 07:00:23 2026 GMT Not After : Aug 9 07:00:00 2026 GMT Subject: CN=b7262b00-f44a-42cd-aeba-b02cb0cbae72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:dc:6d:41:a1:c8:b8:ad:90:d1:bc:fe:ba: ca:11:e2:b5:79:2f:be:1c:aa:7f:05:95:36:4e:f7: 0a:f3:5c:40:cf:ad:35:ed:5a:45:e2:9a:b7:ac:69: 82:c1:85:41:b0:4a:b7:f6:60:fb:42:bc:c4:89:1e: 22:fa:69:97:21:7a:9c:03:c6:6d:c8:8d:0a:6b:a5: 61:c1:2b:28:ca:ae:09:19:5d:fd:38:45:33:5b:ae: 0f:b8:9f:1b:7e:a7:0b:ed:9b:f1:63:40:fa:4f:9b: a0:69:ff:32:19:9e:82:8e:b8:56:d0:2d:a2:ef:38: 55:6f:1e:f7:c7:2e:23:3f:77:89:ce:2b:89:63:73: ed:e1:22:83:6a:68:45:e6:e0:47:75:46:01:0a:22: 05:d3:16:4b:b1:47:a7:58:09:05:e2:3e:bf:26:b2: db:80:5e:49:86:21:af:50:0e:46:a0:24:92:00:34: b2:22:cb:64:0a:cc:dc:7f:61:6d:1a:77:f5:c4:14: 1b:20:0a:20:38:00:0c:06:b2:28:29:38:38:1c:42: 19:11:a6:22:62:c9:b3:42:12:86:15:4f:d3:6e:a1: f1:5c:7e:9b:a4:c2:83:f5:c3:8d:d7:0a:0a:c4:a4: b1:28:e3:6b:f3:f0:4f:8b:e9:eb:bc:f8:30:ac:d3: c2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:63:42:B0:0C:B0:FB:1E:37:2E:8C:8D:40:BE:98:A8:C4:12:7E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl X509v3 Authority Key Identifier: keyid:10:C6:66:25:99:62:62:82:33:CF:65:60:00:5C:FD:90:F2:00:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:0e:69:7f:51:0d:0c:0a:5c:9e:13:02:cc:c5:6c:a3:6c:2d: b9:b5:1e:c1:7a:2f:60:38:b8:ed:c4:95:04:3d:fd:bb:41:d5: 25:b0:59:cd:ef:b3:29:be:f4:a1:f3:da:62:7a:3a:9f:af:8d: 93:6b:b5:28:e9:9d:43:98:50:d6:65:11:43:40:9c:6f:1e:bc: 41:d5:a9:7a:c3:26:92:36:01:d9:e9:53:bb:2d:44:24:e0:f7: 61:8f:78:14:05:77:a2:f5:b9:32:8a:f6:cd:29:10:2e:5c:fb: 2d:2d:29:e9:0b:eb:77:7f:0a:8a:a2:94:1f:19:ce:26:99:e6: ee:f0:7a:78:2b:82:a3:ee:f5:5f:3a:31:f9:3c:72:33:65:b1: 35:6d:cd:e1:f4:43:a4:ee:b5:5f:0c:c4:ef:4a:32:91:e1:a9: 00:1c:23:23:b2:69:80:a4:31:fc:50:c2:74:58:f5:9d:71:31: 52:71:06:57:de:72:3e:5c:94:84:0a:5a:fc:7c:43:fd:39:62: 5f:a9:81:f6:8e:43:d4:39:3f:d6:d4:0a:f5:78:ff:b9:c9:45: fd:e6:6c:01:fc:52:56:b5:a7:9d:bc:fe:ea:42:6d:60:a5:97: fe:84:d2:67:35:71:c2:eb:f7:13:c7:dc:ca:53:ce:0a:1f:b1: 67:b5:f9:ef -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6+jynIcZ4tzKuCbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkMzk3M2QtMGQ0MC00ZmZlLWJhZWQtODFlYTdjN2Vh MGIwMB4XDTI2MDgwNjA3MDAyM1oXDTI2MDgwOTA3MDAwMFowLzEtMCsGA1UEAxMk YjcyNjJiMDAtZjQ0YS00MmNkLWFlYmEtYjAyY2IwY2JhZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCDcbUGhyLitkNG8/rrKEeK1eS++HKp/BZU2 TvcK81xAz6017VpF4pq3rGmCwYVBsEq39mD7QrzEiR4i+mmXIXqcA8ZtyI0Ka6Vh wSsoyq4JGV39OEUzW64PuJ8bfqcL7ZvxY0D6T5ugaf8yGZ6CjrhW0C2i7zhVbx73 xy4jP3eJziuJY3Pt4SKDamhF5uBHdUYBCiIF0xZLsUenWAkF4j6/JrLbgF5JhiGv UA5GoCSSADSyIstkCszcf2FtGnf1xBQbIAogOAAMBrIoKTg4HEIZEaYiYsmzQhKG FU/TbqHxXH6bpMKD9cON1woKxKSxKONr8/BPi+nrvPgwrNPClwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKhjQrAMsPseNy6MjUC+mKjEEn6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yY2Qz OTczZC0wZDQwLTRmZmUtYmFlZC04MWVhN2M3ZWEwYjAvMmNkMzk3M2QtMGQ0MC00 ZmZlLWJhZWQtODFlYTdjN2VhMGIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmNkMzk3M2QtMGQ0MC00ZmZlLWJh ZWQtODFlYTdjN2VhMGIwLzJjZDM5NzNkLTBkNDAtNGZmZS1iYWVkLTgxZWE3Yzdl YTBiMC5jcmwwHwYDVR0jBBgwFoAUEMZmJZliYoIzz2VgAFz9kPIAZ6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yY2QzOTczZC0wZDQwLTRmZmUtYmFlZC04MWVh N2M3ZWEwYjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZDml/UQ0MClyeEwLMxWyj bC25tR7Bei9gOLjtxJUEPf27QdUlsFnN77MpvvSh89piejqfr42Ta7Uo6Z1DmFDW ZRFDQJxvHrxB1al6wyaSNgHZ6VO7LUQk4Pdhj3gUBXei9bkyivbNKRAuXPstLSnp C+t3fwqKopQfGc4mmebu8Hp4K4Kj7vVfOjH5PHIzZbE1bc3h9EOk7rVfDMTvSjKR 4akAHCMjsmmApDH8UMJ0WPWdcTFScQZX3nI+XJSEClr8fEP9OWJfqYH2jkPUOT/W 1Ar1eP+5yUX95mwB/FJWtaedvP7qQm1gpZf+hNJnNXHC6/cTx9zKU84KH7Fntfnv -----END CERTIFICATE-----Generated at Thu Aug 6 22:34:56 2026 by rpki-client