$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft File: 0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft (raw, json) Hash identifier: O7MpL1cbK0ZzIy1WaOWJriAO0Jk6sBtVCnk8yVMAMDY= Subject key identifier: 99:B2:8D:0C:72:13:B9:91:E7:4C:C8:52:84:C3:75:A0:BB:0A:C4:24 Authority key identifier: 37:58:C8:27:DF:A6:58:68:B4:EE:EF:1B:19:AB:13:35:8F:72:1F:12 Certificate issuer: /CN=0a0128b1-e1ee-43f5-b28c-147238fdbf1f Certificate serial: 010D0C9F4328584E6BDAA2E06CF91894A340C280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft Manifest number: 010D0C9F4328584073A81AFCD522FA53D685A201 Signing time: Tue 07 Jul 2026 16:00:21 +0000 Manifest this update: Tue 07 Jul 2026 16:00:21 +0000 Manifest next update: Thu 09 Jul 2026 16:00:00 +0000 Files and hashes: 1: 0a0128b1-e1ee-43f5-b28c-147238fdbf1f.crl (hash: xI06mg19Iy9cbEG3aqQR/5lDkezOD1LKQr52LSRKguc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:da:a2:e0:6c:f9:18:94:a3:40:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a0128b1-e1ee-43f5-b28c-147238fdbf1f Validity Not Before: Jul 7 16:00:21 2026 GMT Not After : Jul 9 16:00:00 2026 GMT Subject: CN=602b6c33-6a92-4f56-b4a6-6f14aac26e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0a:24:11:4f:2b:ac:7c:ac:c2:97:11:8d:78: 3f:1a:8c:b2:93:ab:f4:17:f1:78:42:34:0e:76:a0: 63:ca:99:f5:cd:7a:f5:1c:a7:dd:f2:a9:59:d9:37: 6c:f0:d0:77:a8:ab:b1:63:cc:cc:50:48:aa:1b:78: 0c:ed:5e:18:05:f7:fa:67:55:cd:72:30:52:40:03: dc:0e:bf:9f:1c:19:6f:73:e8:d3:2c:4f:6e:86:0d: 2e:5c:e1:e8:da:f2:e2:b0:12:32:bd:57:6d:a8:4b: 9b:5a:14:ff:88:c0:15:31:f9:7c:2b:87:97:c4:b1: 7d:bd:6b:1b:ab:46:63:e3:69:6f:82:51:4f:64:89: 2c:ae:4a:4d:db:0e:49:af:2f:d0:31:ec:62:3c:12: eb:fe:fc:28:1b:39:8d:39:a4:34:93:30:66:e7:67: b9:77:45:1a:b4:19:60:a3:97:73:29:fc:ac:2a:7e: 94:73:69:50:98:d4:3d:74:43:54:f8:5c:21:7c:56: 59:4a:ac:43:27:49:b7:56:51:b6:22:31:a5:3b:3b: f7:da:7e:58:2d:59:65:f4:ce:54:73:f9:d9:31:db: 02:86:7d:d4:79:00:82:8a:ba:83:86:a6:ef:54:0a: b0:ae:e5:94:c1:be:83:e0:95:b8:01:d9:43:4b:44: 3c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B2:8D:0C:72:13:B9:91:E7:4C:C8:52:84:C3:75:A0:BB:0A:C4:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.crl X509v3 Authority Key Identifier: keyid:37:58:C8:27:DF:A6:58:68:B4:EE:EF:1B:19:AB:13:35:8F:72:1F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a3:c1:c4:7d:b2:93:de:35:eb:81:6c:5e:93:3e:68:5e:7c: 27:74:91:5d:78:11:98:54:0c:c1:44:0e:a6:31:7a:aa:db:58: c4:d5:eb:9e:c3:31:fa:04:cc:d8:8d:2a:fd:49:11:1f:7b:17: c8:f2:f9:f7:d5:d7:7e:4a:1b:51:0a:8b:1d:64:8e:66:a2:00: d0:56:99:b8:99:f4:1d:28:c5:13:b1:b2:ac:64:48:ae:89:e4: 62:ce:31:f0:fb:2f:bc:4a:5d:fd:a6:e1:36:83:24:3b:b2:87: 27:fe:a2:45:58:42:74:b4:9e:fd:dd:27:56:f2:93:24:fb:71: c1:72:8c:90:8f:50:e6:41:70:67:da:b9:f7:77:bd:6c:37:40: 02:71:cd:37:e2:a5:7c:a2:ff:c2:91:c1:17:8f:4b:ca:09:d7: 55:ee:00:94:26:ba:17:f8:a8:6c:d8:e6:2f:5a:32:d9:eb:1e: 3d:00:ae:b0:a3:9e:17:c8:0d:b1:7d:3a:15:f6:93:fa:77:e3: 7b:c4:cb:59:32:c2:2c:82:74:5d:40:ad:f3:87:f4:1c:4c:a9: 46:63:92:31:04:81:c3:dd:65:0c:96:38:db:01:54:ca:74:1d: f5:c5:0e:4a:ac:56:07:f0:59:59:4c:47:a7:d3:7e:06:4e:d0: 6a:c4:bf:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE5r2qLgbPkYlKNAwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEwMTI4YjEtZTFlZS00M2Y1LWIyOGMtMTQ3MjM4ZmRi ZjFmMB4XDTI2MDcwNzE2MDAyMVoXDTI2MDcwOTE2MDAwMFowLzEtMCsGA1UEAxMk NjAyYjZjMzMtNmE5Mi00ZjU2LWI0YTYtNmYxNGFhYzI2ZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAokEU8rrHyswpcRjXg/Goyyk6v0F/F4QjQO dqBjypn1zXr1HKfd8qlZ2Tds8NB3qKuxY8zMUEiqG3gM7V4YBff6Z1XNcjBSQAPc Dr+fHBlvc+jTLE9uhg0uXOHo2vLisBIyvVdtqEubWhT/iMAVMfl8K4eXxLF9vWsb q0Zj42lvglFPZIksrkpN2w5Jry/QMexiPBLr/vwoGzmNOaQ0kzBm52e5d0UatBlg o5dzKfysKn6Uc2lQmNQ9dENU+FwhfFZZSqxDJ0m3VlG2IjGlOzv32n5YLVll9M5U c/nZMdsChn3UeQCCirqDhqbvVAqwruWUwb6D4JW4AdlDS0Q8cwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJmyjQxyE7mR50zIUoTDdaC7CsQkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTAx MjhiMS1lMWVlLTQzZjUtYjI4Yy0xNDcyMzhmZGJmMWYvMGEwMTI4YjEtZTFlZS00 M2Y1LWIyOGMtMTQ3MjM4ZmRiZjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGEwMTI4YjEtZTFlZS00M2Y1LWIy OGMtMTQ3MjM4ZmRiZjFmLzBhMDEyOGIxLWUxZWUtNDNmNS1iMjhjLTE0NzIzOGZk YmYxZi5jcmwwHwYDVR0jBBgwFoAUN1jIJ9+mWGi07u8bGasTNY9yHxIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTAxMjhiMS1lMWVlLTQzZjUtYjI4Yy0xNDcy MzhmZGJmMWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCqo8HEfbKT3jXrgWxekz5o XnwndJFdeBGYVAzBRA6mMXqq21jE1euewzH6BMzYjSr9SREfexfI8vn31dd+ShtR CosdZI5mogDQVpm4mfQdKMUTsbKsZEiuieRizjHw+y+8Sl39puE2gyQ7socn/qJF WEJ0tJ793SdW8pMk+3HBcoyQj1DmQXBn2rn3d71sN0ACcc034qV8ov/CkcEXj0vK CddV7gCUJroX+Khs2OYvWjLZ6x49AK6wo54XyA2xfToV9pP6d+N7xMtZMsIsgnRd QK3zh/QcTKlGY5IxBIHD3WUMljjbAVTKdB31xQ5KrFYH8FlZTEen034GTtBqxL9o -----END CERTIFICATE-----Generated at Wed Jul 8 14:53:14 2026 by rpki-client