$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft File: 3d21f741-fd91-4158-8853-7388dab3b3e3.mft (raw, json) Hash identifier: nfROOSMrC7U9AMGxPgxI9yv+Mzsh6YTnyRovb7itcFk= Subject key identifier: E7:20:69:40:D2:CD:0E:05:51:61:81:84:63:21:C1:2F:70:07:48:3F Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Certificate issuer: /CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Certificate serial: 010D0C9F4328584EEB937372BBD3C9006D3376B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft Manifest number: 010D0C9F4328584073A84C34E2402761CF9DBC4F Signing time: Sat 22 Aug 2026 10:00:24 +0000 Manifest this update: Sat 22 Aug 2026 10:00:24 +0000 Manifest next update: Tue 25 Aug 2026 10:00:00 +0000 Files and hashes: 1: 3d21f741-fd91-4158-8853-7388dab3b3e3.crl (hash: Em0VlPuBNtbMKcdIFiTtWv2fXiUvxEiUyLMY6r+AeDc=) 2: 90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (hash: h1wpsBTwNc/hKmEjivp6MLdfPbLpfO/E46wvLUc3pGY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:eb:93:73:72:bb:d3:c9:00:6d:33:76:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Validity Not Before: Aug 22 10:00:24 2026 GMT Not After : Aug 25 10:00:00 2026 GMT Subject: CN=37fc9294-be82-45ec-948d-233e2d3ff8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:7b:2d:fd:b1:79:49:bc:ad:8a:4e:62:a3: 54:fc:d4:58:2d:ed:a7:4f:c3:e3:77:07:a4:06:83: 7e:dc:78:8d:92:a2:e6:e9:cc:19:2a:20:e4:1d:1c: 6c:d2:72:fe:47:94:89:71:11:cd:7e:4b:16:b5:49: dc:d8:e0:84:e9:fc:bb:03:b8:68:35:66:1e:ac:b4: 40:7e:9f:91:c0:e5:72:09:66:58:bd:40:86:cd:0e: 04:58:d9:1a:6a:8d:bd:6f:7d:77:2f:7e:92:88:17: b7:07:e3:eb:6a:92:db:2e:9a:14:c0:7e:42:be:c6: 5d:b9:75:13:02:04:53:e0:cd:60:f7:a9:66:4c:a2: 97:f0:6c:b0:ff:61:cf:98:1c:af:6c:7d:01:87:a5: 59:d2:57:e8:df:41:90:ec:ab:d0:8d:47:fb:d4:3f: d7:c2:32:5b:58:ff:fc:fd:6a:99:eb:2e:c8:ff:23: 9a:17:16:d2:01:52:6d:32:06:a6:12:f2:78:7c:16: 2b:bf:ca:e6:82:a0:43:fe:9c:79:81:8d:be:ec:b1: 00:c7:84:58:32:16:65:03:cf:07:5c:70:e5:84:96: fd:36:eb:0a:2f:fc:75:33:c7:a6:4a:41:71:d5:14: a5:a6:94:1c:cb:2d:ce:43:71:b9:90:15:d7:ff:80: 5a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:20:69:40:D2:CD:0E:05:51:61:81:84:63:21:C1:2F:70:07:48:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl X509v3 Authority Key Identifier: keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:2c:b7:93:c7:0e:81:dd:f4:49:07:d0:df:a9:58:e9:30:5d: 29:4f:fb:6a:a7:31:34:75:72:ad:d3:82:5a:60:62:1e:b6:73: aa:79:8b:82:85:68:96:7d:f3:3d:1e:cd:49:87:40:b4:84:1d: 27:55:d5:c6:3d:ce:4e:75:a4:72:08:3b:fd:0c:40:53:8b:f7: 25:42:9b:1a:22:ea:26:ef:57:0a:a1:0a:3f:8e:c8:a2:97:f0: 0e:26:15:42:9f:df:45:32:53:d5:4f:67:6a:72:d3:f9:91:26: f8:db:22:24:06:16:06:fc:7d:03:87:31:88:e5:c3:76:f5:8a: 76:26:84:37:7e:e5:fc:8c:84:78:ca:48:d3:d1:1f:af:9c:88: 74:6d:2c:f3:44:ff:dc:88:32:2d:fc:f3:be:be:62:f6:7f:9e: 34:f4:65:10:35:f8:a2:0a:21:e1:7d:dc:95:45:90:15:22:af: cd:70:68:f3:2f:7e:ab:66:75:fa:3d:a9:5d:a8:99:56:22:a3: 57:63:8f:97:3c:16:4b:2b:79:e6:33:28:8c:f5:50:7b:65:71: ca:b0:ea:ca:2a:cd:5f:18:95:f3:c9:09:f6:30:78:c1:c6:a7: ec:33:7b:aa:2b:92:8d:ed:49:69:80:a7:c5:ec:37:a3:62:ed: 17:93:74:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7rk3Nyu9PJAG0zdrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNi M2UzMB4XDTI2MDgyMjEwMDAyNFoXDTI2MDgyNTEwMDAwMFowLzEtMCsGA1UEAxMk MzdmYzkyOTQtYmU4Mi00NWVjLTk0OGQtMjMzZTJkM2ZmOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR97Lf2xeUm8rYpOYqNU/NRYLe2nT8Pjdwek BoN+3HiNkqLm6cwZKiDkHRxs0nL+R5SJcRHNfksWtUnc2OCE6fy7A7hoNWYerLRA fp+RwOVyCWZYvUCGzQ4EWNkaao29b313L36SiBe3B+PrapLbLpoUwH5CvsZduXUT AgRT4M1g96lmTKKX8Gyw/2HPmByvbH0Bh6VZ0lfo30GQ7KvQjUf71D/XwjJbWP/8 /WqZ6y7I/yOaFxbSAVJtMgamEvJ4fBYrv8rmgqBD/px5gY2+7LEAx4RYMhZlA88H XHDlhJb9NusKL/x1M8emSkFx1RSlppQcyy3OQ3G5kBXX/4BaXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOcgaUDSzQ4FUWGBhGMhwS9wB0g/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIx Zjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvM2QyMWY3NDEtZmQ5MS00 MTU4LTg4NTMtNzM4OGRhYjNiM2UzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2QyMWY3NDEtZmQ5MS00MTU4LTg4 NTMtNzM4OGRhYjNiM2UzLzNkMjFmNzQxLWZkOTEtNDE1OC04ODUzLTczODhkYWIz YjNlMy5jcmwwHwYDVR0jBBgwFoAUp6+/4WI5r5ebVqUHvjgJMH/zvhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4 ZGFiM2IzZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCtLLeTxw6B3fRJB9DfqVjp MF0pT/tqpzE0dXKt04JaYGIetnOqeYuChWiWffM9Hs1Jh0C0hB0nVdXGPc5OdaRy CDv9DEBTi/clQpsaIuom71cKoQo/jsiil/AOJhVCn99FMlPVT2dqctP5kSb42yIk BhYG/H0DhzGI5cN29Yp2JoQ3fuX8jIR4ykjT0R+vnIh0bSzzRP/ciDIt/PO+vmL2 f5409GUQNfiiCiHhfdyVRZAVIq/NcGjzL36rZnX6PaldqJlWIqNXY4+XPBZLK3nm MyiM9VB7ZXHKsOrKKs1fGJXzyQn2MHjBxqfsM3uqK5KN7UlpgKfF7DejYu0Xk3TJ -----END CERTIFICATE-----Generated at Sat Aug 22 17:22:54 2026 by rpki-client