$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.mft File: 5a456a73-032d-4675-8f0a-2db7b1e58168.mft (raw, json) Hash identifier: CQsz77AGS+YZJlvNgQvUogiLpA3lHAgNu5L61DaNDHo= Subject key identifier: 9C:C9:F9:A2:93:AA:C6:6D:28:42:94:82:61:E0:02:F9:82:FF:41:0E Authority key identifier: 85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8 Certificate issuer: /CN=5a456a73-032d-4675-8f0a-2db7b1e58168 Certificate serial: 010D0C9F4328584E6CAB1192B937D113FD968180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.mft Manifest number: 010D0C9F4328584073A828F8D66B51A563BB3E61 Signing time: Tue 07 Jul 2026 23:00:23 +0000 Manifest this update: Tue 07 Jul 2026 23:00:23 +0000 Manifest next update: Thu 09 Jul 2026 23:00:00 +0000 Files and hashes: 1: 5a456a73-032d-4675-8f0a-2db7b1e58168.crl (hash: tcKWj4708PuWqrX79Fqf/fYTb9A/01fGy0DJ7ZIqIrI=) 2: 825702a4-e267-3fed-801c-e21c3ef74911.roa (hash: Yq7jIt7iK7GYXkXfIXduwRF9C9Fik21crB60bRY+Wcw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:ab:11:92:b9:37:d1:13:fd:96:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a456a73-032d-4675-8f0a-2db7b1e58168 Validity Not Before: Jul 7 23:00:23 2026 GMT Not After : Jul 9 23:00:00 2026 GMT Subject: CN=c3c66d9c-deb4-4536-a371-39fcbd53a34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b7:f9:f0:dd:e2:a7:32:29:17:ab:22:f6:67: ea:c2:5c:c3:2d:89:ce:22:68:62:0f:9d:68:b8:79: 7c:bb:02:95:b8:c5:fe:38:96:39:4a:aa:93:3a:89: fb:6e:96:f7:dd:68:ab:4c:15:64:2b:0a:03:d0:27: db:76:83:06:ab:d4:94:ca:d6:90:6a:ca:08:c7:b6: 3b:d7:1f:26:18:85:30:b0:01:e1:d3:c7:a5:b1:b4: 29:92:d6:2b:5b:64:9b:43:ce:94:63:53:11:b1:39: 94:72:fe:d9:61:f6:14:47:b0:54:f5:bd:e7:44:55: 91:71:5d:e4:2f:3f:c4:52:49:cd:54:a3:53:88:88: de:26:80:2a:69:99:1a:55:9a:83:68:57:b4:99:13: 63:7d:a2:f9:e4:0a:4b:07:a7:dc:88:37:64:6d:c6: bb:20:13:02:29:3d:f5:93:c2:d5:c4:4a:4c:46:6b: ea:cd:a0:e6:ad:1e:7a:12:fd:ad:69:b8:9d:6f:53: 0d:6c:39:47:3e:d2:eb:2e:f1:59:e4:7a:be:5c:43: b4:b1:cb:cb:68:6a:9b:13:f1:a3:6e:6d:9d:5a:21: 34:b4:31:a9:63:10:f0:2e:89:2c:5f:44:48:28:8c: b9:b9:6e:c5:05:07:71:e8:f7:f0:bd:5c:ab:ae:4d: 85:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C9:F9:A2:93:AA:C6:6D:28:42:94:82:61:E0:02:F9:82:FF:41:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.crl X509v3 Authority Key Identifier: keyid:85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:22:ab:f6:3a:1e:4b:e0:3a:52:4b:9d:20:76:ce:90:21:b4: 0a:5d:93:fd:07:f1:34:24:de:ba:ca:99:c5:25:c4:17:c6:38: 25:63:d0:b1:1d:ee:c8:8f:69:56:1a:6a:84:e6:65:75:33:08: 21:17:4c:6e:a0:71:e1:62:5c:7a:2c:52:05:64:d0:89:9b:c3: 43:cf:ae:47:7a:3d:55:c3:52:e0:6e:35:1b:bb:91:b2:a7:e4: 2f:b9:d6:c9:30:5a:58:16:eb:52:60:22:2a:21:7f:05:7e:ad: b7:a8:5f:ef:d9:d5:13:56:bb:58:6e:4f:b5:d8:d9:2f:c5:85: 1e:c0:b9:a6:93:0f:b8:86:51:ca:4e:04:15:5e:b1:ee:76:59: cf:c2:70:c4:5e:6a:5b:76:9b:d7:d5:68:58:94:76:9c:e9:3f: f2:bf:34:da:30:3e:2e:c2:be:2e:a4:b1:bb:59:58:1d:c1:5a: 3e:85:e6:a3:15:6b:ae:a9:c0:2a:a9:94:fd:74:13:76:eb:ef: 24:8a:b1:df:9a:67:eb:34:44:2e:a2:f1:f8:68:8a:76:d0:34: a7:72:f7:35:be:a9:a4:89:88:44:1b:49:e5:04:28:8b:df:da: 61:55:1f:47:db:7a:c7:1d:7a:36:4b:28:15:e8:96:3f:36:c6: 52:25:95:06 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE5sqxGSuTfRE/2WgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0NTZhNzMtMDMyZC00Njc1LThmMGEtMmRiN2IxZTU4 MTY4MB4XDTI2MDcwNzIzMDAyM1oXDTI2MDcwOTIzMDAwMFowLzEtMCsGA1UEAxMk YzNjNjZkOWMtZGViNC00NTM2LWEzNzEtMzlmY2JkNTNhMzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLf58N3ipzIpF6si9mfqwlzDLYnOImhiD51o uHl8uwKVuMX+OJY5SqqTOon7bpb33WirTBVkKwoD0CfbdoMGq9SUytaQasoIx7Y7 1x8mGIUwsAHh08elsbQpktYrW2SbQ86UY1MRsTmUcv7ZYfYUR7BU9b3nRFWRcV3k Lz/EUknNVKNTiIjeJoAqaZkaVZqDaFe0mRNjfaL55ApLB6fciDdkbca7IBMCKT31 k8LVxEpMRmvqzaDmrR56Ev2tabidb1MNbDlHPtLrLvFZ5Hq+XEO0scvLaGqbE/Gj bm2dWiE0tDGpYxDwLoksX0RIKIy5uW7FBQdx6PfwvVyrrk2FhwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJzJ+aKTqsZtKEKUgmHgAvmC/0EOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YTQ1 NmE3My0wMzJkLTQ2NzUtOGYwYS0yZGI3YjFlNTgxNjgvNWE0NTZhNzMtMDMyZC00 Njc1LThmMGEtMmRiN2IxZTU4MTY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWE0NTZhNzMtMDMyZC00Njc1LThm MGEtMmRiN2IxZTU4MTY4LzVhNDU2YTczLTAzMmQtNDY3NS04ZjBhLTJkYjdiMWU1 ODE2OC5jcmwwHwYDVR0jBBgwFoAUhZ809TW+1VPdwe+7fz1JekZVV8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YTQ1NmE3My0wMzJkLTQ2NzUtOGYwYS0yZGI3 YjFlNTgxNjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/Iqv2Oh5L4DpSS50gds6Q IbQKXZP9B/E0JN66ypnFJcQXxjglY9CxHe7Ij2lWGmqE5mV1MwghF0xuoHHhYlx6 LFIFZNCJm8NDz65Hej1Vw1LgbjUbu5Gyp+QvudbJMFpYFutSYCIqIX8Ffq23qF/v 2dUTVrtYbk+12NkvxYUewLmmkw+4hlHKTgQVXrHudlnPwnDEXmpbdpvX1WhYlHac 6T/yvzTaMD4uwr4upLG7WVgdwVo+heajFWuuqcAqqZT9dBN26+8kirHfmmfrNEQu ovH4aIp20DSncvc1vqmkiYhEG0nlBCiL39phVR9H23rHHXo2SygV6JY/NsZSJZUG -----END CERTIFICATE-----Generated at Wed Jul 8 14:55:35 2026 by rpki-client