$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft File: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft (raw, json) Hash identifier: VuiNdER0mMDmuUxqtb1MdHfQ3sqfpHitUPvJslrzGXM= Subject key identifier: 5D:BE:3C:F3:E8:AB:56:EA:C3:9F:16:54:E1:6D:58:5A:4B:2F:0E:D6 Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE Certificate issuer: /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Certificate serial: 010D0C9F4328584EE6CE8407B2F6C2FCC1E47880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft Manifest number: 010D0C9F43285843E05DB4B41D1D11863F6C378C Signing time: Thu 20 Aug 2026 17:00:22 +0000 Manifest this update: Thu 20 Aug 2026 17:00:22 +0000 Manifest next update: Sat 22 Aug 2026 17:00:00 +0000 Files and hashes: 1: 4925d209-f003-3bb9-b12d-10cc44b06d40.roa (hash: Uju3VonhSnMedx8/XYf5d5TEeCNadNsSOQ30S3vtP7I=) 2: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl (hash: nHk5+ibSf+yIAQA2+UZdK3RFvS8L6PkUMGT9OlHQ+8A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:ce:84:07:b2:f6:c2:fc:c1:e4:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Validity Not Before: Aug 20 17:00:22 2026 GMT Not After : Aug 22 17:00:00 2026 GMT Subject: CN=ddaa6d61-9229-4a6b-b3ae-73ba70bca159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:92:ee:c2:ab:ef:de:6e:68:0e:a4:d3:7b:20: 61:5b:32:b6:94:ad:2c:9e:83:40:ec:20:e7:96:02: ba:25:e4:eb:a4:6f:46:09:a2:a7:f8:22:a5:42:a8: 91:b0:e9:e8:72:1e:6d:4b:88:50:08:a5:e7:40:0b: 49:ee:7b:d9:cc:2d:08:4d:c0:35:50:46:c9:05:d6: 4c:10:35:11:f0:fd:f3:da:c3:d1:ab:60:5b:dd:31: 2b:2f:c5:25:a6:33:c0:1a:78:a6:6b:39:02:1a:28: 5d:02:8a:c2:e1:e4:ae:5a:41:62:b1:27:0a:00:ed: 28:54:ca:1d:60:0d:44:95:81:a7:5c:40:ad:da:11: e9:8e:58:be:05:c8:53:b9:d1:58:67:20:63:07:2a: 1f:d6:01:c2:43:bc:4c:81:0b:d3:6b:ca:23:57:1b: a8:ce:d8:b2:ce:e8:8c:3d:17:a4:4c:bf:62:53:7c: 9c:00:7e:2e:67:01:af:1b:bf:e9:93:c2:c4:b9:e9: be:f0:10:e4:bb:17:ec:d7:a3:9f:9f:a2:e8:d5:10: 11:ed:ea:a6:90:4a:23:94:ad:59:41:0d:ae:68:76: 0b:89:d4:0d:cb:84:84:28:1a:2d:4b:02:0c:a6:d4: 16:2c:17:41:eb:21:38:69:f1:e1:a7:04:32:5c:b3: 7c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BE:3C:F3:E8:AB:56:EA:C3:9F:16:54:E1:6D:58:5A:4B:2F:0E:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl X509v3 Authority Key Identifier: keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:2b:ef:42:48:5d:f0:d4:95:87:14:69:22:69:a4:ca:3a:f1: 7c:25:81:76:86:5a:ef:7e:a0:10:a9:71:92:31:82:b1:ff:f4: 21:fd:07:29:c1:f5:4f:29:f9:38:80:90:04:76:92:3d:10:fa: b2:16:3d:6f:66:4a:5f:64:e4:78:c8:54:ee:d0:52:1e:ad:b5: 00:99:6a:d5:11:a2:30:53:50:9d:a5:9d:b5:cf:ce:ff:53:c9: 51:88:86:49:4b:bf:46:fb:43:9a:f6:15:04:31:cf:f8:16:be: f2:23:67:49:54:71:93:e3:e8:fd:7f:8d:04:b8:0d:0a:33:a5: 3f:e3:87:1a:5e:87:84:8f:96:83:0b:78:37:3f:63:dc:a7:c9: 67:bb:29:9c:e6:56:c0:96:04:6b:26:8d:fd:68:4e:66:61:25: 8e:df:0f:54:b5:aa:e9:da:69:5c:c7:18:df:23:99:a1:1a:27: 0b:6d:d3:bf:8c:e8:0b:a3:4a:28:56:6a:02:7e:e8:4d:c4:af: a3:97:dd:cd:94:c9:82:89:97:9d:86:a8:44:d5:2f:96:ce:2e: a4:33:77:d5:e5:da:fe:f9:fe:45:db:f8:86:d3:74:78:db:ef: 3e:a2:3a:53:40:08:04:0b:68:74:68:af:ac:74:2b:49:e2:a8: cd:89:d6:1f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7mzoQHsvbC/MHkeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQwZmYyMjEtZjBjNC00YzU0LTk2ZDktNWYzZTBmMTZi OGUyMB4XDTI2MDgyMDE3MDAyMloXDTI2MDgyMjE3MDAwMFowLzEtMCsGA1UEAxMk ZGRhYTZkNjEtOTIyOS00YTZiLWIzYWUtNzNiYTcwYmNhMTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZLuwqvv3m5oDqTTeyBhWzK2lK0snoNA7CDn lgK6JeTrpG9GCaKn+CKlQqiRsOnoch5tS4hQCKXnQAtJ7nvZzC0ITcA1UEbJBdZM EDUR8P3z2sPRq2Bb3TErL8UlpjPAGnimazkCGihdAorC4eSuWkFisScKAO0oVMod YA1ElYGnXECt2hHpjli+BchTudFYZyBjByof1gHCQ7xMgQvTa8ojVxuoztiyzuiM PRekTL9iU3ycAH4uZwGvG7/pk8LEuem+8BDkuxfs16Ofn6Lo1RAR7eqmkEojlK1Z QQ2uaHYLidQNy4SEKBotSwIMptQWLBdB6yE4afHhpwQyXLN8LwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF2+PPPoq1bqw58WVOFtWFpLLw7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBm ZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNlMGYxNmI4ZTIvZGQwZmYyMjEtZjBjNC00 YzU0LTk2ZDktNWYzZTBmMTZiOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQwZmYyMjEtZjBjNC00YzU0LTk2 ZDktNWYzZTBmMTZiOGUyL2RkMGZmMjIxLWYwYzQtNGM1NC05NmQ5LTVmM2UwZjE2 YjhlMi5jcmwwHwYDVR0jBBgwFoAUr/lVUKXBkBjOWn14MlY8OgsCrd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBmZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNl MGYxNmI4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjK+9CSF3w1JWHFGkiaaTK OvF8JYF2hlrvfqAQqXGSMYKx//Qh/QcpwfVPKfk4gJAEdpI9EPqyFj1vZkpfZOR4 yFTu0FIerbUAmWrVEaIwU1CdpZ21z87/U8lRiIZJS79G+0Oa9hUEMc/4Fr7yI2dJ VHGT4+j9f40EuA0KM6U/44caXoeEj5aDC3g3P2Pcp8lnuymc5lbAlgRrJo39aE5m YSWO3w9Utarp2mlcxxjfI5mhGicLbdO/jOgLo0ooVmoCfuhNxK+jl93NlMmCiZed hqhE1S+Wzi6kM3fV5dr++f5F2/iG03R42+8+ojpTQAgEC2h0aK+sdCtJ4qjNidYf -----END CERTIFICATE-----Generated at Fri Aug 21 02:04:26 2026 by rpki-client