$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft File: 04c216c1-5924-4a66-9346-a1f215800ceb.mft (raw, json) Hash identifier: qPZpLhpyLSd5BYZu9lnttY2PO3TQJIe2GzOmpJhfkAE= Subject key identifier: 39:8A:31:6D:1C:6C:5F:16:F8:2F:E5:54:4F:B1:F1:A4:FE:78:60:B7 Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 Certificate issuer: /CN=04c216c1-5924-4a66-9346-a1f215800ceb Certificate serial: 010D0C9F4328584E923D81F009345ABAA0A0DA70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft Manifest number: 010D0C9F432858415AC3099EB8CEE51DC161B31E Signing time: Tue 21 Jul 2026 10:00:22 +0000 Manifest this update: Tue 21 Jul 2026 10:00:22 +0000 Manifest next update: Fri 24 Jul 2026 10:00:00 +0000 Files and hashes: 1: 04c216c1-5924-4a66-9346-a1f215800ceb.crl (hash: KFepww2G5rL4CSM8ifY08BY4VfuQ4KmffD9kNSJLZPg=) 2: 43d013ec-a6c3-3388-8d14-0791322dd8c0.roa (hash: UrJi0Hbqwo1TIxbX/5bN7xmPjeu2lZWLZMwYgDzX1UY=) 3: 6b6443a0-cb19-30e9-83ff-997349a7b259.roa (hash: 3CuSheBFKBX8Go4++yzaf8A6YKQI+RQ9ZM8oJi6g0ZU=) 4: b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa (hash: vTJshemTgd2DxRv6BBlJhdaBFxzC+0ddPvxu6yPqtRs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:3d:81:f0:09:34:5a:ba:a0:a0:da:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb Validity Not Before: Jul 21 10:00:22 2026 GMT Not After : Jul 24 10:00:00 2026 GMT Subject: CN=90043209-5f7f-478f-91a7-753558c5e0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:ac:9c:d3:99:14:c4:e0:01:a1:c8:bf:03: 61:75:f3:90:cc:b3:ca:a7:a2:78:cb:c5:bf:c7:1c: 0f:14:e3:8a:da:b7:a8:fa:7c:9e:1a:c0:cf:12:53: a8:0f:5b:16:4e:15:84:df:a5:86:68:a3:19:85:83: 33:e7:49:eb:a8:0d:90:01:d6:b7:c4:17:fa:61:d6: e3:3e:2e:cc:c0:24:0e:8c:f4:d0:1d:09:9d:4e:82: d2:15:2c:ce:ef:8e:4b:07:23:ef:43:7a:a0:93:ff: 0c:29:50:dc:04:10:5d:c0:6c:f0:99:2d:c9:14:4a: 54:66:10:41:20:2d:1c:df:1a:14:1e:fb:04:d4:13: 24:ba:a2:6d:49:be:7e:90:9b:f8:62:77:f0:5c:fd: fe:08:40:44:0b:c4:6d:83:e3:14:06:8f:b0:c4:a6: f4:88:47:4f:92:73:32:4e:44:b2:3f:98:91:e8:1b: 11:44:4a:3f:d9:f7:ed:b6:1a:29:12:c8:ec:7b:da: e8:35:5f:bb:b0:8e:aa:aa:cc:d3:0c:74:8c:b3:a2: c6:d8:bd:15:75:3c:94:a8:ac:39:b1:7f:65:d1:b3: 97:94:b0:7c:79:ae:b4:52:29:c6:3f:37:45:8f:62: 85:99:6f:6f:9b:2a:92:e9:44:78:41:c4:d3:c3:61: a5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8A:31:6D:1C:6C:5F:16:F8:2F:E5:54:4F:B1:F1:A4:FE:78:60:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl X509v3 Authority Key Identifier: keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:19:68:4d:60:f7:74:6b:14:fb:bc:e7:04:44:43:e7:b2:e3: 4e:a5:84:5a:1b:f0:6f:da:91:52:b3:3c:01:6a:34:c6:04:c1: 91:7a:d7:fc:d2:d7:c4:c5:fb:17:af:c3:dd:8a:95:32:46:4c: 41:01:07:26:3c:78:da:60:a5:58:36:6f:4c:8d:66:d0:02:20: ed:d9:ef:3b:88:af:9b:8a:95:60:30:a9:83:1a:fb:7d:dd:dd: c4:17:b6:b2:57:6e:43:83:2f:08:3c:9a:34:df:d2:5c:2f:6a: 84:9b:54:42:08:13:8c:0d:36:cf:36:5e:ae:cd:64:e6:18:4e: c8:43:4a:47:92:af:b9:04:01:be:ac:32:fe:4e:39:b6:95:75: 81:78:5e:4e:66:f7:39:27:cd:87:df:f4:1f:38:dd:67:09:1f: a9:33:a3:c7:2b:a6:aa:d0:d5:2f:a3:04:3d:09:c5:05:a3:a5: a6:28:6e:21:24:d4:5a:49:d1:de:7e:70:a1:6b:35:38:e3:03: fc:8b:d7:2b:fc:11:15:ad:b0:8f:33:0f:c5:70:ca:87:94:ae: 7b:2d:98:0f:05:e6:28:15:e9:39:19:4b:50:b4:aa:e4:40:fd: 82:32:31:f0:21:07:02:eb:c9:3f:66:51:06:ca:a0:5d:46:45: b0:61:71:60 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6SPYHwCTRauqCg2nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMjE2YzEtNTkyNC00YTY2LTkzNDYtYTFmMjE1ODAw Y2ViMB4XDTI2MDcyMTEwMDAyMloXDTI2MDcyNDEwMDAwMFowLzEtMCsGA1UEAxMk OTAwNDMyMDktNWY3Zi00NzhmLTkxYTctNzUzNTU4YzVlMGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnousnNOZFMTgAaHIvwNhdfOQzLPKp6J4y8W/ xxwPFOOK2reo+nyeGsDPElOoD1sWThWE36WGaKMZhYMz50nrqA2QAda3xBf6Ydbj Pi7MwCQOjPTQHQmdToLSFSzO745LByPvQ3qgk/8MKVDcBBBdwGzwmS3JFEpUZhBB IC0c3xoUHvsE1BMkuqJtSb5+kJv4YnfwXP3+CEBEC8Rtg+MUBo+wxKb0iEdPknMy TkSyP5iR6BsRREo/2fftthopEsjse9roNV+7sI6qqszTDHSMs6LG2L0VdTyUqKw5 sX9l0bOXlLB8ea60UinGPzdFj2KFmW9vmyqS6UR4QcTTw2GlxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDmKMW0cbF8W+C/lVE+x8aT+eGC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGMy MTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYyMTU4MDBjZWIvMDRjMjE2YzEtNTkyNC00 YTY2LTkzNDYtYTFmMjE1ODAwY2ViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRjMjE2YzEtNTkyNC00YTY2LTkz NDYtYTFmMjE1ODAwY2ViLzA0YzIxNmMxLTU5MjQtNGE2Ni05MzQ2LWExZjIxNTgw MGNlYi5jcmwwHwYDVR0jBBgwFoAUmLhMbN09mwrXBph9YXSVqxVUBDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNGMyMTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYy MTU4MDBjZWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALGWhNYPd0axT7vOcEREPn suNOpYRaG/Bv2pFSszwBajTGBMGRetf80tfExfsXr8PdipUyRkxBAQcmPHjaYKVY Nm9MjWbQAiDt2e87iK+bipVgMKmDGvt93d3EF7ayV25Dgy8IPJo039JcL2qEm1RC CBOMDTbPNl6uzWTmGE7IQ0pHkq+5BAG+rDL+Tjm2lXWBeF5OZvc5J82H3/QfON1n CR+pM6PHK6aq0NUvowQ9CcUFo6WmKG4hJNRaSdHefnChazU44wP8i9cr/BEVrbCP Mw/FcMqHlK57LZgPBeYoFek5GUtQtKrkQP2CMjHwIQcC68k/ZlEGyqBdRkWwYXFg -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:53 2026 by rpki-client