$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft File: 3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft (raw, json) Hash identifier: 0ra3t5NAgsgbu9G8bBtrz4xi/eSigrt04PyYRw6cLA4= Subject key identifier: 77:02:9A:4D:54:C9:0F:37:F4:2A:23:CA:6F:A2:D6:FF:F1:D1:CF:89 Authority key identifier: 0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4 Certificate issuer: /CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8 Certificate serial: 010D0C9F4328584E9007C822ECAD5B00B114DF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft Manifest number: 010D0C9F43285841AEEEC2DA3330E6DFE2D5A4DB Signing time: Mon 20 Jul 2026 15:00:24 +0000 Manifest this update: Mon 20 Jul 2026 15:00:24 +0000 Manifest next update: Wed 22 Jul 2026 15:00:00 +0000 Files and hashes: 1: 1f084892-5814-39ba-a891-eef84ae95748.roa (hash: W2GdQxxCksZ04epbqpNzylDxO/pBzwQ7eJVZj8RonKY=) 2: 1f9999a6-d808-39d4-8d54-071e396efd7c.roa (hash: iagBTceGQ40CqdoTxAtoRrNSsiycUvGLOC0kdWSOyOc=) 3: 3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl (hash: mpibkR3ODCFrebwgPgAEmMYdq/YzliHBPu31n6rbDHw=) 4: 42a224d2-3205-3f19-92d3-d4f7cc416310.roa (hash: JvGW2NOk3GdxVOpwJ8D9ry7x9hc92hpjz2X3/f3Xins=) 5: 4c614fa4-86b6-3d9f-847a-8c621d670b67.roa (hash: xs+aZxxVxgVKivEY26+pkfxMEiNO0VPEITX/0VYhIcA=) 6: a630cce2-93d9-3356-bc79-894d2e85733e.roa (hash: ybT9Rs5WCCVhYmCH7Lu4VFOQI3aE6odjdzGuIlKZK+w=) 7: dff59291-b5c9-3e59-b7d5-550a9ded0ade.roa (hash: 5syCoSsPpafypInvLySicAqcjlEw6cNK14lCtoRsYrY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:07:c8:22:ec:ad:5b:00:b1:14:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8 Validity Not Before: Jul 20 15:00:24 2026 GMT Not After : Jul 22 15:00:00 2026 GMT Subject: CN=2b8334bd-1f5d-409d-ac73-efd192890fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2e:70:e2:19:3d:5c:6c:27:87:93:fc:33:2d: 8b:f3:cd:b2:e6:bf:33:ea:72:2c:69:58:37:ca:ff: f4:d3:e4:45:7d:c0:01:c6:27:35:09:7b:08:b9:ec: ed:32:e9:93:f5:20:40:82:60:a1:87:59:19:c8:07: ab:e3:76:ec:a8:43:2c:17:80:2b:01:84:92:a7:f7: 41:bb:26:27:a0:f1:06:f5:a9:ab:62:10:0c:ad:ff: b1:af:8b:d0:34:ee:6f:9c:af:d2:8f:73:59:bf:d5: 90:3f:34:23:da:15:02:5b:b7:51:2f:cf:41:0b:f1: 1c:be:d8:ff:3c:78:aa:aa:98:de:a1:36:35:19:25: 01:70:f4:97:d0:ad:c1:28:7d:6a:8e:8b:be:b3:08: 84:05:36:48:83:d9:28:3c:c0:55:96:91:b3:53:07: ca:3f:d5:50:e0:4d:8a:d0:ff:3f:76:da:94:84:50: fb:3f:ab:5e:83:1c:4a:47:2e:74:f7:6a:cf:54:2a: cd:f2:e0:12:12:58:e3:49:cc:83:25:6a:49:97:66: e9:d2:f4:68:e6:ce:59:c9:18:45:7d:d1:b0:ad:f8: 84:83:ee:fd:b5:5d:18:bd:30:f2:45:83:60:d8:5d: e4:6b:69:39:78:01:28:f7:ee:33:35:4d:5f:91:e8: 53:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:02:9A:4D:54:C9:0F:37:F4:2A:23:CA:6F:A2:D6:FF:F1:D1:CF:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl X509v3 Authority Key Identifier: keyid:0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:90:bf:26:af:d2:40:dd:07:17:73:f0:70:ae:25:f9:63:b0: 50:18:12:c8:9d:ba:b1:a3:72:52:20:c1:3d:26:4b:54:dc:01: 06:bd:81:ac:8b:7b:96:13:22:b1:96:65:63:7a:c4:91:71:4a: 53:e7:c8:27:39:e1:3c:15:fd:a4:4c:3d:1b:2d:1c:0e:74:4c: c1:80:3d:64:ef:c8:fe:69:b6:f9:54:8a:69:73:98:46:1a:f9: 69:01:0f:9e:56:aa:e8:d5:d4:b0:ca:03:93:5e:e1:d2:79:f2: 35:1c:3a:07:63:53:3c:c3:a4:85:32:e2:72:97:40:7f:4a:f4: 61:9a:1f:0f:7e:4b:19:bb:ea:06:24:92:07:f1:fc:0c:a9:3a: 07:61:77:b5:20:9c:07:dd:88:82:8d:3e:d1:a9:e3:c5:53:30: 72:d2:49:42:b8:4d:06:69:59:4a:93:c4:14:40:c3:7e:18:53: 07:88:52:5d:1f:8b:6c:3a:83:ed:88:1a:7f:a0:79:1c:6b:1b: ff:96:a6:9a:36:04:3b:1b:26:e0:f3:e4:a0:0d:1c:fa:33:25: ad:6b:f7:9d:50:56:52:30:fc:e6:39:f3:31:79:02:6f:2b:d7: 8b:58:f9:68:8b:c7:5f:c1:1f:6c:de:3f:5d:72:02:7c:92:3f: 2b:2e:37:f0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6QB8gi7K1bALEU3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5ZGY5YjQtNmY3My00M2M4LWFhY2MtNGQwNjhhODJj NWQ4MB4XDTI2MDcyMDE1MDAyNFoXDTI2MDcyMjE1MDAwMFowLzEtMCsGA1UEAxMk MmI4MzM0YmQtMWY1ZC00MDlkLWFjNzMtZWZkMTkyODkwZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi5w4hk9XGwnh5P8My2L882y5r8z6nIsaVg3 yv/00+RFfcABxic1CXsIueztMumT9SBAgmChh1kZyAer43bsqEMsF4ArAYSSp/dB uyYnoPEG9amrYhAMrf+xr4vQNO5vnK/Sj3NZv9WQPzQj2hUCW7dRL89BC/Ecvtj/ PHiqqpjeoTY1GSUBcPSX0K3BKH1qjou+swiEBTZIg9koPMBVlpGzUwfKP9VQ4E2K 0P8/dtqUhFD7P6tegxxKRy5092rPVCrN8uASEljjScyDJWpJl2bp0vRo5s5ZyRhF fdGwrfiEg+79tV0YvTDyRYNg2F3ka2k5eAEo9+4zNU1fkehTZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHcCmk1UyQ839Cojym+i1v/x0c+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDlk ZjliNC02ZjczLTQzYzgtYWFjYy00ZDA2OGE4MmM1ZDgvM2Q5ZGY5YjQtNmY3My00 M2M4LWFhY2MtNGQwNjhhODJjNWQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2Q5ZGY5YjQtNmY3My00M2M4LWFh Y2MtNGQwNjhhODJjNWQ4LzNkOWRmOWI0LTZmNzMtNDNjOC1hYWNjLTRkMDY4YTgy YzVkOC5jcmwwHwYDVR0jBBgwFoAUDVIzEr60YauI1fFIz7wBLC22X8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDlkZjliNC02ZjczLTQzYzgtYWFjYy00ZDA2 OGE4MmM1ZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBokL8mr9JA3QcXc/BwriX5 Y7BQGBLInbqxo3JSIME9JktU3AEGvYGsi3uWEyKxlmVjesSRcUpT58gnOeE8Ff2k TD0bLRwOdEzBgD1k78j+abb5VIppc5hGGvlpAQ+eVqro1dSwygOTXuHSefI1HDoH Y1M8w6SFMuJyl0B/SvRhmh8PfksZu+oGJJIH8fwMqToHYXe1IJwH3YiCjT7RqePF UzBy0klCuE0GaVlKk8QUQMN+GFMHiFJdH4tsOoPtiBp/oHkcaxv/lqaaNgQ7Gybg 8+SgDRz6MyWta/edUFZSMPzmOfMxeQJvK9eLWPloi8dfwR9s3j9dcgJ8kj8rLjfw -----END CERTIFICATE-----Generated at Tue Jul 21 10:04:04 2026 by rpki-client