$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft File: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft (raw, json) Hash identifier: jfC2wmjcFr9lBXyyPWSHBPCPXraF5AqHbc3WnUHUncY= Subject key identifier: C6:40:FA:7E:2F:8E:5F:40:E7:44:2E:7C:3A:6A:F5:74:55:35:22:B9 Authority key identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Certificate issuer: /CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Certificate serial: 010D0C9F4328584EF4E1B9B479EE973FA5CD3280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft Manifest number: 010D0C9F4328584A0F6F5277F198146B052F7D4C Signing time: Tue 25 Aug 2026 18:00:24 +0000 Manifest this update: Tue 25 Aug 2026 18:00:24 +0000 Manifest next update: Thu 27 Aug 2026 18:00:00 +0000 Files and hashes: 1: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl (hash: sIJnzkGSDwdk0zG9e3k8IKjpuX5ynuOfIsJxyrIzo0I=) 2: 7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa (hash: OTd4U8x/MOB7PHJVsaVZMiQVYF599ZPBthvg1jlGJuU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:e1:b9:b4:79:ee:97:3f:a5:cd:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Validity Not Before: Aug 25 18:00:24 2026 GMT Not After : Aug 27 18:00:00 2026 GMT Subject: CN=3fb81576-7ed7-4ec3-be34-c2e1da601412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6d:5b:2a:b8:ad:ab:ff:41:ba:26:89:65:77: bc:fb:4d:21:5a:68:c0:7a:02:8c:92:d1:37:ef:d1: 13:15:69:da:e9:f1:e9:aa:03:d3:6f:9b:af:8b:e7: bc:02:35:49:29:22:cb:02:90:83:21:96:82:46:3b: 1b:13:35:6a:d4:a9:2d:0b:53:b1:ef:78:42:7d:45: fa:04:5b:b7:20:f2:5f:5b:51:c9:67:77:37:39:11: bf:f7:f1:05:64:a3:b9:a6:f2:3b:18:30:22:ce:20: a2:a6:f2:11:7c:32:59:de:da:58:14:6b:10:99:86: 3b:fc:2d:26:cc:5b:d2:8e:5d:14:1f:d2:92:c0:f8: 8e:fa:7e:a5:73:7d:d3:37:62:4b:45:15:2f:8d:34: b5:90:22:36:4e:d0:3f:08:5f:c9:6d:08:68:bc:5f: 4a:6f:0b:87:e2:70:25:0d:38:49:f3:e7:c8:ef:3f: 10:aa:fd:32:11:b5:8b:0d:dd:ae:f1:4b:2c:8e:c0: aa:bf:ea:24:23:c5:c7:7d:03:05:4e:d2:55:fa:a8: 04:fd:9b:8f:02:b8:f6:b1:51:92:9d:ec:0e:8e:7b: 2d:0b:21:ca:aa:5f:96:2a:6f:2e:d2:8d:ea:c8:15: 71:84:03:bd:58:bf:7a:59:08:3b:f0:72:5f:a9:39: d1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:40:FA:7E:2F:8E:5F:40:E7:44:2E:7C:3A:6A:F5:74:55:35:22:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl X509v3 Authority Key Identifier: keyid:7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:22:07:4e:92:c3:04:54:d1:f6:f9:2a:4e:dc:31:e1:02:e8: 3f:24:76:4c:16:26:ef:42:e9:f4:e3:7b:f3:14:e6:9e:ae:97: 06:4f:dd:be:0f:2c:06:f5:67:ba:76:2c:1a:7b:70:99:84:dd: f6:80:75:74:70:08:91:16:0b:ef:bc:d9:17:07:f0:8a:64:15: ec:79:9f:31:ed:55:e2:55:40:7d:6e:1d:6d:a4:82:a8:48:4d: 51:2a:bd:fe:51:58:be:67:0c:4f:09:41:c1:ae:74:76:7b:e2: a7:a2:a1:eb:1e:5f:74:f5:d2:18:d2:03:f5:77:90:a6:23:8b: eb:0f:d9:a3:a7:9c:eb:c3:5d:4e:50:5d:b0:82:03:56:07:bf: 2e:e5:13:f1:2d:68:c8:2e:f6:c2:f0:a5:35:85:cc:c3:ee:1d: 40:b5:f9:14:e6:2e:e6:cf:fd:19:6c:3a:77:78:a8:8b:b4:2a: 9a:b6:22:ed:1e:de:61:8a:56:41:75:72:ac:99:53:35:54:ab: 4d:15:d7:a3:d0:2c:c6:c5:59:35:74:8a:db:89:0c:5a:0c:90: 90:8a:f3:81:e5:db:84:11:27:7e:7b:04:18:a8:c0:02:85:b6: 10:fb:0a:d3:a7:ee:1c:45:ad:5e:8b:27:07:8f:2e:64:ec:70: da:74:e7:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE704bm0ee6XP6XNMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYTk4ZTEtMGNiOS00ZTIzLTkxMGUtMjBlYzVkZmU4 YmVjMB4XDTI2MDgyNTE4MDAyNFoXDTI2MDgyNzE4MDAwMFowLzEtMCsGA1UEAxMk M2ZiODE1NzYtN2VkNy00ZWMzLWJlMzQtYzJlMWRhNjAxNDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG1bKritq/9BuiaJZXe8+00hWmjAegKMktE3 79ETFWna6fHpqgPTb5uvi+e8AjVJKSLLApCDIZaCRjsbEzVq1KktC1Ox73hCfUX6 BFu3IPJfW1HJZ3c3ORG/9/EFZKO5pvI7GDAiziCipvIRfDJZ3tpYFGsQmYY7/C0m zFvSjl0UH9KSwPiO+n6lc33TN2JLRRUvjTS1kCI2TtA/CF/JbQhovF9KbwuH4nAl DThJ8+fI7z8Qqv0yEbWLDd2u8UssjsCqv+okI8XHfQMFTtJV+qgE/ZuPArj2sVGS newOjnstCyHKql+WKm8u0o3qyBVxhAO9WL96WQg78HJfqTnRYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMZA+n4vjl9A50QufDpq9XRVNSK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBh OThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRmZThiZWMvMDQwYTk4ZTEtMGNiOS00 ZTIzLTkxMGUtMjBlYzVkZmU4YmVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwYTk4ZTEtMGNiOS00ZTIzLTkx MGUtMjBlYzVkZmU4YmVjLzA0MGE5OGUxLTBjYjktNGUyMy05MTBlLTIwZWM1ZGZl OGJlYy5jcmwwHwYDVR0jBBgwFoAUfbz2tahyfAqCfGESBDb+hCvMHNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVj NWRmZThiZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApIgdOksMEVNH2+SpO3DHh Aug/JHZMFibvQun043vzFOaerpcGT92+DywG9We6diwae3CZhN32gHV0cAiRFgvv vNkXB/CKZBXseZ8x7VXiVUB9bh1tpIKoSE1RKr3+UVi+ZwxPCUHBrnR2e+KnoqHr Hl909dIY0gP1d5CmI4vrD9mjp5zrw11OUF2wggNWB78u5RPxLWjILvbC8KU1hczD 7h1AtfkU5i7mz/0ZbDp3eKiLtCqatiLtHt5hilZBdXKsmVM1VKtNFdej0CzGxVk1 dIrbiQxaDJCQivOB5duEESd+ewQYqMAChbYQ+wrTp+4cRa1eiycHjy5k7HDadOcc -----END CERTIFICATE-----Generated at Tue Aug 25 23:42:12 2026 by rpki-client