$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.mft File: 1a061c41-5c98-4c71-a150-7a7d7a2550e2.mft (raw, json) Hash identifier: by6/IDMV1BWz9bLwyqNdybITTlA0WGKLsibUESVMFpY= Subject key identifier: 76:AA:72:A0:0F:E9:8A:D9:18:18:39:CD:0B:9E:D6:56:75:6C:04:66 Authority key identifier: EE:99:26:64:1B:51:28:7D:44:A7:B0:65:7D:9B:44:8E:05:7C:CB:F2 Certificate issuer: /CN=1a061c41-5c98-4c71-a150-7a7d7a2550e2 Certificate serial: 010D0C9F4328584EF770DF79D78F5F2809CE7400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.mft Manifest number: 010D0C9F4328584E2346D317F441157289F19B90 Signing time: Wed 26 Aug 2026 16:00:22 +0000 Manifest this update: Wed 26 Aug 2026 16:00:22 +0000 Manifest next update: Sat 29 Aug 2026 16:00:00 +0000 Files and hashes: 1: 1a061c41-5c98-4c71-a150-7a7d7a2550e2.crl (hash: +VX3TY+WuaSq1pggqFd0whLKtSjY6rnPTWTteeakTkg=) 2: af6dbd6a-8ead-37ca-97dc-034257a38308.roa (hash: zO5Xzyk9kjBATqxvGCyhOdVSbNGIu8rOAYXt8xowr7U=) 3: b37ecac9-1ff0-3f38-b3b8-87f1179f199c.roa (hash: yCX1u20ONJ4BduYVm2hs+2aJcbho3Rabrcc+ih3Ydwc=) 4: e312ad16-66e8-3f98-b454-cf1692672f25.roa (hash: w5zzgi1HxEj/oN8l/QOO+YMkUMbhX7L1Dy/p3f1m4x0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:70:df:79:d7:8f:5f:28:09:ce:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a061c41-5c98-4c71-a150-7a7d7a2550e2 Validity Not Before: Aug 26 16:00:22 2026 GMT Not After : Aug 29 16:00:00 2026 GMT Subject: CN=ff6ebf82-cda0-4aa7-8f9c-106a693986c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6a:d3:1e:86:7e:1c:c1:98:76:0c:8a:5f:72: b5:60:20:03:3c:9e:d1:ec:9f:1e:d9:68:48:56:60: f3:a6:f2:1e:31:a7:ca:ae:58:23:81:52:7f:45:f7: a6:2c:fd:6d:f2:f1:6f:c3:55:59:16:f9:7f:e1:bf: 39:35:85:b6:2b:2d:a9:7b:69:de:02:fd:99:88:53: b0:e6:06:42:27:70:b9:73:e3:db:1a:fb:f6:21:32: 46:66:4a:4f:12:65:5c:ec:07:65:21:2b:2b:85:bb: d8:2c:bc:e2:bd:42:c5:8d:87:5c:4d:76:ca:58:55: 19:a7:6a:e6:79:51:62:98:82:01:30:6f:19:2d:aa: 60:d4:e5:b0:ad:87:94:3c:2c:5d:8a:5d:c0:e5:9f: 64:23:12:41:c4:67:93:2a:15:89:47:72:9a:d3:d1: 3f:58:71:8d:ad:b1:b6:91:d6:aa:78:34:c4:94:53: e6:24:a8:3f:cb:07:56:42:b1:d0:09:ec:44:d8:66: 58:cc:9c:5b:6a:19:d4:96:35:df:cb:62:44:67:7b: f5:f0:fd:e5:54:64:1a:cb:29:3d:6d:ab:28:0d:20: 03:35:40:74:1c:1f:09:c2:4f:98:a8:98:13:65:ff: 70:f2:15:10:28:f9:94:b9:3b:f6:c5:9f:6a:4b:84: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AA:72:A0:0F:E9:8A:D9:18:18:39:CD:0B:9E:D6:56:75:6C:04:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.crl X509v3 Authority Key Identifier: keyid:EE:99:26:64:1B:51:28:7D:44:A7:B0:65:7D:9B:44:8E:05:7C:CB:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:b2:14:b4:54:5c:15:41:4b:8d:ed:e1:3d:dc:2e:c0:53:64: 25:db:ce:76:ac:70:0e:cf:de:d8:82:ee:e2:48:5e:05:8d:7d: 06:16:cc:57:2f:8f:8c:36:38:1c:78:41:e4:60:4f:80:79:ce: 02:0f:21:fb:d2:13:76:6c:74:8c:15:27:c0:06:4c:da:7c:0f: b8:47:1b:76:61:8a:66:58:0e:78:3c:02:00:37:50:40:7f:e6: d0:db:71:38:94:fd:89:d0:5b:b1:b7:2f:df:ed:f4:40:31:d7: 10:c3:5e:1e:c8:a0:2c:74:54:c7:9e:74:73:09:1d:a5:9e:51: c7:4f:8c:49:2a:4b:89:eb:79:3f:f3:11:d3:30:f4:e4:d7:2f: 6a:1e:03:a8:1d:f8:a5:68:a1:11:5a:76:e8:6a:03:aa:58:80: 01:8e:b0:c8:fa:f1:e8:36:28:4b:39:b3:89:9c:7a:8d:c3:e4: 85:ab:4c:d3:de:c3:b6:70:89:a2:65:67:e9:c5:a1:21:bd:26: 0c:27:0b:9f:da:2d:51:9a:4d:c4:3d:ee:d7:a7:5d:d3:84:56: fc:d4:28:bd:26:1b:82:4f:76:96:9f:66:28:ec:cc:8f:b2:7d: 54:fb:c1:c2:40:4d:c6:8c:ad:84:0f:a9:b8:58:54:69:ed:da: 0b:ed:ae:e6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE73cN95149fKAnOdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWEwNjFjNDEtNWM5OC00YzcxLWExNTAtN2E3ZDdhMjU1 MGUyMB4XDTI2MDgyNjE2MDAyMloXDTI2MDgyOTE2MDAwMFowLzEtMCsGA1UEAxMk ZmY2ZWJmODItY2RhMC00YWE3LThmOWMtMTA2YTY5Mzk4NmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GrTHoZ+HMGYdgyKX3K1YCADPJ7R7J8e2WhI VmDzpvIeMafKrlgjgVJ/RfemLP1t8vFvw1VZFvl/4b85NYW2Ky2pe2neAv2ZiFOw 5gZCJ3C5c+PbGvv2ITJGZkpPEmVc7AdlISsrhbvYLLzivULFjYdcTXbKWFUZp2rm eVFimIIBMG8ZLapg1OWwrYeUPCxdil3A5Z9kIxJBxGeTKhWJR3Ka09E/WHGNrbG2 kdaqeDTElFPmJKg/ywdWQrHQCexE2GZYzJxbahnUljXfy2JEZ3v18P3lVGQayyk9 basoDSADNUB0HB8Jwk+YqJgTZf9w8hUQKPmUuTv2xZ9qS4SrTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHaqcqAP6YrZGBg5zQue1lZ1bARmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xYTA2 MWM0MS01Yzk4LTRjNzEtYTE1MC03YTdkN2EyNTUwZTIvMWEwNjFjNDEtNWM5OC00 YzcxLWExNTAtN2E3ZDdhMjU1MGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWEwNjFjNDEtNWM5OC00YzcxLWEx NTAtN2E3ZDdhMjU1MGUyLzFhMDYxYzQxLTVjOTgtNGM3MS1hMTUwLTdhN2Q3YTI1 NTBlMi5jcmwwHwYDVR0jBBgwFoAU7pkmZBtRKH1Ep7BlfZtEjgV8y/IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xYTA2MWM0MS01Yzk4LTRjNzEtYTE1MC03YTdk N2EyNTUwZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTshS0VFwVQUuN7eE93C7A U2Ql2852rHAOz97Ygu7iSF4FjX0GFsxXL4+MNjgceEHkYE+Aec4CDyH70hN2bHSM FSfABkzafA+4Rxt2YYpmWA54PAIAN1BAf+bQ23E4lP2J0Fuxty/f7fRAMdcQw14e yKAsdFTHnnRzCR2lnlHHT4xJKkuJ63k/8xHTMPTk1y9qHgOoHfilaKERWnboagOq WIABjrDI+vHoNihLObOJnHqNw+SFq0zT3sO2cImiZWfpxaEhvSYMJwuf2i1Rmk3E Pe7Xp13ThFb81Ci9JhuCT3aWn2Yo7MyPsn1U+8HCQE3GjK2ED6m4WFRp7doL7a7m -----END CERTIFICATE-----Generated at Wed Aug 26 18:06:21 2026 by rpki-client