$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft File: ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft (raw, json) Hash identifier: +MZwLbo1rdkjTYEDO1B1FO3nR5yuaw8prJEi26+wRxI= Subject key identifier: 71:A4:34:BD:23:89:A4:D7:4E:F5:9D:97:67:89:AF:CD:C8:5D:E7:A6 Authority key identifier: 83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8 Certificate issuer: /CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71 Certificate serial: 010D0C9F4328584EF4885C46D378284426677B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft Manifest number: 010D0C9F4328584A2AF8D6A86D21A3E42E10A245 Signing time: Tue 25 Aug 2026 15:00:23 +0000 Manifest this update: Tue 25 Aug 2026 15:00:23 +0000 Manifest next update: Thu 27 Aug 2026 15:00:00 +0000 Files and hashes: 1: 682e9a68-26a9-36ec-8edc-50811bfe62f7.roa (hash: IHsuxDw9mqcapRGnx0WKU434eWlXvHqko3UQfwAN1Rk=) 2: 9dca4ab6-05a9-3fec-a108-a009b99cd415.roa (hash: KVhvrxtLX3/xYm/QgDl0XVLm4e9KDpSya4r/OU31DR4=) 3: bd668f92-776c-355d-9660-3354ba68dbd0.roa (hash: t/BpcJ6XZ8ZFMxn2zTfzSFEh7KsjXox44x/8QW0WMgM=) 4: ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl (hash: 0A3Cf0ukWOULkyk4RFydZMA1WNHyMB8Aqm6Y7UNATQg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:88:5c:46:d3:78:28:44:26:67:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71 Validity Not Before: Aug 25 15:00:23 2026 GMT Not After : Aug 27 15:00:00 2026 GMT Subject: CN=5775b94c-548f-4e14-9498-9a81b08dca2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:c5:2b:f4:89:b4:4a:95:e3:39:44:84:66: bf:ab:c6:41:e4:c5:85:e6:58:a8:95:e3:41:24:57: 95:97:86:51:46:92:08:93:b9:01:52:68:63:37:10: 6e:0b:45:4c:45:80:89:f8:42:4a:5d:53:f1:25:21: f9:5f:0f:43:2a:38:64:eb:3d:1f:81:df:87:63:59: 7b:56:1c:13:20:a0:17:ff:e9:87:54:f3:48:e7:e2: 47:79:b9:79:a5:b1:7c:46:51:48:af:f2:a0:c6:1d: d2:91:e2:09:3e:86:f6:28:aa:e1:96:08:ef:2e:7e: 37:0d:6a:02:ed:32:ff:d0:35:cd:70:4d:5d:8f:73: f8:22:b2:c9:ab:e4:75:83:2f:4c:f2:67:4b:ad:de: b5:6f:49:2a:51:75:62:4d:07:23:29:da:a2:ea:e5: ef:2a:ca:1d:29:1a:39:f4:9e:29:04:b0:4a:78:62: 3f:ff:ab:79:c5:c3:ad:6b:26:71:9b:03:ce:f8:d0: ea:3f:4c:17:fe:55:37:8e:76:20:29:f5:09:53:f9: 86:b9:fe:01:65:09:22:2e:d6:b0:2a:5d:7a:68:bf: e8:4c:e5:59:88:b5:a4:f0:be:19:39:fb:4a:a5:e6: 81:f8:00:1f:47:0b:92:df:69:ab:c0:4f:d1:fa:c9: a7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A4:34:BD:23:89:A4:D7:4E:F5:9D:97:67:89:AF:CD:C8:5D:E7:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl X509v3 Authority Key Identifier: keyid:83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:62:28:88:e3:dc:1e:a3:3e:55:2b:b9:e1:81:bc:3e:7f:af: e2:38:f3:6e:8b:33:4f:bc:2d:03:19:70:73:82:24:3a:14:75: 88:44:ea:4c:fe:38:fd:11:d2:4a:e8:37:3f:9a:8d:13:f9:35: 78:45:64:7f:ed:88:7f:df:b5:91:0c:f3:64:e1:d8:66:85:a7: 53:c7:7c:76:f5:73:c3:46:ef:da:35:75:48:a9:0e:77:af:85: 8f:32:91:05:86:0c:37:f2:74:bf:46:c5:d1:94:34:86:ff:3a: 79:bf:f2:34:fb:03:39:94:05:7a:3f:fd:57:34:de:b7:c5:a8: 5e:90:1a:c3:fa:ae:40:58:7a:7f:a9:39:c9:3f:8b:44:7c:ff: 50:4a:e0:af:a2:f1:e8:ac:0c:2c:a7:83:5d:e7:fd:fa:4b:81: 85:97:29:fe:65:1f:dc:d9:d1:68:7d:3e:42:15:84:68:95:3e: 9a:70:17:55:95:c6:71:e0:ed:3d:d8:3d:c5:8a:7d:f1:c0:39: 0c:b4:0c:e2:33:19:f6:3b:db:c2:9f:38:0d:d3:95:f2:21:c5: 7e:fa:a2:e4:53:77:3c:2c:fb:87:93:ef:b8:60:9f:81:47:aa: dc:da:41:b9:24:33:bc:bf:b7:f9:2f:90:ec:80:0d:fc:bf:2c: 1f:23:c4:31 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE70iFxG03goRCZne4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVkODRhNGItOTc5MC00YTE4LWJjYTktNDNlNDllMmYw YjcxMB4XDTI2MDgyNTE1MDAyM1oXDTI2MDgyNzE1MDAwMFowLzEtMCsGA1UEAxMk NTc3NWI5NGMtNTQ4Zi00ZTE0LTk0OTgtOWE4MWIwOGRjYTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF3FK/SJtEqV4zlEhGa/q8ZB5MWF5lioleNB JFeVl4ZRRpIIk7kBUmhjNxBuC0VMRYCJ+EJKXVPxJSH5Xw9DKjhk6z0fgd+HY1l7 VhwTIKAX/+mHVPNI5+JHebl5pbF8RlFIr/Kgxh3SkeIJPob2KKrhlgjvLn43DWoC 7TL/0DXNcE1dj3P4IrLJq+R1gy9M8mdLrd61b0kqUXViTQcjKdqi6uXvKsodKRo5 9J4pBLBKeGI//6t5xcOtayZxmwPO+NDqP0wX/lU3jnYgKfUJU/mGuf4BZQkiLtaw Kl16aL/oTOVZiLWk8L4ZOftKpeaB+AAfRwuS32mrwE/R+smnBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHGkNL0jiaTXTvWdl2eJr83IXeemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZWQ4 NGE0Yi05NzkwLTRhMTgtYmNhOS00M2U0OWUyZjBiNzEvZGVkODRhNGItOTc5MC00 YTE4LWJjYTktNDNlNDllMmYwYjcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGVkODRhNGItOTc5MC00YTE4LWJj YTktNDNlNDllMmYwYjcxL2RlZDg0YTRiLTk3OTAtNGExOC1iY2E5LTQzZTQ5ZTJm MGI3MS5jcmwwHwYDVR0jBBgwFoAUg0UH0UvCJ/Bm8LhY885lcqgaAcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZWQ4NGE0Yi05NzkwLTRhMTgtYmNhOS00M2U0 OWUyZjBiNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlYiiI49weoz5VK7nhgbw+ f6/iOPNuizNPvC0DGXBzgiQ6FHWIROpM/jj9EdJK6Dc/mo0T+TV4RWR/7Yh/37WR DPNk4dhmhadTx3x29XPDRu/aNXVIqQ53r4WPMpEFhgw38nS/RsXRlDSG/zp5v/I0 +wM5lAV6P/1XNN63xahekBrD+q5AWHp/qTnJP4tEfP9QSuCvovHorAwsp4Nd5/36 S4GFlyn+ZR/c2dFofT5CFYRolT6acBdVlcZx4O092D3Fin3xwDkMtAziMxn2O9vC nzgN05XyIcV++qLkU3c8LPuHk++4YJ+BR6rc2kG5JDO8v7f5L5DsgA38vywfI8Qx -----END CERTIFICATE-----Generated at Wed Aug 26 12:18:27 2026 by rpki-client