$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft File: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft (raw, json) Hash identifier: +pZh+v5s0Q8zzTNZXioNgfevqC3gMF1CIS+L2JwDXbs= Subject key identifier: A9:8B:F8:36:71:A9:A1:E7:65:82:D5:96:BE:AB:3C:A0:70:BD:FF:E8 Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584EE6EC4C478EFED85E1653BA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft Manifest number: 010D0C9F43285848565C3129D3EC730D3401FA42 Signing time: Thu 20 Aug 2026 18:00:23 +0000 Manifest this update: Thu 20 Aug 2026 18:00:23 +0000 Manifest next update: Sun 23 Aug 2026 18:00:00 +0000 Files and hashes: 1: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl (hash: N8zBRN2FO/DI1q544pYPfkMay1lsB+6rQahUCsK01sk=) 2: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (hash: kmjb1KfR54WXcuFI0iUrgBQbKmAE/SojIWykgcZ+6IM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:ec:4c:47:8e:fe:d8:5e:16:53:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Aug 20 18:00:23 2026 GMT Not After : Aug 23 18:00:00 2026 GMT Subject: CN=ddac7441-775a-4e27-a86b-8c39c6bb239c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6c:d5:75:60:44:3a:5c:e5:aa:aa:3e:1b:95: d8:37:f9:72:4b:61:0b:74:81:2b:5f:8e:2c:30:f5: 43:e5:31:0b:78:00:94:ed:73:b9:30:f8:33:7b:f3: ea:bb:fa:45:76:50:29:16:d2:03:ce:45:35:a0:a1: 78:73:61:ed:fe:2c:2c:ab:b7:72:d0:04:c4:33:40: 74:e6:9d:ca:19:63:a5:12:78:50:a2:01:73:b1:53: 86:b4:f2:9f:06:c5:2e:25:41:6f:2e:0a:c3:22:d2: 7c:44:66:ec:97:2d:f1:13:a8:93:be:fa:e1:1e:24: 45:09:62:b2:65:7f:95:e3:bf:1f:9e:77:18:34:9c: 0d:99:dd:bb:06:5b:15:4c:42:9c:5f:f8:8f:65:7d: 10:81:4e:b6:f3:96:8d:2a:9f:83:ab:1d:56:3f:a9: 7e:cc:a0:43:e4:5e:b9:4d:fc:a0:b8:e4:83:fe:8f: 9b:86:a3:fc:ab:89:69:76:f2:30:b6:b1:b5:7b:34: 87:b7:b7:a0:3b:f9:93:37:51:76:7b:ef:ff:79:79: 8c:04:ac:da:86:f1:a1:67:fe:7f:57:0c:59:7a:f9: 9f:41:eb:3b:8f:f1:2a:7e:2f:00:f1:8b:44:4f:2f: dc:30:02:ec:19:0b:5f:fb:42:eb:07:6f:08:2d:da: ea:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8B:F8:36:71:A9:A1:E7:65:82:D5:96:BE:AB:3C:A0:70:BD:FF:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:0e:54:e3:5b:fb:db:d8:81:cb:e3:c9:fb:02:ff:b1:01:4e: 4c:19:cf:45:2f:cf:d7:e1:75:3a:fb:15:09:74:2d:03:ac:c0: 80:1e:41:7f:db:61:30:4c:d0:d5:c1:73:fc:ab:10:e0:ab:2e: be:cd:35:e7:c0:4c:5b:a0:dc:4a:74:3c:6c:e8:a6:d8:38:dc: fe:61:35:8c:8d:38:0f:10:08:56:c9:2f:47:32:fa:b1:47:ec: e3:72:c7:37:0f:fc:4e:1c:e8:8d:f3:76:13:9a:5b:e8:49:85: 3a:75:1d:ad:5b:aa:07:db:a0:01:02:a4:f9:e3:98:54:08:82: e3:32:20:32:0f:7e:0c:78:5b:f8:49:cc:c4:2d:fd:2f:f1:9b: c5:8c:6f:c0:28:a8:2a:05:08:e2:a7:2f:50:02:90:12:3e:60: a3:22:05:3c:af:ca:02:fb:16:c4:c3:7a:3b:da:83:67:f8:26: 50:5b:48:69:b7:d6:7c:c7:3c:f9:13:af:e9:c0:63:c4:5e:6c: cc:27:c3:7e:6c:14:86:50:cb:89:32:a4:a6:82:fa:4d:c1:6e: 21:f4:ad:8c:02:de:dc:c5:02:1b:c4:59:15:8b:25:81:73:a2: 87:01:77:a9:eb:63:df:44:e5:85:bc:d5:b8:be:a0:f1:2f:1b: e2:21:b7:f3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7m7ExHjv7YXhZTukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI2MDgyMDE4MDAyM1oXDTI2MDgyMzE4MDAwMFowLzEtMCsGA1UEAxMk ZGRhYzc0NDEtNzc1YS00ZTI3LWE4NmItOGMzOWM2YmIyMzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGzVdWBEOlzlqqo+G5XYN/lyS2ELdIErX44s MPVD5TELeACU7XO5MPgze/Pqu/pFdlApFtIDzkU1oKF4c2Ht/iwsq7dy0ATEM0B0 5p3KGWOlEnhQogFzsVOGtPKfBsUuJUFvLgrDItJ8RGbsly3xE6iTvvrhHiRFCWKy ZX+V478fnncYNJwNmd27BlsVTEKcX/iPZX0QgU6285aNKp+Dqx1WP6l+zKBD5F65 TfyguOSD/o+bhqP8q4lpdvIwtrG1ezSHt7egO/mTN1F2e+//eXmMBKzahvGhZ/5/ VwxZevmfQes7j/Eqfi8A8YtETy/cMALsGQtf+0LrB28ILdrqKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKmL+DZxqaHnZYLVlr6rPKBwvf/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvMjUzOTdjMzMtODRkMS00 YTk1LTlkNGMtNDIxYzdkOTVkMGY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKDlTjW/vb2IHL48n7Av+x AU5MGc9FL8/X4XU6+xUJdC0DrMCAHkF/22EwTNDVwXP8qxDgqy6+zTXnwExboNxK dDxs6KbYONz+YTWMjTgPEAhWyS9HMvqxR+zjcsc3D/xOHOiN83YTmlvoSYU6dR2t W6oH26ABAqT545hUCILjMiAyD34MeFv4SczELf0v8ZvFjG/AKKgqBQjipy9QApAS PmCjIgU8r8oC+xbEw3o72oNn+CZQW0hpt9Z8xzz5E6/pwGPEXmzMJ8N+bBSGUMuJ MqSmgvpNwW4h9K2MAt7cxQIbxFkViyWBc6KHAXep62PfROWFvNW4vqDxLxviIbfz -----END CERTIFICATE-----Generated at Fri Aug 21 11:37:23 2026 by rpki-client