$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.mft File: bd0ce919-16d9-467e-98f3-d90c253b927a.mft (raw, json) Hash identifier: iN5EycRPS/JENOtmUIa9NCo50kOcZ0qZho4priugajM= Subject key identifier: 0D:11:44:02:84:AB:9E:9A:98:28:A1:2B:1C:57:C1:4E:40:CD:D2:5F Authority key identifier: 94:37:0F:0E:20:B9:B1:75:4D:67:32:00:23:BD:98:10:D3:94:43:F4 Certificate issuer: /CN=bd0ce919-16d9-467e-98f3-d90c253b927a Certificate serial: 010D0C9F4328584EF2ABEBCEC89D9A0A2AB10680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.mft Manifest number: 010D0C9F43285849390F847F1443983744D078DA Signing time: Mon 24 Aug 2026 23:00:22 +0000 Manifest this update: Mon 24 Aug 2026 23:00:22 +0000 Manifest next update: Wed 26 Aug 2026 23:00:00 +0000 Files and hashes: 1: 07c3d57e-a100-3bc3-92a3-16377b81b3db.roa (hash: WVivI69TIyBqaG68Axz4Hl7rC1ROcVC11ip/d1gGgTI=) 2: bd0ce919-16d9-467e-98f3-d90c253b927a.crl (hash: ro2uZOc+KqlyWSQk61V7gjEMWROixaYhVQYenzlxOUs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:ab:eb:ce:c8:9d:9a:0a:2a:b1:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd0ce919-16d9-467e-98f3-d90c253b927a Validity Not Before: Aug 24 23:00:22 2026 GMT Not After : Aug 26 23:00:00 2026 GMT Subject: CN=a22f6341-99cb-4da4-9551-bc12418fbc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:64:5f:64:ab:3e:b8:29:dd:6d:b6:92:4f:89: 16:42:8a:34:91:08:31:3e:c8:bd:9d:3e:11:c5:00: d7:7a:39:d4:29:5e:2f:b7:68:86:f7:a0:ca:cd:b2: 2e:20:b3:a8:6c:95:bc:0a:8e:d7:31:79:26:0f:a2: fb:a3:ad:06:d0:11:84:e7:4d:6c:86:9d:f9:c6:f6: 92:d5:ed:34:45:2a:cf:92:56:66:c7:81:55:61:1d: ce:5e:b4:14:bd:00:22:66:7e:f4:00:b4:f5:cf:3e: ff:75:ec:51:90:01:7e:df:9f:5f:ff:88:22:76:bf: 67:d4:a7:6d:90:df:df:0b:dd:08:0e:82:5a:3b:af: c4:c1:c3:90:45:dc:87:49:58:21:e6:19:45:8b:27: a5:d5:f2:5b:a8:e6:04:a8:0c:6b:fb:25:6d:c7:ee: 3b:23:7d:ed:79:74:eb:d2:c5:ba:2e:6a:7b:a5:45: 97:cf:10:cd:12:99:b5:f7:3d:83:11:4b:b2:7b:cc: 8a:f4:05:ad:be:47:4f:53:00:67:3b:7e:a6:66:08: 37:a3:b6:89:77:c0:e0:77:74:aa:94:fe:ce:b2:eb: 19:61:33:bf:4f:dd:93:f1:ad:78:f1:09:c5:ce:79: 60:13:8f:31:34:db:60:36:5a:00:56:eb:01:a5:26: 66:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:11:44:02:84:AB:9E:9A:98:28:A1:2B:1C:57:C1:4E:40:CD:D2:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.crl X509v3 Authority Key Identifier: keyid:94:37:0F:0E:20:B9:B1:75:4D:67:32:00:23:BD:98:10:D3:94:43:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:61:8d:3d:2d:c8:fc:3f:5e:a5:ba:ee:4d:08:87:c0:63:0a: 63:22:b8:bc:d3:a9:8a:94:df:4c:2f:f9:91:f3:60:cc:e7:e0: 49:02:69:68:41:36:ef:b8:19:c8:1a:89:72:16:07:94:cf:5d: d8:bf:88:3e:8a:81:2e:9c:00:48:12:a5:6b:a1:4b:72:4c:10: 0f:0f:83:26:87:d3:0f:3d:d5:db:86:ef:a4:7e:fc:57:a7:95: 6c:20:b8:8e:b1:bd:5e:b0:d7:08:3e:c5:e9:ed:54:42:78:c5: 29:e3:a6:b2:90:b2:3f:f6:13:79:ae:a1:6d:63:c0:ab:3d:7d: 79:25:9a:2a:6c:ec:c9:d8:83:25:04:e0:c6:92:b0:f8:a7:d8: 46:e4:8f:c6:59:54:c6:9a:4f:f4:3d:34:ab:1b:4b:7e:dd:c0: 15:81:da:62:85:3c:a6:6d:b5:03:f3:78:e4:11:fb:e3:2d:df: 76:97:cf:78:4c:28:1a:ca:27:fe:32:b0:83:30:a7:8a:45:98: 66:8c:d7:7a:bc:a5:9c:1f:b9:9d:91:41:c9:fc:09:6c:34:da: 4b:31:96:ee:9c:df:ce:c8:5c:d0:0a:34:bb:7e:1d:e9:91:9e: b0:3d:2d:81:42:e6:e1:d7:03:f7:3c:e5:83:19:24:57:43:01: e6:5e:00:9a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7yq+vOyJ2aCiqxBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQwY2U5MTktMTZkOS00NjdlLTk4ZjMtZDkwYzI1M2I5 MjdhMB4XDTI2MDgyNDIzMDAyMloXDTI2MDgyNjIzMDAwMFowLzEtMCsGA1UEAxMk YTIyZjYzNDEtOTljYi00ZGE0LTk1NTEtYmMxMjQxOGZiYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmRfZKs+uCndbbaST4kWQoo0kQgxPsi9nT4R xQDXejnUKV4vt2iG96DKzbIuILOobJW8Co7XMXkmD6L7o60G0BGE501shp35xvaS 1e00RSrPklZmx4FVYR3OXrQUvQAiZn70ALT1zz7/dexRkAF+359f/4gidr9n1Kdt kN/fC90IDoJaO6/EwcOQRdyHSVgh5hlFiyel1fJbqOYEqAxr+yVtx+47I33teXTr 0sW6Lmp7pUWXzxDNEpm19z2DEUuye8yK9AWtvkdPUwBnO36mZgg3o7aJd8Dgd3Sq lP7OsusZYTO/T92T8a148QnFznlgE48xNNtgNloAVusBpSZmCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA0RRAKEq56amCihKxxXwU5AzdJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iZDBj ZTkxOS0xNmQ5LTQ2N2UtOThmMy1kOTBjMjUzYjkyN2EvYmQwY2U5MTktMTZkOS00 NjdlLTk4ZjMtZDkwYzI1M2I5MjdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmQwY2U5MTktMTZkOS00NjdlLTk4 ZjMtZDkwYzI1M2I5MjdhL2JkMGNlOTE5LTE2ZDktNDY3ZS05OGYzLWQ5MGMyNTNi OTI3YS5jcmwwHwYDVR0jBBgwFoAUlDcPDiC5sXVNZzIAI72YENOUQ/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iZDBjZTkxOS0xNmQ5LTQ2N2UtOThmMy1kOTBj MjUzYjkyN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeYY09Lcj8P16luu5NCIfA YwpjIri806mKlN9ML/mR82DM5+BJAmloQTbvuBnIGolyFgeUz13Yv4g+ioEunABI EqVroUtyTBAPD4Mmh9MPPdXbhu+kfvxXp5VsILiOsb1esNcIPsXp7VRCeMUp46ay kLI/9hN5rqFtY8CrPX15JZoqbOzJ2IMlBODGkrD4p9hG5I/GWVTGmk/0PTSrG0t+ 3cAVgdpihTymbbUD83jkEfvjLd92l894TCgayif+MrCDMKeKRZhmjNd6vKWcH7md kUHJ/AlsNNpLMZbunN/OyFzQCjS7fh3pkZ6wPS2BQubh1wP3POWDGSRXQwHmXgCa -----END CERTIFICATE-----Generated at Tue Aug 25 15:39:58 2026 by rpki-client