$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft File: 252aff2f-9807-45d4-ba31-1a3198784cae.mft (raw, json) Hash identifier: kaILknMAmK83M9cqISqGzQBoKXfXi7zYhip3HgcJzMA= Subject key identifier: F9:1A:5E:EE:A9:A3:A8:2F:53:DE:D8:55:A8:C7:A3:FE:2A:AA:82:5B Authority key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Certificate issuer: /CN=252aff2f-9807-45d4-ba31-1a3198784cae Certificate serial: 010D0C9F4328584E690FF6D26FCCE39A108AAC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft Manifest number: 010D0C9F4328584AAE4DC59D07CE7A5E6AC02FDF Signing time: Mon 06 Jul 2026 16:00:22 +0000 Manifest this update: Mon 06 Jul 2026 16:00:22 +0000 Manifest next update: Thu 09 Jul 2026 16:00:00 +0000 Files and hashes: 1: 252aff2f-9807-45d4-ba31-1a3198784cae.crl (hash: Oy5TcLLf3u5CHebRecJKgwjl5gqEAsdbQVslydtjpHc=) 2: 3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa (hash: U0t6zbmDCZNIOa9QwOC3xSWeBbXcCUacrWmdQnimmJA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:0f:f6:d2:6f:cc:e3:9a:10:8a:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252aff2f-9807-45d4-ba31-1a3198784cae Validity Not Before: Jul 6 16:00:22 2026 GMT Not After : Jul 9 16:00:00 2026 GMT Subject: CN=9a89155f-a705-4fdb-ae83-818dc34cc6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:59:41:1b:57:82:d4:32:09:7e:0f:6d:51:60: 0a:01:46:0a:09:a2:4e:39:23:79:76:d9:24:1e:ca: b7:ca:95:32:f2:c4:e8:5a:31:bf:9d:e6:81:e4:fb: 85:5a:d3:3a:95:12:19:fa:9e:29:80:11:d0:76:d8: 91:b1:89:b9:b0:2b:20:20:b0:e9:b1:25:83:ac:f1: 04:18:4d:d6:e9:ff:fb:4c:67:88:4c:3d:2a:0a:5b: 03:ca:6c:b2:5d:ac:25:af:54:b6:34:02:c2:6d:c5: ed:1d:7a:ba:9e:52:d9:af:fb:d8:d2:f2:d8:c4:bd: b0:c4:37:64:f6:d5:2c:ce:e5:ec:b6:45:ef:7f:f5: bc:a7:27:5f:67:95:0b:c5:9b:80:a4:54:41:5e:66: 4d:f9:e7:f7:82:e2:47:99:c7:88:aa:c6:82:ac:0c: ca:98:d3:8e:74:97:39:09:25:31:37:1a:e7:32:04: dc:74:4a:1a:7f:11:14:58:31:87:e3:fb:05:15:87: 85:05:3b:35:b2:0e:8c:02:d7:dd:cd:f5:44:61:77: 61:80:d4:ee:46:1c:6f:d0:c0:2a:65:e8:cd:2d:a5: 9e:59:9b:04:16:10:41:5e:2f:f9:5e:53:92:8d:2c: 2c:cd:bf:67:1a:50:6b:33:b1:18:46:95:f2:6a:34: 70:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1A:5E:EE:A9:A3:A8:2F:53:DE:D8:55:A8:C7:A3:FE:2A:AA:82:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl X509v3 Authority Key Identifier: keyid:65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:9a:e9:59:7a:be:8d:53:a3:1f:a2:a9:21:06:72:36:1a:a1: 91:ad:2e:1a:d2:3f:0e:47:a1:3f:03:aa:70:c4:c3:77:d8:da: 00:8b:46:e2:c7:a3:7e:33:16:8a:dc:e4:57:05:90:65:d0:8a: 8c:f1:51:9d:30:e1:23:5b:2d:87:be:8b:88:fc:73:56:ea:b1: a1:03:a9:88:8d:39:7b:73:4d:b4:50:f1:76:63:d9:9c:13:12: 4d:0f:4d:7e:47:46:34:f4:a6:27:2c:7c:c8:37:85:8f:51:ce: a5:67:13:38:52:97:66:6f:aa:88:9b:41:8c:3e:33:4f:80:fe: 50:ca:3a:93:ed:e7:56:4d:54:b7:2b:b1:ce:de:67:fa:31:01: 34:b4:1a:30:8f:0c:23:60:27:b8:0e:d4:1a:3e:5d:68:42:2a: 15:6a:ab:83:76:7e:5d:9f:0a:cd:b3:67:fb:29:c3:89:62:56: ae:df:ba:c6:24:4b:b5:47:7f:39:91:2a:cc:0d:69:36:e8:75: 04:98:8d:b9:32:38:a5:82:5f:ce:97:9f:9e:a1:0e:76:9e:62: f7:d3:4b:1e:f9:97:ef:f0:91:75:64:fe:8c:af:28:82:5c:56: 11:a2:65:42:2b:6f:b6:ac:37:47:9c:67:00:69:99:43:8e:b1: 71:b0:bd:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE5pD/bSb8zjmhCKrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0 Y2FlMB4XDTI2MDcwNjE2MDAyMloXDTI2MDcwOTE2MDAwMFowLzEtMCsGA1UEAxMk OWE4OTE1NWYtYTcwNS00ZmRiLWFlODMtODE4ZGMzNGNjNmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1lBG1eC1DIJfg9tUWAKAUYKCaJOOSN5dtkk Hsq3ypUy8sToWjG/neaB5PuFWtM6lRIZ+p4pgBHQdtiRsYm5sCsgILDpsSWDrPEE GE3W6f/7TGeITD0qClsDymyyXawlr1S2NALCbcXtHXq6nlLZr/vY0vLYxL2wxDdk 9tUszuXstkXvf/W8pydfZ5ULxZuApFRBXmZN+ef3guJHmceIqsaCrAzKmNOOdJc5 CSUxNxrnMgTcdEoafxEUWDGH4/sFFYeFBTs1sg6MAtfdzfVEYXdhgNTuRhxv0MAq ZejNLaWeWZsEFhBBXi/5XlOSjSwszb9nGlBrM7EYRpXyajRwAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPkaXu6po6gvU97YVajHo/4qqoJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJh ZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMjUyYWZmMmYtOTgwNy00 NWQ0LWJhMzEtMWEzMTk4Nzg0Y2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjUyYWZmMmYtOTgwNy00NWQ0LWJh MzEtMWEzMTk4Nzg0Y2FlLzI1MmFmZjJmLTk4MDctNDVkNC1iYTMxLTFhMzE5ODc4 NGNhZS5jcmwwHwYDVR0jBBgwFoAUZSE6O0Ut8zOSXdcWgwwxMHr4mMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMx OTg3ODRjYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEmulZer6NU6MfoqkhBnI2 GqGRrS4a0j8OR6E/A6pwxMN32NoAi0bix6N+MxaK3ORXBZBl0IqM8VGdMOEjWy2H vouI/HNW6rGhA6mIjTl7c020UPF2Y9mcExJND01+R0Y09KYnLHzIN4WPUc6lZxM4 Updmb6qIm0GMPjNPgP5QyjqT7edWTVS3K7HO3mf6MQE0tBowjwwjYCe4DtQaPl1o QioVaquDdn5dnwrNs2f7KcOJYlau37rGJEu1R385kSrMDWk26HUEmI25Mjilgl/O l5+eoQ52nmL300se+Zfv8JF1ZP6MryiCXFYRomVCK2+2rDdHnGcAaZlDjrFxsL09 -----END CERTIFICATE-----Generated at Mon Jul 6 19:17:28 2026 by rpki-client