$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft File: a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft (raw, json) Hash identifier: iRskTM6rbmen7M3PpWZrllplTdYIT+PL2dWs/C7RnKc= Subject key identifier: 5F:9E:D1:80:14:8E:B8:01:9C:7D:5D:CD:F1:0E:16:B0:C9:E9:19:81 Authority key identifier: 34:41:E4:5E:3F:ED:3C:C7:72:52:1E:31:2B:50:81:E6:B0:BD:67:59 Certificate issuer: /CN=a290c80a-d6fb-4b33-a574-d5eb1b510d00 Certificate serial: 010D0C9F4328584EE70A10DD07FFC5B47089F970 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft Manifest number: 010D0C9F4328584B66F92A46BDA7C1973DEC9A01 Signing time: Thu 20 Aug 2026 19:00:23 +0000 Manifest this update: Thu 20 Aug 2026 19:00:23 +0000 Manifest next update: Sat 22 Aug 2026 19:00:00 +0000 Files and hashes: 1: a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl (hash: 4MGrz1r9Q7bv4Sfxj82Vf4heduIoH6FlHp9dTay6aT4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:0a:10:dd:07:ff:c5:b4:70:89:f9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a290c80a-d6fb-4b33-a574-d5eb1b510d00 Validity Not Before: Aug 20 19:00:23 2026 GMT Not After : Aug 22 19:00:00 2026 GMT Subject: CN=bac6d2c1-2134-4b49-92d1-47696af6c717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ae:90:69:8b:18:91:d4:48:8f:fa:7d:33:2e: 31:9a:84:5c:20:a0:a7:37:d9:2b:b9:2e:f6:3d:81: e8:79:cd:8a:01:50:b3:18:96:3e:98:60:e1:75:29: cb:c6:99:74:b4:7c:92:04:40:0e:a3:75:9d:c5:10: 89:de:23:d2:d4:47:92:1d:a5:5b:bc:c3:44:ce:75: 9a:ba:4a:f2:29:ad:ad:c3:16:4c:b2:a2:dc:e4:3f: af:fe:3b:a0:5f:33:f6:d0:4f:3d:3a:1a:c4:5e:cb: 95:64:8a:65:96:da:b4:0a:27:c4:24:bc:09:7c:7f: 98:1b:5e:b2:55:1f:0d:80:22:6b:6e:c4:4c:35:2e: 5a:dd:75:8a:28:5f:70:cc:41:ab:51:7f:1d:f7:a6: d1:93:85:75:d2:2e:1b:62:d5:ad:1e:d0:e6:19:cc: f8:cc:16:56:f7:9b:d3:72:d9:f3:f9:17:e6:e0:8c: cf:e1:5b:c1:4a:73:7a:99:4b:03:6b:67:ee:24:45: 51:db:6e:04:84:6d:3f:80:c1:fb:0d:da:fe:c8:7a: e8:76:9b:c2:da:a1:af:ec:4e:2a:eb:2e:4c:6b:77: 52:92:67:fd:c2:65:7e:aa:8f:31:14:ef:69:66:40: 97:4b:d7:56:5d:bc:8b:d5:4f:ec:9d:1e:d4:a3:71: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9E:D1:80:14:8E:B8:01:9C:7D:5D:CD:F1:0E:16:B0:C9:E9:19:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl X509v3 Authority Key Identifier: keyid:34:41:E4:5E:3F:ED:3C:C7:72:52:1E:31:2B:50:81:E6:B0:BD:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:fe:35:34:d9:e4:04:c0:c8:17:a6:71:bc:9c:dd:d2:4b:85: e1:79:01:d0:d3:47:c3:09:62:e8:6d:a9:17:5e:ec:53:df:c3: fd:7e:cd:a5:1c:c4:0a:14:40:69:d0:56:e2:89:cf:a1:76:98: ff:8a:46:0f:6b:0e:02:b9:16:34:89:d8:f3:3d:5b:e0:38:4a: f3:f1:1b:fb:d3:73:fe:ef:4c:bf:6e:eb:f4:01:43:d7:a8:9f: b5:79:1f:d8:54:1c:e8:bc:94:b1:17:e7:08:f4:ae:c4:65:a8: 65:06:0d:cf:0d:ee:8d:48:5d:8a:ad:e9:b7:8e:95:06:51:ef: 77:d4:93:fa:d1:82:db:7b:f8:12:35:90:f6:69:f4:68:18:70: e3:56:3b:e5:6f:c5:63:e3:87:ee:de:2c:98:17:16:b5:25:7d: 9c:54:46:bd:4e:6c:1e:fd:0e:9e:be:38:8f:ad:f4:3d:ba:ad: 5b:6a:41:fe:07:2b:80:b1:63:26:9b:f0:26:ca:bb:42:8e:e6: eb:8a:a7:a5:b3:aa:6c:53:78:38:b6:37:4b:c7:26:c4:23:d6: 05:e5:78:62:91:bb:8e:56:b1:12:08:a5:c8:f0:3e:6a:94:e7: 41:c2:e2:14:28:bb:7c:50:ff:11:11:b2:73:8f:df:fc:9e:c5: 5b:95:0a:06 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7nChDdB//FtHCJ+XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5MGM4MGEtZDZmYi00YjMzLWE1NzQtZDVlYjFiNTEw ZDAwMB4XDTI2MDgyMDE5MDAyM1oXDTI2MDgyMjE5MDAwMFowLzEtMCsGA1UEAxMk YmFjNmQyYzEtMjEzNC00YjQ5LTkyZDEtNDc2OTZhZjZjNzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq6QaYsYkdRIj/p9My4xmoRcIKCnN9kruS72 PYHoec2KAVCzGJY+mGDhdSnLxpl0tHySBEAOo3WdxRCJ3iPS1EeSHaVbvMNEznWa ukryKa2twxZMsqLc5D+v/jugXzP20E89OhrEXsuVZIplltq0CifEJLwJfH+YG16y VR8NgCJrbsRMNS5a3XWKKF9wzEGrUX8d96bRk4V10i4bYtWtHtDmGcz4zBZW95vT ctnz+Rfm4IzP4VvBSnN6mUsDa2fuJEVR224EhG0/gMH7Ddr+yHrodpvC2qGv7E4q 6y5Ma3dSkmf9wmV+qo8xFO9pZkCXS9dWXbyL1U/snR7Uo3GfAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF+e0YAUjrgBnH1dzfEOFrDJ6RmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMjkw YzgwYS1kNmZiLTRiMzMtYTU3NC1kNWViMWI1MTBkMDAvYTI5MGM4MGEtZDZmYi00 YjMzLWE1NzQtZDVlYjFiNTEwZDAwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTI5MGM4MGEtZDZmYi00YjMzLWE1 NzQtZDVlYjFiNTEwZDAwL2EyOTBjODBhLWQ2ZmItNGIzMy1hNTc0LWQ1ZWIxYjUx MGQwMC5jcmwwHwYDVR0jBBgwFoAUNEHkXj/tPMdyUh4xK1CB5rC9Z1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMjkwYzgwYS1kNmZiLTRiMzMtYTU3NC1kNWVi MWI1MTBkMDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCv/jU02eQEwMgXpnG8nN3S S4XheQHQ00fDCWLobakXXuxT38P9fs2lHMQKFEBp0Fbiic+hdpj/ikYPaw4CuRY0 idjzPVvgOErz8Rv703P+70y/buv0AUPXqJ+1eR/YVBzovJSxF+cI9K7EZahlBg3P De6NSF2Krem3jpUGUe931JP60YLbe/gSNZD2afRoGHDjVjvlb8Vj44fu3iyYFxa1 JX2cVEa9Tmwe/Q6evjiPrfQ9uq1bakH+ByuAsWMmm/AmyrtCjubriqels6psU3g4 tjdLxybEI9YF5XhikbuOVrESCKXI8D5qlOdBwuIUKLt8UP8REbJzj9/8nsVblQoG -----END CERTIFICATE-----Generated at Fri Aug 21 00:18:58 2026 by rpki-client