$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: mQgGpD0vzEQcyqpT85+x99zp6EMBN5O9Kt9MZ5wgvKI= Subject key identifier: 3A:96:BA:F4:84:E4:8C:1A:EA:F2:CD:E2:00:AF:25:8C:84:EF:DB:05 Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F4328584E9867D4313A2AE73A0FA03A60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C76A Signing time: Thu 23 Jul 2026 15:00:22 +0000 Manifest this update: Thu 23 Jul 2026 15:00:22 +0000 Manifest next update: Sat 25 Jul 2026 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: qpglPdIXdO3JX6YriZnrA/V6gf0ZfzipZQ5oXeyxYnk=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: oNaHBII0D/yQLBH/F/mouVGyrHWW0dmyqpr+jszueww=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:98:67:d4:31:3a:2a:e7:3a:0f:a0:3a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: Jul 23 15:00:22 2026 GMT Not After : Jul 25 15:00:00 2026 GMT Subject: CN=7bd698a3-d160-45a4-8b85-dde68f7261c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:17:76:5b:29:4b:d7:9c:58:fc:2b:16:b1:ce: 8e:fa:e4:40:7f:33:62:07:7b:3d:8f:a3:12:f5:fd: b2:91:3c:02:d7:1e:52:c2:db:6c:d7:3c:7e:50:ac: 97:5b:3f:9b:cd:ef:c9:e9:8c:76:ad:34:64:7f:ae: eb:44:3b:06:b8:dd:8d:bc:c1:68:d0:5a:c1:4e:95: 8f:3e:36:a7:82:a3:b3:b2:4a:84:a9:09:b8:38:57: 91:af:15:05:2e:da:1d:fd:d8:8f:d7:fd:8d:b0:ae: 36:11:0a:0d:04:59:69:6d:32:31:89:ee:14:70:92: c0:cb:12:28:e0:8b:b8:1c:a4:7f:13:bc:fc:b7:40: 41:a8:d1:7c:c6:11:4e:a3:0d:52:8c:03:36:62:f5: 82:5a:3a:d2:20:78:10:d6:72:99:fe:b9:1c:3a:38: 76:b5:69:57:b9:17:44:fe:a0:55:d6:c8:88:f5:e2: 2b:61:24:ef:c5:d1:3d:05:13:46:6b:5e:5f:a1:fb: a3:a4:55:cb:88:25:68:47:a7:25:33:26:ce:0e:7c: d1:f1:02:0a:ce:cd:a8:a2:78:c7:b6:f9:42:9d:7a: 9b:49:fb:f7:6e:55:06:84:54:51:05:5a:77:e4:ea: fd:95:93:57:46:b6:3c:3b:c7:ab:f9:76:17:51:28: 5d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:96:BA:F4:84:E4:8C:1A:EA:F2:CD:E2:00:AF:25:8C:84:EF:DB:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:8c:2f:aa:06:86:54:53:78:2a:6d:a0:2f:a5:38:77:a2:05: a6:65:05:52:03:71:03:e4:48:88:77:a0:5c:4d:ba:1e:82:ef: b3:e4:1c:a8:92:f0:82:6b:bb:40:58:7c:fd:1f:b5:58:94:b3: 7f:d5:9a:52:58:93:c0:7c:6c:3a:46:b5:df:ce:1c:b6:b0:6a: 91:16:26:33:5b:52:33:06:1a:d6:62:34:fb:dd:22:96:d9:7b: 79:62:6e:ac:7e:99:b7:db:49:a1:f9:66:29:9b:52:91:1a:ce: f7:04:ca:05:a0:b2:0b:16:86:29:1f:a8:6b:39:bf:7d:4b:25: 09:a7:1c:01:6d:66:39:d0:d0:e5:a0:ed:82:f9:f0:38:99:88: b2:0b:82:e1:ef:5b:82:fb:74:00:fc:76:dc:cf:94:d2:96:0a: a5:7a:0e:ac:b0:77:90:c3:91:23:13:62:f5:96:7a:0b:1e:ed: c6:c7:a5:00:32:74:cb:7d:c3:30:72:8d:cb:f5:d5:a9:93:01: df:9f:96:a2:7b:07:67:fc:aa:61:9d:d0:27:ef:4d:90:23:c2: 65:1f:1b:44:12:f1:f5:ad:94:a0:4d:d5:f0:47:1a:a2:38:b7: ac:7d:8f:8f:54:8a:18:19:cb:52:fd:da:ec:38:86:a0:86:0f: 66:90:ca:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6YZ9QxOirnOg+gOmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI2MDcyMzE1MDAyMloXDTI2MDcyNTE1MDAwMFowLzEtMCsGA1UEAxMk N2JkNjk4YTMtZDE2MC00NWE0LThiODUtZGRlNjhmNzI2MWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxd2WylL15xY/CsWsc6O+uRAfzNiB3s9j6MS 9f2ykTwC1x5Swtts1zx+UKyXWz+bze/J6Yx2rTRkf67rRDsGuN2NvMFo0FrBTpWP PjangqOzskqEqQm4OFeRrxUFLtod/diP1/2NsK42EQoNBFlpbTIxie4UcJLAyxIo 4Iu4HKR/E7z8t0BBqNF8xhFOow1SjAM2YvWCWjrSIHgQ1nKZ/rkcOjh2tWlXuRdE /qBV1siI9eIrYSTvxdE9BRNGa15fofujpFXLiCVoR6clMybODnzR8QIKzs2oonjH tvlCnXqbSfv3blUGhFRRBVp35Or9lZNXRrY8O8er+XYXUShdDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDqWuvSE5Iwa6vLN4gCvJYyE79sFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByjC+qBoZUU3gqbaAvpTh3 ogWmZQVSA3ED5EiId6BcTboegu+z5ByokvCCa7tAWHz9H7VYlLN/1ZpSWJPAfGw6 RrXfzhy2sGqRFiYzW1IzBhrWYjT73SKW2Xt5Ym6sfpm320mh+WYpm1KRGs73BMoF oLILFoYpH6hrOb99SyUJpxwBbWY50NDloO2C+fA4mYiyC4Lh71uC+3QA/Hbcz5TS lgqleg6ssHeQw5EjE2L1lnoLHu3Gx6UAMnTLfcMwco3L9dWpkwHfn5aiewdn/Kph ndAn702QI8JlHxtEEvH1rZSgTdXwRxqiOLesfY+PVIoYGctS/drsOIaghg9mkMrE -----END CERTIFICATE-----Generated at Fri Jul 24 08:18:51 2026 by rpki-client