$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft (raw, json) Hash identifier: ZSngUoHrhwnRULwTj4aW5rZej6K/8bEQouqO3YDo/Zg= Subject key identifier: 0E:03:37:A7:72:B2:B6:41:AD:3C:E8:BE:97:9E:AA:6F:62:2A:34:49 Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F4328584E982C44058BEA5B37868C3B20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft Manifest number: 010D0C9F432858467B3AE8B15C5CB25608060D9B Signing time: Thu 23 Jul 2026 13:00:22 +0000 Manifest this update: Thu 23 Jul 2026 13:00:22 +0000 Manifest next update: Sun 26 Jul 2026 13:00:00 +0000 Files and hashes: 1: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl (hash: 505KtPitjDrdBRger5Lf2T4ogUxLPr3f1XM0t5Qu/kU=) 2: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (hash: tyqgsksimb8RkLz86e0CJsVfR/oJk54SVjGVrtVpRH4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:98:2c:44:05:8b:ea:5b:37:86:8c:3b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: Jul 23 13:00:22 2026 GMT Not After : Jul 26 13:00:00 2026 GMT Subject: CN=1664b5dd-cf10-49cc-beff-ed35474d1371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8a:11:67:52:aa:8e:f9:d8:e1:9e:3b:e8:49: be:68:1f:eb:91:bd:36:cc:bd:9b:73:2c:f4:a2:06: c2:6c:6d:6f:51:aa:5b:22:ae:8b:b4:1a:75:23:0b: 23:16:5e:61:89:3f:56:7c:b4:7f:1a:03:ad:c1:09: ae:11:04:51:e6:4f:f7:35:1f:87:fd:97:1a:09:30: 2b:7f:b7:8c:54:4c:6c:8e:5f:d8:88:bf:66:0f:b5: 3d:70:47:0c:07:8b:67:92:a6:46:a5:7a:70:da:17: 60:3f:4f:c1:6a:13:cf:60:ee:6a:88:a1:16:26:3a: e1:1b:45:ac:3d:63:53:18:fa:5f:04:d6:73:ae:8e: 24:c7:d3:fb:bf:94:cf:30:1a:a9:bd:2a:60:4c:f1: bb:35:23:54:89:54:9d:52:38:cf:8a:8a:0c:ba:b9: 50:de:67:28:71:bc:33:91:bc:b8:94:23:8a:4c:d3: c1:10:fa:f3:ac:99:0c:08:97:47:b4:2c:ac:49:c0: f2:6a:dc:b2:5c:10:4d:0c:05:d9:8b:40:ce:b7:42: 02:95:34:7c:dd:23:fa:8d:bb:a4:c3:35:31:11:2f: cc:f4:aa:65:89:38:68:34:bc:da:03:01:24:74:84: 47:fa:7f:56:e2:ef:7c:90:84:9c:e7:c6:d6:8d:ae: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:03:37:A7:72:B2:B6:41:AD:3C:E8:BE:97:9E:AA:6F:62:2A:34:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:39:a1:64:ac:04:8f:72:6c:35:81:63:14:a3:8c:c6:9d:5a: ab:18:23:0b:47:fd:f3:e8:f1:37:6e:74:4f:5a:fb:44:bb:ed: f3:fc:66:bc:1f:19:0e:7b:87:cc:2b:9c:ea:ee:22:7c:0d:d1: 07:d2:71:b7:6a:e0:b1:83:9a:a1:a9:db:6a:53:63:b0:dc:19: 65:7d:30:80:27:cf:b6:ab:4f:58:1d:5c:ca:de:4c:e2:10:db: fc:24:b1:f1:cc:52:a6:2e:cb:1d:03:2d:bb:32:95:de:63:28: 7c:f0:d0:7b:72:03:e0:4b:ad:fa:d9:8e:31:0a:12:62:2b:7c: 22:4d:8e:78:6d:fb:2b:37:fb:75:bd:b4:b6:95:bd:cd:94:38: fb:17:c1:c3:64:06:92:51:86:48:0c:b4:a4:b7:21:b2:e5:bd: c1:b7:c7:5e:d2:8a:0e:31:1f:8e:49:64:85:a2:e6:4b:81:24: aa:d9:0c:b6:d2:5a:08:07:61:92:b3:17:f3:1b:82:46:10:f8: ec:90:f4:28:f8:ad:5d:72:95:39:9d:5c:87:86:63:7f:ff:d5: a3:b5:07:6e:f1:f4:71:01:c3:2a:ce:dc:1d:0c:0c:fa:b9:31: 01:eb:5d:ed:de:83:a6:b4:5f:46:d0:1e:ba:b8:2e:27:4f:f8: f7:51:74:d3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6YLEQFi+pbN4aMOyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI2MDcyMzEzMDAyMloXDTI2MDcyNjEzMDAwMFowLzEtMCsGA1UEAxMk MTY2NGI1ZGQtY2YxMC00OWNjLWJlZmYtZWQzNTQ3NGQxMzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4oRZ1KqjvnY4Z476Em+aB/rkb02zL2bcyz0 ogbCbG1vUapbIq6LtBp1IwsjFl5hiT9WfLR/GgOtwQmuEQRR5k/3NR+H/ZcaCTAr f7eMVExsjl/YiL9mD7U9cEcMB4tnkqZGpXpw2hdgP0/BahPPYO5qiKEWJjrhG0Ws PWNTGPpfBNZzro4kx9P7v5TPMBqpvSpgTPG7NSNUiVSdUjjPiooMurlQ3mcocbwz kby4lCOKTNPBEPrzrJkMCJdHtCysScDyatyyXBBNDAXZi0DOt0IClTR83SP6jbuk wzUxES/M9KpliThoNLzaAwEkdIRH+n9W4u98kISc58bWja5KUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA4DN6dysrZBrTzovpeeqm9iKjRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvNGM4NWU0MmQtMjE3MS00 ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjOaFkrASPcmw1gWMUo4zG nVqrGCMLR/3z6PE3bnRPWvtEu+3z/Ga8HxkOe4fMK5zq7iJ8DdEH0nG3auCxg5qh qdtqU2Ow3BllfTCAJ8+2q09YHVzK3kziENv8JLHxzFKmLssdAy27MpXeYyh88NB7 cgPgS6362Y4xChJiK3wiTY54bfsrN/t1vbS2lb3NlDj7F8HDZAaSUYZIDLSktyGy 5b3Bt8de0ooOMR+OSWSFouZLgSSq2Qy20loIB2GSsxfzG4JGEPjskPQo+K1dcpU5 nVyHhmN//9WjtQdu8fRxAcMqztwdDAz6uTEB613t3oOmtF9G0B66uC4nT/j3UXTT -----END CERTIFICATE-----Generated at Fri Jul 24 00:26:34 2026 by rpki-client