$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft File: 85be797f-f426-4ba8-98b0-1c2b5f752753.mft (raw, json) Hash identifier: teVyoc5JzA14zBERJDKtvPvdhVg1NE8Gal9zt6EAZGg= Subject key identifier: 21:38:D6:73:B8:A2:3B:B9:57:79:DC:C0:E9:32:F9:86:03:79:A3:49 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584E99CD21E905F871AF8669D640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft Manifest number: 010D0C9F4328584073A839281E4F1168C0BB1876 Signing time: Fri 24 Jul 2026 03:00:24 +0000 Manifest this update: Fri 24 Jul 2026 03:00:24 +0000 Manifest next update: Sun 26 Jul 2026 03:00:00 +0000 Files and hashes: 1: 43d529a5-06fc-3596-b306-3805ee39efec.roa (hash: EhOTE+W0dlEDSy5KX6DVSYdH75Rp0ZcpzaZ0Lr/lztI=) 2: 6134d21e-8982-3a39-a51f-8ad22c3de95a.roa (hash: qVXsb8CaA4bob6HeMepnM7+Iz64iQ1YxiaoqaFuep2I=) 3: 714385cc-6caf-3534-9571-6bf92f8ea373.roa (hash: TCxV6Ovv6ijZKwJRNsbDgd3cRQpuK0uNVNzn94ZGE+g=) 4: 85be797f-f426-4ba8-98b0-1c2b5f752753.crl (hash: O8+CbC2jNJXUJxpnZy9HvMd9OyJ1loNUul/VVKvMHi0=) 5: 9699501c-da98-381a-90a4-a8aa59586482.roa (hash: qEsgjxKCpxxYEiMiMt8gPkrI0GgJLCzN3WVewx7rJpQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:99:cd:21:e9:05:f8:71:af:86:69:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Jul 24 03:00:24 2026 GMT Not After : Jul 26 03:00:00 2026 GMT Subject: CN=40032858-cc68-448b-b220-651002ddf3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:5c:b0:7f:36:66:ab:99:73:9a:c4:27:06: fc:2c:d3:1c:22:3d:1c:cd:a0:06:5b:b7:d0:d8:2b: 92:56:36:36:97:4b:c7:46:ba:69:3d:cf:ad:02:02: 7e:51:9b:2e:f5:6f:98:64:ba:5e:18:49:cf:73:eb: 46:24:0b:58:dc:c7:e9:ed:5a:18:80:b8:5f:93:07: 25:f0:ac:4d:86:66:65:dc:0d:10:3a:64:81:dd:47: a0:62:4d:89:69:46:2d:0b:4f:3b:ab:b0:d2:2f:99: 16:d9:85:ea:99:80:c6:e2:b5:3e:70:da:b2:d9:9f: c5:b0:3f:ac:07:04:eb:2f:47:94:a1:f4:6d:d0:82: f6:b8:98:cf:7c:88:8c:0b:da:50:2a:14:f7:f0:b9: a0:f0:83:10:1b:e2:64:7d:44:e5:04:b4:7b:e2:d9: 54:bb:f5:2d:81:9e:2f:68:4d:bd:bb:bc:1a:7c:52: 40:5e:c0:d6:01:50:c1:ac:35:62:cb:fe:a9:23:ce: a2:fb:1c:b5:10:5d:63:2c:18:39:67:d6:10:f1:57: 0e:14:1a:92:92:23:cb:5c:bf:77:84:6e:c9:ed:31: 5d:01:31:38:5f:8a:e5:42:f5:46:37:ef:0e:35:0e: 60:35:69:07:00:eb:ff:3f:75:0a:26:ee:63:30:d6: a9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:38:D6:73:B8:A2:3B:B9:57:79:DC:C0:E9:32:F9:86:03:79:A3:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c4:4d:12:ba:11:15:ad:5c:f1:45:4e:f9:f0:31:5e:41:56: a5:8d:37:7e:6e:c4:17:c8:a9:a2:f4:8d:a8:c6:bd:7b:1d:a7: 6b:2f:82:3a:d5:97:2f:65:f8:57:d8:dc:60:b7:28:1a:f9:8b: ab:32:1f:0b:62:e4:9a:18:67:b7:2c:12:1d:16:db:6e:42:69: 17:13:aa:d4:67:c0:53:42:a3:d6:f8:5a:95:1e:df:cf:53:e6: d8:e6:f3:8f:c7:bc:bb:fd:66:e2:2a:4f:63:0c:7d:06:ac:65: d6:c7:29:bf:82:23:23:a9:15:30:2e:9a:02:f7:f9:86:c8:f0: ee:f9:22:f9:1a:62:a6:c9:0a:1a:ea:eb:86:5b:38:a6:b1:01: ff:a6:16:fa:25:e0:81:4a:52:16:4b:28:bc:91:da:db:c6:d0: e9:78:96:a5:5b:8e:d9:3d:d5:f0:6f:c4:d8:48:05:86:72:c9: 7e:8f:87:26:bb:e4:fb:cb:88:df:7d:e2:37:3e:c4:f0:c5:c3: 6d:2b:8c:5c:a6:0c:29:c5:f0:5b:c9:c5:a4:93:64:88:90:81: d4:a8:95:1e:e9:d6:f6:ef:df:f1:68:91:3e:ba:b3:72:48:20: e3:e9:a8:99:3a:3f:15:89:99:c0:5d:e6:ed:e7:85:a9:a4:3f: a7:58:5c:b7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6ZzSHpBfhxr4Zp1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI2MDcyNDAzMDAyNFoXDTI2MDcyNjAzMDAwMFowLzEtMCsGA1UEAxMk NDAwMzI4NTgtY2M2OC00NDhiLWIyMjAtNjUxMDAyZGRmM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjxcsH82ZquZc5rEJwb8LNMcIj0czaAGW7fQ 2CuSVjY2l0vHRrppPc+tAgJ+UZsu9W+YZLpeGEnPc+tGJAtY3Mfp7VoYgLhfkwcl 8KxNhmZl3A0QOmSB3UegYk2JaUYtC087q7DSL5kW2YXqmYDG4rU+cNqy2Z/FsD+s BwTrL0eUofRt0IL2uJjPfIiMC9pQKhT38Lmg8IMQG+JkfUTlBLR74tlUu/UtgZ4v aE29u7wafFJAXsDWAVDBrDViy/6pI86i+xy1EF1jLBg5Z9YQ8VcOFBqSkiPLXL93 hG7J7TFdATE4X4rlQvVGN+8ONQ5gNWkHAOv/P3UKJu5jMNaphwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCE41nO4oju5V3ncwOky+YYDeaNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvODViZTc5N2YtZjQyNi00 YmE4LTk4YjAtMWMyYjVmNzUyNzUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADxE0SuhEVrVzxRU758DFe QValjTd+bsQXyKmi9I2oxr17HadrL4I61ZcvZfhX2Nxgtyga+YurMh8LYuSaGGe3 LBIdFttuQmkXE6rUZ8BTQqPW+FqVHt/PU+bY5vOPx7y7/WbiKk9jDH0GrGXWxym/ giMjqRUwLpoC9/mGyPDu+SL5GmKmyQoa6uuGWzimsQH/phb6JeCBSlIWSyi8kdrb xtDpeJalW47ZPdXwb8TYSAWGcsl+j4cmu+T7y4jffeI3PsTwxcNtK4xcpgwpxfBb ycWkk2SIkIHUqJUe6db279/xaJE+urNySCDj6aiZOj8ViZnAXebt54WppD+nWFy3 -----END CERTIFICATE-----Generated at Fri Jul 24 17:42:19 2026 by rpki-client