$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: xafQ2oKqFUCrfRWJcPAWNqS+CIXeTLtR6bMxZFlXAoQ= Subject key identifier: 36:D0:8D:72:23:EC:C7:D3:98:82:08:E8:0C:B5:E9:40:24:11:D5:6F Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584E97798DED87E3519EE4765D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A34B0 Signing time: Thu 23 Jul 2026 07:00:22 +0000 Manifest this update: Thu 23 Jul 2026 07:00:22 +0000 Manifest next update: Sun 26 Jul 2026 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: x/hh0yrWak6DU1Or049YYIdniPYzDqyT+wj8f1+9B1E=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: aiW2k2wdihSwpJFXtCu0nVCwh3dGPSC791QfIa0M88I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:79:8d:ed:87:e3:51:9e:e4:76:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Jul 23 07:00:22 2026 GMT Not After : Jul 26 07:00:00 2026 GMT Subject: CN=2214ab10-eb32-4e03-abdc-8deb212b63c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1e:ad:ef:f5:f8:3f:19:96:4d:33:83:7e:53: 61:54:b1:d0:26:10:8c:59:02:d2:6f:a0:c3:22:60: d6:f2:2f:44:42:ee:84:5a:56:a5:a3:77:dd:07:e6: 70:5d:42:19:c2:c4:af:91:4a:a3:aa:1a:88:10:3b: f6:29:4d:e8:ae:ac:2f:35:fd:50:71:4d:c4:c4:4c: 81:85:43:fc:3a:70:4d:f9:19:bd:26:60:3f:12:14: 53:a7:ec:f8:0b:ca:6f:f7:68:b6:d3:e5:3e:a9:7a: c4:69:74:75:f4:8d:ca:24:80:47:bc:38:26:3d:02: c0:a8:69:25:90:9e:d5:dc:6f:be:c5:3f:ca:ad:6c: da:cf:1f:92:a9:43:34:08:00:67:ea:ce:7f:fa:ee: 27:13:c5:2d:c2:60:66:96:ff:fa:2c:c0:a0:5c:d8: a5:6b:5f:20:58:a3:e6:f4:bc:ab:b0:ae:ea:56:a8: f5:42:16:75:3e:46:c6:98:cc:8f:f5:24:bf:27:29: e9:7a:d7:a1:94:fc:75:d6:e3:e7:52:f1:18:ed:2d: 9e:fb:fc:2f:14:8f:dc:95:e9:b2:67:b8:4e:8f:0f: 87:81:50:5a:51:67:2b:08:0c:2c:47:f0:ee:57:e8: 8a:60:59:a4:01:a9:f9:5a:1c:30:58:67:f2:c0:ea: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D0:8D:72:23:EC:C7:D3:98:82:08:E8:0C:B5:E9:40:24:11:D5:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e6:ef:f8:33:ad:e5:1d:96:54:72:70:3a:06:6f:9f:15:c4: 95:21:83:2a:9d:27:6c:1b:82:fd:76:ba:8e:98:46:f0:fe:e5: b3:1a:f9:f1:2e:2c:1c:e1:12:fb:0f:c6:d8:5a:e4:3d:dc:a6: 2b:c2:7c:11:14:e3:07:d1:37:8d:ea:d5:39:bd:db:58:d7:a7: 60:c0:16:f2:96:a3:5a:4e:47:cf:77:82:b3:49:95:4e:a8:7a: 5b:20:b6:88:cd:8d:ee:c8:92:ef:5a:67:06:1d:9e:38:3f:80: 44:9d:1d:45:34:6c:d1:05:99:df:bd:3d:14:28:81:33:98:aa: 68:f1:a4:d7:5c:71:cf:8c:83:a0:e7:9e:22:cb:8b:d0:be:73: c7:54:d4:1e:83:e3:82:b6:fe:70:cc:8f:03:fa:41:55:5a:31: 16:01:3e:e3:df:e8:a5:31:14:00:35:ff:24:65:7c:d3:b0:de: f2:6f:1b:91:c6:09:55:4e:98:4b:fe:1c:94:aa:2b:77:a3:fd: 3f:29:a4:25:78:46:4d:3c:bd:e3:b1:64:d4:85:87:0f:f1:06: 0e:ef:d8:cb:da:4e:98:38:aa:67:e7:9f:17:0c:c6:fd:e6:fb: 58:d4:18:3e:57:40:64:9a:3e:5d:57:da:74:a8:9e:bd:e6:41: 55:b4:4b:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6XeY3th+NRnuR2XUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI2MDcyMzA3MDAyMloXDTI2MDcyNjA3MDAwMFowLzEtMCsGA1UEAxMk MjIxNGFiMTAtZWIzMi00ZTAzLWFiZGMtOGRlYjIxMmI2M2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR6t7/X4PxmWTTODflNhVLHQJhCMWQLSb6DD ImDW8i9EQu6EWlalo3fdB+ZwXUIZwsSvkUqjqhqIEDv2KU3orqwvNf1QcU3ExEyB hUP8OnBN+Rm9JmA/EhRTp+z4C8pv92i20+U+qXrEaXR19I3KJIBHvDgmPQLAqGkl kJ7V3G++xT/KrWzazx+SqUM0CABn6s5/+u4nE8UtwmBmlv/6LMCgXNila18gWKPm 9LyrsK7qVqj1QhZ1PkbGmMyP9SS/JynpetehlPx11uPnUvEY7S2e+/wvFI/clemy Z7hOjw+HgVBaUWcrCAwsR/DuV+iKYFmkAan5WhwwWGfywOrz3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDbQjXIj7MfTmIII6Ay16UAkEdVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA95u/4M63lHZZUcnA6Bm+f FcSVIYMqnSdsG4L9drqOmEbw/uWzGvnxLiwc4RL7D8bYWuQ93KYrwnwRFOMH0TeN 6tU5vdtY16dgwBbylqNaTkfPd4KzSZVOqHpbILaIzY3uyJLvWmcGHZ44P4BEnR1F NGzRBZnfvT0UKIEzmKpo8aTXXHHPjIOg554iy4vQvnPHVNQeg+OCtv5wzI8D+kFV WjEWAT7j3+ilMRQANf8kZXzTsN7ybxuRxglVTphL/hyUqit3o/0/KaQleEZNPL3j sWTUhYcP8QYO79jL2k6YOKpn558XDMb95vtY1Bg+V0Bkmj5dV9p0qJ695kFVtEvo -----END CERTIFICATE-----Generated at Fri Jul 24 06:27:54 2026 by rpki-client