$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft File: df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft (raw, json) Hash identifier: HshYgFCNH9+aPByImj4NK5+rR2QTrvsH9u3kmmmeN90= Subject key identifier: 9D:36:7D:24:09:93:FA:10:05:61:C6:45:48:59:0F:51:00:27:2C:AF Authority key identifier: F4:BA:17:7B:1D:6A:C5:A4:AF:E4:CD:A9:90:6E:77:48:77:0E:46:0E Certificate issuer: /CN=df15a7a4-7ca1-4957-aad0-9d0af4a3484c Certificate serial: 010D0C9F4328584E98859801F20B95B768BC74C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft Manifest number: 010D0C9F432858428B92A01CBF2322417EBD05D4 Signing time: Thu 23 Jul 2026 16:00:23 +0000 Manifest this update: Thu 23 Jul 2026 16:00:23 +0000 Manifest next update: Sat 25 Jul 2026 16:00:00 +0000 Files and hashes: 1: df15a7a4-7ca1-4957-aad0-9d0af4a3484c.crl (hash: FqJnnhpw4v1FkM2gyxeQZhN1ulEjQOXuAEhJKVZ65Uo=) 2: eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer (hash: 2JEYrUL9nPCHUVF5iuOLlKlmdxx1rdMAVmpNjC+KWy4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:98:85:98:01:f2:0b:95:b7:68:bc:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df15a7a4-7ca1-4957-aad0-9d0af4a3484c Validity Not Before: Jul 23 16:00:23 2026 GMT Not After : Jul 25 16:00:00 2026 GMT Subject: CN=0a727b4b-3a2f-420a-aeb2-3787990b5415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:36:0e:fe:bb:60:5e:f4:9c:87:88:aa:bb:dd: 5f:7d:03:c6:37:00:24:ed:2a:e1:96:9c:a5:34:fc: c9:4e:2d:50:90:8c:2f:f5:69:e7:13:c5:7f:e2:40: ef:ad:e2:19:6a:a6:7c:ea:be:6e:8a:e8:b8:78:87: d5:d1:33:65:e8:8c:df:15:3b:14:2b:5e:c3:bf:0e: fa:47:70:a3:29:38:12:63:91:fa:3f:b9:d8:b4:4d: 44:e8:4e:73:ed:35:e7:cd:cb:a5:81:22:85:2c:68: 2c:b0:5d:da:6a:ad:3b:b7:cc:c5:fb:69:f4:13:33: 9d:51:c7:fc:31:16:ae:3b:23:a6:78:23:e3:a9:a2: 5b:f8:6a:bc:c2:54:2d:de:26:e5:ba:d1:2c:be:0a: 5b:97:82:67:74:1d:2b:4f:81:58:34:b8:ca:4f:09: 06:a5:03:06:8d:69:26:dc:94:35:48:3c:f3:9a:16: ae:96:b2:57:4a:ee:a3:89:ab:13:9d:ac:27:c6:85: 8f:10:80:51:1b:64:1b:e6:83:2c:e1:ba:b0:46:0e: 07:d3:98:4a:47:01:b5:48:0e:c5:a0:58:fb:47:46: 2a:3b:8a:a6:13:64:64:3c:8e:d5:b5:68:1c:8c:38: c0:c5:70:02:17:74:d1:db:e9:35:bd:a7:5d:49:dc: b4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:36:7D:24:09:93:FA:10:05:61:C6:45:48:59:0F:51:00:27:2C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.crl X509v3 Authority Key Identifier: keyid:F4:BA:17:7B:1D:6A:C5:A4:AF:E4:CD:A9:90:6E:77:48:77:0E:46:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:63:c5:9d:0b:91:30:59:e4:a1:b1:b1:04:40:f0:2a:cb:d9: be:82:6e:dc:5b:02:2b:5f:e9:d4:f8:61:5e:e7:4d:98:7b:31: 19:60:1b:5b:c9:eb:0d:a0:68:e4:90:9a:df:9c:77:96:67:d4: ec:b7:e0:17:e5:29:65:87:f9:c6:e1:c6:1e:4e:47:b4:42:08: 27:c5:bc:63:26:83:77:12:11:28:5f:64:08:07:db:55:bd:8d: 4d:72:22:6a:f9:18:3e:20:b6:fb:ac:4e:9a:22:68:06:2f:c3: 4f:05:7f:09:18:4a:8f:09:b7:50:52:77:54:17:f2:2d:10:bb: 02:03:41:e0:5d:12:84:10:e2:d3:21:17:82:4f:25:9e:10:5b: 67:43:8d:79:75:07:fa:dd:76:12:cb:32:8c:cf:9a:ae:6e:08: 92:6c:8f:cd:d0:30:60:68:ff:7b:e0:c1:4d:08:58:bb:7a:cc: 20:e7:55:c6:a8:a9:00:1a:46:a7:4b:a1:1c:a8:b4:5e:45:1a: aa:a8:c0:d8:2d:00:4b:b5:ce:32:bd:6f:14:7f:9e:87:a0:62: cd:c4:85:a1:6f:dd:78:f0:f5:ce:1e:7d:ce:4a:22:8e:dc:0d: d8:52:e9:e0:c8:7e:6b:01:40:14:52:c6:a0:49:a1:0f:f1:26: a7:07:e3:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6YhZgB8guVt2i8dMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxNWE3YTQtN2NhMS00OTU3LWFhZDAtOWQwYWY0YTM0 ODRjMB4XDTI2MDcyMzE2MDAyM1oXDTI2MDcyNTE2MDAwMFowLzEtMCsGA1UEAxMk MGE3MjdiNGItM2EyZi00MjBhLWFlYjItMzc4Nzk5MGI1NDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zYO/rtgXvSch4iqu91ffQPGNwAk7Srhlpyl NPzJTi1QkIwv9WnnE8V/4kDvreIZaqZ86r5uiui4eIfV0TNl6IzfFTsUK17Dvw76 R3CjKTgSY5H6P7nYtE1E6E5z7TXnzculgSKFLGgssF3aaq07t8zF+2n0EzOdUcf8 MRauOyOmeCPjqaJb+Gq8wlQt3iblutEsvgpbl4JndB0rT4FYNLjKTwkGpQMGjWkm 3JQ1SDzzmhaulrJXSu6jiasTnawnxoWPEIBRG2Qb5oMs4bqwRg4H05hKRwG1SA7F oFj7R0YqO4qmE2RkPI7VtWgcjDjAxXACF3TR2+k1vaddSdy0xQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ02fSQJk/oQBWHGRUhZD1EAJyyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZjE1 YTdhNC03Y2ExLTQ5NTctYWFkMC05ZDBhZjRhMzQ4NGMvZGYxNWE3YTQtN2NhMS00 OTU3LWFhZDAtOWQwYWY0YTM0ODRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGYxNWE3YTQtN2NhMS00OTU3LWFh ZDAtOWQwYWY0YTM0ODRjL2RmMTVhN2E0LTdjYTEtNDk1Ny1hYWQwLTlkMGFmNGEz NDg0Yy5jcmwwHwYDVR0jBBgwFoAU9LoXex1qxaSv5M2pkG53SHcORg4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZjE1YTdhNC03Y2ExLTQ5NTctYWFkMC05ZDBh ZjRhMzQ4NGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0Y8WdC5EwWeShsbEEQPAq y9m+gm7cWwIrX+nU+GFe502YezEZYBtbyesNoGjkkJrfnHeWZ9Tst+AX5Sllh/nG 4cYeTke0QggnxbxjJoN3EhEoX2QIB9tVvY1NciJq+Rg+ILb7rE6aImgGL8NPBX8J GEqPCbdQUndUF/ItELsCA0HgXRKEEOLTIReCTyWeEFtnQ415dQf63XYSyzKMz5qu bgiSbI/N0DBgaP974MFNCFi7eswg51XGqKkAGkanS6EcqLReRRqqqMDYLQBLtc4y vW8Uf56HoGLNxIWhb9148PXOHn3OSiKO3A3YUungyH5rAUAUUsagSaEP8SanB+OT -----END CERTIFICATE-----Generated at Fri Jul 24 00:42:37 2026 by rpki-client