$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft File: bc3aa731-9547-4b21-8f65-60f3717ca369.mft (raw, json) Hash identifier: g3+sUCiStyB84630qrC6wIdHBfHQKgKatebq1MEuZ5U= Subject key identifier: FB:9E:84:98:2F:44:62:02:84:BF:7D:C9:34:E8:5D:8C:18:54:0A:89 Authority key identifier: 51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9 Certificate issuer: /CN=bc3aa731-9547-4b21-8f65-60f3717ca369 Certificate serial: 010D0C9F4328584E99EAE70123A0ED278B7BD790 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft Manifest number: 010D0C9F432858496EAE60AF4A8023AB427757A5 Signing time: Fri 24 Jul 2026 04:00:21 +0000 Manifest this update: Fri 24 Jul 2026 04:00:21 +0000 Manifest next update: Mon 27 Jul 2026 04:00:00 +0000 Files and hashes: 1: a2fefabd-2f02-3245-a2c8-36de47abeaf7.roa (hash: sIqIRDY2TTq5bas7phjcpmhb2vjaYOSUJQUX6+nIbpQ=) 2: bc3aa731-9547-4b21-8f65-60f3717ca369.crl (hash: fUsvtsjLMP009uyPe5+OW/NKc2ly4Lxod+fCuzTfcwc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:99:ea:e7:01:23:a0:ed:27:8b:7b:d7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3aa731-9547-4b21-8f65-60f3717ca369 Validity Not Before: Jul 24 04:00:21 2026 GMT Not After : Jul 27 04:00:00 2026 GMT Subject: CN=da90be4e-c821-443e-8975-3f40009384cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:43:31:03:1f:40:42:4d:1c:d7:3e:8b:d9:7d: 7d:47:d2:65:ed:7e:1f:f8:34:55:f5:92:74:07:6f: 41:d7:ad:d7:be:a1:e6:e2:06:32:75:88:7f:b4:14: bd:4f:2b:29:60:41:c9:83:a8:ce:31:ca:5d:86:d6: fd:71:2c:7d:96:50:cf:a7:e6:0b:d6:8b:a4:5c:55: 19:86:c5:89:a5:dd:fb:ab:46:dc:93:b1:e5:1a:05: c9:ae:fe:76:86:2c:cf:2d:52:86:15:bb:3b:a9:a1: 19:3e:92:2c:d7:00:a3:dc:e8:dd:d7:91:32:7a:66: f1:f3:46:ff:64:3f:e8:3d:03:e6:f7:f6:76:22:ed: 67:6b:ca:36:0d:8c:10:15:ee:33:d5:3b:ea:9e:fd: ef:a8:52:34:24:e3:b6:ff:d0:5f:28:85:ec:8c:e5: ae:b5:c4:f6:b5:f2:d7:5b:8e:d4:71:e6:a3:6a:ff: 08:bb:51:b5:af:f1:c7:35:2b:af:35:a7:26:e3:92: 4d:a9:c3:61:20:6e:a7:2a:1f:3c:55:12:ab:c4:41: b1:d9:be:1f:09:cd:f2:2f:62:05:e0:5a:51:19:d1: 56:f3:b7:d9:70:93:2e:cb:d8:d8:6e:38:d4:29:06: 73:20:48:76:d2:f1:eb:8d:a1:78:d7:cb:27:de:f0: 33:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9E:84:98:2F:44:62:02:84:BF:7D:C9:34:E8:5D:8C:18:54:0A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.crl X509v3 Authority Key Identifier: keyid:51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:69:62:29:68:e2:be:2a:34:15:65:55:3a:93:b7:6c:ff:fb: 4c:16:34:02:85:68:f3:2b:a0:99:3d:09:2a:dd:47:36:c0:2e: da:ba:d1:73:69:5e:d1:6d:74:18:7a:c3:40:58:05:7f:26:f8: 1a:ae:ed:55:8e:46:1e:2c:5d:b6:d7:54:a8:1d:77:53:dd:a1: 2e:59:07:a7:71:35:d2:c5:07:c7:aa:33:20:e4:37:2a:74:af: 03:b4:d8:c7:1d:43:7f:f6:c4:fc:21:f3:c9:7e:6a:7e:84:45: 4e:b3:1e:ba:e7:cd:e6:81:de:55:aa:7e:ea:9a:12:2b:31:c7: 26:0b:b7:37:72:b9:dd:9c:ab:83:d9:32:d0:bf:62:ba:7f:69: 16:31:58:58:d5:86:36:5c:1d:c3:fc:3f:56:64:9e:89:35:9e: 48:e8:d7:2f:8d:c0:27:7e:e0:c2:be:42:8f:76:e2:f9:13:55: e4:c6:17:77:6c:91:e5:65:5e:3e:f6:8c:9e:97:59:e9:2f:1e: 20:05:2c:f8:0f:b5:fa:8f:b3:b6:ef:4d:d4:3c:6f:ce:72:5b: a2:53:32:40:a8:5d:cc:47:da:62:ae:22:18:95:5a:4c:93:b3: 5b:a2:fa:f7:dc:52:a7:ea:1d:b3:89:86:b4:9e:f8:f7:3c:fe: 97:de:76:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6Z6ucBI6DtJ4t715AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzYWE3MzEtOTU0Ny00YjIxLThmNjUtNjBmMzcxN2Nh MzY5MB4XDTI2MDcyNDA0MDAyMVoXDTI2MDcyNzA0MDAwMFowLzEtMCsGA1UEAxMk ZGE5MGJlNGUtYzgyMS00NDNlLTg5NzUtM2Y0MDAwOTM4NGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEMxAx9AQk0c1z6L2X19R9Jl7X4f+DRV9ZJ0 B29B163XvqHm4gYydYh/tBS9TyspYEHJg6jOMcpdhtb9cSx9llDPp+YL1oukXFUZ hsWJpd37q0bck7HlGgXJrv52hizPLVKGFbs7qaEZPpIs1wCj3Ojd15Eyembx80b/ ZD/oPQPm9/Z2Iu1na8o2DYwQFe4z1Tvqnv3vqFI0JOO2/9BfKIXsjOWutcT2tfLX W47Uceajav8Iu1G1r/HHNSuvNacm45JNqcNhIG6nKh88VRKrxEGx2b4fCc3yL2IF 4FpRGdFW87fZcJMuy9jYbjjUKQZzIEh20vHrjaF418sn3vAzSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPuehJgvRGIChL99yTToXYwYVAqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYzNh YTczMS05NTQ3LTRiMjEtOGY2NS02MGYzNzE3Y2EzNjkvYmMzYWE3MzEtOTU0Ny00 YjIxLThmNjUtNjBmMzcxN2NhMzY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmMzYWE3MzEtOTU0Ny00YjIxLThm NjUtNjBmMzcxN2NhMzY5L2JjM2FhNzMxLTk1NDctNGIyMS04ZjY1LTYwZjM3MTdj YTM2OS5jcmwwHwYDVR0jBBgwFoAUUUF2tYyUtnaL2FowVWJGF+X/J/kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYzNhYTczMS05NTQ3LTRiMjEtOGY2NS02MGYz NzE3Y2EzNjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvaWIpaOK+KjQVZVU6k7ds //tMFjQChWjzK6CZPQkq3Uc2wC7autFzaV7RbXQYesNAWAV/Jvgaru1VjkYeLF22 11SoHXdT3aEuWQencTXSxQfHqjMg5DcqdK8DtNjHHUN/9sT8IfPJfmp+hEVOsx66 583mgd5Vqn7qmhIrMccmC7c3crndnKuD2TLQv2K6f2kWMVhY1YY2XB3D/D9WZJ6J NZ5I6NcvjcAnfuDCvkKPduL5E1Xkxhd3bJHlZV4+9oyel1npLx4gBSz4D7X6j7O2 703UPG/OcluiUzJAqF3MR9piriIYlVpMk7Nbovr33FKn6h2ziYa0nvj3PP6X3nZR -----END CERTIFICATE-----Generated at Fri Jul 24 19:14:12 2026 by rpki-client