$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft File: 2d88838e-541a-4661-8501-3c7d2eb5849d.mft (raw, json) Hash identifier: PFQrrPH+GuohcctvqX7nSrt+H/Azawr6LyTsiJijHEk= Subject key identifier: 54:89:81:7F:40:AF:D1:60:94:C3:83:BB:7F:AC:0D:B1:3E:00:38:6B Authority key identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Certificate issuer: /CN=2d88838e-541a-4661-8501-3c7d2eb5849d Certificate serial: 010D0C9F4328584E9867D357E3C254B5406FD200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft Manifest number: 010D0C9F43285848B22C5EC19A391EA7020C1FAA Signing time: Thu 23 Jul 2026 15:00:22 +0000 Manifest this update: Thu 23 Jul 2026 15:00:22 +0000 Manifest next update: Sat 25 Jul 2026 15:00:00 +0000 Files and hashes: 1: 2d88838e-541a-4661-8501-3c7d2eb5849d.crl (hash: hcXWBUWOMEHd+eaeF4ONt+I2RZsEoHbcu5VLUcjIngk=) 2: 35dd38da-ef2c-3aa2-965d-09739043ca44.roa (hash: hwuPzChululhw6IcQ/h0bdkJnS/BXvv5VRi9HXDaLao=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:98:67:d3:57:e3:c2:54:b5:40:6f:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d88838e-541a-4661-8501-3c7d2eb5849d Validity Not Before: Jul 23 15:00:22 2026 GMT Not After : Jul 25 15:00:00 2026 GMT Subject: CN=d9f14e9c-2369-43a8-9a7b-305de2036e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:76:f5:32:41:29:3c:13:fc:83:ab:f0:56: 7a:2b:1c:15:5b:7c:f2:bd:33:6c:a6:00:20:d4:f9: 78:1d:d5:25:84:78:b9:9c:c3:2c:de:b1:f1:9b:b4: 82:46:e8:21:07:f5:8e:4e:fe:40:4c:47:be:13:dc: 4a:44:97:f8:49:ee:88:4f:9a:d4:68:f4:ec:d7:e2: 3d:69:e7:d6:3c:a7:a2:f0:e5:62:7e:d6:7c:cb:a6: a5:50:09:8f:18:4f:f0:4b:3e:51:fc:72:ab:4b:d7: fe:58:42:e4:c2:2e:d5:30:35:a3:e2:1f:d4:4a:d4: d8:30:61:45:bd:65:d0:76:22:cb:a6:90:ac:b5:8e: b1:83:0f:d7:7d:a0:99:14:ac:9a:dd:9c:ff:9d:d9: a3:0c:3d:b5:87:ab:f6:63:be:ef:8b:b6:16:e9:3e: df:05:16:bc:17:6a:15:c6:e3:03:8c:1f:e7:12:d9: 60:db:96:62:d4:f8:a7:2a:9c:03:85:08:fb:60:ee: e0:f6:d0:20:21:b4:0f:8a:9e:3e:d4:56:34:dc:55: 75:05:1a:4e:9f:07:f3:de:c7:32:aa:72:88:97:68: 5a:f9:e4:c9:a5:44:6d:66:5a:2d:c8:9a:d7:0e:38: bb:1f:6f:f0:81:dc:12:3b:f8:99:00:02:8c:b0:94: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:89:81:7F:40:AF:D1:60:94:C3:83:BB:7F:AC:0D:B1:3E:00:38:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl X509v3 Authority Key Identifier: keyid:4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:5c:48:a8:fe:c5:7c:24:e0:a3:8d:f3:95:11:94:98:e3:d4: 4c:0c:41:bc:fa:61:1e:53:c3:57:f9:69:b0:cc:16:a1:da:9a: 0b:59:0e:b4:55:9c:86:b4:39:dd:0e:22:2f:5a:a2:70:58:85: 69:60:59:f0:14:d8:28:79:e1:9c:21:30:2d:8e:17:d2:f7:73: f5:39:9f:29:a5:d3:36:b3:c2:c7:d9:22:8a:fb:39:de:38:02: 33:a0:bb:05:e9:2c:c2:3f:a1:84:af:bf:b7:fe:9e:bc:56:44: cd:6a:45:d8:d7:71:f5:db:26:62:88:e6:3e:e7:d3:42:1f:12: 5e:3a:f1:47:43:30:6e:ef:63:89:da:e0:b0:9d:2e:59:82:cd: e5:2d:9d:e9:21:af:ed:92:96:be:56:fb:45:3e:db:0f:fa:ac: ed:de:29:c8:7b:4b:d4:26:c0:4a:a7:44:42:36:80:94:c5:81: aa:d9:1d:0e:f9:b0:e8:95:28:d2:eb:6a:90:3d:c3:de:0e:d0: e4:dc:a1:7f:f5:a2:a9:51:52:91:63:e8:42:31:9e:93:2f:5e: 9b:ef:36:61:f9:9a:2d:84:9a:b2:28:df:11:63:47:89:19:93: 00:6d:6d:6e:e6:d0:74:fd:3c:ce:50:1b:76:84:70:11:cc:99: 99:b5:9b:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6YZ9NX48JUtUBv0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ4ODgzOGUtNTQxYS00NjYxLTg1MDEtM2M3ZDJlYjU4 NDlkMB4XDTI2MDcyMzE1MDAyMloXDTI2MDcyNTE1MDAwMFowLzEtMCsGA1UEAxMk ZDlmMTRlOWMtMjM2OS00M2E4LTlhN2ItMzA1ZGUyMDM2ZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlt29TJBKTwT/IOr8FZ6KxwVW3zyvTNspgAg 1Pl4HdUlhHi5nMMs3rHxm7SCRughB/WOTv5ATEe+E9xKRJf4Se6IT5rUaPTs1+I9 aefWPKei8OViftZ8y6alUAmPGE/wSz5R/HKrS9f+WELkwi7VMDWj4h/UStTYMGFF vWXQdiLLppCstY6xgw/XfaCZFKya3Zz/ndmjDD21h6v2Y77vi7YW6T7fBRa8F2oV xuMDjB/nEtlg25Zi1PinKpwDhQj7YO7g9tAgIbQPip4+1FY03FV1BRpOnwfz3scy qnKIl2ha+eTJpURtZlotyJrXDji7H2/wgdwSO/iZAAKMsJS/twIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFSJgX9Ar9FglMODu3+sDbE+ADhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4 ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmViNTg0OWQvMmQ4ODgzOGUtNTQxYS00 NjYxLTg1MDEtM2M3ZDJlYjU4NDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmQ4ODgzOGUtNTQxYS00NjYxLTg1 MDEtM2M3ZDJlYjU4NDlkLzJkODg4MzhlLTU0MWEtNDY2MS04NTAxLTNjN2QyZWI1 ODQ5ZC5jcmwwHwYDVR0jBBgwFoAUTp1zO/YPWvaeN0YoUwnEekJJWC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdk MmViNTg0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYXEio/sV8JOCjjfOVEZSY 49RMDEG8+mEeU8NX+WmwzBah2poLWQ60VZyGtDndDiIvWqJwWIVpYFnwFNgoeeGc ITAtjhfS93P1OZ8ppdM2s8LH2SKK+zneOAIzoLsF6SzCP6GEr7+3/p68VkTNakXY 13H12yZiiOY+59NCHxJeOvFHQzBu72OJ2uCwnS5Zgs3lLZ3pIa/tkpa+VvtFPtsP +qzt3inIe0vUJsBKp0RCNoCUxYGq2R0O+bDolSjS62qQPcPeDtDk3KF/9aKpUVKR Y+hCMZ6TL16b7zZh+ZothJqyKN8RY0eJGZMAbW1u5tB0/TzOUBt2hHARzJmZtZvL -----END CERTIFICATE-----Generated at Fri Jul 24 00:15:40 2026 by rpki-client