$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.mft File: 43ff624d-a377-4e6b-aaf2-c18a45007d56.mft (raw, json) Hash identifier: IgR6QiB8RWaEQi0jLgJXqRJhfAgUnD4Vt6rXGTNy46k= Subject key identifier: 9C:2D:2F:EB:89:A9:72:6D:9B:F3:BC:4D:6C:FA:EC:6D:50:BF:0F:8C Authority key identifier: CB:DF:E7:4E:CA:E6:E3:DF:CE:E3:33:AC:51:E0:05:A2:A7:41:85:EA Certificate issuer: /CN=43ff624d-a377-4e6b-aaf2-c18a45007d56 Certificate serial: 010D0C9F4328584E98DEF82D96B7CD50F1DDE780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.mft Manifest number: 010D0C9F4328584073A8246CF81CC82C18638511 Signing time: Thu 23 Jul 2026 19:00:23 +0000 Manifest this update: Thu 23 Jul 2026 19:00:23 +0000 Manifest next update: Sat 25 Jul 2026 19:00:00 +0000 Files and hashes: 1: 43ff624d-a377-4e6b-aaf2-c18a45007d56.crl (hash: 5LsIHsWLC6UXFMYkEJRGQSP+SQBx9zFtijB44c1i0rI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:98:de:f8:2d:96:b7:cd:50:f1:dd:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ff624d-a377-4e6b-aaf2-c18a45007d56 Validity Not Before: Jul 23 19:00:23 2026 GMT Not After : Jul 25 19:00:00 2026 GMT Subject: CN=8a64d957-a645-4ccd-bc8b-4c7742faad24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b2:b1:89:4e:93:a4:fe:db:7e:a7:0e:be:3b: c3:b4:d1:5f:41:7b:cb:bf:27:9b:62:97:1f:5b:e4: 60:44:05:e3:5c:af:9c:4d:24:f0:89:05:42:7f:13: 2e:f2:cd:55:d5:ef:46:d6:7b:6b:6a:1b:aa:5b:39: c7:3a:5a:a0:ff:ab:3c:c2:dd:62:50:0e:9e:d4:b7: c3:ff:f9:e9:43:86:21:85:65:07:d3:38:55:89:06: 42:5b:f6:ff:8c:8b:2f:85:90:8e:6f:dd:b5:e8:1b: fe:53:3d:ef:c5:65:bf:3e:28:6c:5e:93:59:db:47: 58:16:5c:41:cb:79:40:63:0b:38:c1:a2:52:f9:1e: 23:79:a3:6d:e0:f5:54:60:fa:39:fb:49:06:51:c2: a6:d1:95:e8:83:55:ff:15:26:62:4c:ee:c1:71:cc: f4:87:4c:e3:9c:79:04:42:ca:10:6a:47:7f:1c:67: 74:21:2f:a1:e8:13:0e:6c:7b:27:e4:5d:71:49:28: e3:76:e2:d6:8d:0b:29:85:74:46:7f:dd:d1:a9:50: 8e:c4:b7:26:36:94:db:fb:6f:fd:a8:79:42:80:94: 96:24:73:70:91:5c:3c:b8:92:5b:4f:76:8b:2c:c2: 62:4a:d3:cd:bc:f3:9e:34:c8:f0:3c:fc:8c:4e:15: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2D:2F:EB:89:A9:72:6D:9B:F3:BC:4D:6C:FA:EC:6D:50:BF:0F:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.crl X509v3 Authority Key Identifier: keyid:CB:DF:E7:4E:CA:E6:E3:DF:CE:E3:33:AC:51:E0:05:A2:A7:41:85:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a9:13:1f:e9:f8:c3:b3:5d:ed:ec:be:bc:da:a5:42:59:28: 92:85:1e:8d:16:4b:68:dd:ad:ab:2c:29:90:d7:1f:14:a2:b6: 26:17:19:99:40:c5:3e:fe:ed:28:24:00:9a:37:ce:88:f2:c7: f8:a9:ee:60:f0:75:48:a9:01:2d:55:23:22:1b:2e:39:db:b0: ab:b3:e4:39:88:37:81:94:24:09:fc:a2:7e:e1:e1:54:04:fd: 74:07:63:23:bc:90:e5:31:74:a0:d3:fa:a0:fd:6e:70:3d:c8: 0b:71:b4:4b:64:09:f2:4d:79:6f:8e:60:f2:5c:82:87:3d:ff: 21:e6:05:6a:b0:ca:17:e9:0e:bf:38:ac:34:28:e2:54:aa:90: 46:8c:d2:7d:05:db:1b:6f:79:d0:3d:29:ac:ac:8a:82:4e:7d: 7c:7f:01:a2:1a:86:e5:f6:fd:24:70:a4:9d:f2:30:b2:48:0c: 4c:0c:0a:39:25:b7:cd:d2:bd:db:09:d8:63:0e:b6:68:16:42: b3:d1:58:ef:1e:3a:e0:25:16:3e:fa:d3:54:75:97:c6:1b:69: 38:50:85:36:7e:eb:2c:da:3b:be:cf:7c:96:cd:a4:2a:0c:27: fd:6d:5f:e1:26:33:7c:40:12:f9:1a:3b:13:71:57:6e:08:e0: 08:f0:d3:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6Y3vgtlrfNUPHd54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNmZjYyNGQtYTM3Ny00ZTZiLWFhZjItYzE4YTQ1MDA3 ZDU2MB4XDTI2MDcyMzE5MDAyM1oXDTI2MDcyNTE5MDAwMFowLzEtMCsGA1UEAxMk OGE2NGQ5NTctYTY0NS00Y2NkLWJjOGItNGM3NzQyZmFhZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbKxiU6TpP7bfqcOvjvDtNFfQXvLvyebYpcf W+RgRAXjXK+cTSTwiQVCfxMu8s1V1e9G1ntrahuqWznHOlqg/6s8wt1iUA6e1LfD //npQ4YhhWUH0zhViQZCW/b/jIsvhZCOb9216Bv+Uz3vxWW/PihsXpNZ20dYFlxB y3lAYws4waJS+R4jeaNt4PVUYPo5+0kGUcKm0ZXog1X/FSZiTO7Bccz0h0zjnHkE QsoQakd/HGd0IS+h6BMObHsn5F1xSSjjduLWjQsphXRGf93RqVCOxLcmNpTb+2/9 qHlCgJSWJHNwkVw8uJJbT3aLLMJiStPNvPOeNMjwPPyMThX7RwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJwtL+uJqXJtm/O8TWz67G1Qvw+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80M2Zm NjI0ZC1hMzc3LTRlNmItYWFmMi1jMThhNDUwMDdkNTYvNDNmZjYyNGQtYTM3Ny00 ZTZiLWFhZjItYzE4YTQ1MDA3ZDU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDNmZjYyNGQtYTM3Ny00ZTZiLWFh ZjItYzE4YTQ1MDA3ZDU2LzQzZmY2MjRkLWEzNzctNGU2Yi1hYWYyLWMxOGE0NTAw N2Q1Ni5jcmwwHwYDVR0jBBgwFoAUy9/nTsrm49/O4zOsUeAFoqdBheowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80M2ZmNjI0ZC1hMzc3LTRlNmItYWFmMi1jMThh NDUwMDdkNTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7qRMf6fjDs13t7L682qVC WSiShR6NFkto3a2rLCmQ1x8UorYmFxmZQMU+/u0oJACaN86I8sf4qe5g8HVIqQEt VSMiGy4527Crs+Q5iDeBlCQJ/KJ+4eFUBP10B2MjvJDlMXSg0/qg/W5wPcgLcbRL ZAnyTXlvjmDyXIKHPf8h5gVqsMoX6Q6/OKw0KOJUqpBGjNJ9Bdsbb3nQPSmsrIqC Tn18fwGiGobl9v0kcKSd8jCySAxMDAo5JbfN0r3bCdhjDrZoFkKz0VjvHjrgJRY+ +tNUdZfGG2k4UIU2fuss2ju+z3yWzaQqDCf9bV/hJjN8QBL5GjsTcVduCOAI8NMd -----END CERTIFICATE-----Generated at Thu Jul 23 21:42:44 2026 by rpki-client