$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft File: 23d4344d-e6b1-4a9e-8560-f54da402f39b.mft (raw, json) Hash identifier: iRdu65b3421rA0xRaI2VlrvE8sA53/ssi7XVubEmlHM= Subject key identifier: 0C:8C:E0:1F:33:F8:35:E0:26:B0:8F:E6:02:AF:8C:6D:B4:29:0D:4B Authority key identifier: F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 Certificate issuer: /CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Certificate serial: 010D0C9F4328584EA63F77CA65A470258600AA20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft Manifest number: 010D0C9F4328584B9B6A4EEE0F54CD7B5602ADDE Signing time: Tue 28 Jul 2026 14:00:23 +0000 Manifest this update: Tue 28 Jul 2026 14:00:23 +0000 Manifest next update: Thu 30 Jul 2026 14:00:00 +0000 Files and hashes: 1: 23d4344d-e6b1-4a9e-8560-f54da402f39b.crl (hash: DYGlqtJiQfcLo3USNI3GZxQnbIEni7m7ah/8fZLkPgA=) 2: 2c9499a6-75ea-3ff6-9241-321833caa089.roa (hash: QpmHPLBVIch762Wno2w5vXeD3Fw7AYroMwswW/B8Llc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:3f:77:ca:65:a4:70:25:86:00:aa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Validity Not Before: Jul 28 14:00:23 2026 GMT Not After : Jul 30 14:00:00 2026 GMT Subject: CN=099ce40f-bb7e-4fe7-a7e4-3b47a42818b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c0:26:02:bb:26:39:2a:b9:7d:18:72:61:7f: 05:39:5c:e9:b0:bc:41:72:fe:a7:74:89:25:9e:08: cb:5e:d1:85:3a:4e:2f:d1:45:aa:70:8b:20:3c:67: 2a:b9:43:44:f7:82:60:f9:7a:a7:d4:3a:9d:f4:c7: 26:58:19:a6:89:24:33:c5:ab:ad:c6:41:bf:94:d2: 72:91:2d:00:26:be:d3:46:67:e1:a3:ce:92:8b:57: 5c:75:9c:4c:ae:f3:04:18:41:f3:61:48:fe:85:4d: 16:2d:c9:b3:f3:82:5b:1e:fd:51:94:82:b0:cf:35: 9d:23:ff:46:fc:9c:4c:f3:81:9f:7d:ab:db:37:20: 83:8a:dc:99:30:fd:e5:2c:30:6c:c8:f1:30:7c:37: c7:09:0e:d8:20:67:85:9a:f2:0f:3c:b7:2b:fa:69: 75:02:78:28:95:ea:09:81:a8:18:d2:5e:2f:45:a1: fa:a4:85:41:6e:4d:af:2a:bf:75:ad:85:15:e4:0e: ae:39:21:8e:ef:59:a7:b9:65:91:82:e6:55:3e:bf: 25:7c:39:c4:22:5d:f1:67:d6:b3:fb:5c:1c:89:ca: f2:93:8c:2a:10:13:9c:55:de:39:8b:a2:de:5b:fa: c0:04:18:12:65:0e:e1:58:e5:ce:9b:fd:35:6e:9c: 9b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8C:E0:1F:33:F8:35:E0:26:B0:8F:E6:02:AF:8C:6D:B4:29:0D:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl X509v3 Authority Key Identifier: keyid:F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:89:06:44:95:2b:de:9e:c0:74:b1:6b:82:83:5f:f8:c4:f0: b0:75:53:94:10:ff:9d:fd:ef:ae:d5:d8:60:80:a6:46:09:80: cf:88:dc:dd:7a:30:78:2a:83:d4:ef:8a:60:68:70:12:29:83: 70:32:e5:df:e1:8f:95:11:ac:df:ee:d1:19:2e:d0:fd:03:1d: 10:32:f8:41:5d:be:f1:b9:6b:b5:75:67:61:ab:1d:0c:bd:f4: 0d:f2:46:c1:fd:ad:07:09:49:3f:ca:03:79:0f:6e:1b:12:b0: a7:e1:ce:17:79:bb:e9:63:ca:54:71:db:11:9a:10:55:a6:f0: c0:28:14:62:88:33:d7:a6:6f:da:86:a7:be:13:18:cf:a1:ad: 8e:10:02:62:f7:3c:8d:f9:25:c0:c8:6c:12:99:15:c4:9b:45: 02:10:e7:00:d9:db:a4:17:8b:01:eb:d1:a6:fc:4c:f7:ec:a4: 60:6d:34:48:66:ab:6d:47:52:06:59:48:1d:d1:7c:1f:55:99: 65:79:38:7c:d5:fb:a1:7f:fc:d3:c9:bb:ee:d8:f1:5c:ad:59: 31:93:ba:9c:18:ab:05:cf:2d:29:f0:9d:c7:22:00:e4:ec:9c: 4d:0d:09:45:dd:2b:de:c7:6a:c6:9c:1b:0d:94:8e:39:ec:b4: 0f:ab:36:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6mP3fKZaRwJYYAqiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkNDM0NGQtZTZiMS00YTllLTg1NjAtZjU0ZGE0MDJm MzliMB4XDTI2MDcyODE0MDAyM1oXDTI2MDczMDE0MDAwMFowLzEtMCsGA1UEAxMk MDk5Y2U0MGYtYmI3ZS00ZmU3LWE3ZTQtM2I0N2E0MjgxOGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98AmArsmOSq5fRhyYX8FOVzpsLxBcv6ndIkl ngjLXtGFOk4v0UWqcIsgPGcquUNE94Jg+Xqn1Dqd9McmWBmmiSQzxautxkG/lNJy kS0AJr7TRmfho86Si1dcdZxMrvMEGEHzYUj+hU0WLcmz84JbHv1RlIKwzzWdI/9G /JxM84GffavbNyCDityZMP3lLDBsyPEwfDfHCQ7YIGeFmvIPPLcr+ml1AngoleoJ gagY0l4vRaH6pIVBbk2vKr91rYUV5A6uOSGO71mnuWWRguZVPr8lfDnEIl3xZ9az +1wcicryk4wqEBOcVd45i6LeW/rABBgSZQ7hWOXOm/01bpyboQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAyM4B8z+DXgJrCP5gKvjG20KQ1LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0 MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRkYTQwMmYzOWIvMjNkNDM0NGQtZTZiMS00 YTllLTg1NjAtZjU0ZGE0MDJmMzliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjNkNDM0NGQtZTZiMS00YTllLTg1 NjAtZjU0ZGE0MDJmMzliLzIzZDQzNDRkLWU2YjEtNGE5ZS04NTYwLWY1NGRhNDAy ZjM5Yi5jcmwwHwYDVR0jBBgwFoAU9WcvW8Km8IfxAR+Pg7MGuQYGY3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRk YTQwMmYzOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAciQZElSvensB0sWuCg1/4 xPCwdVOUEP+d/e+u1dhggKZGCYDPiNzdejB4KoPU74pgaHASKYNwMuXf4Y+VEazf 7tEZLtD9Ax0QMvhBXb7xuWu1dWdhqx0MvfQN8kbB/a0HCUk/ygN5D24bErCn4c4X ebvpY8pUcdsRmhBVpvDAKBRiiDPXpm/ahqe+ExjPoa2OEAJi9zyN+SXAyGwSmRXE m0UCEOcA2dukF4sB69Gm/Ez37KRgbTRIZqttR1IGWUgd0XwfVZlleTh81fuhf/zT ybvu2PFcrVkxk7qcGKsFzy0p8J3HIgDk7JxNDQlF3Svex2rGnBsNlI457LQPqzbZ -----END CERTIFICATE-----Generated at Tue Jul 28 21:43:22 2026 by rpki-client