$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.mft File: 023d0fc7-7b66-4e52-a96e-e85dab7d2566.mft (raw, json) Hash identifier: Ai4bO97EilkIw/SFUXo4mGUNVZjXI0SwWER7ngRwKWM= Subject key identifier: 81:9E:EE:30:3F:B5:20:49:8F:87:47:1D:4E:0E:74:9C:87:AC:DC:9E Authority key identifier: 42:53:F1:86:AD:3F:72:A6:70:94:E8:E6:0A:60:D7:E2:E7:43:49:21 Certificate issuer: /CN=023d0fc7-7b66-4e52-a96e-e85dab7d2566 Certificate serial: 010D0C9F4328584E909CA5AE8F25B5AD851AD880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.mft Manifest number: 010D0C9F4328584DA621EA467C362FE9F855EC68 Signing time: Mon 20 Jul 2026 20:00:24 +0000 Manifest this update: Mon 20 Jul 2026 20:00:24 +0000 Manifest next update: Thu 23 Jul 2026 20:00:00 +0000 Files and hashes: 1: 023d0fc7-7b66-4e52-a96e-e85dab7d2566.crl (hash: qtIutz23e6OP6/5gA162B2n+dZodGGH1Fl0f5hG+Gb4=) 2: 9c6f5e16-b5f7-3115-bb49-7bbc1ef160f9.roa (hash: GTwoW/jsTOVIBskYpIJt6rtzGa/12Ly8qEan/B/L2SU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:9c:a5:ae:8f:25:b5:ad:85:1a:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023d0fc7-7b66-4e52-a96e-e85dab7d2566 Validity Not Before: Jul 20 20:00:24 2026 GMT Not After : Jul 23 20:00:00 2026 GMT Subject: CN=041b4e58-3f08-43bb-830b-28ccf325f3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:69:50:c3:0d:53:50:6c:97:a6:6e:e9:75:b3: 91:48:13:fe:79:01:03:e0:ef:62:04:56:c0:a0:28: 62:93:26:a5:84:7a:08:0f:dd:28:3a:b9:32:b4:06: 93:07:56:fb:7a:19:f9:f2:fa:10:43:31:e8:93:b6: cc:54:e0:10:62:35:22:67:c2:ae:4c:77:a8:e7:00: a7:90:c1:6f:4e:73:e0:90:0e:95:40:c2:ba:a2:7e: 10:57:94:92:72:38:60:e9:e8:79:68:0c:df:54:7b: f3:25:d2:fb:60:dd:98:fd:79:37:23:9d:b9:29:67: 20:c4:1f:06:23:b3:bb:2d:b0:9f:06:42:f6:c2:37: 20:0c:9b:d3:db:9f:e1:0a:b9:c8:14:b3:e2:7a:55: 54:68:65:eb:d2:20:0d:75:6d:25:99:f6:1b:63:f7: 06:07:9e:7c:98:02:ed:34:17:80:9e:e2:da:5c:e6: ed:e7:06:4e:c3:e3:7a:16:68:e8:f6:27:96:c5:f7: 08:5d:6d:0e:2c:19:12:e8:ac:fc:ee:e1:14:31:30: db:22:f7:ce:88:b0:75:3d:82:a6:2e:26:52:d2:6b: bd:51:8f:73:be:27:c6:43:62:74:36:b1:8d:86:4e: aa:12:f0:6e:52:4c:72:a6:98:ef:0c:64:05:7e:c7: d2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9E:EE:30:3F:B5:20:49:8F:87:47:1D:4E:0E:74:9C:87:AC:DC:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.crl X509v3 Authority Key Identifier: keyid:42:53:F1:86:AD:3F:72:A6:70:94:E8:E6:0A:60:D7:E2:E7:43:49:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:db:53:b4:50:5a:2e:9d:34:8d:6c:a9:ad:b4:2d:e9:ec:36: 75:63:98:51:44:0e:8d:d7:d3:98:b8:e3:17:a5:67:90:5e:51: 54:84:e2:c2:b6:8e:83:b4:20:a0:0e:73:f8:8a:94:30:9e:fa: d7:a8:8c:c4:4d:61:6f:f5:eb:4c:1f:5e:4d:a0:62:40:9e:72: 8e:88:47:f6:41:af:42:fe:1d:4e:c1:09:9f:c8:60:a7:61:11: 16:16:a0:65:87:a1:2a:18:e1:3d:0a:0b:ac:7b:4d:2a:42:10: a5:61:6f:e7:5f:cd:7a:8c:49:26:b5:b4:94:a5:92:1a:1c:c6: 3f:18:18:41:a3:2d:c4:94:39:96:08:37:96:61:2e:56:8d:c8: 98:07:36:3e:52:1b:e5:ff:84:40:07:20:fe:3a:85:45:86:68: 53:61:0d:23:fc:33:e7:43:84:a5:1b:a7:60:d8:5b:f7:8a:b1: b0:27:4d:d7:3e:f4:e8:31:b0:fe:45:c6:06:06:54:2a:85:da: 51:67:db:ee:aa:0d:5e:d7:23:12:96:8a:71:2d:db:68:5d:2d: a0:54:87:19:eb:b8:ab:bd:09:ab:e1:a3:d2:7d:61:30:e3:36: 39:d4:d4:ef:75:c9:c9:bb:69:7d:ed:93:1c:c7:ce:77:36:36: 0d:01:27:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6QnKWujyW1rYUa2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDIzZDBmYzctN2I2Ni00ZTUyLWE5NmUtZTg1ZGFiN2Qy NTY2MB4XDTI2MDcyMDIwMDAyNFoXDTI2MDcyMzIwMDAwMFowLzEtMCsGA1UEAxMk MDQxYjRlNTgtM2YwOC00M2JiLTgzMGItMjhjY2YzMjVmM2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGlQww1TUGyXpm7pdbORSBP+eQED4O9iBFbA oChikyalhHoID90oOrkytAaTB1b7ehn58voQQzHok7bMVOAQYjUiZ8KuTHeo5wCn kMFvTnPgkA6VQMK6on4QV5SScjhg6eh5aAzfVHvzJdL7YN2Y/Xk3I525KWcgxB8G I7O7LbCfBkL2wjcgDJvT25/hCrnIFLPielVUaGXr0iANdW0lmfYbY/cGB558mALt NBeAnuLaXObt5wZOw+N6Fmjo9ieWxfcIXW0OLBkS6Kz87uEUMTDbIvfOiLB1PYKm LiZS0mu9UY9zvifGQ2J0NrGNhk6qEvBuUkxyppjvDGQFfsfSQQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIGe7jA/tSBJj4dHHU4OdJyHrNyeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMjNk MGZjNy03YjY2LTRlNTItYTk2ZS1lODVkYWI3ZDI1NjYvMDIzZDBmYzctN2I2Ni00 ZTUyLWE5NmUtZTg1ZGFiN2QyNTY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDIzZDBmYzctN2I2Ni00ZTUyLWE5 NmUtZTg1ZGFiN2QyNTY2LzAyM2QwZmM3LTdiNjYtNGU1Mi1hOTZlLWU4NWRhYjdk MjU2Ni5jcmwwHwYDVR0jBBgwFoAUQlPxhq0/cqZwlOjmCmDX4udDSSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMjNkMGZjNy03YjY2LTRlNTItYTk2ZS1lODVk YWI3ZDI1NjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAe21O0UFounTSNbKmttC3p 7DZ1Y5hRRA6N19OYuOMXpWeQXlFUhOLCto6DtCCgDnP4ipQwnvrXqIzETWFv9etM H15NoGJAnnKOiEf2Qa9C/h1OwQmfyGCnYREWFqBlh6EqGOE9Cguse00qQhClYW/n X816jEkmtbSUpZIaHMY/GBhBoy3ElDmWCDeWYS5WjciYBzY+Uhvl/4RAByD+OoVF hmhTYQ0j/DPnQ4SlG6dg2Fv3irGwJ03XPvToMbD+RcYGBlQqhdpRZ9vuqg1e1yMS lopxLdtoXS2gVIcZ67irvQmr4aPSfWEw4zY51NTvdcnJu2l97ZMcx853NjYNASdn -----END CERTIFICATE-----Generated at Tue Jul 21 17:26:45 2026 by rpki-client