$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.mft File: 523508d8-5364-4972-acf2-2c22cfac7647.mft (raw, json) Hash identifier: 2rgGqjzEhrSptRKdWaEfv6EVErSzs52edAp6O9whWSs= Subject key identifier: 1E:04:C0:C1:90:01:CB:92:4F:51:11:6E:72:76:EE:DE:1E:00:CF:3C Authority key identifier: 51:3A:99:FC:8D:2F:D8:95:A1:1D:08:B0:CF:2D:AE:E1:71:39:C6:F0 Certificate issuer: /CN=523508d8-5364-4972-acf2-2c22cfac7647 Certificate serial: 010D0C9F4328584E91C668C8067988714923DF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.mft Manifest number: 010D0C9F4328584DCB9C8D2C85546446399D1848 Signing time: Tue 21 Jul 2026 06:00:22 +0000 Manifest this update: Tue 21 Jul 2026 06:00:22 +0000 Manifest next update: Thu 23 Jul 2026 06:00:00 +0000 Files and hashes: 1: 4c4981e5-e112-343f-aee7-b9f15d53947c.roa (hash: YpHcRXjGLHkAZKsURhjcIE69gxwa42l5SIJwklgKlgw=) 2: 523508d8-5364-4972-acf2-2c22cfac7647.crl (hash: K7KWW5R4O3Od//FDg2EoYb+DwMfPFo8vBFSXMAoGxwI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:91:c6:68:c8:06:79:88:71:49:23:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523508d8-5364-4972-acf2-2c22cfac7647 Validity Not Before: Jul 21 06:00:22 2026 GMT Not After : Jul 23 06:00:00 2026 GMT Subject: CN=8e7e06d7-40ee-412a-a7c2-483cf645afda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:71:67:e8:08:f5:e8:ed:62:b6:a0:ea:6a:37: 7d:5f:6b:fa:27:75:98:45:68:e7:04:5d:18:1c:3a: a8:bc:4b:7e:16:f2:75:d9:db:f9:d9:0c:55:97:84: fe:42:0d:83:4a:43:29:23:41:84:96:ae:46:04:00: bd:f4:34:90:d8:f2:c6:67:d6:fe:15:27:5b:bc:f8: af:ad:e2:be:94:37:46:47:af:56:57:5b:a5:91:21: ff:f9:1e:2f:c2:bd:94:38:2e:bf:71:33:75:70:2b: 3a:e0:1a:6a:b2:00:e8:70:c2:73:0c:c9:d7:6a:cb: 31:11:7a:9a:1b:8c:a3:9a:0b:5b:c8:1c:18:c3:cc: 37:6c:2b:d6:8b:f1:59:f6:ea:a7:e1:58:ed:4e:4a: cc:71:71:45:7a:e3:a2:3a:88:f4:e3:1f:72:7e:74: 71:51:75:42:22:ff:d7:16:e2:23:a1:fb:3c:72:f2: 25:96:d5:ba:14:34:9f:48:0e:99:69:0d:4c:86:be: a7:f7:27:5b:35:ef:a3:74:1d:e0:78:a8:3a:78:72: bf:88:01:75:66:9b:b4:ba:44:95:da:08:c9:fb:00: e0:90:44:6c:d9:fc:06:51:73:43:92:84:9f:80:80: b2:3b:fa:33:d9:fa:7a:90:7e:4b:1a:d9:57:cc:13: 0f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:04:C0:C1:90:01:CB:92:4F:51:11:6E:72:76:EE:DE:1E:00:CF:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.crl X509v3 Authority Key Identifier: keyid:51:3A:99:FC:8D:2F:D8:95:A1:1D:08:B0:CF:2D:AE:E1:71:39:C6:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7a:34:41:09:44:78:ed:81:dd:12:ab:1a:64:f2:83:1b:3b: a6:59:d1:af:ca:eb:3c:60:aa:bd:b3:4e:72:59:0f:7c:3f:4e: 2b:05:c6:83:67:d8:69:37:29:bb:f8:ac:44:62:ac:4b:de:4c: f6:50:d4:06:48:74:f8:08:51:f8:e7:25:f6:fe:3f:d3:e1:ba: f9:5b:c3:3f:6b:90:7e:4c:33:26:52:52:01:7a:8c:e8:c2:80: e0:50:1f:4d:f2:e8:16:0b:a0:83:cd:d1:5e:aa:93:c1:a5:18: 7b:c6:ca:ea:9d:66:6b:f0:a2:d1:5f:1c:f1:5b:8d:1d:b3:e5: d5:d6:e9:7d:17:8c:98:aa:2a:6b:74:2b:d5:d8:f7:cc:4c:30: e4:ca:a4:3c:60:11:87:e9:94:e2:bd:93:e1:c7:ce:a8:3a:0a: af:35:9e:15:7b:00:73:bb:cd:1a:8f:fd:32:73:39:f3:0d:66: 06:29:0f:c7:35:fa:9f:e0:dd:b1:f3:23:b4:c0:56:9c:01:ca: 1f:ae:5e:1b:ca:99:09:5e:95:5d:f4:43:1d:de:65:e4:1f:1b: 15:78:7c:aa:53:c0:b4:b5:19:50:20:c3:19:99:20:99:2d:db: bf:1e:c8:fe:f6:b6:81:17:6b:22:7a:80:c1:b8:09:e4:41:72: 27:8d:bb:bd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6RxmjIBnmIcUkj3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIzNTA4ZDgtNTM2NC00OTcyLWFjZjItMmMyMmNmYWM3 NjQ3MB4XDTI2MDcyMTA2MDAyMloXDTI2MDcyMzA2MDAwMFowLzEtMCsGA1UEAxMk OGU3ZTA2ZDctNDBlZS00MTJhLWE3YzItNDgzY2Y2NDVhZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHFn6Aj16O1itqDqajd9X2v6J3WYRWjnBF0Y HDqovEt+FvJ12dv52QxVl4T+Qg2DSkMpI0GElq5GBAC99DSQ2PLGZ9b+FSdbvPiv reK+lDdGR69WV1ulkSH/+R4vwr2UOC6/cTN1cCs64BpqsgDocMJzDMnXassxEXqa G4yjmgtbyBwYw8w3bCvWi/FZ9uqn4VjtTkrMcXFFeuOiOoj04x9yfnRxUXVCIv/X FuIjofs8cvIlltW6FDSfSA6ZaQ1Mhr6n9ydbNe+jdB3geKg6eHK/iAF1Zpu0ukSV 2gjJ+wDgkERs2fwGUXNDkoSfgICyO/oz2fp6kH5LGtlXzBMPewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB4EwMGQAcuST1ERbnJ27t4eAM88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81MjM1 MDhkOC01MzY0LTQ5NzItYWNmMi0yYzIyY2ZhYzc2NDcvNTIzNTA4ZDgtNTM2NC00 OTcyLWFjZjItMmMyMmNmYWM3NjQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTIzNTA4ZDgtNTM2NC00OTcyLWFj ZjItMmMyMmNmYWM3NjQ3LzUyMzUwOGQ4LTUzNjQtNDk3Mi1hY2YyLTJjMjJjZmFj NzY0Ny5jcmwwHwYDVR0jBBgwFoAUUTqZ/I0v2JWhHQiwzy2u4XE5xvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81MjM1MDhkOC01MzY0LTQ5NzItYWNmMi0yYzIy Y2ZhYzc2NDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmejRBCUR47YHdEqsaZPKD GzumWdGvyus8YKq9s05yWQ98P04rBcaDZ9hpNym7+KxEYqxL3kz2UNQGSHT4CFH4 5yX2/j/T4br5W8M/a5B+TDMmUlIBeozowoDgUB9N8ugWC6CDzdFeqpPBpRh7xsrq nWZr8KLRXxzxW40ds+XV1ul9F4yYqiprdCvV2PfMTDDkyqQ8YBGH6ZTivZPhx86o OgqvNZ4VewBzu80aj/0ycznzDWYGKQ/HNfqf4N2x8yO0wFacAcofrl4bypkJXpVd 9EMd3mXkHxsVeHyqU8C0tRlQIMMZmSCZLdu/Hsj+9raBF2sieoDBuAnkQXInjbu9 -----END CERTIFICATE-----Generated at Tue Jul 21 17:38:27 2026 by rpki-client