$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.mft File: b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.mft (raw, json) Hash identifier: OnjafwieWV3QSXBfc/WChN161xWbB1kS9EWUO+LwUpk= Subject key identifier: EC:86:EE:49:A9:53:3C:C4:06:56:8C:AB:59:59:30:E5:D0:70:0F:0F Authority key identifier: CF:8D:B6:52:B8:F9:F0:FF:4B:FE:7A:C5:E8:83:55:E6:54:C9:8A:BB Certificate issuer: /CN=b23e3aaf-aa9a-41f9-982a-7ec54909b1e3 Certificate serial: 010D0C9F4328584E907ED7EB9C55846B42912D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.mft Manifest number: 010D0C9F4328584E12FADCB8568F1F882FBC992E Signing time: Mon 20 Jul 2026 19:00:21 +0000 Manifest this update: Mon 20 Jul 2026 19:00:21 +0000 Manifest next update: Wed 22 Jul 2026 19:00:00 +0000 Files and hashes: 1: 602e7de0-d3cf-349f-88b9-6298b9f75577.roa (hash: v12iVgIBTMVUIoFlIdIvSw24gA5P5AQmS6EmX1P4ovA=) 2: b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.crl (hash: xc+fjqRDHO5lX/4Y3lDzZ4aU+gfxOiWhPKaIOFSYwrQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:7e:d7:eb:9c:55:84:6b:42:91:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b23e3aaf-aa9a-41f9-982a-7ec54909b1e3 Validity Not Before: Jul 20 19:00:21 2026 GMT Not After : Jul 22 19:00:00 2026 GMT Subject: CN=3f45dbc7-a5df-4584-b275-655e9423586e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e2:73:13:f5:ce:66:b2:2d:26:6d:93:0a:78: e1:30:ec:83:e4:07:22:07:29:16:85:23:2a:7e:b7: 83:9c:54:c1:c3:9a:1a:ee:df:ca:a3:e2:5c:3a:44: 6e:9c:32:31:3e:95:22:72:89:3e:eb:cd:7f:aa:bd: e9:a9:2c:46:c9:59:f8:41:c6:1a:cf:fc:a5:0b:0d: 44:ab:cd:1f:a1:1f:96:5a:66:7d:4f:21:c0:a1:00: 4c:1e:b7:b2:6e:3a:36:45:91:54:94:b1:31:74:5a: ef:e7:65:75:91:27:a6:ca:68:05:b4:28:0d:8e:fc: 9d:a7:e7:0c:d1:73:f4:5e:73:b5:0d:74:17:a1:ce: ef:67:9e:48:80:74:a5:76:17:d9:77:9c:f3:dd:4b: 46:eb:97:43:88:09:8e:da:d6:34:1d:aa:40:8e:6f: 36:7e:5d:4a:23:ae:89:cb:fe:57:13:ec:7c:1f:e0: 22:29:79:1b:04:a8:9e:e6:b5:79:3c:b5:8d:92:c1: 38:98:97:c8:68:30:de:d7:c8:65:b3:cf:0c:25:37: 45:28:11:b1:c4:3f:47:de:9f:ae:2b:c1:30:28:9f: d1:d9:14:9a:50:b9:f0:88:b3:b4:e9:66:04:b5:26: b5:0b:b1:c7:c4:fe:18:5a:6e:51:8c:28:62:60:ed: a2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:86:EE:49:A9:53:3C:C4:06:56:8C:AB:59:59:30:E5:D0:70:0F:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.crl X509v3 Authority Key Identifier: keyid:CF:8D:B6:52:B8:F9:F0:FF:4B:FE:7A:C5:E8:83:55:E6:54:C9:8A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:8f:b8:9b:c7:5d:43:bf:4a:49:ed:f4:42:f5:1d:ef:52:1b: 85:a0:47:cb:e3:7c:6f:86:97:a5:4a:1f:61:58:2f:d8:e1:2f: c5:bf:46:9e:7c:9c:53:bc:e4:70:e0:ea:8f:f7:3c:55:92:1b: 7d:bb:3f:d7:c5:f1:a5:cd:6c:93:c6:14:ec:2d:d4:7a:86:8f: 75:ae:2d:f3:8b:15:82:9f:29:6a:cf:b7:b2:3e:33:a8:19:81: 5e:99:33:9d:4d:5c:5b:86:78:29:85:7b:e2:f5:6a:8c:b3:1a: 86:70:61:c4:42:bc:10:89:cf:08:40:1b:dd:db:25:f8:3c:95: 4c:80:24:83:f6:17:ea:69:4d:78:b0:85:ea:6d:73:14:17:17: 88:ff:ef:c5:23:00:61:bf:f2:26:f7:90:1b:f0:7a:e1:72:d3: 52:fb:be:55:1e:a0:20:26:53:8a:e1:83:35:b6:01:02:77:e6: 95:97:d1:9a:15:21:f8:de:f3:02:65:da:01:82:46:08:66:7b: 80:22:db:0c:c2:aa:33:d4:e4:da:8c:82:dc:4b:5d:e8:04:2b: 6f:ae:cd:04:dd:50:4e:01:d5:82:91:d1:64:a5:02:75:2c:d7: cd:e1:0f:a6:2d:2d:39:2a:9f:49:58:a7:3f:66:69:4c:73:da: 81:bf:ce:8a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6QftfrnFWEa0KRLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjIzZTNhYWYtYWE5YS00MWY5LTk4MmEtN2VjNTQ5MDli MWUzMB4XDTI2MDcyMDE5MDAyMVoXDTI2MDcyMjE5MDAwMFowLzEtMCsGA1UEAxMk M2Y0NWRiYzctYTVkZi00NTg0LWIyNzUtNjU1ZTk0MjM1ODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuJzE/XOZrItJm2TCnjhMOyD5AciBykWhSMq freDnFTBw5oa7t/Ko+JcOkRunDIxPpUicok+681/qr3pqSxGyVn4QcYaz/ylCw1E q80foR+WWmZ9TyHAoQBMHreybjo2RZFUlLExdFrv52V1kSemymgFtCgNjvydp+cM 0XP0XnO1DXQXoc7vZ55IgHSldhfZd5zz3UtG65dDiAmO2tY0HapAjm82fl1KI66J y/5XE+x8H+AiKXkbBKie5rV5PLWNksE4mJfIaDDe18hls88MJTdFKBGxxD9H3p+u K8EwKJ/R2RSaULnwiLO06WYEtSa1C7HHxP4YWm5RjChiYO2iLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOyG7kmpUzzEBlaMq1lZMOXQcA8PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMjNl M2FhZi1hYTlhLTQxZjktOTgyYS03ZWM1NDkwOWIxZTMvYjIzZTNhYWYtYWE5YS00 MWY5LTk4MmEtN2VjNTQ5MDliMWUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjIzZTNhYWYtYWE5YS00MWY5LTk4 MmEtN2VjNTQ5MDliMWUzL2IyM2UzYWFmLWFhOWEtNDFmOS05ODJhLTdlYzU0OTA5 YjFlMy5jcmwwHwYDVR0jBBgwFoAUz422Urj58P9L/nrF6INV5lTJirswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMjNlM2FhZi1hYTlhLTQxZjktOTgyYS03ZWM1 NDkwOWIxZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDJj7ibx11Dv0pJ7fRC9R3v UhuFoEfL43xvhpelSh9hWC/Y4S/Fv0aefJxTvORw4OqP9zxVkht9uz/XxfGlzWyT xhTsLdR6ho91ri3zixWCnylqz7eyPjOoGYFemTOdTVxbhngphXvi9WqMsxqGcGHE QrwQic8IQBvd2yX4PJVMgCSD9hfqaU14sIXqbXMUFxeI/+/FIwBhv/Im95Ab8Hrh ctNS+75VHqAgJlOK4YM1tgECd+aVl9GaFSH43vMCZdoBgkYIZnuAItsMwqoz1OTa jILcS13oBCtvrs0E3VBOAdWCkdFkpQJ1LNfN4Q+mLS05Kp9JWKc/ZmlMc9qBv86K -----END CERTIFICATE-----Generated at Tue Jul 21 17:41:50 2026 by rpki-client