$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.mft File: 23a33a5f-da0f-4c5a-910f-1f508872bef2.mft (raw, json) Hash identifier: 1Zuo0WslU0dOU4ULoaNnrBjrJ+FXtJnsoVPq9wqnY7s= Subject key identifier: 48:C8:90:B6:47:8A:C0:58:7F:C2:5A:40:A7:1A:C0:AB:8E:2F:E8:E6 Authority key identifier: 74:B3:7F:AD:3B:3A:6C:F4:BD:03:4C:90:EF:A1:C6:5E:9F:1F:BE:60 Certificate issuer: /CN=23a33a5f-da0f-4c5a-910f-1f508872bef2 Certificate serial: 010D0C9F4328584EF4A627969B5AE32EB4972900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.mft Manifest number: 010D0C9F4328584ED32AE8A97CC482EC0077EDAC Signing time: Tue 25 Aug 2026 16:00:22 +0000 Manifest this update: Tue 25 Aug 2026 16:00:22 +0000 Manifest next update: Fri 28 Aug 2026 16:00:00 +0000 Files and hashes: 1: 23a33a5f-da0f-4c5a-910f-1f508872bef2.crl (hash: ZuSEsYFZOk2Xn1Z2r+zD8yr8yjzkfKd3XExDbSu//HY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:a6:27:96:9b:5a:e3:2e:b4:97:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a33a5f-da0f-4c5a-910f-1f508872bef2 Validity Not Before: Aug 25 16:00:22 2026 GMT Not After : Aug 28 16:00:00 2026 GMT Subject: CN=fb41cee0-a010-4e64-9c49-808068d9a1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:78:2f:6b:21:3f:7b:f6:2b:4e:ec:20:06:26: ee:0c:c7:5d:80:76:85:cb:44:16:9e:40:d1:e0:c3: 25:48:a9:33:2d:78:cf:86:cc:f5:e0:0b:9b:4a:af: 16:5b:98:1c:3a:da:a5:e6:ac:ab:fa:5f:72:ed:c3: 1a:a6:14:cd:86:2c:4d:75:4e:c7:9f:b1:53:34:9e: 29:62:37:8c:62:4d:11:4a:83:5c:16:2f:be:90:4c: f0:f8:27:06:bb:30:1e:54:9e:5a:d7:71:a1:34:9d: 52:2d:57:b1:a8:1f:6f:52:5f:3e:52:45:51:aa:5a: 9f:34:20:ef:7c:93:4e:ae:c2:74:1f:dc:72:b3:c1: dd:2d:b8:ea:b6:73:aa:72:ab:e3:b6:1a:8d:e8:43: 0b:c6:dd:b1:7d:bf:c9:10:5f:d5:95:e3:8c:c7:0c: 6a:f5:91:4d:7d:21:e6:b9:d5:c2:e3:ac:28:3a:df: 90:6c:76:91:91:20:74:56:37:a5:8a:02:c8:8e:c8: 5f:88:9b:2d:a6:d7:46:d5:41:85:a0:2c:17:0e:93: df:e4:06:0a:5f:c2:ff:f9:31:52:44:dd:be:c9:39: 8d:8b:30:5a:46:2b:a0:b3:04:f5:5a:c9:29:ef:34: 22:be:f1:a9:fd:f0:cd:ed:16:14:51:28:51:85:87: 6a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C8:90:B6:47:8A:C0:58:7F:C2:5A:40:A7:1A:C0:AB:8E:2F:E8:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.crl X509v3 Authority Key Identifier: keyid:74:B3:7F:AD:3B:3A:6C:F4:BD:03:4C:90:EF:A1:C6:5E:9F:1F:BE:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:02:bf:30:c7:e5:9f:c3:0a:e5:2e:ba:81:69:c6:25:cd:e5: cc:e9:20:17:e6:08:5d:ee:39:61:b6:d0:17:51:9f:9e:b2:87: d1:be:ca:cd:ae:0a:7c:56:91:1f:df:12:27:f3:87:1a:06:25: ce:49:0a:a2:30:d6:4e:d6:54:a8:5f:58:01:96:09:f8:f5:11: d2:1d:f3:f7:79:ce:91:07:28:77:c0:e7:40:66:d8:e3:72:5a: 1a:24:8c:d2:d5:32:c8:68:e9:da:30:9d:a6:2f:7e:8d:23:de: 7d:6f:7c:92:67:3e:70:68:17:8f:a2:3c:5f:be:77:36:50:0e: fb:f0:7d:50:2d:07:90:1f:5d:b9:10:ad:26:3a:2c:46:de:45: 3a:53:ec:fe:9b:61:bf:24:de:6f:e8:d8:e3:ae:ec:68:d7:80: b2:1f:fb:f9:5f:9f:cd:70:41:93:2d:72:ce:a5:5e:34:2f:60: 8c:7f:6a:2e:70:59:90:22:ab:db:0e:37:49:42:47:d4:fe:ef: 0d:c1:5b:08:14:f7:ed:33:d3:be:15:4b:5d:1e:cb:91:be:b0: 01:83:99:de:22:5d:b4:b9:e5:b1:77:69:bc:4d:67:02:19:0d: 4d:08:28:82:63:6b:31:8d:5d:20:7c:a8:1d:eb:1f:cf:06:ab: 94:f8:f3:f2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE70pieWm1rjLrSXKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNhMzNhNWYtZGEwZi00YzVhLTkxMGYtMWY1MDg4NzJi ZWYyMB4XDTI2MDgyNTE2MDAyMloXDTI2MDgyODE2MDAwMFowLzEtMCsGA1UEAxMk ZmI0MWNlZTAtYTAxMC00ZTY0LTljNDktODA4MDY4ZDlhMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXgvayE/e/YrTuwgBibuDMddgHaFy0QWnkDR 4MMlSKkzLXjPhsz14AubSq8WW5gcOtql5qyr+l9y7cMaphTNhixNdU7Hn7FTNJ4p YjeMYk0RSoNcFi++kEzw+CcGuzAeVJ5a13GhNJ1SLVexqB9vUl8+UkVRqlqfNCDv fJNOrsJ0H9xys8HdLbjqtnOqcqvjthqN6EMLxt2xfb/JEF/VleOMxwxq9ZFNfSHm udXC46woOt+QbHaRkSB0VjeligLIjshfiJstptdG1UGFoCwXDpPf5AYKX8L/+TFS RN2+yTmNizBaRiugswT1Wskp7zQivvGp/fDN7RYUUShRhYdqtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEjIkLZHisBYf8JaQKcawKuOL+jmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8yM2Ez M2E1Zi1kYTBmLTRjNWEtOTEwZi0xZjUwODg3MmJlZjIvMjNhMzNhNWYtZGEwZi00 YzVhLTkxMGYtMWY1MDg4NzJiZWYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMjNhMzNhNWYtZGEwZi00YzVhLTkx MGYtMWY1MDg4NzJiZWYyLzIzYTMzYTVmLWRhMGYtNGM1YS05MTBmLTFmNTA4ODcy YmVmMi5jcmwwHwYDVR0jBBgwFoAUdLN/rTs6bPS9A0yQ76HGXp8fvmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8yM2EzM2E1Zi1kYTBmLTRjNWEtOTEwZi0xZjUw ODg3MmJlZjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2Ar8wx+WfwwrlLrqBacYl zeXM6SAX5ghd7jlhttAXUZ+esofRvsrNrgp8VpEf3xIn84caBiXOSQqiMNZO1lSo X1gBlgn49RHSHfP3ec6RByh3wOdAZtjjcloaJIzS1TLIaOnaMJ2mL36NI959b3yS Zz5waBePojxfvnc2UA778H1QLQeQH125EK0mOixG3kU6U+z+m2G/JN5v6Njjruxo 14CyH/v5X5/NcEGTLXLOpV40L2CMf2oucFmQIqvbDjdJQkfU/u8NwVsIFPftM9O+ FUtdHsuRvrABg5neIl20ueWxd2m8TWcCGQ1NCCiCY2sxjV0gfKgd6x/PBquU+PPy -----END CERTIFICATE-----Generated at Tue Aug 25 23:34:11 2026 by rpki-client