$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft File: 23c12684-32d1-4215-8c13-2912d85e2080.mft (raw, json) Hash identifier: 8ljT6lN+zysg0fcF2ubvzEhQSsyMpg9hTXdai5zmE1o= Subject key identifier: 6A:B9:67:BE:91:E9:78:3A:E3:92:86:39:C4:E9:11:0F:EC:AD:22:5D Authority key identifier: B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F Certificate issuer: /CN=23c12684-32d1-4215-8c13-2912d85e2080 Certificate serial: 010D0C9F4328584E3F2FBA126BDAFF126F777880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft Manifest number: 010D0C9F432858496FD72A74B2C272C9F5FAB4A3 Signing time: Sun 21 Jun 2026 16:00:23 +0000 Manifest this update: Sun 21 Jun 2026 16:00:23 +0000 Manifest next update: Tue 23 Jun 2026 16:00:00 +0000 Files and hashes: 1: 23c12684-32d1-4215-8c13-2912d85e2080.crl (hash: xbqmTJYx2GwKAp7UBgZJ+aIi8juW3Er9cwOrXCnV9wQ=) 2: 8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa (hash: kEMiLQ+LbjwqHGe1fJUhAs9ZvFCh3Kapl1y8WF8U9RQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:2f:ba:12:6b:da:ff:12:6f:77:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c12684-32d1-4215-8c13-2912d85e2080 Validity Not Before: Jun 21 16:00:23 2026 GMT Not After : Jun 23 16:00:00 2026 GMT Subject: CN=439d5884-6551-4248-9bdd-318967d1f356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:40:01:c6:cb:cd:d3:c3:ed:23:72:4c:11:86: da:8c:87:d8:ac:16:cc:10:4e:97:d1:55:11:79:aa: 0c:f8:e1:e0:8a:0c:7b:d9:1b:c3:82:69:46:e3:20: 6a:bd:1d:be:e5:2e:1b:7f:ab:e1:d0:5d:4d:f1:6a: 77:1c:93:a0:d8:e1:0c:04:24:5d:64:b7:24:a2:a1: 17:b7:44:3e:9b:2c:2a:ed:10:9b:17:fd:88:90:f9: 98:6f:c6:2c:b8:d8:8b:07:0c:97:d4:25:ed:db:27: 4a:d9:24:6e:f5:d9:f3:ed:8c:09:c8:64:f8:b1:cf: 85:c2:4d:b9:43:8b:72:87:25:76:e0:83:b1:40:2a: 7b:a3:f4:04:4c:29:71:c1:63:36:b5:23:ad:03:9b: bc:00:41:14:15:d7:e7:a5:07:8b:f5:50:7b:76:ed: 18:02:0d:b6:ad:df:4d:2e:9d:d2:09:5e:22:d5:c0: 51:16:41:d9:91:3d:e1:f5:1a:a0:41:31:e1:55:1e: fe:09:94:1d:6f:ca:18:fb:c4:94:2a:be:1c:30:8c: 14:29:ac:61:ed:cc:e7:d5:f9:03:77:e7:22:09:01: b0:5d:56:b4:12:87:52:34:2a:99:e9:f9:e6:72:86: b8:fc:7a:79:8b:23:25:5b:50:5e:85:14:20:e5:f3: c1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B9:67:BE:91:E9:78:3A:E3:92:86:39:C4:E9:11:0F:EC:AD:22:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl X509v3 Authority Key Identifier: keyid:B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:92:3c:72:d2:4f:a5:55:01:fa:57:72:1b:ee:a2:fe:10:fb: 2d:f8:6e:fc:6f:40:dd:19:2b:9b:50:c6:75:4c:88:4d:2b:63: 7c:55:b9:f1:3f:60:4a:db:c9:2f:d7:c5:34:16:c0:7f:f9:b7: 80:eb:c5:a7:8f:39:48:3a:50:d3:b7:33:b9:e0:3d:11:92:e3: 01:b9:24:11:68:24:ce:da:6b:74:51:cb:a6:03:fa:88:be:33: b5:18:5f:fa:03:01:f7:70:47:21:5d:74:50:d7:9c:f8:5d:71: c7:95:d5:82:9d:8a:27:f8:6d:eb:ca:f2:d4:33:10:98:21:38: 3b:e7:ba:db:e0:d8:b7:63:cc:f5:38:ce:9d:43:0b:76:02:6e: b1:9b:9e:8f:74:a4:9a:ec:80:bb:0a:f9:39:d4:84:ed:2f:2e: a3:16:d5:dc:ad:53:bb:1d:b5:b0:a3:ef:aa:1f:7e:ff:9d:73: 57:80:6a:d8:a8:10:71:85:5d:c0:ea:50:b3:c5:db:08:97:51: 31:e1:7f:bd:61:78:09:01:97:b9:b0:57:85:f2:5a:20:cf:39: f6:33:39:4b:c6:ae:23:a1:e1:1b:27:5e:a5:bf:ab:e7:d5:ac: c8:45:53:0a:f8:88:bd:29:fb:66:c6:4e:65:d2:46:b7:f2:03: 8a:25:77:a7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE4/L7oSa9r/Em93eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjMTI2ODQtMzJkMS00MjE1LThjMTMtMjkxMmQ4NWUy MDgwMB4XDTI2MDYyMTE2MDAyM1oXDTI2MDYyMzE2MDAwMFowLzEtMCsGA1UEAxMk NDM5ZDU4ODQtNjU1MS00MjQ4LTliZGQtMzE4OTY3ZDFmMzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kABxsvN08PtI3JMEYbajIfYrBbMEE6X0VUR eaoM+OHgigx72RvDgmlG4yBqvR2+5S4bf6vh0F1N8Wp3HJOg2OEMBCRdZLckoqEX t0Q+mywq7RCbF/2IkPmYb8YsuNiLBwyX1CXt2ydK2SRu9dnz7YwJyGT4sc+Fwk25 Q4tyhyV24IOxQCp7o/QETClxwWM2tSOtA5u8AEEUFdfnpQeL9VB7du0YAg22rd9N Lp3SCV4i1cBRFkHZkT3h9RqgQTHhVR7+CZQdb8oY+8SUKr4cMIwUKaxh7czn1fkD d+ciCQGwXVa0EodSNCqZ6fnmcoa4/Hp5iyMlW1BehRQg5fPBBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGq5Z76R6Xg645KGOcTpEQ/srSJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2Mx MjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEyZDg1ZTIwODAvMjNjMTI2ODQtMzJkMS00 MjE1LThjMTMtMjkxMmQ4NWUyMDgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNjMTI2ODQtMzJkMS00MjE1LThj MTMtMjkxMmQ4NWUyMDgwLzIzYzEyNjg0LTMyZDEtNDIxNS04YzEzLTI5MTJkODVl MjA4MC5jcmwwHwYDVR0jBBgwFoAUuQuuI22wcY6/bv5zTbwopOzwwn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2MxMjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEy ZDg1ZTIwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxkjxy0k+lVQH6V3Ib7qL+ EPst+G78b0DdGSubUMZ1TIhNK2N8VbnxP2BK28kv18U0FsB/+beA68WnjzlIOlDT tzO54D0RkuMBuSQRaCTO2mt0UcumA/qIvjO1GF/6AwH3cEchXXRQ15z4XXHHldWC nYon+G3ryvLUMxCYITg757rb4Ni3Y8z1OM6dQwt2Am6xm56PdKSa7IC7Cvk51ITt Ly6jFtXcrVO7HbWwo++qH37/nXNXgGrYqBBxhV3A6lCzxdsIl1Ex4X+9YXgJAZe5 sFeF8logzzn2MzlLxq4joeEbJ16lv6vn1azIRVMK+Ii9Kftmxk5l0ka38gOKJXen -----END CERTIFICATE-----Generated at Mon Jun 22 15:29:41 2026 by rpki-client