$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft File: 23c12684-32d1-4215-8c13-2912d85e2080.mft (raw, json) Hash identifier: P6g+wdjPh9boExMQzjUG0FXB2A0bv8XQ8Nlawd7aces= Subject key identifier: 22:37:1D:B0:0B:A0:86:C4:7A:47:B1:20:1E:3E:C4:42:C7:61:B2:96 Authority key identifier: B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F Certificate issuer: /CN=23c12684-32d1-4215-8c13-2912d85e2080 Certificate serial: 010D0C9F4328584DBEC404ECEDC6A653E0C03D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft Manifest number: 010D0C9F432858496FD72A74B2C272C9F5FAB473 Signing time: Wed 06 May 2026 16:00:03 +0000 Manifest this update: Wed 06 May 2026 16:00:03 +0000 Manifest next update: Fri 08 May 2026 16:00:00 +0000 Files and hashes: 1: 23c12684-32d1-4215-8c13-2912d85e2080.crl (hash: /KRzwddmD/LTHkx6ERY9pQOdUfXS6HFaRib4x+lX8z0=) 2: 8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa (hash: 6TWo0rZ8MSkH7yVaFJ/8jjRbw56n3rqI4ME3SbmQoR4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:c4:04:ec:ed:c6:a6:53:e0:c0:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c12684-32d1-4215-8c13-2912d85e2080 Validity Not Before: May 6 16:00:03 2026 GMT Not After : May 8 16:00:00 2026 GMT Subject: CN=1f9bda39-d1a3-4d7b-a236-77fe89f65bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d7:1e:be:c1:f1:a9:ec:c5:c7:61:fb:e9:1c: 00:e1:d4:8e:f1:72:7d:af:a9:80:55:e2:bd:8d:61: c9:a8:b1:ff:4b:4c:0e:12:c6:c7:9b:ef:24:22:62: 80:73:ab:a0:c6:33:ab:fa:cf:3e:ae:65:b3:da:a8: a8:3f:2b:80:97:11:09:99:2c:36:51:d1:7f:18:6e: d5:d8:0f:c6:15:8b:bb:d0:74:8a:d4:8f:f1:36:a3: a7:96:8c:d8:6f:88:a9:2c:12:58:c5:11:c2:bb:a4: 0d:de:c6:da:5c:21:6f:30:bc:fc:4d:65:02:9a:28: 84:58:a5:9e:28:2d:54:66:30:c0:79:67:68:fd:44: 5c:03:e8:31:c1:30:9a:e5:40:a8:86:92:82:e0:3a: 86:7c:b5:88:b4:4b:4a:36:d0:c4:39:3e:72:8e:3f: e1:5d:e4:8d:5e:bd:40:07:47:4a:7b:fc:2f:ef:51: 30:19:2c:db:59:c4:45:23:64:e0:b6:55:8b:06:88: 2a:89:f2:cf:2d:c5:23:b0:2c:77:91:13:98:42:08: 79:58:af:4d:24:9e:b2:93:48:ee:a6:1d:90:c7:91: 88:77:0a:a2:77:f4:58:38:af:e6:83:14:21:cc:48: 59:c9:f4:b0:be:e1:91:e1:1c:ff:ec:09:20:88:73: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:37:1D:B0:0B:A0:86:C4:7A:47:B1:20:1E:3E:C4:42:C7:61:B2:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl X509v3 Authority Key Identifier: keyid:B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8b:e1:87:a5:18:ca:38:93:6c:7a:20:c0:7d:8d:0e:68:4c: 09:91:f6:28:b3:fc:37:2e:27:ca:79:11:c8:53:a1:45:c9:55: 1e:4f:cd:53:09:be:f6:9d:55:28:b3:5e:89:36:67:9f:79:40: 81:42:ac:89:a5:04:4c:36:4d:84:a4:98:29:d5:db:27:c1:ce: 51:79:85:e1:94:f8:1a:d0:1d:bd:ff:9f:24:5e:24:c0:f7:90: 2b:1d:a5:7b:08:a4:64:ba:84:08:04:07:20:a3:33:c8:5e:47: f0:39:06:4f:1b:93:d2:78:b3:9a:35:01:07:40:2c:aa:c2:49: e2:8f:9f:a0:79:de:22:a1:19:29:26:58:99:02:6d:8c:27:4d: 4c:69:18:03:a8:56:12:68:ed:19:b1:34:66:06:b3:f5:76:8a: 47:53:bd:71:38:c6:20:97:34:02:ac:92:6b:e4:b1:ff:9c:5c: 13:4b:8d:58:bd:e3:f8:b3:de:d8:e6:e3:bb:b8:79:7a:58:bd: 43:bb:4a:c3:fd:43:90:4e:59:84:8e:c8:29:d2:e2:b2:a3:ae: 04:6e:8e:73:3a:30:d2:06:bb:bc:ed:22:8c:e0:44:9f:6a:bf: 03:95:74:b5:f3:9a:37:69:52:a9:31:dd:2b:0f:40:8b:be:fd: dd:f2:36:bd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2+xATs7camU+DAPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjMTI2ODQtMzJkMS00MjE1LThjMTMtMjkxMmQ4NWUy MDgwMB4XDTI2MDUwNjE2MDAwM1oXDTI2MDUwODE2MDAwMFowLzEtMCsGA1UEAxMk MWY5YmRhMzktZDFhMy00ZDdiLWEyMzYtNzdmZTg5ZjY1YmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9cevsHxqezFx2H76RwA4dSO8XJ9r6mAVeK9 jWHJqLH/S0wOEsbHm+8kImKAc6ugxjOr+s8+rmWz2qioPyuAlxEJmSw2UdF/GG7V 2A/GFYu70HSK1I/xNqOnlozYb4ipLBJYxRHCu6QN3sbaXCFvMLz8TWUCmiiEWKWe KC1UZjDAeWdo/URcA+gxwTCa5UCohpKC4DqGfLWItEtKNtDEOT5yjj/hXeSNXr1A B0dKe/wv71EwGSzbWcRFI2TgtlWLBogqifLPLcUjsCx3kROYQgh5WK9NJJ6yk0ju ph2Qx5GIdwqid/RYOK/mgxQhzEhZyfSwvuGR4Rz/7AkgiHNVRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCI3HbALoIbEekexIB4+xELHYbKWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2Mx MjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEyZDg1ZTIwODAvMjNjMTI2ODQtMzJkMS00 MjE1LThjMTMtMjkxMmQ4NWUyMDgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNjMTI2ODQtMzJkMS00MjE1LThj MTMtMjkxMmQ4NWUyMDgwLzIzYzEyNjg0LTMyZDEtNDIxNS04YzEzLTI5MTJkODVl MjA4MC5jcmwwHwYDVR0jBBgwFoAUuQuuI22wcY6/bv5zTbwopOzwwn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2MxMjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEy ZDg1ZTIwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJi+GHpRjKOJNseiDAfY0O aEwJkfYos/w3LifKeRHIU6FFyVUeT81TCb72nVUos16JNmefeUCBQqyJpQRMNk2E pJgp1dsnwc5ReYXhlPga0B29/58kXiTA95ArHaV7CKRkuoQIBAcgozPIXkfwOQZP G5PSeLOaNQEHQCyqwknij5+ged4ioRkpJliZAm2MJ01MaRgDqFYSaO0ZsTRmBrP1 dopHU71xOMYglzQCrJJr5LH/nFwTS41YveP4s97Y5uO7uHl6WL1Du0rD/UOQTlmE jsgp0uKyo64Ebo5zOjDSBru87SKM4ESfar8DlXS185o3aVKpMd0rD0CLvv3d8ja9 -----END CERTIFICATE-----Generated at Thu May 7 03:43:19 2026 by rpki-client