$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft File: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft (raw, json) Hash identifier: r8ffmz6OhzY889MgPc25ShmvsTrcUJpdPSOo5OrfCOU= Subject key identifier: FD:FC:8C:86:8F:65:98:6A:9E:F4:C6:F3:2C:23:AA:27:C1:FA:5F:DA Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Certificate serial: 010D0C9F4328584E40EE5BC7ABEDA00C826FEFA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft Manifest number: 010D0C9F432858496F11AC5DAA98339370060744 Signing time: Mon 22 Jun 2026 07:00:22 +0000 Manifest this update: Mon 22 Jun 2026 07:00:22 +0000 Manifest next update: Thu 25 Jun 2026 07:00:00 +0000 Files and hashes: 1: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (hash: P2bgI/W/sE0PL33d5CwpeJjcs1ZBgn96fkbxw50JcyI=) 2: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl (hash: p5CxTUB1+2SglqM0yUUpFK9jxCFsZz5RyTYE8a1x4Yo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:40:ee:5b:c7:ab:ed:a0:0c:82:6f:ef:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Validity Not Before: Jun 22 07:00:22 2026 GMT Not After : Jun 25 07:00:00 2026 GMT Subject: CN=73cd0ea8-4453-4f0c-a576-a88f024fe1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ad:b6:5a:c2:1e:06:ee:41:ee:b6:46:cf:51: 42:c8:bd:89:74:b0:a1:bc:a5:67:37:67:c7:e5:10: 6b:42:e7:1f:59:e4:73:68:26:4d:42:b7:52:ea:a6: d8:cf:84:cb:a8:2f:b0:4c:d2:ce:bb:df:e6:56:0f: 76:f4:83:ac:b2:74:72:95:c6:ef:aa:15:cb:19:fa: e6:83:71:bc:59:e8:4b:03:81:f4:94:76:ac:a4:f9: 6d:2e:39:6e:78:af:90:88:43:64:c8:9e:f5:59:12: 9a:50:fe:5d:27:0f:99:d2:12:41:20:88:67:29:7e: 49:6f:51:a1:58:e9:1c:1c:0f:09:9a:55:c0:06:c9: 55:30:e6:95:70:b4:75:a8:35:e5:10:75:ba:17:9e: db:cb:03:73:fc:f4:89:f7:4e:14:3a:57:22:b8:75: 29:bc:a0:c7:62:10:61:34:d2:2b:fe:8c:8e:24:5d: 8a:87:5d:dc:a0:7b:1c:75:a7:8a:d2:98:45:b9:cb: eb:df:21:c7:94:fb:86:a4:ea:be:df:4e:7b:21:27: 8b:9a:24:51:46:98:40:17:4d:fb:ff:70:5e:05:49: e5:6d:61:5c:2f:f5:e8:49:bf:37:7c:f2:ed:4e:47: 00:71:5d:27:1b:ea:c3:f9:76:bf:74:5a:99:3c:61: 06:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FC:8C:86:8F:65:98:6A:9E:F4:C6:F3:2C:23:AA:27:C1:FA:5F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl X509v3 Authority Key Identifier: keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:0a:64:f6:6c:30:dd:9a:95:c7:83:36:39:74:7a:56:6d:68: 94:cc:28:73:26:ed:a1:05:65:33:6d:44:a3:e5:b8:6b:07:eb: 2e:8f:b3:7e:9f:05:e4:90:c6:d4:ef:45:51:4b:4f:03:f2:9c: 4b:1e:d6:b8:f4:96:bb:4c:74:71:e8:99:15:92:6b:20:e0:68: 6e:0d:99:84:53:27:48:2c:c4:5f:4b:2b:a6:c2:50:11:fe:08: 48:b1:bd:5e:e4:2c:94:c7:8f:6d:ac:18:ea:c8:2f:29:ab:23: 6d:e3:76:f7:98:49:7a:86:09:21:3d:10:b3:d8:60:59:b5:85: 6f:af:08:01:0b:7b:e2:40:15:e3:af:ae:f9:b9:d2:0a:31:bc: 97:fe:96:49:79:59:3d:6a:00:e9:4a:d3:dd:45:7d:ab:5f:e8: 1b:4f:6e:bd:4d:9e:3e:cc:1d:b6:54:9c:bd:a0:e0:ec:24:80: 28:3a:be:12:99:ad:00:6f:1f:b3:e6:5e:43:c6:33:24:80:9d: bc:23:17:3b:23:30:9b:bd:ab:c4:35:2a:e7:82:f6:44:91:83: a8:df:49:8b:7f:94:cc:94:fe:80:5a:b2:51:91:b1:4f:32:e7: 59:61:89:2c:80:fe:b0:a0:78:69:50:3f:91:bd:03:35:fe:ac: cb:f8:d8:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE5A7lvHq+2gDIJv76AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy M2E3MB4XDTI2MDYyMjA3MDAyMloXDTI2MDYyNTA3MDAwMFowLzEtMCsGA1UEAxMk NzNjZDBlYTgtNDQ1My00ZjBjLWE1NzYtYTg4ZjAyNGZlMWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl622WsIeBu5B7rZGz1FCyL2JdLChvKVnN2fH 5RBrQucfWeRzaCZNQrdS6qbYz4TLqC+wTNLOu9/mVg929IOssnRylcbvqhXLGfrm g3G8WehLA4H0lHaspPltLjlueK+QiENkyJ71WRKaUP5dJw+Z0hJBIIhnKX5Jb1Gh WOkcHA8JmlXABslVMOaVcLR1qDXlEHW6F57bywNz/PSJ904UOlciuHUpvKDHYhBh NNIr/oyOJF2Kh13coHscdaeK0phFucvr3yHHlPuGpOq+3057ISeLmiRRRphAF037 /3BeBUnlbWFcL/XoSb83fPLtTkcAcV0nG+rD+Xa/dFqZPGEGYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP38jIaPZZhqnvTG8ywjqifB+l/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2 NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMmJjNjQ4YzItMmY5NS00 OGY1LWFjYjctOWU4YTJmOTEyM2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh MmY5MTIzYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALCmT2bDDdmpXHgzY5dHpW bWiUzChzJu2hBWUzbUSj5bhrB+suj7N+nwXkkMbU70VRS08D8pxLHta49Ja7THRx 6JkVkmsg4GhuDZmEUydILMRfSyumwlAR/ghIsb1e5CyUx49trBjqyC8pqyNt43b3 mEl6hgkhPRCz2GBZtYVvrwgBC3viQBXjr675udIKMbyX/pZJeVk9agDpStPdRX2r X+gbT269TZ4+zB22VJy9oODsJIAoOr4Sma0Abx+z5l5DxjMkgJ28Ixc7IzCbvavE NSrngvZEkYOo30mLf5TMlP6AWrJRkbFPMudZYYksgP6woHhpUD+RvQM1/qzL+Nhe -----END CERTIFICATE-----Generated at Mon Jun 22 15:25:59 2026 by rpki-client