$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.mft File: 523508d8-5364-4972-acf2-2c22cfac7647.mft (raw, json) Hash identifier: XtyXBCfKl2hIjftgOexco7orAdn6MDPdO26yNDt7WCo= Subject key identifier: 9A:72:75:BF:D9:B1:2E:06:88:80:65:F5:01:59:7F:95:DB:B2:84:0F Authority key identifier: 51:3A:99:FC:8D:2F:D8:95:A1:1D:08:B0:CF:2D:AE:E1:71:39:C6:F0 Certificate issuer: /CN=523508d8-5364-4972-acf2-2c22cfac7647 Certificate serial: 010D0C9F4328584F7C47E887F97DF77B4EEB1100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.mft Manifest number: 010D0C9F4328584DCB9C8D2C85546446399D189F Signing time: Tue 13 Oct 2026 06:00:24 +0000 Manifest this update: Tue 13 Oct 2026 06:00:24 +0000 Manifest next update: Thu 15 Oct 2026 06:00:00 +0000 Files and hashes: 1: 4c4981e5-e112-343f-aee7-b9f15d53947c.roa (hash: MS9VioBUZt6VvTaeI+aAZOZPEhdgSW5ugoqLwgfQaB4=) 2: 523508d8-5364-4972-acf2-2c22cfac7647.crl (hash: TlW41p3yjPZr1FSZln1wXxlHSZa63F8CyfZl7P+aTsg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7c:47:e8:87:f9:7d:f7:7b:4e:eb:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523508d8-5364-4972-acf2-2c22cfac7647 Validity Not Before: Oct 13 06:00:24 2026 GMT Not After : Oct 15 06:00:00 2026 GMT Subject: CN=c5f40ae5-fd77-4ba6-91d2-5aaa73e89507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:62:0d:a7:80:f3:ba:84:1f:8c:bd:55:3b:8d: ef:8d:c3:cd:66:fe:43:25:1f:74:c2:b7:23:f1:f4: c7:b5:1d:00:1a:1b:b2:e6:68:a7:25:4d:99:82:22: 78:7d:0e:a4:93:33:eb:9f:d2:3b:ea:77:90:41:ff: 90:1e:51:5f:b9:1c:c5:a2:09:ea:86:bb:b5:fa:78: f7:25:0c:4c:2b:c8:56:6d:dd:53:fa:4e:3b:36:62: 47:a9:5d:22:33:8c:a8:88:f3:8f:66:da:2c:25:94: 2e:22:7f:b1:69:ff:f7:35:df:52:5a:42:71:91:64: 6b:46:ab:8e:b4:fc:09:15:64:0e:99:a8:5f:d7:14: 99:40:29:8e:8c:c6:ed:1d:74:60:d6:3a:c4:f8:24: ed:c0:c2:16:ba:86:70:c3:f7:e4:b6:71:77:f8:80: 28:3d:8c:54:e0:87:3c:92:39:18:b9:92:8c:ed:41: e5:f1:b8:f9:c2:3a:0f:95:69:9e:c4:cf:31:f1:28: cc:64:31:60:83:22:cf:54:3b:b4:1d:96:c2:c5:73: 89:a5:60:66:3b:95:98:bf:eb:ca:94:69:9b:67:0c: 74:28:39:d6:08:48:80:ff:db:80:c7:fa:1d:3f:e0: 8f:58:d0:6e:a8:e3:e0:74:f6:08:6c:62:dc:94:de: 4b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:72:75:BF:D9:B1:2E:06:88:80:65:F5:01:59:7F:95:DB:B2:84:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.crl X509v3 Authority Key Identifier: keyid:51:3A:99:FC:8D:2F:D8:95:A1:1D:08:B0:CF:2D:AE:E1:71:39:C6:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a7:9f:75:6d:1d:8b:52:c0:60:09:37:0a:e8:14:e2:34:c4: 9e:53:71:c6:8c:95:34:99:16:4c:21:8a:0d:0a:3e:9b:0a:a8: c1:27:fc:32:e7:12:eb:5c:1a:59:0f:16:2d:a9:9e:84:70:30: 85:49:f8:d5:ea:7a:ad:d4:0e:8b:fb:68:c7:ff:54:ed:f4:bf: 8b:20:45:c6:2e:d6:c3:69:79:38:a6:8f:ab:ed:51:61:7a:a1: 6e:1e:a2:78:7f:97:22:78:43:8f:02:4e:42:95:90:e3:99:9a: c3:03:29:9f:8d:4d:ee:30:3e:69:54:cd:a2:d5:3f:c5:5a:24: d6:dd:ef:0a:de:76:6b:e3:9a:f3:1b:56:ad:5b:92:8f:ab:87: 9e:51:32:7e:b8:8c:d1:29:50:58:63:4d:06:22:92:e4:f0:00: 5c:d2:bc:7f:db:68:a8:2a:55:85:6b:cf:b5:d6:b2:76:e4:d2: 22:cb:b8:52:1f:48:d8:21:8e:97:82:a6:75:57:d0:52:70:37: ab:ed:3d:0f:d2:57:52:40:7c:c6:7b:cd:35:eb:f9:a2:25:37: bb:d2:2a:1c:7d:d7:a6:35:fe:c8:a9:81:17:92:24:5c:01:7f: 14:a8:8d:13:08:26:f9:ef:a5:af:50:6f:b7:17:94:f7:c2:d3: 7e:17:ef:25 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE98R+iH+X33e07rEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIzNTA4ZDgtNTM2NC00OTcyLWFjZjItMmMyMmNmYWM3 NjQ3MB4XDTI2MTAxMzA2MDAyNFoXDTI2MTAxNTA2MDAwMFowLzEtMCsGA1UEAxMk YzVmNDBhZTUtZmQ3Ny00YmE2LTkxZDItNWFhYTczZTg5NTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2INp4DzuoQfjL1VO43vjcPNZv5DJR90wrcj 8fTHtR0AGhuy5minJU2ZgiJ4fQ6kkzPrn9I76neQQf+QHlFfuRzFognqhru1+nj3 JQxMK8hWbd1T+k47NmJHqV0iM4yoiPOPZtosJZQuIn+xaf/3Nd9SWkJxkWRrRquO tPwJFWQOmahf1xSZQCmOjMbtHXRg1jrE+CTtwMIWuoZww/fktnF3+IAoPYxU4Ic8 kjkYuZKM7UHl8bj5wjoPlWmexM8x8SjMZDFggyLPVDu0HZbCxXOJpWBmO5WYv+vK lGmbZwx0KDnWCEiA/9uAx/odP+CPWNBuqOPgdPYIbGLclN5LpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJpydb/ZsS4GiIBl9QFZf5XbsoQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81MjM1 MDhkOC01MzY0LTQ5NzItYWNmMi0yYzIyY2ZhYzc2NDcvNTIzNTA4ZDgtNTM2NC00 OTcyLWFjZjItMmMyMmNmYWM3NjQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTIzNTA4ZDgtNTM2NC00OTcyLWFj ZjItMmMyMmNmYWM3NjQ3LzUyMzUwOGQ4LTUzNjQtNDk3Mi1hY2YyLTJjMjJjZmFj NzY0Ny5jcmwwHwYDVR0jBBgwFoAUUTqZ/I0v2JWhHQiwzy2u4XE5xvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81MjM1MDhkOC01MzY0LTQ5NzItYWNmMi0yYzIy Y2ZhYzc2NDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACp591bR2LUsBgCTcK6BTi NMSeU3HGjJU0mRZMIYoNCj6bCqjBJ/wy5xLrXBpZDxYtqZ6EcDCFSfjV6nqt1A6L +2jH/1Tt9L+LIEXGLtbDaXk4po+r7VFheqFuHqJ4f5cieEOPAk5ClZDjmZrDAymf jU3uMD5pVM2i1T/FWiTW3e8K3nZr45rzG1atW5KPq4eeUTJ+uIzRKVBYY00GIpLk 8ABc0rx/22ioKlWFa8+11rJ25NIiy7hSH0jYIY6XgqZ1V9BScDer7T0P0ldSQHzG e8016/miJTe70iocfdemNf7IqYEXkiRcAX8UqI0TCCb576WvUG+3F5T3wtN+F+8l -----END CERTIFICATE-----Generated at Tue Oct 13 20:59:40 2026 by rpki-client