$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5b9573-29af-4af6-8f27-d9a2a778a762/2b5b9573-29af-4af6-8f27-d9a2a778a762.mft File: 2b5b9573-29af-4af6-8f27-d9a2a778a762.mft (raw, json) Hash identifier: cinxsg/sRZqth6Jt1T+dyyMwCwdd70uaCSpZoTOu7dI= Subject key identifier: 20:06:62:10:F2:59:EF:9A:23:F1:7F:41:22:07:0C:FC:F3:E8:5F:FB Authority key identifier: FD:A3:2D:4D:19:06:C9:EF:73:8B:B9:EA:3E:FA:C5:78:0D:2F:BA:F2 Certificate issuer: /CN=2b5b9573-29af-4af6-8f27-d9a2a778a762 Certificate serial: 010D0C9F4328584E97798FE7D566ADBE11FD3A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5b9573-29af-4af6-8f27-d9a2a778a762.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5b9573-29af-4af6-8f27-d9a2a778a762/2b5b9573-29af-4af6-8f27-d9a2a778a762.mft Manifest number: 010D0C9F4328584073A844EB7DA6A5A05C8970D7 Signing time: Thu 23 Jul 2026 07:00:22 +0000 Manifest this update: Thu 23 Jul 2026 07:00:22 +0000 Manifest next update: Sun 26 Jul 2026 07:00:00 +0000 Files and hashes: 1: 2b5b9573-29af-4af6-8f27-d9a2a778a762.crl (hash: ZJDsJ5MD4hsk2ameD0ScWQE5NSSyE6lJTXke7cQB8qk=) 2: e0b0db75-8dae-3aef-9a27-ebecae234dac.roa (hash: G5tPEKUCwXS3dzqgUD6HOO/sjciunKwlUGjzC04MAlI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5b9573-29af-4af6-8f27-d9a2a778a762/2b5b9573-29af-4af6-8f27-d9a2a778a762.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5b9573-29af-4af6-8f27-d9a2a778a762/2b5b9573-29af-4af6-8f27-d9a2a778a762.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5b9573-29af-4af6-8f27-d9a2a778a762.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:79:8f:e7:d5:66:ad:be:11:fd:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b5b9573-29af-4af6-8f27-d9a2a778a762 Validity Not Before: Jul 23 07:00:22 2026 GMT Not After : Jul 26 07:00:00 2026 GMT Subject: CN=ba1a16a6-0169-442a-93dc-c4337e8bf9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4c:02:a0:7b:48:45:a1:71:6b:0f:eb:cb:10: 6e:67:6a:d3:ac:a9:09:96:f5:ac:4e:97:07:39:f4: 27:83:46:9d:bf:4d:63:5b:e9:df:8a:9a:09:f5:e5: 90:4a:28:53:a8:de:8a:71:2c:d3:1d:ed:70:ef:ba: da:c4:7a:2b:34:d4:a1:56:24:10:3c:15:c2:4c:03: 5d:a5:8c:79:c9:99:f2:90:13:8c:99:5e:d4:ec:ec: 11:a9:72:7d:a3:7a:2b:ae:9e:e5:c8:74:35:bc:f2: 31:0e:60:ba:37:56:81:4a:19:75:68:39:eb:10:62: 81:03:de:54:e5:4d:07:53:c5:46:85:ad:6d:b0:64: 22:f9:2d:eb:63:c0:37:07:5e:d6:eb:54:48:78:89: 64:5c:61:62:42:d3:65:89:03:fd:91:de:b4:5f:9b: 1d:06:a0:a3:9b:c9:10:b9:c4:ce:78:f3:18:5e:38: b9:62:39:fc:e8:62:bd:11:7f:6f:4f:25:1b:3e:7d: 85:57:dc:7e:47:90:7f:08:4c:7f:4b:38:98:18:4c: cc:29:dd:b3:bb:59:81:d3:30:69:4d:35:2e:e4:51: 10:fd:a3:fd:a5:3e:ae:11:22:c8:01:65:39:ac:0a: 45:1c:20:48:14:26:4f:84:8c:4b:ce:23:a9:08:06: e3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:06:62:10:F2:59:EF:9A:23:F1:7F:41:22:07:0C:FC:F3:E8:5F:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5b9573-29af-4af6-8f27-d9a2a778a762/2b5b9573-29af-4af6-8f27-d9a2a778a762.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5b9573-29af-4af6-8f27-d9a2a778a762/2b5b9573-29af-4af6-8f27-d9a2a778a762.crl X509v3 Authority Key Identifier: keyid:FD:A3:2D:4D:19:06:C9:EF:73:8B:B9:EA:3E:FA:C5:78:0D:2F:BA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5b9573-29af-4af6-8f27-d9a2a778a762.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:cd:50:fc:a3:d8:bf:3d:9e:12:c7:36:93:cb:5d:a9:eb:e8: a1:f5:84:d8:3e:ce:5f:75:4c:6b:de:e6:09:aa:56:2d:a4:85: e8:c7:f0:cf:61:2d:2c:be:c4:53:47:8b:6f:36:0c:f7:e0:8a: 63:2b:dd:d4:3b:33:4b:5c:e3:d4:e0:1c:fc:f0:de:40:ee:02: 05:b2:27:d3:b6:f5:de:62:98:1e:fb:eb:f1:c5:88:86:52:10: 43:21:a2:28:56:a7:11:48:6b:a4:81:7a:04:b6:3a:c6:21:04: 0c:a4:79:f3:89:a4:33:70:bf:7c:df:5c:aa:84:67:a9:76:21: 16:0a:a5:53:14:c6:cd:22:c1:11:b1:96:21:d4:fb:ce:d4:a1: dd:9d:1b:94:a7:23:6d:8e:4a:17:ba:b9:84:a8:80:1b:67:20: b6:e3:62:22:17:10:85:4c:66:f0:bb:e1:9a:ad:92:23:97:e2: 3a:48:de:d5:55:92:08:64:a2:2b:da:8c:8a:f8:c1:8c:04:c5: e1:48:fb:6c:5c:8a:24:7f:58:cd:81:59:90:39:4d:a4:92:dd: fa:94:7d:36:ba:70:2f:43:92:52:1a:14:13:80:1a:d2:74:37: 31:28:22:d7:e0:8a:0f:4d:eb:85:80:7e:61:19:5a:cf:eb:53: 34:7d:3b:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6XeY/n1WatvhH9OkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1Yjk1NzMtMjlhZi00YWY2LThmMjctZDlhMmE3Nzhh NzYyMB4XDTI2MDcyMzA3MDAyMloXDTI2MDcyNjA3MDAwMFowLzEtMCsGA1UEAxMk YmExYTE2YTYtMDE2OS00NDJhLTkzZGMtYzQzMzdlOGJmOWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEwCoHtIRaFxaw/ryxBuZ2rTrKkJlvWsTpcH OfQng0adv01jW+nfipoJ9eWQSihTqN6KcSzTHe1w77raxHorNNShViQQPBXCTANd pYx5yZnykBOMmV7U7OwRqXJ9o3orrp7lyHQ1vPIxDmC6N1aBShl1aDnrEGKBA95U 5U0HU8VGha1tsGQi+S3rY8A3B17W61RIeIlkXGFiQtNliQP9kd60X5sdBqCjm8kQ ucTOePMYXji5Yjn86GK9EX9vTyUbPn2FV9x+R5B/CEx/SziYGEzMKd2zu1mB0zBp TTUu5FEQ/aP9pT6uESLIAWU5rApFHCBIFCZPhIxLziOpCAbjQQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCAGYhDyWe+aI/F/QSIHDPzz6F/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYjVi OTU3My0yOWFmLTRhZjYtOGYyNy1kOWEyYTc3OGE3NjIvMmI1Yjk1NzMtMjlhZi00 YWY2LThmMjctZDlhMmE3NzhhNzYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmI1Yjk1NzMtMjlhZi00YWY2LThm MjctZDlhMmE3NzhhNzYyLzJiNWI5NTczLTI5YWYtNGFmNi04ZjI3LWQ5YTJhNzc4 YTc2Mi5jcmwwHwYDVR0jBBgwFoAU/aMtTRkGye9zi7nqPvrFeA0vuvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYjViOTU3My0yOWFmLTRhZjYtOGYyNy1kOWEy YTc3OGE3NjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNzVD8o9i/PZ4SxzaTy12p 6+ih9YTYPs5fdUxr3uYJqlYtpIXox/DPYS0svsRTR4tvNgz34IpjK93UOzNLXOPU 4Bz88N5A7gIFsifTtvXeYpge++vxxYiGUhBDIaIoVqcRSGukgXoEtjrGIQQMpHnz iaQzcL9831yqhGepdiEWCqVTFMbNIsERsZYh1PvO1KHdnRuUpyNtjkoXurmEqIAb ZyC242IiFxCFTGbwu+GarZIjl+I6SN7VVZIIZKIr2oyK+MGMBMXhSPtsXIokf1jN gVmQOU2kkt36lH02unAvQ5JSGhQTgBrSdDcxKCLX4IoPTeuFgH5hGVrP61M0fTsd -----END CERTIFICATE-----Generated at Fri Jul 24 00:45:26 2026 by rpki-client