$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft File: 23d4344d-e6b1-4a9e-8560-f54da402f39b.mft (raw, json) Hash identifier: XNLInZx+ewaDHp+WjceO8F/jC+vi1asTd8CcXwp7paU= Subject key identifier: 83:BA:7A:0B:6E:64:0C:4B:59:12:04:A2:47:AB:4E:F2:63:91:CA:D0 Authority key identifier: F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 Certificate issuer: /CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Certificate serial: 010D0C9F4328584F4AF5D312C957083034ED5800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft Manifest number: 010D0C9F4328584B9B6A4EEE0F54CD7B5602AE1B Signing time: Fri 25 Sep 2026 14:00:23 +0000 Manifest this update: Fri 25 Sep 2026 14:00:23 +0000 Manifest next update: Mon 28 Sep 2026 14:00:00 +0000 Files and hashes: 1: 23d4344d-e6b1-4a9e-8560-f54da402f39b.crl (hash: w1JtClJCyxyhsUK1K/KdhDXwetA3Kz2rjbcUAiARGNE=) 2: 2c9499a6-75ea-3ff6-9241-321833caa089.roa (hash: 9Bto9lflI9SgiGCifGLyvrUDKHmNqnQl/kDLOXeuBxU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:f5:d3:12:c9:57:08:30:34:ed:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Validity Not Before: Sep 25 14:00:23 2026 GMT Not After : Sep 28 14:00:00 2026 GMT Subject: CN=814fff7b-adeb-4d88-a497-0dd0892a2887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:86:f3:9a:09:1f:f0:17:cd:a8:bd:9f:11: c7:81:36:9e:f7:af:4c:3d:96:e8:57:78:ce:8a:70: c0:35:a5:87:b9:00:b0:d3:e9:e6:1b:3e:a2:73:70: 33:aa:7d:6d:a0:ef:12:c7:55:01:3a:87:1e:29:97: 2a:5b:cf:9f:d4:fa:ec:f4:84:ba:33:fe:8a:b9:64: 71:f5:f3:1a:42:9c:c3:c9:32:99:85:ef:7b:ee:25: 8d:32:dd:2f:1d:14:c9:19:73:50:73:03:f5:7f:8e: b6:84:42:b9:0c:2f:7d:e3:04:7d:f7:f0:4b:39:37: 2a:cf:47:5a:f1:f9:e1:74:62:72:7e:5e:51:47:88: b9:50:d4:57:95:5c:0c:46:08:00:86:ce:12:17:45: 2c:18:cd:a9:29:76:9f:16:ef:3a:18:73:39:c0:38: 24:ea:b5:83:24:69:52:26:de:86:e4:dd:76:c2:b3: 67:ed:18:63:45:74:75:f3:c1:38:e1:d8:5b:a8:c7: bf:25:b6:88:90:3f:95:4b:64:6c:79:a9:b7:4c:af: ab:37:dc:5e:61:1f:e5:c1:c7:da:b6:c6:f1:e5:8d: 0a:cf:e6:17:1a:6c:d2:66:2c:e5:85:72:7e:59:f0: d4:f3:e6:c6:19:65:aa:62:b2:93:4e:65:c9:93:54: 3e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BA:7A:0B:6E:64:0C:4B:59:12:04:A2:47:AB:4E:F2:63:91:CA:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl X509v3 Authority Key Identifier: keyid:F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:2c:42:c9:ac:92:63:0f:6d:bf:31:f8:43:62:70:75:78:a0: eb:c3:58:b7:b7:02:80:aa:a1:2f:0b:23:92:f9:dc:4d:e0:c9: fe:3b:eb:a2:b7:61:0e:67:10:5a:6c:58:73:35:e5:93:0d:dd: 91:2e:5a:cf:4b:97:b3:d3:7e:8a:0f:5f:62:35:47:7b:49:0c: 12:56:e9:06:b2:a5:6b:52:18:cf:0c:6b:25:bc:76:3a:c9:db: 99:4d:75:4f:a8:a6:a4:64:17:a7:f5:33:22:c7:e0:3f:50:c5: 11:83:f4:43:b5:a4:5d:e6:d1:84:d7:96:e5:26:4e:fa:61:4a: 54:ef:52:ea:4b:0e:62:61:66:fb:65:73:d2:22:34:45:dc:c4: 21:c3:8d:af:7d:74:e5:13:a6:6f:31:6f:c7:0b:05:20:32:f1: 35:ff:fd:bd:1f:35:3f:59:8f:75:c8:d9:6a:63:1c:cc:0b:33: 9a:aa:e2:db:2b:77:7e:b5:36:e8:2f:6b:0d:a3:18:a9:6d:65: f2:f0:bd:69:e8:eb:92:67:29:1c:00:51:e3:35:5d:27:0d:80: 6d:93:b6:4e:87:27:be:c3:b7:f4:e3:82:1d:6d:92:bc:23:92: 51:ad:b2:1b:9a:9a:df:7d:2e:aa:7c:20:82:1e:dd:81:99:2a: ac:63:1d:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9K9dMSyVcIMDTtWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkNDM0NGQtZTZiMS00YTllLTg1NjAtZjU0ZGE0MDJm MzliMB4XDTI2MDkyNTE0MDAyM1oXDTI2MDkyODE0MDAwMFowLzEtMCsGA1UEAxMk ODE0ZmZmN2ItYWRlYi00ZDg4LWE0OTctMGRkMDg5MmEyODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N2G85oJH/AXzai9nxHHgTae969MPZboV3jO inDANaWHuQCw0+nmGz6ic3Azqn1toO8Sx1UBOoceKZcqW8+f1Prs9IS6M/6KuWRx 9fMaQpzDyTKZhe977iWNMt0vHRTJGXNQcwP1f462hEK5DC994wR99/BLOTcqz0da 8fnhdGJyfl5RR4i5UNRXlVwMRggAhs4SF0UsGM2pKXafFu86GHM5wDgk6rWDJGlS Jt6G5N12wrNn7RhjRXR188E44dhbqMe/JbaIkD+VS2Rseam3TK+rN9xeYR/lwcfa tsbx5Y0Kz+YXGmzSZizlhXJ+WfDU8+bGGWWqYrKTTmXJk1Q+IwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIO6egtuZAxLWRIEokerTvJjkcrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0 MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRkYTQwMmYzOWIvMjNkNDM0NGQtZTZiMS00 YTllLTg1NjAtZjU0ZGE0MDJmMzliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjNkNDM0NGQtZTZiMS00YTllLTg1 NjAtZjU0ZGE0MDJmMzliLzIzZDQzNDRkLWU2YjEtNGE5ZS04NTYwLWY1NGRhNDAy ZjM5Yi5jcmwwHwYDVR0jBBgwFoAU9WcvW8Km8IfxAR+Pg7MGuQYGY3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRk YTQwMmYzOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJLELJrJJjD22/MfhDYnB1 eKDrw1i3twKAqqEvCyOS+dxN4Mn+O+uit2EOZxBabFhzNeWTDd2RLlrPS5ez036K D19iNUd7SQwSVukGsqVrUhjPDGslvHY6yduZTXVPqKakZBen9TMix+A/UMURg/RD taRd5tGE15blJk76YUpU71LqSw5iYWb7ZXPSIjRF3MQhw42vfXTlE6ZvMW/HCwUg MvE1//29HzU/WY91yNlqYxzMCzOaquLbK3d+tTboL2sNoxipbWXy8L1p6OuSZykc AFHjNV0nDYBtk7ZOhye+w7f044IdbZK8I5JRrbIbmprffS6qfCCCHt2BmSqsYx2I -----END CERTIFICATE-----Generated at Sat Sep 26 12:49:51 2026 by rpki-client