$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9/34023f75-51e1-4feb-8257-4a0e4e1dafa9.mft File: 34023f75-51e1-4feb-8257-4a0e4e1dafa9.mft (raw, json) Hash identifier: dZ1Ta3xfNu2HkfX9+JYrFmweC04f0VXk3X4Gq9WiYcg= Subject key identifier: 9F:BF:EF:BF:17:57:6A:BE:62:AC:33:62:9F:11:B6:A8:47:65:4D:D3 Authority key identifier: 31:01:7E:05:23:55:DB:00:65:36:81:5C:8D:73:E5:70:3F:E8:FE:B8 Certificate issuer: /CN=34023f75-51e1-4feb-8257-4a0e4e1dafa9 Certificate serial: 010D0C9F4328584F42D15204D5E6919E68610870 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9/34023f75-51e1-4feb-8257-4a0e4e1dafa9.mft Manifest number: 010D0C9F4328584BFA862934BF08627BA0887A75 Signing time: Tue 22 Sep 2026 16:00:24 +0000 Manifest this update: Tue 22 Sep 2026 16:00:24 +0000 Manifest next update: Thu 24 Sep 2026 16:00:00 +0000 Files and hashes: 1: 1ec3a647-68b8-3e55-9160-09e582e5b0ce.roa (hash: q+tAbwG1XjmEMluwWOYkWuniBFMlxpT/gx+SCXriicU=) 2: 34023f75-51e1-4feb-8257-4a0e4e1dafa9.crl (hash: xgEp86RU3mliIf5yQ7DCtYsCVRPEtq9qSTmZj1QQlIE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9/34023f75-51e1-4feb-8257-4a0e4e1dafa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9/34023f75-51e1-4feb-8257-4a0e4e1dafa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:d1:52:04:d5:e6:91:9e:68:61:08:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34023f75-51e1-4feb-8257-4a0e4e1dafa9 Validity Not Before: Sep 22 16:00:24 2026 GMT Not After : Sep 24 16:00:00 2026 GMT Subject: CN=1cbf23a4-0144-4942-96fa-5beae3a92795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:04:0d:bb:91:5c:ca:c2:e1:32:26:02:bd:01: 12:f5:ef:7b:77:fd:8e:27:5d:96:77:82:32:b5:6d: a9:17:ba:dc:5b:b6:92:4f:4b:4f:f7:0a:23:6b:ab: 2c:e0:f6:e0:c1:37:d4:a7:2d:60:d9:43:fb:18:bc: 73:71:57:3d:09:90:65:80:0f:bc:f1:eb:e7:e5:29: 4c:89:50:30:04:76:de:f1:2b:e3:89:01:60:f3:e8: 8e:b2:2e:58:33:03:2c:3d:31:11:36:2b:df:c6:d7: 3a:2a:55:41:90:3f:1b:95:19:e3:04:68:00:de:b4: 8c:18:33:62:ef:e7:6f:cb:db:79:b0:5c:1c:0f:46: 45:bc:fa:ae:5e:16:25:8b:b1:cc:78:50:92:80:cf: 7a:e7:57:d5:b4:a0:75:8e:e4:e6:08:9b:c9:b4:57: 4e:0a:a5:08:55:26:dd:9b:01:27:1c:0f:75:55:21: 94:3c:92:c7:fb:47:c3:b0:a4:a5:f5:2b:23:57:d7: 14:c2:28:47:b4:f7:49:c7:fd:3e:35:84:8e:3d:6b: 25:36:b5:04:da:28:d0:9f:1b:7d:3c:73:3c:40:e1: 84:91:e9:6b:74:69:cd:b3:3c:27:e3:e5:6e:76:9f: 0d:d3:d9:40:64:52:b8:27:f7:76:e1:06:96:97:1e: 64:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BF:EF:BF:17:57:6A:BE:62:AC:33:62:9F:11:B6:A8:47:65:4D:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9/34023f75-51e1-4feb-8257-4a0e4e1dafa9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9/34023f75-51e1-4feb-8257-4a0e4e1dafa9.crl X509v3 Authority Key Identifier: keyid:31:01:7E:05:23:55:DB:00:65:36:81:5C:8D:73:E5:70:3F:E8:FE:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:10:98:8a:3d:6c:97:7c:ce:40:68:f9:d4:7b:17:81:a8:63: cf:40:96:a4:03:72:c4:6c:7e:b0:38:8e:f1:4d:7b:ff:63:93: 94:7a:f7:c4:7a:16:38:2e:7f:38:a5:da:9d:ac:36:98:3b:de: 63:51:2a:15:43:d6:ce:5a:9a:5b:64:45:50:04:28:4a:c8:c2: 8b:57:34:ac:6a:45:77:9e:90:7f:cc:a1:69:6b:81:3f:e2:1f: 18:72:d8:8f:b3:67:a9:6e:15:b6:d8:fc:6a:4f:7f:e7:58:4c: 35:47:37:ff:8d:b9:dd:74:9c:fe:6d:37:a8:cf:ac:39:80:c8: fd:df:93:4f:c0:6f:34:a8:78:ae:69:ae:04:34:e2:42:f2:17: cd:a3:ef:fc:f6:64:1c:c2:0f:de:00:0e:7c:e0:a9:70:f3:df: 6a:40:fc:0f:65:54:98:7f:e7:a8:41:1a:89:f1:39:29:04:22: d3:9c:23:e6:14:b3:74:ac:ac:e5:2d:8c:3f:e9:a3:25:b9:02: 5d:28:21:60:da:95:bc:c9:de:56:80:4e:8d:25:ad:bf:ad:57: b0:d3:9b:d7:77:2a:43:b0:7b:67:24:70:71:31:15:c2:61:d3: 81:a1:67:f7:26:97:ed:40:0b:04:fc:62:e6:14:4f:d9:23:d2: a2:96:95:6e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9C0VIE1eaRnmhhCHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQwMjNmNzUtNTFlMS00ZmViLTgyNTctNGEwZTRlMWRh ZmE5MB4XDTI2MDkyMjE2MDAyNFoXDTI2MDkyNDE2MDAwMFowLzEtMCsGA1UEAxMk MWNiZjIzYTQtMDE0NC00OTQyLTk2ZmEtNWJlYWUzYTkyNzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwQNu5FcysLhMiYCvQES9e97d/2OJ12Wd4Iy tW2pF7rcW7aST0tP9woja6ss4PbgwTfUpy1g2UP7GLxzcVc9CZBlgA+88evn5SlM iVAwBHbe8SvjiQFg8+iOsi5YMwMsPTERNivfxtc6KlVBkD8blRnjBGgA3rSMGDNi 7+dvy9t5sFwcD0ZFvPquXhYli7HMeFCSgM9651fVtKB1juTmCJvJtFdOCqUIVSbd mwEnHA91VSGUPJLH+0fDsKSl9SsjV9cUwihHtPdJx/0+NYSOPWslNrUE2ijQnxt9 PHM8QOGEkelrdGnNszwn4+Vudp8N09lAZFK4J/d24QaWlx5kUQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ+/778XV2q+YqwzYp8RtqhHZU3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNDAy M2Y3NS01MWUxLTRmZWItODI1Ny00YTBlNGUxZGFmYTkvMzQwMjNmNzUtNTFlMS00 ZmViLTgyNTctNGEwZTRlMWRhZmE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzQwMjNmNzUtNTFlMS00ZmViLTgy NTctNGEwZTRlMWRhZmE5LzM0MDIzZjc1LTUxZTEtNGZlYi04MjU3LTRhMGU0ZTFk YWZhOS5jcmwwHwYDVR0jBBgwFoAUMQF+BSNV2wBlNoFcjXPlcD/o/rgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNDAyM2Y3NS01MWUxLTRmZWItODI1Ny00YTBl NGUxZGFmYTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXEJiKPWyXfM5AaPnUexeB qGPPQJakA3LEbH6wOI7xTXv/Y5OUevfEehY4Ln84pdqdrDaYO95jUSoVQ9bOWppb ZEVQBChKyMKLVzSsakV3npB/zKFpa4E/4h8YctiPs2epbhW22PxqT3/nWEw1Rzf/ jbnddJz+bTeoz6w5gMj935NPwG80qHiuaa4ENOJC8hfNo+/89mQcwg/eAA584Klw 899qQPwPZVSYf+eoQRqJ8TkpBCLTnCPmFLN0rKzlLYw/6aMluQJdKCFg2pW8yd5W gE6NJa2/rVew05vXdypDsHtnJHBxMRXCYdOBoWf3JpftQAsE/GLmFE/ZI9KilpVu -----END CERTIFICATE-----Generated at Wed Sep 23 10:42:21 2026 by rpki-client