$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft File: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft (raw, json) Hash identifier: P3AeB+vQO+nbVyNnNfY5SO6ZsENaF9NzEni4TUWfU4g= Subject key identifier: 14:F4:17:A3:CA:8F:30:94:21:82:78:36:29:45:D5:9B:B6:8C:AE:59 Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Certificate serial: 010D0C9F4328584E97798FDE19202482451FFC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft Manifest number: 010D0C9F432858496F11AC5DAA98339370060763 Signing time: Thu 23 Jul 2026 07:00:22 +0000 Manifest this update: Thu 23 Jul 2026 07:00:22 +0000 Manifest next update: Sat 25 Jul 2026 07:00:00 +0000 Files and hashes: 1: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (hash: P2bgI/W/sE0PL33d5CwpeJjcs1ZBgn96fkbxw50JcyI=) 2: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl (hash: pOwCJUWitXY5SI1lP3mAAaGyS45fOsNK8QLyeqo42SA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:79:8f:de:19:20:24:82:45:1f:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Validity Not Before: Jul 23 07:00:22 2026 GMT Not After : Jul 25 07:00:00 2026 GMT Subject: CN=73fc40bb-041c-4751-9bca-dd7597530831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f1:fa:c0:da:64:34:1e:69:66:ed:fa:6a:6b: a6:07:74:63:ba:f9:18:fa:48:87:a9:84:48:a4:1b: e6:5d:e3:e0:0f:c7:ed:b0:f9:95:50:67:9d:ab:55: 9e:5e:7a:c0:57:52:d9:b8:fb:68:1b:48:db:a1:eb: 1a:fd:64:da:97:32:ee:86:d5:36:0c:49:86:c4:ad: e8:75:ff:fe:7d:98:e4:9e:23:16:b2:07:a1:8e:de: 6e:32:97:96:fb:6d:f6:10:23:65:b9:f8:84:b1:df: d1:3f:d4:86:a7:fc:e2:05:97:2b:cf:5e:53:bc:e7: ce:27:79:b8:0d:b5:5c:d1:77:3e:49:85:1a:7f:44: df:ea:a3:dc:26:2f:f3:1d:eb:30:14:c4:e5:cf:17: 13:9b:99:0a:1d:0e:35:b3:0c:3c:d5:fb:17:22:30: 7d:fd:34:73:ad:00:95:9d:c6:2c:9f:8b:1f:f7:b4: 21:c9:fe:0a:96:45:47:30:0b:fb:59:20:c0:5c:71: 3d:21:37:e1:10:75:d8:a0:29:7b:eb:1b:b0:d5:14: 8f:72:66:fa:07:85:63:7a:c3:5b:94:aa:ca:e2:f5: 0b:68:37:c4:f1:60:9c:4d:d7:d6:cd:b0:c2:31:ea: db:95:e3:96:3a:87:25:b1:f5:6a:73:b5:ef:91:06: 41:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F4:17:A3:CA:8F:30:94:21:82:78:36:29:45:D5:9B:B6:8C:AE:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl X509v3 Authority Key Identifier: keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:84:6a:98:6a:72:f5:3b:2e:d8:82:e7:ea:1c:00:9f:df:23: 2d:1e:4b:2a:be:96:b5:d2:28:77:45:a6:0d:48:b9:4d:b1:7b: 4a:ef:4c:2d:f7:07:30:cf:75:dc:d4:64:2e:58:95:ce:a9:8b: 84:10:c3:09:23:da:47:8a:d1:e4:9a:13:f4:8b:e2:97:53:43: cc:ea:26:5b:3c:03:f3:16:d3:b0:78:48:45:54:9f:e0:f7:5c: 11:ab:03:95:6d:d2:05:3b:f3:04:a1:04:05:9a:a8:84:3e:5f: cc:f9:f3:1d:5c:74:56:50:97:29:05:22:74:f8:ce:99:9d:15: 00:0f:7c:ef:1b:14:a2:fb:a6:8c:84:ce:78:db:0f:a2:9e:ac: 04:7e:30:ad:8c:d1:d7:f1:e6:9f:72:93:14:a8:05:92:56:80: 22:80:73:35:0c:ef:35:a1:4d:22:15:87:4e:b4:2c:ce:35:a1: 52:ea:cf:59:6b:8e:6a:8f:ad:b1:eb:e5:ac:bd:27:fe:5f:5e: 50:27:e3:7f:6e:9d:06:24:f8:88:6c:fc:d4:94:67:4d:7e:a5: 18:10:83:f2:5c:92:05:58:46:9b:8e:d1:90:ad:6b:3f:ba:25: 1b:26:48:73:41:b4:f1:8f:e3:f7:a0:2a:ee:b5:1b:97:08:c0: e0:04:c5:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6XeY/eGSAkgkUf/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy M2E3MB4XDTI2MDcyMzA3MDAyMloXDTI2MDcyNTA3MDAwMFowLzEtMCsGA1UEAxMk NzNmYzQwYmItMDQxYy00NzUxLTliY2EtZGQ3NTk3NTMwODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvH6wNpkNB5pZu36amumB3RjuvkY+kiHqYRI pBvmXePgD8ftsPmVUGedq1WeXnrAV1LZuPtoG0jboesa/WTalzLuhtU2DEmGxK3o df/+fZjkniMWsgehjt5uMpeW+232ECNlufiEsd/RP9SGp/ziBZcrz15TvOfOJ3m4 DbVc0Xc+SYUaf0Tf6qPcJi/zHeswFMTlzxcTm5kKHQ41sww81fsXIjB9/TRzrQCV ncYsn4sf97Qhyf4KlkVHMAv7WSDAXHE9ITfhEHXYoCl76xuw1RSPcmb6B4VjesNb lKrK4vULaDfE8WCcTdfWzbDCMerbleOWOoclsfVqc7XvkQZB9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBT0F6PKjzCUIYJ4NilF1Zu2jK5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2 NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMmJjNjQ4YzItMmY5NS00 OGY1LWFjYjctOWU4YTJmOTEyM2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh MmY5MTIzYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJhGqYanL1Oy7YgufqHACf 3yMtHksqvpa10ih3RaYNSLlNsXtK70wt9wcwz3Xc1GQuWJXOqYuEEMMJI9pHitHk mhP0i+KXU0PM6iZbPAPzFtOweEhFVJ/g91wRqwOVbdIFO/MEoQQFmqiEPl/M+fMd XHRWUJcpBSJ0+M6ZnRUAD3zvGxSi+6aMhM542w+inqwEfjCtjNHX8eafcpMUqAWS VoAigHM1DO81oU0iFYdOtCzONaFS6s9Za45qj62x6+WsvSf+X15QJ+N/bp0GJPiI bPzUlGdNfqUYEIPyXJIFWEabjtGQrWs/uiUbJkhzQbTxj+P3oCrutRuXCMDgBMW8 -----END CERTIFICATE-----Generated at Fri Jul 24 00:25:57 2026 by rpki-client