$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.mft File: a4cfaa95-c33a-49a6-b4ad-44b93425df6e.mft (raw, json) Hash identifier: KfEsQMrp5pFHbtA5nWGxKvtBAT+vxxQPamUREFgpdoY= Subject key identifier: 0D:67:DD:27:C9:90:BF:C2:5D:74:90:4F:95:0B:EB:11:65:A6:37:4F Authority key identifier: 40:D7:23:63:AC:57:1F:B4:63:EB:F7:B9:62:DB:57:72:5D:57:A3:99 Certificate issuer: /CN=a4cfaa95-c33a-49a6-b4ad-44b93425df6e Certificate serial: 010D0C9F4328584F48A2407120605AACCE05B0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.mft Manifest number: 010D0C9F4328584E4243CF7BDC1A6EA9F26CE361 Signing time: Thu 24 Sep 2026 18:00:23 +0000 Manifest this update: Thu 24 Sep 2026 18:00:23 +0000 Manifest next update: Sun 27 Sep 2026 18:00:00 +0000 Files and hashes: 1: a4cfaa95-c33a-49a6-b4ad-44b93425df6e.crl (hash: z9DUzLZx82koDykaX2Av4j35aQEeLkjMW8zmZy0w6Tw=) 2: c73fd9f5-a2d4-3eb7-bebe-002d6774e454.roa (hash: QOzYlxEeqoR8gvKZCSVYLfH1AMfWMb9g61E2EEsTPcQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:a2:40:71:20:60:5a:ac:ce:05:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4cfaa95-c33a-49a6-b4ad-44b93425df6e Validity Not Before: Sep 24 18:00:23 2026 GMT Not After : Sep 27 18:00:00 2026 GMT Subject: CN=1abaf9bf-57f7-4f05-849a-d64efdd409c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:f0:9c:02:a7:1c:39:36:13:8e:68:e5:f0: a7:55:fe:e3:0e:87:6d:31:7c:58:90:8a:d0:f2:95: 45:7e:b1:3a:ca:a4:75:e2:5d:d3:20:20:2b:1c:9a: bd:80:f9:7b:57:57:0c:26:06:f2:68:18:0f:b2:d3: 11:e4:a7:d0:27:13:2c:71:30:02:f7:e3:a9:e1:91: 12:8b:66:dc:a9:39:32:a8:ac:e0:d5:d6:9e:bc:fa: 4b:76:15:12:ae:c2:cf:39:a8:b4:ca:36:ac:24:f4: 3e:92:a6:47:f7:14:ff:85:33:b6:e6:19:bd:29:97: 26:c4:e9:d2:89:59:7c:7c:89:13:52:eb:57:6e:3f: c6:77:8a:25:7f:7f:ff:ed:09:96:6a:30:cf:99:54: be:bb:05:28:86:f1:27:22:fb:98:c7:fa:e5:d1:e7: c6:54:92:7a:63:4b:44:19:82:fe:37:18:44:7e:0d: 97:05:e6:7b:6d:9c:b2:31:ca:91:3f:39:1c:76:d9: c4:b2:c3:d2:34:7f:b8:8b:57:9d:56:3c:4b:8a:4d: a5:22:a6:b2:ac:93:1d:e5:51:db:e6:07:2d:be:ba: f0:71:c2:93:20:0a:6b:36:11:c1:d8:cb:d8:30:5c: 14:cd:12:b1:db:c4:fe:a6:50:4f:4c:94:9d:0d:f3: ed:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:67:DD:27:C9:90:BF:C2:5D:74:90:4F:95:0B:EB:11:65:A6:37:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.crl X509v3 Authority Key Identifier: keyid:40:D7:23:63:AC:57:1F:B4:63:EB:F7:B9:62:DB:57:72:5D:57:A3:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:1a:b0:fb:35:cc:4c:96:bf:f9:f8:03:90:55:05:76:98:29: 00:9d:fc:e8:99:74:5f:d5:21:dd:a4:e8:e3:35:d1:ea:08:ff: 81:6d:e5:56:f2:b5:0b:6a:52:c6:2b:97:2c:b1:03:f3:7e:8d: 94:6f:70:46:64:c5:11:72:31:9e:8c:cf:9c:9c:ca:f1:5e:a7: c6:bb:b9:52:8a:25:81:df:68:a7:ca:04:c1:1d:f0:89:53:c2: 1e:e7:49:64:00:90:64:26:90:41:41:fa:07:91:2a:af:37:89: 5f:26:b6:ae:46:82:ca:88:90:b3:2f:da:df:15:35:75:0a:ec: 46:32:41:ad:1e:95:68:49:35:5e:86:f9:6a:fa:58:5c:85:58: 27:e1:75:3d:85:fd:07:41:b2:70:85:f1:36:00:fe:e3:86:89: 30:8a:07:ac:ae:e8:e3:37:64:03:53:9c:c7:bb:17:6e:16:14: f1:a4:2d:4a:c9:96:b4:0a:09:21:55:d5:dd:28:16:e9:11:c9: 89:b2:aa:b7:65:1c:75:70:bf:31:ce:39:a1:ea:0c:f9:c1:a8: da:58:77:bc:05:eb:13:3e:2d:0e:32:ad:d5:32:76:32:42:8b: ba:8c:55:4b:c8:f6:42:e4:a1:50:d4:1f:53:1f:94:af:36:ef: 4e:f2:9b:ba -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9IokBxIGBarM4FsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRjZmFhOTUtYzMzYS00OWE2LWI0YWQtNDRiOTM0MjVk ZjZlMB4XDTI2MDkyNDE4MDAyM1oXDTI2MDkyNzE4MDAwMFowLzEtMCsGA1UEAxMk MWFiYWY5YmYtNTdmNy00ZjA1LTg0OWEtZDY0ZWZkZDQwOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9nwnAKnHDk2E45o5fCnVf7jDodtMXxYkIrQ 8pVFfrE6yqR14l3TICArHJq9gPl7V1cMJgbyaBgPstMR5KfQJxMscTAC9+Op4ZES i2bcqTkyqKzg1daevPpLdhUSrsLPOai0yjasJPQ+kqZH9xT/hTO25hm9KZcmxOnS iVl8fIkTUutXbj/Gd4olf3//7QmWajDPmVS+uwUohvEnIvuYx/rl0efGVJJ6Y0tE GYL+NxhEfg2XBeZ7bZyyMcqRPzkcdtnEssPSNH+4i1edVjxLik2lIqayrJMd5VHb 5gctvrrwccKTIAprNhHB2MvYMFwUzRKx28T+plBPTJSdDfPtUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA1n3SfJkL/CXXSQT5UL6xFlpjdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hNGNm YWE5NS1jMzNhLTQ5YTYtYjRhZC00NGI5MzQyNWRmNmUvYTRjZmFhOTUtYzMzYS00 OWE2LWI0YWQtNDRiOTM0MjVkZjZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYTRjZmFhOTUtYzMzYS00OWE2LWI0 YWQtNDRiOTM0MjVkZjZlL2E0Y2ZhYTk1LWMzM2EtNDlhNi1iNGFkLTQ0YjkzNDI1 ZGY2ZS5jcmwwHwYDVR0jBBgwFoAUQNcjY6xXH7Rj6/e5YttXcl1Xo5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hNGNmYWE5NS1jMzNhLTQ5YTYtYjRhZC00NGI5 MzQyNWRmNmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMGrD7NcxMlr/5+AOQVQV2 mCkAnfzomXRf1SHdpOjjNdHqCP+BbeVW8rULalLGK5cssQPzfo2Ub3BGZMURcjGe jM+cnMrxXqfGu7lSiiWB32inygTBHfCJU8Ie50lkAJBkJpBBQfoHkSqvN4lfJrau RoLKiJCzL9rfFTV1CuxGMkGtHpVoSTVehvlq+lhchVgn4XU9hf0HQbJwhfE2AP7j hokwigesrujjN2QDU5zHuxduFhTxpC1KyZa0CgkhVdXdKBbpEcmJsqq3ZRx1cL8x zjmh6gz5wajaWHe8BesTPi0OMq3VMnYyQou6jFVLyPZC5KFQ1B9TH5SvNu9O8pu6 -----END CERTIFICATE-----Generated at Fri Sep 25 15:36:59 2026 by rpki-client