$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.mft File: 1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.mft (raw, json) Hash identifier: M7SghmJg1UUaAXzrtUIMR5du3+Cv7brRvZ27aQiYT7E= Subject key identifier: C1:48:54:F1:AD:86:08:98:02:EB:B5:D7:A4:7F:ED:19:C8:E5:B4:18 Authority key identifier: BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE Certificate issuer: /CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e Certificate serial: 010D0C9F4328584FD7F163A3288FF8FCB9407880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.mft Manifest number: 010D0C9F43285844E9B27A8A5C5249551857F84A Signing time: Sun 15 Nov 2026 02:00:25 +0000 Manifest this update: Sun 15 Nov 2026 02:00:25 +0000 Manifest next update: Tue 17 Nov 2026 18:00:00 +0000 Files and hashes: 1: 1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl (hash: /7Z0g9dmIcRVPiKScPuQXdjZ6GK5N82Olneqfm4CVHw=) 2: 226b32ca-ad89-3cf4-96a8-369a5696412e.roa (hash: xg4SYC8ynSdrvohNxoVcWh2HyY4oquBNz2rQI7vHstU=) 3: 3b46ce78-a6c9-3fe5-bfd2-e653270f9a63.roa (hash: 7JWXWb34TZ1o8p9KOxwMWXuB2lQFVmW7tVVeH98bJhI=) 4: 53428784-b3de-3322-a174-8661beb89d69.roa (hash: qOR7w2mrL6nPIhzvWo+WcER92AdedZwPk/NnaANTQHc=) 5: eae5264b-bfc1-335c-bf7a-3cd39f9d4fc9.roa (hash: mBce5/3224Ck0iCrFwQN6RIEWmC+SVdNz/Ur+hlM/ZI=) 6: f19d96c8-4fe8-3b71-bdf1-c02ff7022079.roa (hash: 8xmmCo5FgijGEU6/vaMtepx7zd5DB7fR3d/8Brf1HBo=) 7: f8a715bd-7121-3011-90e1-e6726bcf1bcd.roa (hash: KjkXIJEObM9H1swqOTtp6Jp2IDFSxkIHT4s33KhyOeM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d7:f1:63:a3:28:8f:f8:fc:b9:40:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e Validity Not Before: Nov 15 02:00:25 2026 GMT Not After : Nov 17 18:00:00 2026 GMT Subject: CN=02bf43a1-6701-4131-9788-abc40b694b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:28:a8:81:3f:6c:0d:9b:da:fd:ae:29:1d: c4:8a:21:92:67:e3:9a:3f:7c:b7:d0:5c:e5:46:48: f2:03:fe:50:a1:24:b8:84:8a:d4:21:6c:15:ea:b1: 2e:6d:5d:c2:8e:cd:f8:9e:aa:9e:90:5b:dd:d6:5d: c4:c7:d0:0d:22:8a:ac:1f:10:c6:aa:93:09:3e:f9: 34:20:cc:17:63:48:e4:a3:16:86:2d:eb:7e:2b:b3: 2a:cd:31:59:d7:7c:26:74:47:7c:82:29:c0:5f:dc: 06:cb:64:77:6e:17:7b:31:36:61:66:e7:f6:15:b2: ec:7c:fb:94:f6:6a:cc:9b:4c:62:5a:d9:ad:dc:36: a4:f6:42:f6:ad:6b:ed:32:ff:45:b5:38:86:0a:22: a1:61:ef:b7:4d:85:df:60:8a:62:22:31:e8:19:ab: df:1c:74:fa:a7:f7:01:3a:45:0a:b2:e9:58:e4:3b: 08:d1:fe:77:f3:d3:aa:9d:1f:df:85:48:61:e3:f7: 3f:76:55:0a:31:7b:9d:b4:36:dc:aa:8c:2a:83:40: e0:97:b8:87:9a:de:fb:48:f2:07:70:a4:6e:fb:83: 77:38:e4:04:f5:df:76:74:c4:3d:6b:15:76:0a:1c: 75:b8:de:cb:b8:04:35:35:7b:bf:3e:d4:88:27:0a: 35:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:48:54:F1:AD:86:08:98:02:EB:B5:D7:A4:7F:ED:19:C8:E5:B4:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl X509v3 Authority Key Identifier: keyid:BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:04:4a:44:04:41:5f:6b:1c:34:20:92:a2:0b:66:b0:00:ac: 76:63:fe:5c:25:e8:34:64:49:e2:da:13:99:24:67:d6:74:a8: 06:d0:f7:4d:45:3f:f6:b2:e6:c4:45:b4:1e:a3:fe:1a:4a:a9: 9c:06:08:e5:7c:2b:50:04:08:dc:9e:9d:55:f1:9d:72:aa:f3: 06:c2:58:b2:4f:31:ce:32:e9:25:39:e3:95:a4:e5:d9:b7:7e: a7:21:53:e9:f0:6f:24:ab:fe:f0:24:51:d1:40:bf:2b:43:13: 57:8b:7a:fe:31:4f:4b:86:a3:c3:81:ca:fc:b0:aa:3e:af:8c: b8:6f:6b:90:a8:c6:46:4d:c7:d3:47:20:97:be:ba:ca:b9:72: 9b:02:8b:98:1b:c7:61:06:d7:be:70:af:5e:f8:70:d9:be:52: d5:06:df:cc:14:be:5c:3b:4c:08:46:9e:f5:ff:8c:36:dd:b5: d7:c8:ce:18:ad:e9:9c:8f:1b:f6:81:f3:7e:f8:0e:47:12:55: e4:b4:c2:3e:7c:0c:c9:75:55:07:bb:d2:e2:fa:8f:de:2f:ec: fc:76:86:4f:2b:c9:00:03:fa:92:24:96:2a:f8:4e:f3:8e:bf: 62:cb:1e:31:4d:f3:5d:af:56:f5:9f:f3:22:34:99:87:a8:f5: ae:80:26:db -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/X8WOjKI/4/LlAeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjOWE5NWUtNTNjMS00ZTFlLTljN2ItMzlmOGYyNDI0 MThlMB4XDTI2MTExNTAyMDAyNVoXDTI2MTExNzE4MDAwMFowLzEtMCsGA1UEAxMk MDJiZjQzYTEtNjcwMS00MTMxLTk3ODgtYWJjNDBiNjk0YjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnMoqIE/bA2b2v2uKR3EiiGSZ+OaP3y30Fzl RkjyA/5QoSS4hIrUIWwV6rEubV3Cjs34nqqekFvd1l3Ex9ANIoqsHxDGqpMJPvk0 IMwXY0jkoxaGLet+K7MqzTFZ13wmdEd8ginAX9wGy2R3bhd7MTZhZuf2FbLsfPuU 9mrMm0xiWtmt3Dak9kL2rWvtMv9FtTiGCiKhYe+3TYXfYIpiIjHoGavfHHT6p/cB OkUKsulY5DsI0f5389OqnR/fhUhh4/c/dlUKMXudtDbcqowqg0Dgl7iHmt77SPIH cKRu+4N3OOQE9d92dMQ9axV2Chx1uN7LuAQ1NXu/PtSIJwo1ZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMFIVPGthgiYAuu116R/7RnI5bQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmM5 YTk1ZS01M2MxLTRlMWUtOWM3Yi0zOWY4ZjI0MjQxOGUvMWZjOWE5NWUtNTNjMS00 ZTFlLTljN2ItMzlmOGYyNDI0MThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjOWE5NWUtNTNjMS00ZTFlLTlj N2ItMzlmOGYyNDI0MThlLzFmYzlhOTVlLTUzYzEtNGUxZS05YzdiLTM5ZjhmMjQy NDE4ZS5jcmwwHwYDVR0jBBgwFoAUv7hHWl8zbbcL3sRLmQA2rGdA0N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmM5YTk1ZS01M2MxLTRlMWUtOWM3Yi0zOWY4 ZjI0MjQxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCBEpEBEFfaxw0IJKiC2aw AKx2Y/5cJeg0ZEni2hOZJGfWdKgG0PdNRT/2subERbQeo/4aSqmcBgjlfCtQBAjc np1V8Z1yqvMGwliyTzHOMuklOeOVpOXZt36nIVPp8G8kq/7wJFHRQL8rQxNXi3r+ MU9LhqPDgcr8sKo+r4y4b2uQqMZGTcfTRyCXvrrKuXKbAouYG8dhBte+cK9e+HDZ vlLVBt/MFL5cO0wIRp71/4w23bXXyM4Yremcjxv2gfN++A5HElXktMI+fAzJdVUH u9Li+o/eL+z8doZPK8kAA/qSJJYq+E7zjr9iyx4xTfNdr1b1n/MiNJmHqPWugCbb -----END CERTIFICATE-----Generated at Sun Nov 15 16:57:26 2026 by rpki-client