$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: t9x2D6ZDOVd/jCwkGFith+6GwJFwZq44xlofWw7LPZo= Subject key identifier: 6A:F6:F5:6E:E9:1F:C2:08:7B:A8:D1:13:71:B0:69:E2:F6:1D:25:AF Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F4328584F3D1E2C84D2AAA3DF28C45B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C7A7 Signing time: Sun 20 Sep 2026 15:00:23 +0000 Manifest this update: Sun 20 Sep 2026 15:00:23 +0000 Manifest next update: Wed 23 Sep 2026 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: BnGjemGbgqc0mPbL+B7fv2qd/4mJk+ACxPZ/imEB4ps=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: +hTLUm/Xrq6iztK3udw8L6KuKvb2MlxSLfxfnZGnfZc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3d:1e:2c:84:d2:aa:a3:df:28:c4:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: Sep 20 15:00:23 2026 GMT Not After : Sep 23 15:00:00 2026 GMT Subject: CN=4b6c58ef-fd3f-4dfa-9f4e-e02c44f27119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:3d:bf:23:e0:1b:50:9e:3c:4a:e8:f6:00: 95:f7:b0:c9:dd:ec:ba:a6:7e:61:75:c3:9c:ce:a7: 5a:be:35:63:05:b8:83:1c:09:eb:ed:8c:e2:d0:4a: 52:72:68:1b:61:6a:f8:9f:fa:33:f3:4a:93:cd:27: 7a:8f:38:5d:3b:14:1d:c3:9a:29:9b:d7:53:bd:4f: 7b:ba:ae:ae:39:0c:74:d6:86:ed:5b:a2:11:05:87: 7e:1a:ad:0f:c0:ed:34:49:5f:e2:57:a3:f7:df:a8: b9:32:34:51:dc:86:d8:d3:4a:4b:d0:81:49:16:7d: 2f:8a:06:ed:b2:b7:5e:29:23:a6:30:47:a3:7d:45: 0b:12:4f:63:d9:e6:ec:64:6d:bb:fe:5a:58:ad:02: 3f:1f:e9:26:e5:87:1d:4e:88:69:d3:0b:97:6e:53: c8:6f:02:e3:71:4e:aa:aa:59:8f:28:15:87:fc:e4: 98:c7:02:55:38:52:08:16:ac:f5:4b:7b:a3:c0:05: 50:01:7c:d9:33:c6:50:b6:ec:41:10:8f:64:00:72: 9f:d4:01:6c:cb:e9:a7:5c:9c:6b:0a:9c:69:7a:34: ab:2e:91:07:7f:06:55:1e:3a:88:9a:66:fd:e1:3e: 02:b2:09:23:08:68:d3:55:e6:49:84:7c:39:87:61: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F6:F5:6E:E9:1F:C2:08:7B:A8:D1:13:71:B0:69:E2:F6:1D:25:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:35:42:26:54:e8:d6:d2:3a:17:22:fc:92:b1:63:21:85:09: ca:eb:fc:83:2c:0b:a6:0e:e7:91:fe:51:57:61:bc:ac:a6:b9: 19:b8:4d:62:60:57:5a:33:09:bc:f6:5c:8f:8a:f0:c3:8e:0c: 3f:83:65:4b:43:ba:c8:16:c4:b7:56:73:e3:a2:11:7a:39:85: 4d:f2:86:c0:14:e5:e8:83:8f:68:ac:c3:25:2b:52:06:4d:ec: 68:49:00:96:ed:92:e5:5b:59:08:77:94:dc:2e:98:91:d2:ff: ba:5c:65:37:b5:84:a2:17:8b:88:c5:aa:e0:30:bc:d0:c6:8f: b2:74:86:ea:b0:bd:d4:a7:89:4a:4c:f8:be:d0:f4:88:b5:bc: c5:95:f6:f3:cb:2d:57:80:83:bb:3a:bb:ef:a5:d0:f1:55:c1: f7:1f:86:08:47:5f:b4:6c:23:f4:b7:fa:df:25:b4:69:7f:71: f8:8c:61:5e:3d:e1:7d:3a:61:28:c2:be:f8:16:89:51:af:cc: 4e:54:e7:13:7b:b0:3d:ae:91:79:da:ae:db:b2:c6:af:ef:8a: 75:8d:73:bd:e2:87:21:fa:b8:39:42:92:47:b0:0f:33:5c:3e: 81:c8:f0:ab:f6:aa:27:95:32:2d:cc:36:d2:4a:b5:e2:51:f5: 37:ef:ad:34 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE89HiyE0qqj3yjEWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI2MDkyMDE1MDAyM1oXDTI2MDkyMzE1MDAwMFowLzEtMCsGA1UEAxMk NGI2YzU4ZWYtZmQzZi00ZGZhLTlmNGUtZTAyYzQ0ZjI3MTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGM9vyPgG1CePEro9gCV97DJ3ey6pn5hdcOc zqdavjVjBbiDHAnr7Yzi0EpScmgbYWr4n/oz80qTzSd6jzhdOxQdw5opm9dTvU97 uq6uOQx01obtW6IRBYd+Gq0PwO00SV/iV6P336i5MjRR3IbY00pL0IFJFn0vigbt srdeKSOmMEejfUULEk9j2ebsZG27/lpYrQI/H+km5YcdTohp0wuXblPIbwLjcU6q qlmPKBWH/OSYxwJVOFIIFqz1S3ujwAVQAXzZM8ZQtuxBEI9kAHKf1AFsy+mnXJxr CpxpejSrLpEHfwZVHjqImmb94T4CsgkjCGjTVeZJhHw5h2HAfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGr29W7pH8IIe6jRE3GwaeL2HSWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVNUImVOjW0joXIvySsWMh hQnK6/yDLAumDueR/lFXYbysprkZuE1iYFdaMwm89lyPivDDjgw/g2VLQ7rIFsS3 VnPjohF6OYVN8obAFOXog49orMMlK1IGTexoSQCW7ZLlW1kId5TcLpiR0v+6XGU3 tYSiF4uIxargMLzQxo+ydIbqsL3Up4lKTPi+0PSItbzFlfbzyy1XgIO7OrvvpdDx VcH3H4YIR1+0bCP0t/rfJbRpf3H4jGFePeF9OmEowr74FolRr8xOVOcTe7A9rpF5 2q7bssav74p1jXO94och+rg5QpJHsA8zXD6ByPCr9qonlTItzDbSSrXiUfU37600 -----END CERTIFICATE-----Generated at Mon Sep 21 17:42:26 2026 by rpki-client