$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft File: 1a8794d9-eb16-4b3c-b869-96971b72a93b.mft (raw, json) Hash identifier: i/toX4yPDkwBGJ/eOkq0aPFAvFImy83kLH+LzCVuPTk= Subject key identifier: E5:55:95:B4:6A:10:DA:63:11:64:E6:16:28:BC:E0:E3:89:FF:9B:74 Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F4328584F76D0521E997B77ED3695F2A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft Manifest number: 010D0C9F4328584073A843E7CFB37A94E46CAE64 Signing time: Sun 11 Oct 2026 07:00:23 +0000 Manifest this update: Sun 11 Oct 2026 07:00:23 +0000 Manifest next update: Wed 14 Oct 2026 07:00:00 +0000 Files and hashes: 1: 1a8794d9-eb16-4b3c-b869-96971b72a93b.crl (hash: wD4t8av4Vs5B4fDBq0aHlq0JAdfpapBIROCbcv2a5RA=) 2: 67aa11e0-08b1-3729-8732-afed74543a62.roa (hash: omdVhEtbwX9PDrahwv4s6W4z9D8yUfjtkMxZGfSneWg=) 3: b529d2af-47b9-3c02-92c0-0e879bd78302.roa (hash: /Wma/0wBCmN1S5SQO6Hvi7LgPBPSl2CV0aLfap7IkSw=) 4: ed0b605e-d662-35e3-ad2b-6aa473eb9547.roa (hash: zHEhCtYmd7GWHqSyJ1iZyaGEleRr5DH4tpHZ1ipt7dw=) 5: f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (hash: BSBb6n2qcMxi/K7tt2kSA2F8vtYgXTQNkhRjOE2tO/E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:d0:52:1e:99:7b:77:ed:36:95:f2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: Oct 11 07:00:23 2026 GMT Not After : Oct 14 07:00:00 2026 GMT Subject: CN=0c823da9-027d-4f46-8703-917c36e79f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:28:51:fb:60:78:b5:80:ab:cf:4c:05:1c: f2:08:f2:c4:d0:66:3b:4b:55:eb:0e:0a:5d:40:b9: e1:c4:71:ac:bb:09:9f:6c:be:ca:96:ec:5c:ea:09: 50:12:9a:86:9a:50:a8:c0:6d:8c:ab:ad:63:6e:8c: 80:de:be:7f:6c:5f:38:b8:b9:5e:8a:e8:b6:a4:ad: aa:e9:6a:73:82:6b:43:2e:18:db:eb:15:f2:49:6b: 35:9f:19:58:24:a6:2d:f6:50:51:01:f4:e7:66:58: 55:f5:d8:e8:03:18:0f:8b:2e:14:4a:55:1a:f5:e9: 42:00:1d:fe:79:e6:96:2b:38:30:25:eb:0a:4a:ee: 9e:fd:c8:09:ec:02:82:9e:c7:4a:fe:ab:fe:ff:fe: 07:dd:2e:99:6d:af:de:73:1a:0d:96:3d:47:12:6e: 3c:ef:5d:17:19:50:3f:0d:66:2c:0e:4d:4b:61:46: b4:9e:c7:88:dc:08:cc:4d:00:96:f2:50:44:33:d6: 84:6f:0e:2d:e2:4f:25:f9:51:c5:92:58:3d:64:4b: fa:c4:01:98:b3:73:9f:85:8d:81:ef:89:54:4e:41: ff:f6:25:fe:4f:bf:dd:88:f2:ae:fd:00:39:16:ab: 21:e3:7e:06:9a:d5:8a:de:e0:3e:5a:dd:db:05:f9: cd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:55:95:B4:6A:10:DA:63:11:64:E6:16:28:BC:E0:E3:89:FF:9B:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:fa:e7:65:08:8a:e8:1f:47:aa:d8:c5:c8:d7:2f:bc:79:eb: 6d:fe:04:64:dc:89:66:be:e1:36:cc:6a:87:8d:6c:4d:e8:52: 38:45:b6:c8:81:3d:be:6a:ab:fc:d2:22:1e:05:b2:af:be:51: 2c:ec:2c:99:49:fe:13:75:04:83:c4:ff:f7:0d:79:c5:3c:cb: c7:d0:16:fd:58:ff:68:f1:a6:20:f5:14:20:1b:29:b9:0a:23: d9:3c:58:6a:c8:58:b0:d2:b4:2c:05:7b:7a:91:15:86:a9:9b: 7b:0c:6c:dc:88:3d:11:77:bc:e9:59:53:ba:be:75:a1:df:b9: ae:ae:31:56:6b:86:8d:61:7e:ea:fe:ed:62:6a:fd:bc:26:24: 19:fb:f1:c6:f5:1d:4f:d2:b0:49:5f:af:90:8a:57:ea:63:2a: a1:7f:b3:61:87:8d:42:13:37:4d:9b:9e:6f:f4:82:73:1b:27: 46:4b:74:54:9a:66:63:ce:f7:6f:c6:e9:40:d4:35:4f:9a:32: 03:01:d7:85:4d:a8:fa:d2:69:ce:f3:c1:90:37:cc:ce:75:09: d7:66:66:d9:60:fa:14:b8:b0:fa:4b:36:5c:ef:37:99:5c:ff: 48:d7:05:16:2b:20:7b:9d:50:a9:c5:53:55:ef:ca:3a:b8:20: 2e:0f:a3:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE920FIemXt37TaV8qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI2MTAxMTA3MDAyM1oXDTI2MTAxNDA3MDAwMFowLzEtMCsGA1UEAxMk MGM4MjNkYTktMDI3ZC00ZjQ2LTg3MDMtOTE3YzM2ZTc5ZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNIoUftgeLWAq89MBRzyCPLE0GY7S1XrDgpd QLnhxHGsuwmfbL7Kluxc6glQEpqGmlCowG2Mq61jboyA3r5/bF84uLleiui2pK2q 6WpzgmtDLhjb6xXySWs1nxlYJKYt9lBRAfTnZlhV9djoAxgPiy4USlUa9elCAB3+ eeaWKzgwJesKSu6e/cgJ7AKCnsdK/qv+//4H3S6Zba/ecxoNlj1HEm48710XGVA/ DWYsDk1LYUa0nseI3AjMTQCW8lBEM9aEbw4t4k8l+VHFklg9ZEv6xAGYs3OfhY2B 74lUTkH/9iX+T7/diPKu/QA5Fqsh434GmtWK3uA+Wt3bBfnNTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOVVlbRqENpjEWTmFii84OOJ/5t0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvMWE4Nzk0ZDktZWIxNi00 YjNjLWI4NjktOTY5NzFiNzJhOTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/+udlCIroH0eq2MXI1y+8 eett/gRk3IlmvuE2zGqHjWxN6FI4RbbIgT2+aqv80iIeBbKvvlEs7CyZSf4TdQSD xP/3DXnFPMvH0Bb9WP9o8aYg9RQgGym5CiPZPFhqyFiw0rQsBXt6kRWGqZt7DGzc iD0Rd7zpWVO6vnWh37murjFWa4aNYX7q/u1iav28JiQZ+/HG9R1P0rBJX6+Qilfq Yyqhf7Nhh41CEzdNm55v9IJzGydGS3RUmmZjzvdvxulA1DVPmjIDAdeFTaj60mnO 88GQN8zOdQnXZmbZYPoUuLD6SzZc7zeZXP9I1wUWKyB7nVCpxVNV78o6uCAuD6My -----END CERTIFICATE-----Generated at Sun Oct 11 09:29:24 2026 by rpki-client