$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft File: 207c40f4-33c4-478b-ae61-d3f51358881b.mft (raw, json) Hash identifier: fkM+vrm5nEa2mGiDn0WehqDIaRYoMcMQLnVr1nPLkHU= Subject key identifier: DF:45:20:4E:90:F3:F2:B0:79:5C:AE:A2:B4:BB:8A:1A:13:B9:11:17 Authority key identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Certificate issuer: /CN=207c40f4-33c4-478b-ae61-d3f51358881b Certificate serial: 010D0C9F4328584F40B94CF6486AC046893CEEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft Manifest number: 010D0C9F4328584073A82D4189108E20C31E25ED Signing time: Mon 21 Sep 2026 22:00:23 +0000 Manifest this update: Mon 21 Sep 2026 22:00:23 +0000 Manifest next update: Wed 23 Sep 2026 22:00:00 +0000 Files and hashes: 1: 207c40f4-33c4-478b-ae61-d3f51358881b.crl (hash: BmgMZJWlRr1ObsD65pDvlx9/fiCc3i2xzNy9dy+rmcg=) 2: 3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa (hash: 81Zx3tsMIW1d/Q1yuUK2cjF6rmcW9ctbrxkP2mNJ4/E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:b9:4c:f6:48:6a:c0:46:89:3c:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207c40f4-33c4-478b-ae61-d3f51358881b Validity Not Before: Sep 21 22:00:23 2026 GMT Not After : Sep 23 22:00:00 2026 GMT Subject: CN=67f3cc37-13b5-4d21-b4ac-3e055fcc1a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9f:a7:81:ba:b8:f6:11:be:ee:8b:b0:cb:79: 29:d4:bd:bd:a6:06:dc:ed:f4:f2:12:16:3a:6a:3d: cb:3f:a7:c7:41:8e:a0:79:50:e1:af:6e:02:29:88: 5e:e0:1e:d2:19:11:43:ed:86:87:15:5f:54:73:cd: d0:8b:5b:3b:ec:37:a1:54:3e:1e:40:36:bd:f8:3b: 66:60:9e:3f:76:d7:13:7c:87:00:97:8c:85:05:7f: fc:c2:38:e4:a4:00:bf:09:43:9f:6d:f4:ca:10:44: 35:8c:7e:f3:a6:cb:99:b5:15:9e:b5:99:bf:cf:1b: 98:f9:be:17:d2:08:7f:53:04:00:8b:15:8d:ca:44: 9c:a6:ed:ac:42:84:cb:f2:95:76:ca:0d:00:a3:b8: 64:50:68:d3:8e:be:f4:c2:79:ad:36:45:54:d0:dd: 3e:77:63:5a:a5:4c:f8:71:aa:1a:bf:1a:d1:3b:6a: 91:3f:c0:db:26:95:a4:21:db:13:25:4e:48:8c:9e: 45:f3:76:43:0b:a2:eb:5b:ab:c1:da:90:9d:b3:50: 18:83:e4:8a:56:25:98:2e:fd:92:a3:d7:65:97:9a: 9d:36:8a:2e:97:40:86:2b:25:9d:0b:6f:32:74:a4: 7c:32:da:93:d2:cc:4d:2c:c1:9a:ef:9e:16:cc:cf: 07:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:45:20:4E:90:F3:F2:B0:79:5C:AE:A2:B4:BB:8A:1A:13:B9:11:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl X509v3 Authority Key Identifier: keyid:52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d9:6c:ec:c4:64:d2:56:42:0b:29:05:d7:f8:dd:00:ef:3d: c9:e1:94:c2:b7:f8:bb:46:0b:91:7c:03:0e:7f:67:a2:ff:8c: fe:e3:01:94:a9:a4:6f:d5:de:1f:93:e7:9b:d3:27:fe:c1:29: 0f:ab:1e:be:7e:c9:5d:68:6a:c7:64:00:d7:46:9d:25:da:86: 66:48:fb:4c:e0:44:c8:50:8f:e5:5b:0e:ef:f9:1f:0b:93:f8: b6:eb:68:74:c7:bd:75:17:59:df:40:7e:fd:76:7b:8e:28:b3: 86:2f:6f:d1:bd:a3:c8:1c:ce:32:58:46:04:e4:1a:82:8c:6b: c8:a0:b6:5e:ed:66:07:aa:8f:0e:49:46:de:ff:a1:07:b7:dd: eb:63:01:3e:14:c4:33:dc:2c:60:53:f1:9a:a9:1c:07:5e:ca: c7:f2:87:ac:da:1e:7c:6d:68:03:85:39:9a:b7:94:f3:6b:67: 30:95:c5:65:3b:90:a7:08:ef:18:e0:b3:c1:06:11:4b:00:bd: 59:b8:12:03:13:10:b4:88:37:56:5b:68:2e:97:5c:85:13:9e: 3a:ec:07:94:95:8a:af:44:9b:88:38:25:c3:b8:f6:49:95:38: bc:20:90:18:a5:63:1f:91:55:4e:ed:3c:87:52:a3:b3:c5:2c: 9c:e6:96:78 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9AuUz2SGrARok87sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA3YzQwZjQtMzNjNC00NzhiLWFlNjEtZDNmNTEzNTg4 ODFiMB4XDTI2MDkyMTIyMDAyM1oXDTI2MDkyMzIyMDAwMFowLzEtMCsGA1UEAxMk NjdmM2NjMzctMTNiNS00ZDIxLWI0YWMtM2UwNTVmY2MxYTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ+ngbq49hG+7ouwy3kp1L29pgbc7fTyEhY6 aj3LP6fHQY6geVDhr24CKYhe4B7SGRFD7YaHFV9Uc83Qi1s77DehVD4eQDa9+Dtm YJ4/dtcTfIcAl4yFBX/8wjjkpAC/CUOfbfTKEEQ1jH7zpsuZtRWetZm/zxuY+b4X 0gh/UwQAixWNykScpu2sQoTL8pV2yg0Ao7hkUGjTjr70wnmtNkVU0N0+d2NapUz4 caoavxrRO2qRP8DbJpWkIdsTJU5IjJ5F83ZDC6LrW6vB2pCds1AYg+SKViWYLv2S o9dll5qdNooul0CGKyWdC28ydKR8MtqT0sxNLMGa754WzM8HPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN9FIE6Q8/KweVyuorS7ihoTuREXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdj NDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1ODg4MWIvMjA3YzQwZjQtMzNjNC00 NzhiLWFlNjEtZDNmNTEzNTg4ODFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjA3YzQwZjQtMzNjNC00NzhiLWFl NjEtZDNmNTEzNTg4ODFiLzIwN2M0MGY0LTMzYzQtNDc4Yi1hZTYxLWQzZjUxMzU4 ODgxYi5jcmwwHwYDVR0jBBgwFoAUUgLOwO2kMddTSMx22Ig8dhzR7ewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1 MTM1ODg4MWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCG2WzsxGTSVkILKQXX+N0A 7z3J4ZTCt/i7RguRfAMOf2ei/4z+4wGUqaRv1d4fk+eb0yf+wSkPqx6+fsldaGrH ZADXRp0l2oZmSPtM4ETIUI/lWw7v+R8Lk/i262h0x711F1nfQH79dnuOKLOGL2/R vaPIHM4yWEYE5BqCjGvIoLZe7WYHqo8OSUbe/6EHt93rYwE+FMQz3CxgU/GaqRwH XsrH8oes2h58bWgDhTmat5Tza2cwlcVlO5CnCO8Y4LPBBhFLAL1ZuBIDExC0iDdW W2gul1yFE5467AeUlYqvRJuIOCXDuPZJlTi8IJAYpWMfkVVO7TyHUqOzxSyc5pZ4 -----END CERTIFICATE-----Generated at Tue Sep 22 21:27:13 2026 by rpki-client