$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft File: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft (raw, json) Hash identifier: upaPZnmEofFqKCORR4rlleL8v2Tf06p+jv+x/XJJbS0= Subject key identifier: 25:7B:5C:01:7B:44:24:D9:C5:46:93:B7:80:37:BA:11:FC:90:7C:72 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584FD66E424448C3CAF89147C5BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft Manifest number: 010D0C9F4328584073A85689C6C67E2F0E4CA8F3 Signing time: Sat 14 Nov 2026 13:00:25 +0000 Manifest this update: Sat 14 Nov 2026 13:00:25 +0000 Manifest next update: Tue 17 Nov 2026 13:00:00 +0000 Files and hashes: 1: 0335608f-a9cd-3396-90f3-61164a83f73d.roa (hash: cayqBkd3MhRD/kuKl2bKYhrcjTLRaM274IuTAzP7RX0=) 2: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl (hash: dDemMxtd3WvBx1zGGLmUT99K4ctsOHUrwhubc7QwT3A=) 3: cd3cb7de-2625-3893-a323-d1bec7d259a0.roa (hash: jSH8ViIr1GW66/O7AZDi+iHwS1ghM5PuO3pe21KVyXU=) 4: e4eb8e84-793c-33ec-9088-110eaf427f80.asa (hash: Gc/Ouf4WhQV0UbWQ/oJlQxs4UNsr0x50vYLgCG3HIOs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d6:6e:42:44:48:c3:ca:f8:91:47:c5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Nov 14 13:00:25 2026 GMT Not After : Nov 17 13:00:00 2026 GMT Subject: CN=07cd1562-5376-4f2f-865f-ddc29e77c0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:31:84:84:53:26:23:9a:f0:b7:0b:0c:92:cd: b5:0c:25:a3:be:8e:1c:ab:3f:c1:a0:6c:e2:4d:64: 74:b6:c1:60:61:7c:14:28:3e:cb:a3:5f:04:92:0a: af:9f:0d:b5:e7:bd:0d:b2:7a:af:d5:f6:34:6d:6f: cc:a1:84:41:d3:b4:14:a8:a7:bf:43:12:83:80:0e: c3:f0:49:d4:f5:aa:5c:6b:81:38:c2:7d:9f:27:fd: 19:34:70:06:5c:00:60:ec:7f:78:8f:30:fb:52:3c: c7:b0:e8:dc:26:e7:e4:1b:c3:1f:db:35:1f:9b:27: e7:0d:d3:56:e6:74:e4:c3:69:40:5f:51:cc:d8:4f: 57:d6:28:06:24:e2:a6:e4:77:d3:b2:0b:b1:9c:90: 27:16:6c:93:66:5b:35:de:bf:59:b0:6f:09:64:e8: 15:b4:fc:9e:87:c2:93:a8:00:b8:66:61:18:cb:0e: 74:37:ae:6d:04:bc:dd:9a:3a:f4:41:2f:1d:f5:df: 7e:4c:02:f0:8c:ca:7a:b1:e8:c6:9c:0b:d3:62:f2: b7:00:03:3c:df:36:22:c8:88:86:a6:25:58:d1:2a: ac:1d:7c:80:98:4a:fe:92:33:49:61:ee:0f:d5:26: 5c:5c:65:6f:a3:d1:e3:4a:61:58:25:47:84:7e:41: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7B:5C:01:7B:44:24:D9:C5:46:93:B7:80:37:BA:11:FC:90:7C:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5d:cf:b1:d3:c7:e2:57:66:e3:67:85:23:08:cc:e7:24:02: 71:ed:7d:66:17:a4:ae:79:a3:b8:68:2c:de:00:97:6e:a6:42: ba:df:b8:78:53:45:87:a5:49:44:54:6f:06:40:12:be:c0:8a: f5:3c:0f:80:1f:95:08:be:a5:05:b5:78:65:e0:94:71:b6:b8: a9:dc:26:ed:b9:63:09:dd:cd:eb:36:f6:46:8a:c4:14:86:37: f8:01:d3:e9:91:bf:fd:56:0f:bd:5c:36:df:9d:87:15:a1:9d: 84:75:26:45:c3:9b:05:a0:a2:09:dd:00:f5:8a:01:98:3d:02: 24:45:3b:d0:ac:74:c2:1b:60:be:fe:bd:85:70:3b:81:9b:c3: c1:a4:50:30:3a:fd:44:b4:0a:21:6a:9d:1e:8d:e8:bc:5b:16: 50:a2:ef:b7:1e:ca:b2:59:91:90:de:ec:89:97:af:42:cb:9f: 86:b5:45:74:3b:02:b7:66:19:f8:c8:e1:a8:de:2f:8a:cb:e1: 89:d8:bc:c6:20:f5:b7:01:1f:d4:89:0f:18:0e:2d:1f:8c:7b: 49:87:96:18:d3:ef:18:7e:43:c6:c2:b6:01:a6:57:3c:bc:1d: 9c:97:c5:b4:a7:5e:cc:e4:62:be:d8:e0:b2:7c:6c:0d:5f:8a: f3:4f:23:1b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/WbkJESMPK+JFHxbowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI2MTExNDEzMDAyNVoXDTI2MTExNzEzMDAwMFowLzEtMCsGA1UEAxMk MDdjZDE1NjItNTM3Ni00ZjJmLTg2NWYtZGRjMjllNzdjMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzGEhFMmI5rwtwsMks21DCWjvo4cqz/BoGzi TWR0tsFgYXwUKD7Lo18Ekgqvnw21570Nsnqv1fY0bW/MoYRB07QUqKe/QxKDgA7D 8EnU9apca4E4wn2fJ/0ZNHAGXABg7H94jzD7UjzHsOjcJufkG8Mf2zUfmyfnDdNW 5nTkw2lAX1HM2E9X1igGJOKm5HfTsguxnJAnFmyTZls13r9ZsG8JZOgVtPyeh8KT qAC4ZmEYyw50N65tBLzdmjr0QS8d9d9+TALwjMp6sejGnAvTYvK3AAM83zYiyIiG piVY0SqsHXyAmEr+kjNJYe4P1SZcXGVvo9HjSmFYJUeEfkEiJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCV7XAF7RCTZxUaTt4A3uhH8kHxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMmExZTk3MzQtMGE3Zi00 OGU2LTg3ZDMtY2E3ZDgzN2Y0ZTUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARXc+x08fiV2bjZ4UjCMzn JAJx7X1mF6SueaO4aCzeAJdupkK637h4U0WHpUlEVG8GQBK+wIr1PA+AH5UIvqUF tXhl4JRxtrip3CbtuWMJ3c3rNvZGisQUhjf4AdPpkb/9Vg+9XDbfnYcVoZ2EdSZF w5sFoKIJ3QD1igGYPQIkRTvQrHTCG2C+/r2FcDuBm8PBpFAwOv1EtAohap0ejei8 WxZQou+3HsqyWZGQ3uyJl69Cy5+GtUV0OwK3Zhn4yOGo3i+Ky+GJ2LzGIPW3AR/U iQ8YDi0fjHtJh5YY0+8YfkPGwrYBplc8vB2cl8W0p17M5GK+2OCyfGwNX4rzTyMb -----END CERTIFICATE-----Generated at Sun Nov 15 13:31:10 2026 by rpki-client