$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft File: 499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft (raw, json) Hash identifier: gPvnSOvAj+5/qOHFovd6z32kwRrNJT4cGX1XiPnkxsw= Subject key identifier: 98:0A:B8:77:B9:64:2F:93:5D:07:86:38:5B:05:D7:F7:63:4A:DD:52 Authority key identifier: 57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 Certificate issuer: /CN=499450bd-6432-4e5d-a29f-1c38c1ea14c6 Certificate serial: 010D0C9F4328584F3B9B0B00985CD4B24D459C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft Manifest number: 010D0C9F4328584073A837D5DC90CFDD9E2C4BEC Signing time: Sun 20 Sep 2026 02:00:23 +0000 Manifest this update: Sun 20 Sep 2026 02:00:23 +0000 Manifest next update: Tue 22 Sep 2026 02:00:00 +0000 Files and hashes: 1: 499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl (hash: B5lIg0+fwUDrK56w/0T3TyuZb5yjK660hsD+CVb+N4w=) 2: c565c5c0-8555-3cb8-bca1-d3a92ed022e8.roa (hash: pqoh4KSQzn3QEGFpZTNmPxgJX7CIj9N51r4FzFqAjPU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:9b:0b:00:98:5c:d4:b2:4d:45:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499450bd-6432-4e5d-a29f-1c38c1ea14c6 Validity Not Before: Sep 20 02:00:23 2026 GMT Not After : Sep 22 02:00:00 2026 GMT Subject: CN=b955e913-b148-4a89-9c8d-433345800745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:23:2a:98:40:b1:3c:8f:d6:1b:11:b9:a4:77: e9:e6:fc:c6:ba:2a:a0:1a:fe:6e:d8:e5:0b:7e:7d: e6:36:ae:1a:f4:3b:34:33:a9:65:0e:73:c0:47:b3: e5:00:07:7e:88:f7:7e:cb:46:68:c9:b0:e3:9e:7d: e6:c3:42:f9:10:fd:98:02:4c:7b:9a:aa:d8:1b:dd: 20:ea:16:9d:91:d6:76:eb:74:0a:70:4c:d1:2d:99: 5c:ea:01:a3:03:f3:06:79:1c:86:70:7d:d7:55:f6: 11:60:d5:8f:69:8c:b0:10:f7:9e:7b:28:cc:a5:3f: dd:ea:b3:57:0f:22:7b:48:c4:33:a4:93:a7:64:06: ef:c4:1e:a8:d6:a6:b8:1c:f5:21:b0:0d:e8:a3:ed: 88:68:6f:7a:3f:2e:65:73:d8:41:6a:d4:3d:84:d6: ca:00:a4:0e:f8:a4:8f:d3:50:1e:bc:e8:92:02:75: 5b:88:5d:73:69:ab:76:68:81:06:bf:17:c2:d8:75: 53:df:a0:9d:df:10:30:bd:81:dc:88:2f:1b:6e:1b: 8f:d1:ce:bf:68:42:c4:1e:ba:aa:0f:44:f8:f3:54: 0f:e4:d2:aa:50:8d:e7:75:23:39:dc:1a:05:94:cc: 69:13:8e:9a:33:90:9a:64:0c:87:fc:b2:10:d6:e6: f9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0A:B8:77:B9:64:2F:93:5D:07:86:38:5B:05:D7:F7:63:4A:DD:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl X509v3 Authority Key Identifier: keyid:57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:63:5b:d4:58:88:76:a9:f7:78:0b:69:07:4a:a0:e5:b4:c0: ac:3f:44:05:c0:30:a3:44:35:ba:20:dc:94:39:3c:79:ee:cf: 99:88:17:20:72:a1:4b:83:fd:d3:e2:17:26:6f:0b:2a:7f:c9: e4:a3:2a:b7:11:3a:72:8b:7c:f3:30:83:1f:6c:ff:dd:bc:48: 9c:21:28:10:11:8a:45:a1:7e:41:64:bb:24:07:d2:ba:47:2c: 33:b0:03:d1:08:a1:e1:44:29:53:39:3b:54:4c:69:33:c5:da: d3:46:48:3e:00:3c:ed:94:dd:23:71:e0:a6:33:b0:cd:7e:b3: 37:4e:5e:e7:6f:b0:10:fb:33:44:05:e1:e4:9c:e0:a5:6d:5b: 5c:6a:32:00:25:e9:a8:4b:06:8f:47:54:79:43:ef:d6:aa:d3: 16:c3:16:e7:39:c7:d8:24:5b:49:e1:56:3c:c3:34:53:f3:6d: ba:5e:34:33:d2:ee:19:b2:05:94:ec:a6:30:a2:58:e4:52:95: 23:55:70:99:da:9d:23:21:9e:f7:62:44:f4:c0:ba:41:57:74: a4:74:86:49:44:de:14:0b:a3:dd:a6:96:77:b5:1c:6b:69:f3: 17:cd:1d:c0:39:f1:a6:87:28:2a:17:cc:cc:64:17:16:6c:61: 49:55:a7:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE87mwsAmFzUsk1FnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk5NDUwYmQtNjQzMi00ZTVkLWEyOWYtMWMzOGMxZWEx NGM2MB4XDTI2MDkyMDAyMDAyM1oXDTI2MDkyMjAyMDAwMFowLzEtMCsGA1UEAxMk Yjk1NWU5MTMtYjE0OC00YTg5LTljOGQtNDMzMzQ1ODAwNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyMqmECxPI/WGxG5pHfp5vzGuiqgGv5u2OUL fn3mNq4a9Ds0M6llDnPAR7PlAAd+iPd+y0ZoybDjnn3mw0L5EP2YAkx7mqrYG90g 6hadkdZ263QKcEzRLZlc6gGjA/MGeRyGcH3XVfYRYNWPaYywEPeeeyjMpT/d6rNX DyJ7SMQzpJOnZAbvxB6o1qa4HPUhsA3oo+2IaG96Py5lc9hBatQ9hNbKAKQO+KSP 01AevOiSAnVbiF1zaat2aIEGvxfC2HVT36Cd3xAwvYHciC8bbhuP0c6/aELEHrqq D0T481QP5NKqUI3ndSM53BoFlMxpE46aM5CaZAyH/LIQ1ub5ewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJgKuHe5ZC+TXQeGOFsF1/djSt1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OTk0 NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4YzFlYTE0YzYvNDk5NDUwYmQtNjQzMi00 ZTVkLWEyOWYtMWMzOGMxZWExNGM2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDk5NDUwYmQtNjQzMi00ZTVkLWEy OWYtMWMzOGMxZWExNGM2LzQ5OTQ1MGJkLTY0MzItNGU1ZC1hMjlmLTFjMzhjMWVh MTRjNi5jcmwwHwYDVR0jBBgwFoAUV5x9/YcwBLe0R40DMFkQXZSTefEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OTk0NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4 YzFlYTE0YzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdY1vUWIh2qfd4C2kHSqDl tMCsP0QFwDCjRDW6INyUOTx57s+ZiBcgcqFLg/3T4hcmbwsqf8nkoyq3ETpyi3zz MIMfbP/dvEicISgQEYpFoX5BZLskB9K6RywzsAPRCKHhRClTOTtUTGkzxdrTRkg+ ADztlN0jceCmM7DNfrM3Tl7nb7AQ+zNEBeHknOClbVtcajIAJemoSwaPR1R5Q+/W qtMWwxbnOcfYJFtJ4VY8wzRT8226XjQz0u4ZsgWU7KYwoljkUpUjVXCZ2p0jIZ73 YkT0wLpBV3SkdIZJRN4UC6PdppZ3tRxrafMXzR3AOfGmhygqF8zMZBcWbGFJVad6 -----END CERTIFICATE-----Generated at Sun Sep 20 19:42:52 2026 by rpki-client