$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: 2L1jYLSjgk5VpNANZ+BlAkDNocxrVm0X7hqBqhXoY10= Subject key identifier: CC:38:27:29:73:74:13:79:C8:FF:AC:BE:58:A3:67:DC:32:A8:E7:96 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584F44CB8A5DE609DAD0D86ED980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF0225EF Signing time: Wed 23 Sep 2026 09:00:23 +0000 Manifest this update: Wed 23 Sep 2026 09:00:23 +0000 Manifest next update: Sat 26 Sep 2026 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: vsq83Sy28lEQqMXMavIcRybxDfS+au5jhpG6qlaMKtg=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: Z5uerYwmOCpaeBcvqUZbhFZIwkSHV0rpKND6iYvWh6A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:44:cb:8a:5d:e6:09:da:d0:d8:6e:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Sep 23 09:00:23 2026 GMT Not After : Sep 26 09:00:00 2026 GMT Subject: CN=f5e6f6ec-94b3-4883-b894-3ca02fd4ce0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f9:9c:45:c2:fc:8b:13:5d:35:23:00:05:4c: b8:4d:da:16:ce:eb:bd:96:d3:0e:6d:8a:b7:5f:c3: 51:97:57:1e:93:95:d4:5c:5e:35:98:05:26:f4:5f: 27:57:3b:aa:cf:7a:94:e9:10:ea:a2:dc:d6:8a:73: 6c:d5:e7:e2:9a:c2:c6:6e:45:c3:1b:3b:ac:5a:15: 96:82:70:a5:c6:1f:2c:59:d2:89:88:cd:13:17:a7: 48:2c:2c:e0:a9:6e:d6:dd:4d:2b:6c:f6:2c:b4:f7: d8:63:79:14:57:00:9d:9f:ef:e9:70:94:a6:c5:30: c0:02:cf:cf:6f:63:44:75:c1:23:00:a7:9f:8f:30: 19:88:00:5a:a0:b5:32:fb:82:cf:29:2b:a1:d9:d3: ed:8d:28:4f:04:66:8d:2a:98:d5:02:3d:1c:ac:3a: 03:9d:cd:01:4f:06:2a:74:c4:8d:b7:5f:a6:c0:60: b6:ba:38:a7:00:f6:df:35:df:04:37:a5:1f:5f:e1: c3:58:73:bd:5b:7c:83:36:5b:00:5c:63:9c:2f:4a: 3a:2d:97:dd:89:2f:9b:78:ea:b3:98:56:02:a8:40: 43:04:eb:02:36:e2:56:30:25:9c:df:9c:95:db:6e: 3d:d9:de:33:e6:a2:16:ec:f9:8c:eb:f1:68:6b:c1: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:38:27:29:73:74:13:79:C8:FF:AC:BE:58:A3:67:DC:32:A8:E7:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:1a:ef:8b:e9:28:0e:b0:49:4f:82:4e:60:a6:8f:84:ae:45: 1f:34:fa:da:6f:f4:0f:08:24:4a:2a:69:d2:90:40:ac:bf:e7: d4:b4:af:e2:23:a9:40:55:7e:cb:11:b1:bb:ac:92:f0:f9:0a: 25:9b:24:12:3c:d3:30:6b:6f:ce:82:31:05:82:c0:bf:40:55: ce:7e:11:6c:51:3c:2a:69:81:b5:d3:4f:9f:78:46:cd:87:cc: 8c:c6:14:ff:5e:71:2f:8c:55:b8:33:cb:cf:19:8f:ef:a0:e4: d2:13:db:a4:1d:34:75:57:9f:dc:ea:92:83:5c:0c:0d:21:ce: b2:ba:70:4a:54:87:ae:5d:ed:7e:ca:5f:6f:57:e2:fa:9d:bd: d8:72:b1:79:d2:6b:3c:8f:b4:cd:14:0e:53:02:ec:10:2c:28: e3:a7:9c:d6:7a:5d:41:15:86:5a:08:e0:80:5e:38:24:90:46: ed:d4:6d:e8:8b:b6:c9:da:72:57:b0:b7:41:2f:af:e7:ae:05: 93:cd:06:3b:06:89:4f:b9:82:ac:45:a0:94:5d:f2:97:6a:74: f3:eb:a1:68:f0:1e:9b:bc:ae:43:c4:02:33:7d:c6:a9:32:83: 60:5c:7f:15:cb:b7:4b:27:e3:01:e8:15:1d:d4:db:70:c3:7d: f4:88:7c:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Ey4pd5gna0Nhu2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI2MDkyMzA5MDAyM1oXDTI2MDkyNjA5MDAwMFowLzEtMCsGA1UEAxMk ZjVlNmY2ZWMtOTRiMy00ODgzLWI4OTQtM2NhMDJmZDRjZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/mcRcL8ixNdNSMABUy4TdoWzuu9ltMObYq3 X8NRl1cek5XUXF41mAUm9F8nVzuqz3qU6RDqotzWinNs1efimsLGbkXDGzusWhWW gnClxh8sWdKJiM0TF6dILCzgqW7W3U0rbPYstPfYY3kUVwCdn+/pcJSmxTDAAs/P b2NEdcEjAKefjzAZiABaoLUy+4LPKSuh2dPtjShPBGaNKpjVAj0crDoDnc0BTwYq dMSNt1+mwGC2ujinAPbfNd8EN6UfX+HDWHO9W3yDNlsAXGOcL0o6LZfdiS+beOqz mFYCqEBDBOsCNuJWMCWc35yV22492d4z5qIW7PmM6/Foa8GUYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMw4JylzdBN5yP+svlijZ9wyqOeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBiGu+L6SgOsElPgk5gpo+E rkUfNPrab/QPCCRKKmnSkECsv+fUtK/iI6lAVX7LEbG7rJLw+QolmyQSPNMwa2/O gjEFgsC/QFXOfhFsUTwqaYG100+feEbNh8yMxhT/XnEvjFW4M8vPGY/voOTSE9uk HTR1V5/c6pKDXAwNIc6yunBKVIeuXe1+yl9vV+L6nb3YcrF50ms8j7TNFA5TAuwQ LCjjp5zWel1BFYZaCOCAXjgkkEbt1G3oi7bJ2nJXsLdBL6/nrgWTzQY7BolPuYKs RaCUXfKXanTz66Fo8B6bvK5DxAIzfcapMoNgXH8Vy7dLJ+MB6BUd1Ntww330iHyk -----END CERTIFICATE-----Generated at Wed Sep 23 11:58:09 2026 by rpki-client