$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft File: 5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft (raw, json) Hash identifier: ZVxs8AU+B2szIUaEIQShmcSABx3ZNKI6MIOV99usVZ4= Subject key identifier: 14:8B:21:E4:28:EF:B5:38:B8:37:F9:DC:C4:F4:36:86:DC:6F:1D:68 Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Certificate issuer: /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Certificate serial: 010D0C9F4328584F4024691E6E61CA8B9B0D1120 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft Manifest number: 010D0C9F4328584073A81C71C685F3E52EAFE3D1 Signing time: Mon 21 Sep 2026 17:00:22 +0000 Manifest this update: Mon 21 Sep 2026 17:00:22 +0000 Manifest next update: Wed 23 Sep 2026 17:00:00 +0000 Files and hashes: 1: 41149ca8-84ee-3c37-b491-83ba1a424870.roa (hash: Lg1TmRLS1Lh4TK7Xcmgjhe5L02JEdQq/5ek8lmLFHaM=) 2: 5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl (hash: C1QUEDNATD4dcjOdqwMU0ncJWheDZTf5pY5wOmQPNHg=) 3: 85e6adee-b389-3dc7-8d34-6ef4bc2d9e72.roa (hash: /u8ZEbva1+YyojcmU8fNAlheKzaleR/UfyMG2UnRuqQ=) 4: 9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa (hash: T5YpneDzMYu1u705JjLQdTDyS93XsY0rkwH0HCsE0kY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:24:69:1e:6e:61:ca:8b:9b:0d:11:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Validity Not Before: Sep 21 17:00:22 2026 GMT Not After : Sep 23 17:00:00 2026 GMT Subject: CN=8c33dcf7-5bdc-49f6-9c4d-ea4bb3bd1e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:16:f2:d1:9b:25:ed:47:34:96:fc:d2:46:cc: 5f:fe:08:2c:42:8e:4b:8e:bc:61:cf:ba:ce:b1:54: 79:d1:29:1b:7c:e6:d6:06:36:6f:a4:cc:4d:16:00: 65:13:2d:8e:02:91:fb:43:e6:86:3f:10:31:fb:1b: 39:0b:4b:ed:15:2c:ee:76:c8:2c:4b:7b:e0:a1:f5: 3e:5a:ef:56:1d:26:9e:21:90:b8:0e:21:76:85:88: ff:c8:d5:f2:8e:52:49:ee:62:92:96:e9:3c:bd:7b: e3:b2:d5:3e:42:60:dd:a9:c3:14:60:ef:2c:84:c5: 73:a0:2e:bb:16:ce:26:77:6f:23:81:31:c5:eb:48: 3b:92:56:2a:02:8a:9a:d6:d2:73:c3:20:95:3a:d3: d5:ca:53:2d:0d:09:58:d5:ea:27:c9:76:3c:cb:94: e2:ba:ed:24:3f:ac:04:d2:af:64:3a:46:42:6d:9a: 1d:82:39:2a:5d:66:51:26:20:e4:33:0d:ee:5e:55: 2a:eb:4a:6a:2e:5d:41:6e:a1:56:91:ce:da:b5:45: 56:89:86:6a:39:bd:53:0f:17:6d:fb:7f:4a:e1:09: da:58:7c:ce:7a:8f:36:2f:88:52:c7:f5:24:f1:26: e1:80:a9:57:5f:14:e8:14:84:ae:c2:16:3f:ac:d3: 0b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8B:21:E4:28:EF:B5:38:B8:37:F9:DC:C4:F4:36:86:DC:6F:1D:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl X509v3 Authority Key Identifier: keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9d:86:22:e4:1d:1d:17:40:e0:99:7f:ea:48:3c:15:44:08: 84:6b:03:23:9d:9e:6a:66:cd:cc:24:b7:a7:9e:d0:d2:a3:9d: a9:9c:f5:b6:bd:bf:fb:70:4e:e3:9d:04:4c:cc:c0:f8:81:fb: 60:ff:86:6a:62:41:d9:c4:55:bc:7b:b9:5d:de:d5:eb:cf:0b: 7d:3f:f3:09:13:ac:f1:8c:2c:31:4c:0c:de:f0:c7:45:3d:67: 58:d4:39:fb:0c:d0:37:3a:23:ce:65:b4:32:80:04:6c:4a:e1: 03:33:15:be:ea:59:46:c5:b8:3f:18:eb:f2:1c:72:40:4f:79: 71:6b:bd:10:7a:04:25:85:ce:8a:cc:f4:63:ba:32:80:f6:ae: ad:35:73:2c:0a:20:e6:08:86:18:bc:84:43:a5:4c:ee:f5:19: a2:3d:e9:cb:e3:21:e5:ac:de:1f:82:13:7d:4c:93:89:c1:c3: dd:68:72:1d:ff:bd:b7:2c:e4:6d:04:a0:54:c7:ad:c6:f2:b8: 5d:1f:50:7c:f0:64:76:ca:2b:5f:90:37:c6:bd:c2:c5:92:83: 2a:80:5d:15:13:bc:e9:b2:ec:1c:30:9f:15:60:a3:f1:b5:7a: c7:0e:02:e3:6c:a8:3a:9d:40:9f:90:b7:31:18:95:1a:69:4a: c5:98:b3:a0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9AJGkebmHKi5sNESAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4 ZjlhMB4XDTI2MDkyMTE3MDAyMloXDTI2MDkyMzE3MDAwMFowLzEtMCsGA1UEAxMk OGMzM2RjZjctNWJkYy00OWY2LTljNGQtZWE0YmIzYmQxZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xby0Zsl7Uc0lvzSRsxf/ggsQo5Ljrxhz7rO sVR50SkbfObWBjZvpMxNFgBlEy2OApH7Q+aGPxAx+xs5C0vtFSzudsgsS3vgofU+ Wu9WHSaeIZC4DiF2hYj/yNXyjlJJ7mKSluk8vXvjstU+QmDdqcMUYO8shMVzoC67 Fs4md28jgTHF60g7klYqAoqa1tJzwyCVOtPVylMtDQlY1eonyXY8y5Tiuu0kP6wE 0q9kOkZCbZodgjkqXWZRJiDkMw3uXlUq60pqLl1BbqFWkc7atUVWiYZqOb1TDxdt +39K4QnaWHzOeo82L4hSx/Uk8SbhgKlXXxToFISuwhY/rNMLeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBSLIeQo77U4uDf53MT0Nobcbx1oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJh NGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvNWFiYTRiN2EtZGU3Yi00 ZTg0LWI5MTMtYTFiZWRiZTU4ZjlhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYTRiN2EtZGU3Yi00ZTg0LWI5 MTMtYTFiZWRiZTU4ZjlhLzVhYmE0YjdhLWRlN2ItNGU4NC1iOTEzLWExYmVkYmU1 OGY5YS5jcmwwHwYDVR0jBBgwFoAUllRkOrAdiKVOgO9UnjMuz1ujWekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJl ZGJlNThmOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdnYYi5B0dF0DgmX/qSDwV RAiEawMjnZ5qZs3MJLenntDSo52pnPW2vb/7cE7jnQRMzMD4gftg/4ZqYkHZxFW8 e7ld3tXrzwt9P/MJE6zxjCwxTAze8MdFPWdY1Dn7DNA3OiPOZbQygARsSuEDMxW+ 6llGxbg/GOvyHHJAT3lxa70QegQlhc6KzPRjujKA9q6tNXMsCiDmCIYYvIRDpUzu 9RmiPenL4yHlrN4fghN9TJOJwcPdaHId/723LORtBKBUx63G8rhdH1B88GR2yitf kDfGvcLFkoMqgF0VE7zpsuwcMJ8VYKPxtXrHDgLjbKg6nUCfkLcxGJUaaUrFmLOg -----END CERTIFICATE-----Generated at Mon Sep 21 23:30:10 2026 by rpki-client