$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft File: 604dd155-d846-413d-9d18-9c6d0f03ee8c.mft (raw, json) Hash identifier: hlyonD6DytiL8sLVhssLmU/hB1hDeUpMSdqDTIkHueE= Subject key identifier: D1:3D:BD:28:7B:BF:CF:52:9F:F9:A2:5D:D4:D3:69:26:DF:4E:33:99 Authority key identifier: 00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 Certificate issuer: /CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Certificate serial: 010D0C9F4328584F3F1860953D3A3012D6523C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft Manifest number: 010D0C9F4328584073A8468DFCDC747631CA8F6D Signing time: Mon 21 Sep 2026 08:00:23 +0000 Manifest this update: Mon 21 Sep 2026 08:00:23 +0000 Manifest next update: Thu 24 Sep 2026 08:00:00 +0000 Files and hashes: 1: 604dd155-d846-413d-9d18-9c6d0f03ee8c.crl (hash: v8jiYPyjG1ut0RO7a/i8+TR5AC2eRuLv3fl7e4+Knjw=) 2: 7e4e5dd3-74fb-3038-a179-39719feb837d.roa (hash: rdQrCSX4seXkpZHCmhH3e1fVzwcSDN4tq7fGDc8LUIM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:18:60:95:3d:3a:30:12:d6:52:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Validity Not Before: Sep 21 08:00:23 2026 GMT Not After : Sep 24 08:00:00 2026 GMT Subject: CN=36cb1b91-00a8-410a-98d3-c677f4833246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:74:c4:bb:41:5c:4f:ae:56:24:30:0d:39: 8b:c7:6e:eb:80:0d:e4:91:f1:b0:40:75:87:c8:62: 9b:13:27:af:d9:67:88:0e:6f:e7:db:33:1f:10:fe: 5b:c9:b7:1f:d5:22:18:e9:60:e1:33:d1:ef:4e:55: b5:ce:28:de:92:6e:7c:13:a7:0d:7a:00:9b:bb:c0: c6:98:29:48:ef:70:e4:2b:0f:83:67:0e:63:79:a7: 26:d1:10:de:82:13:47:7b:c6:0f:13:38:08:39:e3: 17:56:dc:b1:23:ec:69:2f:f3:5a:6c:e9:90:7b:38: 3e:d7:5e:52:f3:49:dd:4d:e8:f3:ce:bd:c4:b4:36: 03:55:5d:83:d4:d2:bd:34:0b:c7:e2:4e:1a:73:1f: 40:fa:ac:1f:04:31:79:6f:f8:f4:19:14:b2:fc:6c: fe:28:0c:69:f2:e8:7f:46:d9:26:eb:4d:6a:31:cb: 5c:37:13:8a:d8:fe:66:6c:49:aa:70:0b:b3:14:07: a8:b1:1f:df:b5:10:14:75:33:29:a0:50:19:27:5e: 26:53:b6:d0:4d:e2:3c:23:02:78:a7:61:e0:20:07: 87:41:f3:be:9c:cf:05:fd:03:b9:df:bb:d2:d6:be: 57:ff:ba:ba:ee:78:aa:bb:02:09:24:27:99:63:eb: 8a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3D:BD:28:7B:BF:CF:52:9F:F9:A2:5D:D4:D3:69:26:DF:4E:33:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl X509v3 Authority Key Identifier: keyid:00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:62:58:df:55:5e:de:68:df:ef:3c:77:30:f3:d6:bd:c7:25: f3:1e:80:77:72:ee:52:c8:59:dd:70:f5:2a:58:29:b3:53:83: 4d:84:16:d3:64:b2:56:75:11:05:10:42:95:37:0d:37:ff:db: ca:79:77:39:5d:c8:c8:7d:0b:61:60:5e:5b:b6:c2:06:97:81: 91:ca:d4:68:25:f9:8e:8e:f6:b0:da:a0:3a:7c:4b:a7:8c:a3: 14:ef:b1:15:35:12:fb:b4:a2:10:84:ac:56:1c:ad:67:58:3e: 80:62:e5:a3:5b:01:53:49:75:b8:dd:ad:96:cd:10:aa:5e:d8: 44:a9:b3:5d:44:a3:42:e0:c4:da:61:6f:30:0f:af:41:e1:22: 09:55:43:43:54:f1:2a:fa:21:9d:ee:d9:82:cd:58:95:99:88: 1c:1a:7e:53:82:0a:94:b8:f7:ef:bc:42:98:36:34:c4:90:29: fd:f6:dc:f7:81:35:61:c6:b6:2d:4d:4e:76:fb:75:dd:fb:e2: 7a:ac:8c:ff:73:4b:16:8b:db:85:cb:9f:a5:bf:3c:c4:81:0c: c1:e3:b7:19:76:02:55:e9:0a:5f:da:d0:b5:cb:36:72:2a:d7: dc:84:a8:31:eb:35:03:1f:74:25:66:48:eb:29:bd:af:bf:6c: f3:fd:4e:fe -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8/GGCVPTowEtZSPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0ZGQxNTUtZDg0Ni00MTNkLTlkMTgtOWM2ZDBmMDNl ZThjMB4XDTI2MDkyMTA4MDAyM1oXDTI2MDkyNDA4MDAwMFowLzEtMCsGA1UEAxMk MzZjYjFiOTEtMDBhOC00MTBhLTk4ZDMtYzY3N2Y0ODMzMjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYN0xLtBXE+uViQwDTmLx27rgA3kkfGwQHWH yGKbEyev2WeIDm/n2zMfEP5bybcf1SIY6WDhM9HvTlW1zijekm58E6cNegCbu8DG mClI73DkKw+DZw5jeacm0RDeghNHe8YPEzgIOeMXVtyxI+xpL/NabOmQezg+115S 80ndTejzzr3EtDYDVV2D1NK9NAvH4k4acx9A+qwfBDF5b/j0GRSy/Gz+KAxp8uh/ Rtkm601qMctcNxOK2P5mbEmqcAuzFAeosR/ftRAUdTMpoFAZJ14mU7bQTeI8IwJ4 p2HgIAeHQfO+nM8F/QO537vS1r5X/7q67niquwIJJCeZY+uKXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNE9vSh7v89Sn/miXdTTaSbfTjOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRk ZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZkMGYwM2VlOGMvNjA0ZGQxNTUtZDg0Ni00 MTNkLTlkMTgtOWM2ZDBmMDNlZThjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0ZGQxNTUtZDg0Ni00MTNkLTlk MTgtOWM2ZDBmMDNlZThjLzYwNGRkMTU1LWQ4NDYtNDEzZC05ZDE4LTljNmQwZjAz ZWU4Yy5jcmwwHwYDVR0jBBgwFoAUAFFQ62QtzxQ4QmQkdfsYDg5DsdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRkZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZk MGYwM2VlOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbYljfVV7eaN/vPHcw89a9 xyXzHoB3cu5SyFndcPUqWCmzU4NNhBbTZLJWdREFEEKVNw03/9vKeXc5XcjIfQth YF5btsIGl4GRytRoJfmOjvaw2qA6fEunjKMU77EVNRL7tKIQhKxWHK1nWD6AYuWj WwFTSXW43a2WzRCqXthEqbNdRKNC4MTaYW8wD69B4SIJVUNDVPEq+iGd7tmCzViV mYgcGn5TggqUuPfvvEKYNjTEkCn99tz3gTVhxrYtTU52+3Xd++J6rIz/c0sWi9uF y5+lvzzEgQzB47cZdgJV6Qpf2tC1yzZyKtfchKgx6zUDH3QlZkjrKb2vv2zz/U7+ -----END CERTIFICATE-----Generated at Mon Sep 21 23:53:52 2026 by rpki-client