$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft File: 66cf51f2-af3c-4c05-a781-3b923f753475.mft (raw, json) Hash identifier: wi/0VK3/VKPc4AcJo6Sl8dyl6FpRQg4+G20kqvYmytE= Subject key identifier: 1A:1D:E0:A4:AF:89:7B:06:F2:A7:03:D4:ED:B1:72:09:A3:68:06:6E Authority key identifier: 2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 Certificate issuer: /CN=66cf51f2-af3c-4c05-a781-3b923f753475 Certificate serial: 010D0C9F4328584F728281A5B75A638E33FC7D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft Manifest number: 010D0C9F4328584073A81AB5C49D6BF3C2F65A1B Signing time: Fri 09 Oct 2026 18:00:24 +0000 Manifest this update: Fri 09 Oct 2026 18:00:24 +0000 Manifest next update: Sun 11 Oct 2026 18:00:00 +0000 Files and hashes: 1: 66cf51f2-af3c-4c05-a781-3b923f753475.crl (hash: 5wBse8T711bp9eCGRj15Url0uXFSW0gMhxYC7ntLd8g=) 2: d2e9a628-bb73-378c-9508-2db3fb689656.roa (hash: /2vivGWvY5E3ysJtUouZ9omO00AAqIY8bJOgV0abOJw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:82:81:a5:b7:5a:63:8e:33:fc:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cf51f2-af3c-4c05-a781-3b923f753475 Validity Not Before: Oct 9 18:00:24 2026 GMT Not After : Oct 11 18:00:00 2026 GMT Subject: CN=3cf2529c-5a1b-40f3-ac5d-d356d0410f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:66:ae:8e:65:18:2f:8c:74:58:35:58:3b:e0: e4:6c:4e:20:4d:1e:a8:f5:ac:7c:b5:a5:89:b1:01: ae:da:c0:1b:cc:f3:00:9f:5a:d5:23:26:57:f0:97: bb:12:a1:a5:38:87:88:71:3f:b3:61:2d:40:10:5a: b8:c3:f8:29:1b:25:70:b9:6a:af:c0:8a:81:fc:2a: 20:cf:e7:c6:74:25:98:d4:fe:94:c4:f7:09:81:bf: f8:3a:49:77:ed:47:5c:0d:e8:5a:da:23:2a:f9:5c: 96:38:cc:9b:2e:38:7f:ac:c6:e7:9e:68:ac:b6:5c: f6:35:b5:cd:2f:0c:3a:5e:c5:d4:1c:4b:56:d0:69: 81:c7:d4:0d:80:87:85:f7:9c:dc:85:21:be:cc:30: e7:74:42:74:8e:8a:35:76:53:2a:24:b4:ab:59:0f: e5:5b:70:6a:99:27:f5:7a:a2:bf:8a:a3:0d:3a:d0: a8:d9:aa:fa:6a:8d:aa:a0:dd:93:ac:2e:60:c7:3c: 0e:a0:8e:eb:f6:81:19:0b:65:60:3c:d3:21:0c:b1: 6d:89:a2:f0:34:d4:cc:a0:79:c4:36:69:6a:03:d8: db:e1:67:f9:74:71:08:6f:1e:b8:8f:0a:81:1f:9c: 2f:04:86:b1:1c:b8:d7:74:13:89:b1:cb:30:aa:ef: b3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1D:E0:A4:AF:89:7B:06:F2:A7:03:D4:ED:B1:72:09:A3:68:06:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl X509v3 Authority Key Identifier: keyid:2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e5:90:7d:10:a8:cb:41:55:6d:81:51:e6:59:54:c8:57:e5: 20:fd:38:fd:08:90:e8:b2:ee:c8:df:cb:7c:7d:01:6a:c5:62: cf:46:f7:18:39:80:22:16:86:a1:c6:62:7c:2d:bd:7c:96:bf: bb:6a:d6:f0:bc:75:b8:6b:af:ac:3d:c6:09:ee:a7:24:f2:54: a9:3f:c4:af:1a:ec:70:9d:a2:a8:f5:94:5f:05:57:33:6c:f3: de:4d:e2:b2:a0:04:73:e9:93:35:47:ff:c2:f3:6e:ad:d4:c0: 1c:9a:c7:8c:7d:22:bf:bf:77:ec:bc:83:02:73:bd:2a:4a:a2: 2f:38:91:b7:56:19:ed:ec:ba:b4:e8:b8:c3:09:ee:18:27:8d: 36:b4:ab:a4:aa:d8:7c:01:69:a7:f3:ea:4e:2b:b0:9e:81:f6: c1:2d:09:1f:2e:f4:05:45:9e:78:13:19:6a:6c:84:1d:b9:d0: 23:3b:69:a0:8a:45:00:57:13:3a:46:bd:29:7b:d8:ab:16:05: cf:f3:c2:a5:41:35:4c:d7:2c:c1:bd:ba:f6:d1:aa:d7:d9:5b: b6:c1:0b:b6:6a:15:a1:21:b0:69:5f:39:fd:76:4a:65:b7:57: df:99:6e:92:e5:0a:09:7f:9d:37:0b:27:10:e2:f5:09:9e:3d: 0d:75:03:ef -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9ygoGlt1pjjjP8fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZjUxZjItYWYzYy00YzA1LWE3ODEtM2I5MjNmNzUz NDc1MB4XDTI2MTAwOTE4MDAyNFoXDTI2MTAxMTE4MDAwMFowLzEtMCsGA1UEAxMk M2NmMjUyOWMtNWExYi00MGYzLWFjNWQtZDM1NmQwNDEwZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2aujmUYL4x0WDVYO+DkbE4gTR6o9ax8taWJ sQGu2sAbzPMAn1rVIyZX8Je7EqGlOIeIcT+zYS1AEFq4w/gpGyVwuWqvwIqB/Cog z+fGdCWY1P6UxPcJgb/4Okl37UdcDeha2iMq+VyWOMybLjh/rMbnnmistlz2NbXN Lww6XsXUHEtW0GmBx9QNgIeF95zchSG+zDDndEJ0joo1dlMqJLSrWQ/lW3BqmSf1 eqK/iqMNOtCo2ar6ao2qoN2TrC5gxzwOoI7r9oEZC2VgPNMhDLFtiaLwNNTMoHnE NmlqA9jb4Wf5dHEIbx64jwqBH5wvBIaxHLjXdBOJscswqu+zAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBod4KSviXsG8qcD1O2xcgmjaAZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNm NTFmMi1hZjNjLTRjMDUtYTc4MS0zYjkyM2Y3NTM0NzUvNjZjZjUxZjItYWYzYy00 YzA1LWE3ODEtM2I5MjNmNzUzNDc1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZjUxZjItYWYzYy00YzA1LWE3 ODEtM2I5MjNmNzUzNDc1LzY2Y2Y1MWYyLWFmM2MtNGMwNS1hNzgxLTNiOTIzZjc1 MzQ3NS5jcmwwHwYDVR0jBBgwFoAULbG3J4L3E2MeTADAY5+rGShIsDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNmNTFmMi1hZjNjLTRjMDUtYTc4MS0zYjky M2Y3NTM0NzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQ5ZB9EKjLQVVtgVHmWVTI V+Ug/Tj9CJDosu7I38t8fQFqxWLPRvcYOYAiFoahxmJ8Lb18lr+7atbwvHW4a6+s PcYJ7qck8lSpP8SvGuxwnaKo9ZRfBVczbPPeTeKyoARz6ZM1R//C826t1MAcmseM fSK/v3fsvIMCc70qSqIvOJG3Vhnt7Lq06LjDCe4YJ402tKukqth8AWmn8+pOK7Ce gfbBLQkfLvQFRZ54ExlqbIQdudAjO2mgikUAVxM6Rr0pe9irFgXP88KlQTVM1yzB vbr20arX2Vu2wQu2ahWhIbBpXzn9dkplt1ffmW6S5QoJf503CycQ4vUJnj0NdQPv -----END CERTIFICATE-----Generated at Sat Oct 10 16:34:35 2026 by rpki-client