$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft (raw, json) Hash identifier: ynds1ZQ9H/GEUtcpyjqMdA/NT/Qj8rvTgnn7QW9Smt8= Subject key identifier: 9A:CC:DC:1A:E1:13:37:43:FA:5E:70:E0:9C:67:ED:CB:34:71:EB:A8 Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F4328584F4200D4F7A46E7A297CC31880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft Manifest number: 010D0C9F4328584073A84BBB6D274A47E14404B1 Signing time: Tue 22 Sep 2026 09:00:23 +0000 Manifest this update: Tue 22 Sep 2026 09:00:23 +0000 Manifest next update: Thu 24 Sep 2026 09:00:00 +0000 Files and hashes: 1: 3091c4d9-02ad-3cf4-9fb6-ef7b9ba52414.roa (hash: ERl4HQNmt19kfMcR+FZFWp6L9l1PjrQdDQ46MM7VQiY=) 2: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl (hash: kHavXzbLEEhzMR8bXwrxZxcTJBMzo4pPzJa90fB2uRs=) 3: b5ca30b5-ebfd-33ea-9d6a-6bbdadcec801.roa (hash: hHbsv6K9hQTXumWbwFFShGQvoFDpveF6/QU/CWM/9yU=) 4: e6965540-cbd0-3930-b638-a04886e69eac.roa (hash: PW9BT//WYhi6VWyKc5QQYCTUy7GbgMflIwHyKRlFVDc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:00:d4:f7:a4:6e:7a:29:7c:c3:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: Sep 22 09:00:23 2026 GMT Not After : Sep 24 09:00:00 2026 GMT Subject: CN=e43a8469-7593-4b0b-9bbb-6df75530e585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:a5:f7:6d:d6:f8:f1:c9:53:38:e2:d6:25: 13:59:dd:b9:25:f5:7c:8d:5b:9c:45:98:66:d6:71: 98:ce:a2:45:e4:80:d9:df:54:f5:8e:c4:10:ba:6e: 6e:75:40:56:3a:f6:c6:f5:63:e1:e7:80:dc:90:18: 96:e0:5e:3b:0f:e6:98:2e:d8:04:04:30:b5:93:ff: 2b:20:d5:f4:56:54:53:1d:e2:76:4e:29:81:a6:ac: 6d:a9:cd:4d:5b:ef:3e:36:e5:70:6d:2c:65:c2:0c: 4b:a0:8f:5f:16:b8:69:27:40:60:7a:3a:3f:a3:0b: 1a:c2:9f:5e:6c:e2:1a:b9:54:b4:c9:1b:fa:e7:75: d2:eb:9e:33:7e:f7:21:25:dd:ec:5d:f8:e0:8b:7e: 29:c1:9a:d4:e9:58:18:18:67:26:49:3f:06:3b:94: 8f:3f:0e:0f:0e:5d:60:5f:d1:2d:30:b6:c4:c8:93: ca:9a:2b:a0:a1:6a:2b:63:32:a9:64:e1:96:8c:be: e4:cd:0a:db:a6:55:b9:6a:39:bd:50:7c:1f:33:22: 89:4e:84:51:3d:c7:21:e6:f3:eb:58:19:20:cb:6f: 9c:61:43:e9:e0:6a:f4:41:ea:d7:e9:6f:ac:80:7d: 62:53:e4:27:25:7a:b3:a1:d1:c3:a5:cf:d4:26:99: 80:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CC:DC:1A:E1:13:37:43:FA:5E:70:E0:9C:67:ED:CB:34:71:EB:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ce:25:42:2a:67:85:48:7e:6c:af:c6:85:26:c9:05:36:c6: e0:83:61:c8:92:2b:7f:b3:3a:2c:78:9d:7f:ca:8d:69:44:25: 2e:2a:e8:13:75:35:f5:1d:74:4f:5d:83:71:2b:38:88:0a:77: 96:c5:90:6f:5c:e9:95:93:8a:85:9e:a4:d1:57:90:bc:8f:4e: 63:69:2e:81:b5:f4:6c:b5:f6:70:f4:0e:6b:04:b1:15:18:6d: 90:96:22:71:42:3e:51:eb:eb:27:9d:1b:b5:96:b9:76:89:3e: c3:6b:1a:63:19:8e:37:8c:e4:57:47:55:63:18:79:46:29:e6: 11:8c:0f:af:90:9b:ae:2e:1e:2d:cd:6d:eb:cc:64:46:3b:87: c1:1c:82:0d:46:1b:98:48:e0:fe:db:bd:dd:14:b0:c1:6e:26: 58:9c:94:ac:49:a9:c5:40:7d:d6:96:43:93:b5:e5:25:bc:42: de:ea:64:f0:92:b0:30:2e:cb:08:46:52:12:10:64:33:8d:d9: 0d:f9:e4:3b:1b:17:9a:5b:6f:b5:5b:ae:3a:09:4a:41:56:cb: 5e:81:89:a0:c4:44:b9:3c:1c:2c:e3:22:3a:31:b5:dc:fa:dd: e9:de:5b:15:b6:5b:11:0f:66:d2:98:ff:b3:7e:f1:60:34:97: ab:87:d9:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9CANT3pG56KXzDGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI2MDkyMjA5MDAyM1oXDTI2MDkyNDA5MDAwMFowLzEtMCsGA1UEAxMk ZTQzYTg0NjktNzU5My00YjBiLTliYmItNmRmNzU1MzBlNTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudml923W+PHJUzji1iUTWd25JfV8jVucRZhm 1nGYzqJF5IDZ31T1jsQQum5udUBWOvbG9WPh54DckBiW4F47D+aYLtgEBDC1k/8r INX0VlRTHeJ2TimBpqxtqc1NW+8+NuVwbSxlwgxLoI9fFrhpJ0Bgejo/owsawp9e bOIauVS0yRv653XS654zfvchJd3sXfjgi34pwZrU6VgYGGcmST8GO5SPPw4PDl1g X9EtMLbEyJPKmiugoWorYzKpZOGWjL7kzQrbplW5ajm9UHwfMyKJToRRPcch5vPr WBkgy2+cYUPp4Gr0QerX6W+sgH1iU+QnJXqzodHDpc/UJpmABwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJrM3BrhEzdD+l5w4Jxn7cs0ceuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvNzA0YTc2MWYtYjcxYS00 ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGziVCKmeFSH5sr8aFJskF Nsbgg2HIkit/szoseJ1/yo1pRCUuKugTdTX1HXRPXYNxKziICneWxZBvXOmVk4qF nqTRV5C8j05jaS6BtfRstfZw9A5rBLEVGG2QliJxQj5R6+snnRu1lrl2iT7Daxpj GY43jORXR1VjGHlGKeYRjA+vkJuuLh4tzW3rzGRGO4fBHIINRhuYSOD+273dFLDB biZYnJSsSanFQH3WlkOTteUlvELe6mTwkrAwLssIRlISEGQzjdkN+eQ7GxeaW2+1 W646CUpBVstegYmgxES5PBws4yI6MbXc+t3p3lsVtlsRD2bSmP+zfvFgNJerh9mS -----END CERTIFICATE-----Generated at Tue Sep 22 16:07:24 2026 by rpki-client