$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft File: 7ea21a7b-596c-45f8-899e-6879815f26b1.mft (raw, json) Hash identifier: btn4JDOYkmDRTYEXl7i4U2CjkismCHWm4x4J6TLxMjo= Subject key identifier: 2D:9A:77:75:44:1C:48:82:B6:DB:AE:BA:C5:47:9B:68:68:0A:D8:42 Authority key identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 Certificate issuer: /CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Certificate serial: 010D0C9F4328584F405FFD52DB17305DCFB01400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft Manifest number: 010D0C9F43285840B715B5777F2694104F942727 Signing time: Mon 21 Sep 2026 19:00:24 +0000 Manifest this update: Mon 21 Sep 2026 19:00:24 +0000 Manifest next update: Wed 23 Sep 2026 19:00:00 +0000 Files and hashes: 1: 1e4ac8ae-4ece-3037-955e-2d140c9408b0.roa (hash: 5lTH2K877t+uB3d4GDt0ZaPOxeZkcNVFeZgds8WG+uk=) 2: 6bb3dd8d-6885-3f66-9f81-d1df405388c1.roa (hash: H2JYgti0UXe0rbR38FXok9C0vuarv4uV94od5cRRIFw=) 3: 7ea21a7b-596c-45f8-899e-6879815f26b1.crl (hash: 3ZKpQ2LaDkYNwmBjo7gEAaA0uWRWCPqpzPPG55eox4g=) 4: aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa (hash: SzgZPxdaX3suWmN3thAPn0vJF1rA+2SjXXwZHpFeW9s=) 5: e154eae8-80df-3842-9152-5a23f8997dad.roa (hash: 9nYE4xZ5xEpqKkiKbO/d93nK2AIXjFd+BSfW0NJ1CFc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:5f:fd:52:db:17:30:5d:cf:b0:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Validity Not Before: Sep 21 19:00:24 2026 GMT Not After : Sep 23 19:00:00 2026 GMT Subject: CN=b03ecc69-eb60-4471-a2d9-f268f833e624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2c:f3:36:dc:a4:c3:f9:eb:90:02:61:03:29: b5:55:76:b3:9d:97:25:8a:0c:70:54:ae:ec:a6:eb: 09:78:ce:e3:bc:65:ef:c0:e5:92:c7:79:ca:65:6a: eb:86:87:92:16:03:f4:c0:d8:42:1a:77:07:03:40: 92:33:24:21:63:44:61:23:06:9b:6d:8f:27:e2:8d: e9:6a:fd:a0:31:1e:27:5f:04:79:22:25:36:17:b5: ed:8a:24:5c:49:d8:87:43:97:f0:6d:25:56:d0:4c: a8:f6:24:00:ef:9a:53:87:61:34:d3:91:d6:ac:03: 2c:60:91:e1:cd:6d:54:bb:93:11:2f:29:d4:8a:52: cd:7b:c1:08:bb:e4:ad:f8:5a:ad:91:af:3d:e0:2f: ce:1e:74:b1:0d:7c:77:bc:2d:45:a9:41:f0:e5:e4: 48:73:d6:e0:1b:18:9a:47:c5:4a:e3:40:d3:9b:cf: 92:e2:c9:09:fe:70:da:12:53:88:e6:cf:0f:92:83: 4f:65:29:d7:b8:84:c8:af:b2:76:e5:14:29:56:c7: 5d:ef:eb:03:de:0b:27:24:70:95:64:d2:68:0c:87: df:e8:84:f0:47:1c:e3:fa:b7:7d:57:6d:39:67:34: 83:81:e6:ca:66:57:a4:a9:cc:f0:01:06:4a:5f:e1: 15:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9A:77:75:44:1C:48:82:B6:DB:AE:BA:C5:47:9B:68:68:0A:D8:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl X509v3 Authority Key Identifier: keyid:58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:91:90:48:55:d4:7c:b5:b5:df:0b:57:65:1f:c2:fe:c2:e0: 73:7c:0a:eb:3a:c4:c7:e2:67:3b:dd:6f:ab:32:97:c3:8c:77: 8b:51:65:46:99:97:ef:0a:e0:bf:0e:a2:3a:a4:82:e6:30:30: 68:ce:2e:c4:04:c0:99:5f:f8:4b:77:df:61:ac:11:80:34:2f: 69:08:51:c1:1f:30:7a:bc:4c:c0:06:71:57:a8:f7:24:8f:5f: 9f:dc:a6:ef:5d:bf:eb:c9:58:74:0f:9b:62:7c:a3:8b:c9:65: 3d:0e:85:c9:30:67:fd:33:38:28:90:82:a4:48:2a:9d:a2:07: 9c:83:90:02:48:2a:d3:66:46:02:df:34:8f:d6:3c:c9:d0:43: 81:36:be:76:ce:f1:c5:f9:e1:9c:93:97:46:ee:00:5a:bb:e5: 9f:9d:91:cd:f9:71:25:c6:59:ef:1f:d3:f1:dc:b5:e1:06:ad: 8d:92:61:57:5a:2b:b9:bf:98:e0:44:f0:f1:23:14:e2:8b:c5: ac:36:1e:55:05:14:bb:21:06:07:7a:76:37:7f:00:fa:52:0e: 44:13:79:65:e7:4d:46:e7:d0:26:51:49:27:71:9b:be:11:7e: e4:f3:f5:f3:e7:fd:5e:19:10:77:e0:27:bd:a1:23:24:a7:b8: 6b:ca:b2:e0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9AX/1S2xcwXc+wFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VhMjFhN2ItNTk2Yy00NWY4LTg5OWUtNjg3OTgxNWYy NmIxMB4XDTI2MDkyMTE5MDAyNFoXDTI2MDkyMzE5MDAwMFowLzEtMCsGA1UEAxMk YjAzZWNjNjktZWI2MC00NDcxLWEyZDktZjI2OGY4MzNlNjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCzzNtykw/nrkAJhAym1VXaznZcligxwVK7s pusJeM7jvGXvwOWSx3nKZWrrhoeSFgP0wNhCGncHA0CSMyQhY0RhIwabbY8n4o3p av2gMR4nXwR5IiU2F7XtiiRcSdiHQ5fwbSVW0Eyo9iQA75pTh2E005HWrAMsYJHh zW1Uu5MRLynUilLNe8EIu+St+Fqtka894C/OHnSxDXx3vC1FqUHw5eRIc9bgGxia R8VK40DTm8+S4skJ/nDaElOI5s8PkoNPZSnXuITIr7J25RQpVsdd7+sD3gsnJHCV ZNJoDIff6ITwRxzj+rd9V205ZzSDgebKZlekqczwAQZKX+EVBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC2ad3VEHEiCttuuusVHm2hoCthCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEy MWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1ZjI2YjEvN2VhMjFhN2ItNTk2Yy00 NWY4LTg5OWUtNjg3OTgxNWYyNmIxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2VhMjFhN2ItNTk2Yy00NWY4LTg5 OWUtNjg3OTgxNWYyNmIxLzdlYTIxYTdiLTU5NmMtNDVmOC04OTllLTY4Nzk4MTVm MjZiMS5jcmwwHwYDVR0jBBgwFoAUWNXVMusQAMS/ihkzzuqjhi139KkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5 ODE1ZjI2YjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhkZBIVdR8tbXfC1dlH8L+ wuBzfArrOsTH4mc73W+rMpfDjHeLUWVGmZfvCuC/DqI6pILmMDBozi7EBMCZX/hL d99hrBGANC9pCFHBHzB6vEzABnFXqPckj1+f3KbvXb/ryVh0D5tifKOLyWU9DoXJ MGf9MzgokIKkSCqdogecg5ACSCrTZkYC3zSP1jzJ0EOBNr52zvHF+eGck5dG7gBa u+WfnZHN+XElxlnvH9Px3LXhBq2NkmFXWiu5v5jgRPDxIxTii8WsNh5VBRS7IQYH enY3fwD6Ug5EE3ll501G59AmUUkncZu+EX7k8/Xz5/1eGRB34Ce9oSMkp7hryrLg -----END CERTIFICATE-----Generated at Tue Sep 22 21:28:43 2026 by rpki-client