$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft File: 804e20e1-66d3-4b19-8356-82071ce2a249.mft (raw, json) Hash identifier: kjKKDdS7ypUAIjgqFalRomenba5+T1FdZb03iFKIsBs= Subject key identifier: 3C:D7:C6:F4:50:62:F1:65:25:EC:C6:CD:8A:DD:23:53:72:34:52:C8 Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249 Certificate serial: 010D0C9F4328584F4EAEBD96480BFD8DE7C08B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft Manifest number: 010D0C9F4328584073A82BE94AF06297D1D97D73 Signing time: Sat 26 Sep 2026 22:00:23 +0000 Manifest this update: Sat 26 Sep 2026 22:00:23 +0000 Manifest next update: Tue 29 Sep 2026 22:00:00 +0000 Files and hashes: 1: 804e20e1-66d3-4b19-8356-82071ce2a249.crl (hash: oYY540NOfy2Hxuv9WJwsqbZD0i2NReSBdqpGjxpnPiI=) 2: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (hash: /IOkaiXTr0qJEeLYLCx1kLB8jjsZsWRx/MDZU5j++0I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4e:ae:bd:96:48:0b:fd:8d:e7:c0:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249 Validity Not Before: Sep 26 22:00:23 2026 GMT Not After : Sep 29 22:00:00 2026 GMT Subject: CN=4d3364ec-b3e8-40f3-a3c4-eb1d7a2f21a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:85:1e:db:98:cb:a4:72:4a:c9:02:e9:40:b1: 5d:d8:d2:a6:07:02:03:b6:e0:b0:7c:e8:89:f0:16: 71:1e:b4:c5:a1:b5:9c:7d:c1:c1:ee:6f:db:15:a5: 43:42:4e:59:de:c5:30:1d:af:e2:41:5b:7e:14:3b: 3a:57:58:03:0b:dd:9d:62:7a:8b:41:e5:00:d5:fb: bc:46:ab:12:19:36:d2:e1:29:64:fb:b0:fb:d5:10: 1b:19:35:2a:6e:a7:53:af:1f:a7:06:45:89:4d:6b: 9d:69:cd:5d:41:95:07:1a:17:a2:23:00:48:cc:5a: bc:16:85:f0:13:32:d8:e5:66:04:58:63:e9:9e:f9: f4:e9:e0:20:35:91:84:21:14:72:85:4a:ae:68:b4: a4:15:c3:d0:df:aa:6f:9a:dd:61:ff:b4:3b:b4:39: f1:0d:6d:e0:1e:78:b3:eb:0e:57:5b:50:6b:a4:e5: 14:12:ca:46:83:4c:77:05:2d:7b:53:67:33:69:fe: 91:60:e4:51:78:d6:e6:b7:d6:88:82:b9:84:e1:fa: 62:b9:27:7c:67:ec:8f:8c:35:41:ff:ca:6c:50:3a: 9c:f5:58:59:0a:03:93:00:77:f7:f3:d5:d3:0b:74: 64:09:54:2b:b2:a6:e8:9e:6d:ce:98:05:56:c0:a3: af:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:C6:F4:50:62:F1:65:25:EC:C6:CD:8A:DD:23:53:72:34:52:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl X509v3 Authority Key Identifier: keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:f6:18:99:71:0a:e3:c8:97:26:fb:e7:3c:49:31:9e:f4:f6: 22:50:41:9f:c6:cf:bc:26:b8:9b:47:38:c0:7a:57:7a:ee:e6: bc:0b:57:e8:29:ec:79:5d:ff:76:8d:13:91:d1:36:69:4d:b1: 90:dd:26:1e:4e:63:da:82:54:14:a5:4b:8e:40:24:35:12:f9: b0:ae:27:e3:4c:00:40:12:78:95:c7:44:b5:4d:db:d6:06:76: aa:8d:0c:f5:b1:65:ad:c1:01:30:1f:b1:b9:62:dc:b6:56:60: 6a:50:dd:6f:66:96:ca:3c:ee:21:97:ee:b6:3d:5e:f1:c0:88: fd:c2:0a:02:31:82:c6:56:e5:e9:de:a5:01:60:29:cc:96:43: c7:c3:54:73:b2:72:a0:06:53:78:33:55:3a:bd:9e:bb:96:0d: 80:3e:bf:c6:53:2b:82:d7:b9:f3:49:ef:b0:1a:bb:67:16:d0: dd:cc:f0:9e:56:00:1f:8d:4a:57:d3:62:a5:23:52:58:cf:1b: ed:53:89:31:92:9d:a6:65:96:4a:3b:83:86:37:eb:ac:ec:01: 58:da:40:15:5f:f4:be:dd:f4:50:f9:da:a5:67:2a:70:98:96: f9:12:ee:f3:e9:59:f2:1a:06:de:de:ae:1f:8f:40:0d:fa:f5: 17:58:9b:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Orr2WSAv9jefAi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0ZTIwZTEtNjZkMy00YjE5LTgzNTYtODIwNzFjZTJh MjQ5MB4XDTI2MDkyNjIyMDAyM1oXDTI2MDkyOTIyMDAwMFowLzEtMCsGA1UEAxMk NGQzMzY0ZWMtYjNlOC00MGYzLWEzYzQtZWIxZDdhMmYyMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YUe25jLpHJKyQLpQLFd2NKmBwIDtuCwfOiJ 8BZxHrTFobWcfcHB7m/bFaVDQk5Z3sUwHa/iQVt+FDs6V1gDC92dYnqLQeUA1fu8 RqsSGTbS4Slk+7D71RAbGTUqbqdTrx+nBkWJTWudac1dQZUHGheiIwBIzFq8FoXw EzLY5WYEWGPpnvn06eAgNZGEIRRyhUquaLSkFcPQ36pvmt1h/7Q7tDnxDW3gHniz 6w5XW1BrpOUUEspGg0x3BS17U2czaf6RYORReNbmt9aIgrmE4fpiuSd8Z+yPjDVB /8psUDqc9VhZCgOTAHf389XTC3RkCVQrsqbonm3OmAVWwKOvVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDzXxvRQYvFlJezGzYrdI1NyNFLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRl MjBlMS02NmQzLTRiMTktODM1Ni04MjA3MWNlMmEyNDkvODA0ZTIwZTEtNjZkMy00 YjE5LTgzNTYtODIwNzFjZTJhMjQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0ZTIwZTEtNjZkMy00YjE5LTgz NTYtODIwNzFjZTJhMjQ5LzgwNGUyMGUxLTY2ZDMtNGIxOS04MzU2LTgyMDcxY2Uy YTI0OS5jcmwwHwYDVR0jBBgwFoAU9yC8R4jA8DfAcvbh44l89YA+Mx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRlMjBlMS02NmQzLTRiMTktODM1Ni04MjA3 MWNlMmEyNDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCU9hiZcQrjyJcm++c8STGe 9PYiUEGfxs+8JribRzjAeld67ua8C1foKex5Xf92jROR0TZpTbGQ3SYeTmPaglQU pUuOQCQ1EvmwrifjTABAEniVx0S1TdvWBnaqjQz1sWWtwQEwH7G5Yty2VmBqUN1v ZpbKPO4hl+62PV7xwIj9wgoCMYLGVuXp3qUBYCnMlkPHw1RzsnKgBlN4M1U6vZ67 lg2APr/GUyuC17nzSe+wGrtnFtDdzPCeVgAfjUpX02KlI1JYzxvtU4kxkp2mZZZK O4OGN+us7AFY2kAVX/S+3fRQ+dqlZypwmJb5Eu7z6VnyGgbe3q4fj0AN+vUXWJtv -----END CERTIFICATE-----Generated at Sun Sep 27 01:25:52 2026 by rpki-client