$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft File: 9ac09e11-24a9-4451-9633-b772a7a11960.mft (raw, json) Hash identifier: oSRYCHtUfZ3Tqqw8uInV7HegssoJH6Eex4+f5WBvNNw= Subject key identifier: 4C:A0:3F:1F:D3:35:7C:B4:46:5A:AC:24:1E:F4:64:98:6D:8B:8D:FB Authority key identifier: 37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6 Certificate issuer: /CN=9ac09e11-24a9-4451-9633-b772a7a11960 Certificate serial: 010D0C9F4328584F3BD69B3240B4A92006B29D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft Manifest number: 010D0C9F4328584073A83D34A51D88168A708A57 Signing time: Sun 20 Sep 2026 04:00:23 +0000 Manifest this update: Sun 20 Sep 2026 04:00:23 +0000 Manifest next update: Tue 22 Sep 2026 04:00:00 +0000 Files and hashes: 1: 6b2ea289-eda2-3a71-8647-9aaeae294b75.asa (hash: QjREQ8QdA54gxp8yw19VlF/ypQHFeHj1CmYSXThQVEQ=) 2: 9ac09e11-24a9-4451-9633-b772a7a11960.crl (hash: 10p/nCzRDv61YpbzgDRLVM07JoR80F2tnbTmNkGw/+Y=) 3: beed065a-43ca-3d79-a1b8-2f060655af4c.roa (hash: a8kZw+gJt5XCqGxBWjlflkpe3ej5RykM9MjzJFat/HM=) 4: eb27c402-f225-3002-b138-a6d8b00f0bdc.asa (hash: 9pezl+vk6ITryo253Y102AtYEq7QBWiaPMDcfotkKzE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:d6:9b:32:40:b4:a9:20:06:b2:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ac09e11-24a9-4451-9633-b772a7a11960 Validity Not Before: Sep 20 04:00:23 2026 GMT Not After : Sep 22 04:00:00 2026 GMT Subject: CN=b34d17dd-cbcb-4e88-98d3-14062d93e0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:94:ed:c4:80:24:45:43:72:0c:fd:52:f1:6d: cd:2b:70:b8:c0:8a:47:ec:8a:b0:1f:5d:1a:29:a8: bd:91:c5:fc:17:22:01:d5:30:5d:22:60:80:55:3f: f5:d6:f1:cf:a7:13:ee:42:1c:85:c2:47:41:c3:0b: cd:69:53:e5:c4:20:02:87:c1:99:dc:c9:0e:52:22: eb:d3:1b:7e:5f:b1:9b:27:e4:b8:86:25:b1:ab:50: ba:8a:10:50:ec:1a:4d:30:0c:a4:dc:61:f8:22:d0: d7:07:d1:cb:8b:1d:81:db:45:0d:8a:e8:99:ad:82: 31:ff:1b:b8:83:70:96:61:ad:32:14:92:9e:15:98: 99:aa:e9:56:d7:af:ef:b8:92:38:ae:3d:7a:49:63: 60:ac:49:9e:a2:60:e0:85:a7:dc:b1:c7:f6:d2:1f: ee:0b:45:ee:36:55:b6:ea:e2:24:ac:ef:dc:61:6d: 3c:e6:2d:2e:1a:30:0f:52:d5:f7:12:87:a5:71:6c: 17:f6:b1:92:d6:66:1d:c0:d2:10:ba:a8:da:a5:be: af:97:0f:bc:86:b0:dd:86:5b:15:cd:99:49:1d:18: 16:7a:46:4f:0f:fc:dd:47:fb:09:b1:7a:13:ca:b1: 0c:6b:ad:b4:3b:7d:71:d8:2b:d3:cc:70:cb:56:18: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A0:3F:1F:D3:35:7C:B4:46:5A:AC:24:1E:F4:64:98:6D:8B:8D:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.crl X509v3 Authority Key Identifier: keyid:37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d8:34:85:1b:73:4a:94:e0:c2:a5:59:f7:cf:5f:68:7b:ee: 2d:49:97:cd:57:80:3d:ee:bf:bd:1c:3c:ef:5d:2d:bd:16:fd: f1:14:c0:53:d4:8b:54:e3:04:50:bb:e5:71:e9:77:aa:e4:89: d9:6b:64:34:31:1f:bb:ef:e5:e7:ba:a3:80:93:08:d2:7f:c4: 62:e9:53:34:7c:77:48:11:73:c9:dc:38:c0:23:08:b1:9b:3b: ee:96:bc:30:6d:0e:6d:94:25:bc:a3:88:bc:86:5e:1b:ec:f1: ea:de:5f:c3:08:de:ea:b2:06:a9:83:b3:cc:c0:5b:9d:f0:c2: 6f:6f:cd:85:1e:b7:95:91:f0:0a:02:9f:32:81:58:cf:ef:21: 7f:f4:3f:be:6e:94:0f:2a:8d:36:74:ee:1a:f2:e9:b6:5e:d4: 12:c0:44:8b:34:fe:b2:64:38:09:42:8b:c9:94:00:95:67:7f: 6a:5b:6a:7e:5a:e7:ff:d3:26:3c:c6:3d:3d:5b:ed:f3:df:25: 3c:17:20:06:c5:df:2f:f8:c2:4e:19:9a:d6:29:fe:e4:64:66: 09:01:32:ca:81:5f:d7:c6:04:2c:53:4d:c3:75:3d:f5:b4:bb: e8:0f:ef:26:02:f0:37:ab:59:e2:8a:38:f2:24:cc:35:ce:8d: 8e:bb:43:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE871psyQLSpIAaynYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjMDllMTEtMjRhOS00NDUxLTk2MzMtYjc3MmE3YTEx OTYwMB4XDTI2MDkyMDA0MDAyM1oXDTI2MDkyMjA0MDAwMFowLzEtMCsGA1UEAxMk YjM0ZDE3ZGQtY2JjYi00ZTg4LTk4ZDMtMTQwNjJkOTNlMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupTtxIAkRUNyDP1S8W3NK3C4wIpH7IqwH10a Kai9kcX8FyIB1TBdImCAVT/11vHPpxPuQhyFwkdBwwvNaVPlxCACh8GZ3MkOUiLr 0xt+X7GbJ+S4hiWxq1C6ihBQ7BpNMAyk3GH4ItDXB9HLix2B20UNiuiZrYIx/xu4 g3CWYa0yFJKeFZiZqulW16/vuJI4rj16SWNgrEmeomDghafcscf20h/uC0XuNlW2 6uIkrO/cYW085i0uGjAPUtX3EoelcWwX9rGS1mYdwNIQuqjapb6vlw+8hrDdhlsV zZlJHRgWekZPD/zdR/sJsXoTyrEMa620O31x2CvTzHDLVhgybwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEygPx/TNXy0RlqsJB70ZJhti437MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWMw OWUxMS0yNGE5LTQ0NTEtOTYzMy1iNzcyYTdhMTE5NjAvOWFjMDllMTEtMjRhOS00 NDUxLTk2MzMtYjc3MmE3YTExOTYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFjMDllMTEtMjRhOS00NDUxLTk2 MzMtYjc3MmE3YTExOTYwLzlhYzA5ZTExLTI0YTktNDQ1MS05NjMzLWI3NzJhN2Ex MTk2MC5jcmwwHwYDVR0jBBgwFoAUNzuLxae29vLzQtKqHkOemT9bhOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YWMwOWUxMS0yNGE5LTQ0NTEtOTYzMy1iNzcy YTdhMTE5NjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA22DSFG3NKlODCpVn3z19o e+4tSZfNV4A97r+9HDzvXS29Fv3xFMBT1ItU4wRQu+Vx6Xeq5InZa2Q0MR+77+Xn uqOAkwjSf8Ri6VM0fHdIEXPJ3DjAIwixmzvulrwwbQ5tlCW8o4i8hl4b7PHq3l/D CN7qsgapg7PMwFud8MJvb82FHreVkfAKAp8ygVjP7yF/9D++bpQPKo02dO4a8um2 XtQSwESLNP6yZDgJQovJlACVZ39qW2p+Wuf/0yY8xj09W+3z3yU8FyAGxd8v+MJO GZrWKf7kZGYJATLKgV/XxgQsU03DdT31tLvoD+8mAvA3q1niijjyJMw1zo2Ou0Pa -----END CERTIFICATE-----Generated at Sun Sep 20 09:29:17 2026 by rpki-client