$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft File: b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft (raw, json) Hash identifier: XeQoBf1bZ3DuNZEdFypNzBASqcrHk6Wzz+GzL4F5npw= Subject key identifier: B9:1D:C1:B7:E8:8E:5C:8F:0E:A1:4D:86:53:9C:FC:69:81:53:F2:A1 Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Certificate serial: 010D0C9F4328584F3F1864776E1A5795629C6EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft Manifest number: 010D0C9F4328584073A848110A4299D6DF1F1A1D Signing time: Mon 21 Sep 2026 08:00:23 +0000 Manifest this update: Mon 21 Sep 2026 08:00:23 +0000 Manifest next update: Thu 24 Sep 2026 08:00:00 +0000 Files and hashes: 1: 7955ed0f-1153-3896-a51e-5d367bf0cc64.roa (hash: XeGRUdh2LV3pwnf/MOlBWDTjTI/yY+6DIfSRQ4YHZlU=) 2: b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl (hash: BM7djavKVgo0QiVyC2DaP7yoiwqcBdDqRvaOwlACX54=) 3: ee1a4e04-68da-38e4-9471-1d40d048b137.roa (hash: +qbiUTSeJ7rowopBvOKEKZcmgJKkiHRpHjYb44+q8k0=) 4: ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa (hash: S8fPMuuZKEF5T1VjbwD7IjTB/OK0w13p4CQU7w0nLHI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:18:64:77:6e:1a:57:95:62:9c:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Validity Not Before: Sep 21 08:00:23 2026 GMT Not After : Sep 24 08:00:00 2026 GMT Subject: CN=91ee6d30-d0d5-4606-b916-d1178b18c1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:87:88:be:6b:a2:1c:a0:b2:d7:f8:f4:81:7f: 1a:4e:e3:a4:41:c1:2d:82:eb:44:08:09:d7:a3:87: 5b:a3:ce:79:bf:bd:66:3f:d8:ff:51:98:3f:f5:25: 3f:e8:bc:98:47:d0:50:68:47:85:cc:8a:02:8e:c0: 26:a6:a0:f3:bf:92:e1:19:1f:29:52:e4:b8:5d:5b: e2:6e:97:d4:7a:80:41:20:8b:a7:96:0e:30:25:dc: c4:22:73:03:33:f5:b4:36:d7:0c:29:8c:54:14:b0: ec:5d:a9:be:0d:15:a2:80:1e:43:15:7d:6a:83:e4: 15:a5:b6:d9:28:9c:9a:cd:fd:79:bd:7f:9b:e3:40: e6:c7:5c:cf:cf:39:9b:19:f0:62:2e:a7:62:68:54: 06:11:1e:50:2b:0b:63:e4:08:38:b8:55:a1:63:9b: d7:c2:df:6d:50:d7:18:0d:cb:fe:20:cb:66:3f:1d: 94:0f:20:69:8a:e3:9f:9b:b6:8d:bb:e3:35:5f:39: b2:5f:c9:50:84:fb:d6:21:19:23:78:c5:95:56:e4: 5b:28:69:e7:81:7a:c3:cb:6e:45:0e:98:11:37:1b: 1f:0f:a7:8d:ed:bb:b5:42:61:24:2e:de:fe:33:87: e7:64:51:d3:d9:7f:5b:6b:ea:c7:7b:36:9e:03:9c: 98:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1D:C1:B7:E8:8E:5C:8F:0E:A1:4D:86:53:9C:FC:69:81:53:F2:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl X509v3 Authority Key Identifier: keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d6:58:a2:8a:a2:3e:4a:16:97:62:bf:90:8a:7d:d6:1b:3f: bb:54:0f:1e:ae:4e:3f:ad:15:9b:8b:17:1e:42:2b:e0:18:18: 2c:63:aa:34:4a:7e:3c:c9:84:45:24:8f:a0:16:cc:ac:12:94: 64:49:66:b4:1f:ef:6b:4d:e2:c3:50:63:eb:3b:85:03:33:2a: aa:08:9b:47:f5:78:df:ae:52:2e:76:a4:d8:4f:ce:58:77:0e: c6:d4:c2:cc:68:05:6b:e6:9a:d6:1d:23:5a:2f:fc:20:42:7b: 51:da:cb:cf:f9:5e:ed:4b:51:e4:42:38:b6:8f:92:4f:be:8a: 13:60:a8:6f:d4:ee:a5:5f:e9:d7:31:99:e1:46:51:da:98:e6: 26:37:61:7e:bf:90:f0:26:9e:cb:42:f9:35:fb:67:89:80:17: fe:0e:9e:34:3d:c8:06:2d:65:52:87:c1:f1:13:64:55:22:a5: 2e:4f:37:af:2e:95:89:87:ce:f4:38:32:07:a3:d2:70:37:1a: ef:63:ee:94:36:36:4d:f3:12:89:24:0f:a3:de:39:de:09:ec: fd:74:a9:3b:60:10:37:f8:e0:7c:77:23:26:a0:0e:3f:4a:bd: 94:25:92:4f:15:d9:ac:0a:50:71:38:d0:44:52:14:85:ba:8a: 76:e7:2f:bd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8/GGR3bhpXlWKcbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj MWQ2MB4XDTI2MDkyMTA4MDAyM1oXDTI2MDkyNDA4MDAwMFowLzEtMCsGA1UEAxMk OTFlZTZkMzAtZDBkNS00NjA2LWI5MTYtZDExNzhiMThjMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4eIvmuiHKCy1/j0gX8aTuOkQcEtgutECAnX o4dbo855v71mP9j/UZg/9SU/6LyYR9BQaEeFzIoCjsAmpqDzv5LhGR8pUuS4XVvi bpfUeoBBIIunlg4wJdzEInMDM/W0NtcMKYxUFLDsXam+DRWigB5DFX1qg+QVpbbZ KJyazf15vX+b40Dmx1zPzzmbGfBiLqdiaFQGER5QKwtj5Ag4uFWhY5vXwt9tUNcY Dcv+IMtmPx2UDyBpiuOfm7aNu+M1XzmyX8lQhPvWIRkjeMWVVuRbKGnngXrDy25F DpgRNxsfD6eN7bu1QmEkLt7+M4fnZFHT2X9ba+rHezaeA5yYkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLkdwbfojlyPDqFNhlOc/GmBU/KhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3 MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvYjRkNzFkYTktNmZmMS00 OWFiLWExZTUtNmM0OGY4ZjBjMWQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4 ZjhmMGMxZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBi1liiiqI+ShaXYr+Qin3W Gz+7VA8erk4/rRWbixceQivgGBgsY6o0Sn48yYRFJI+gFsysEpRkSWa0H+9rTeLD UGPrO4UDMyqqCJtH9XjfrlIudqTYT85Ydw7G1MLMaAVr5prWHSNaL/wgQntR2svP +V7tS1HkQji2j5JPvooTYKhv1O6lX+nXMZnhRlHamOYmN2F+v5DwJp7LQvk1+2eJ gBf+Dp40PcgGLWVSh8HxE2RVIqUuTzevLpWJh870ODIHo9JwNxrvY+6UNjZN8xKJ JA+j3jneCez9dKk7YBA3+OB8dyMmoA4/Sr2UJZJPFdmsClBxONBEUhSFuop25y+9 -----END CERTIFICATE-----Generated at Tue Sep 22 08:15:57 2026 by rpki-client