$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft File: c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft (raw, json) Hash identifier: dQsNS9F1PsXtn3llvqL1AFlUqRfy/5Ic4zyyv+IsNzs= Subject key identifier: 95:85:DE:54:A3:0D:09:F5:19:6B:FD:A6:6B:DE:AB:ED:02:FD:FF:32 Authority key identifier: 8B:F6:E7:60:0F:BE:E9:94:02:D6:BF:EE:BB:24:5A:C7:7D:FB:CD:24 Certificate issuer: /CN=c900ace0-a77f-456b-b2a7-db5e6b89e87a Certificate serial: 010D0C9F4328584F3F8F84E2584208B98511DB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft Manifest number: 010D0C9F4328584073A851E7AB99689230705FEC Signing time: Mon 21 Sep 2026 12:00:23 +0000 Manifest this update: Mon 21 Sep 2026 12:00:23 +0000 Manifest next update: Thu 24 Sep 2026 12:00:00 +0000 Files and hashes: 1: 175a7774-3b58-3926-8574-a23f74a28ae2.roa (hash: tOqWYzjbJcOLaIDzxQpPbVGl/Ut+PJn9t9U1nNZYy7Q=) 2: c900ace0-a77f-456b-b2a7-db5e6b89e87a.crl (hash: ZDXKtIi0+YrxgfoKkC66vQeNFpsdpcWk4D2ihJ/Ve5M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:8f:84:e2:58:42:08:b9:85:11:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c900ace0-a77f-456b-b2a7-db5e6b89e87a Validity Not Before: Sep 21 12:00:23 2026 GMT Not After : Sep 24 12:00:00 2026 GMT Subject: CN=78fe2ee9-633e-43bb-9d34-2baed783821a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:9e:ff:39:b6:62:e7:9c:4e:e9:2c:57:28: 1a:1f:dd:cc:77:66:e3:95:b3:b2:a1:f3:98:37:15: a6:47:fd:6e:66:be:bf:fd:1a:f2:bc:8e:a1:57:08: 76:f9:48:cf:ee:b4:2a:c5:6f:85:5a:a8:36:43:ce: 27:e6:8d:1e:fb:cd:85:ba:af:1c:33:75:25:fb:de: c1:28:23:ad:d3:08:6e:45:84:9f:5d:e5:dc:77:b2: 18:a7:28:76:09:f4:10:84:fd:00:dd:f4:fd:ee:82: c1:2c:a6:7d:75:3a:b0:fb:2c:c4:57:49:dd:8d:96: 3e:c3:c5:e1:53:8e:bd:ea:18:de:5c:20:52:8d:2e: ba:38:59:20:0e:58:93:fc:08:c7:4c:da:95:7a:24: 63:a9:eb:46:8c:61:8e:61:fe:16:47:51:dd:ed:58: f0:cf:97:b6:6b:37:03:68:a6:ef:29:15:df:09:d6: 80:90:ec:42:99:00:11:12:d2:f3:db:5f:13:01:3d: 88:6d:18:1a:a7:35:58:2d:ed:f5:d3:36:27:51:3f: 10:71:79:8a:4d:b1:88:c1:aa:27:e5:ff:63:9e:55: d8:77:29:24:5b:8d:0e:64:5f:cc:b9:fc:44:85:32: cc:64:f6:40:9b:90:b0:8a:4c:66:2a:92:39:d7:71: 87:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:85:DE:54:A3:0D:09:F5:19:6B:FD:A6:6B:DE:AB:ED:02:FD:FF:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.crl X509v3 Authority Key Identifier: keyid:8B:F6:E7:60:0F:BE:E9:94:02:D6:BF:EE:BB:24:5A:C7:7D:FB:CD:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:43:64:e6:61:8a:dc:6a:5b:90:44:26:04:31:f5:b3:66:7f: 97:02:9d:ad:d6:78:b8:d7:55:fb:65:17:07:ec:f0:4c:f8:50: 52:5d:3b:be:e6:5a:cc:7b:72:7e:c3:0f:91:f8:ff:c4:2d:1c: 82:2b:63:e2:22:35:ae:11:6f:d0:2b:37:ad:6f:61:f0:1d:77: bf:35:f5:85:2d:8c:97:68:b9:a1:ca:3e:44:87:96:83:19:e7: ac:e8:e8:c7:19:52:ba:16:22:b0:22:59:e9:1c:a7:f3:10:1f: 7f:4d:47:b2:e5:69:35:33:b6:cc:0d:d2:57:7a:c1:2b:bd:f1: 7a:a7:60:d9:0f:b0:85:da:93:12:30:12:17:ec:39:73:82:0e: fd:1a:0a:8c:b4:72:14:b1:79:65:f8:10:17:fc:16:f4:c6:1e: 64:0d:fb:84:48:7e:81:65:5e:f6:16:5f:6d:f1:30:3a:7a:00: 91:98:e9:f3:f2:a2:9f:a6:f1:d3:d6:ba:74:85:66:fb:ce:bb: 82:98:6f:94:b7:b0:86:c7:71:91:5d:87:cc:95:0c:73:1c:84: d2:b2:cc:c9:cf:74:e6:74:52:14:61:03:46:dd:ab:88:19:2b: 5f:74:8d:43:1d:5a:95:e1:68:d3:65:a5:a3:c9:27:f0:72:51: 10:25:ae:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8/j4TiWEIIuYUR2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkwMGFjZTAtYTc3Zi00NTZiLWIyYTctZGI1ZTZiODll ODdhMB4XDTI2MDkyMTEyMDAyM1oXDTI2MDkyNDEyMDAwMFowLzEtMCsGA1UEAxMk NzhmZTJlZTktNjMzZS00M2JiLTlkMzQtMmJhZWQ3ODM4MjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi6e/zm2YuecTuksVygaH93Md2bjlbOyofOY NxWmR/1uZr6//RryvI6hVwh2+UjP7rQqxW+FWqg2Q84n5o0e+82Fuq8cM3Ul+97B KCOt0whuRYSfXeXcd7IYpyh2CfQQhP0A3fT97oLBLKZ9dTqw+yzEV0ndjZY+w8Xh U4696hjeXCBSjS66OFkgDliT/AjHTNqVeiRjqetGjGGOYf4WR1Hd7Vjwz5e2azcD aKbvKRXfCdaAkOxCmQAREtLz218TAT2IbRgapzVYLe310zYnUT8QcXmKTbGIwaon 5f9jnlXYdykkW40OZF/MufxEhTLMZPZAm5CwikxmKpI513GHpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJWF3lSjDQn1GWv9pmveq+0C/f8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jOTAw YWNlMC1hNzdmLTQ1NmItYjJhNy1kYjVlNmI4OWU4N2EvYzkwMGFjZTAtYTc3Zi00 NTZiLWIyYTctZGI1ZTZiODllODdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzkwMGFjZTAtYTc3Zi00NTZiLWIy YTctZGI1ZTZiODllODdhL2M5MDBhY2UwLWE3N2YtNDU2Yi1iMmE3LWRiNWU2Yjg5 ZTg3YS5jcmwwHwYDVR0jBBgwFoAUi/bnYA++6ZQC1r/uuyRax337zSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jOTAwYWNlMC1hNzdmLTQ1NmItYjJhNy1kYjVl NmI4OWU4N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgQ2TmYYrcaluQRCYEMfWz Zn+XAp2t1ni411X7ZRcH7PBM+FBSXTu+5lrMe3J+ww+R+P/ELRyCK2PiIjWuEW/Q Kzetb2HwHXe/NfWFLYyXaLmhyj5Eh5aDGees6OjHGVK6FiKwIlnpHKfzEB9/TUey 5Wk1M7bMDdJXesErvfF6p2DZD7CF2pMSMBIX7Dlzgg79GgqMtHIUsXll+BAX/Bb0 xh5kDfuESH6BZV72Fl9t8TA6egCRmOnz8qKfpvHT1rp0hWb7zruCmG+Ut7CGx3GR XYfMlQxzHITSsszJz3TmdFIUYQNG3auIGStfdI1DHVqV4WjTZaWjySfwclEQJa7Z -----END CERTIFICATE-----Generated at Mon Sep 21 20:22:10 2026 by rpki-client