$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json) Hash identifier: BryyDcHTX/zm3W70icEizjRG+FDVJK6O1NQvNXJJFjs= Subject key identifier: F3:9E:9B:F9:69:E8:1E:6F:0F:BD:AA:FF:D5:53:04:DE:E1:81:F4:BA Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584F3B9B0847756C96D1DBE2FF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft Manifest number: 010D0C9F4328584073A83840A2BEE7D9A3337B1D Signing time: Sun 20 Sep 2026 02:00:23 +0000 Manifest this update: Sun 20 Sep 2026 02:00:23 +0000 Manifest next update: Tue 22 Sep 2026 02:00:00 +0000 Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: ymig9RDAizDClr8A1C/bUsppw2WYgmRYT1W7ClOa6qs=) 2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: 8vexb5vCYHKPkOeOj4XgtSYvEcIPtrBc9YK+7+durQE=) 3: b24dbab2-534c-3e59-b62f-16d920e96e56.asa (hash: ORK6OBV2078olV9cWb16omJ+o7jBcvmU2xWSNZc1qFA=) 4: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: 6MUAQaCjWAB/UDCjeerQo5R/6udI3XR8uJrRMEruAzY=) 5: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: jN7EU4c1rekPQM9nUlwDxEhqcmqGJMy2t7Uu55/NFC0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:9b:08:47:75:6c:96:d1:db:e2:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Sep 20 02:00:23 2026 GMT Not After : Sep 22 02:00:00 2026 GMT Subject: CN=24abc2b1-0fef-49ae-8adf-6f861c0bfa96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:6e:b6:c7:6b:1f:b2:ea:aa:51:49:95:93: 0d:92:ae:27:67:0a:b8:d9:1a:bb:a7:2d:ed:42:52: 21:71:5d:18:d5:d8:7a:29:f8:5f:1d:da:64:f5:8d: 82:73:10:cd:57:a1:af:38:da:79:3d:5d:a8:07:85: 3d:34:34:16:b8:52:be:e9:0d:36:ab:d8:60:94:d3: 11:19:2e:b3:8b:28:e5:f8:60:c1:34:e3:3f:e1:c5: 37:c5:2e:9f:9a:49:f6:fa:5e:00:92:c4:0c:cb:66: 25:62:ae:28:35:3c:ba:20:6b:85:af:a5:57:83:8f: 64:88:4d:ea:84:02:79:27:ff:2a:d6:b8:28:7e:09: e6:cc:fe:3b:79:9a:b8:e7:cd:c5:0d:d3:f6:21:57: f8:9c:d7:f5:50:a0:78:70:7d:80:ad:77:6c:c9:2f: a9:e6:85:bd:ca:ab:08:3e:52:6a:69:47:c2:aa:8d: ca:61:68:2e:62:b0:7b:c0:fc:24:ef:fe:ac:54:43: 27:11:88:65:6b:df:a1:53:bd:45:9d:cb:a4:7a:4c: 36:14:7c:5c:6d:42:e2:de:bc:34:1a:84:87:cb:bd: 39:62:eb:8a:e3:44:10:de:58:4d:3f:60:da:c6:a1: 94:af:19:4d:15:8d:73:d5:14:ac:3b:15:30:78:e7: 3e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9E:9B:F9:69:E8:1E:6F:0F:BD:AA:FF:D5:53:04:DE:E1:81:F4:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:74:42:ba:75:1a:10:68:92:44:7f:46:ee:a6:bc:61:38:7c: 53:72:ab:eb:d2:6c:f8:1d:d1:80:e3:5e:72:d2:94:e2:54:00: 77:7f:31:41:20:06:25:de:33:66:58:5a:b1:a0:a6:db:a5:4b: d1:1c:c8:dc:79:7e:b6:f8:6b:c3:ec:cc:88:70:51:6d:3f:38: 95:33:cf:0b:1c:8d:b8:17:50:8a:d9:43:0a:fb:28:65:bd:ba: 76:2b:5b:5f:df:25:2f:90:4d:ca:25:ce:45:91:94:ab:ed:e1: fb:19:47:a7:76:8a:49:4b:e3:3e:93:84:77:a6:f1:62:29:f1: af:04:f3:99:bb:47:17:10:bf:14:52:b0:e0:09:c8:4c:c7:cd: 33:0a:c9:fe:8c:47:03:41:ce:6c:fa:e6:34:af:33:52:83:5b: 64:fc:0f:68:ff:33:f1:bf:27:fa:46:bf:67:47:bc:89:0d:3e: 33:af:55:48:7d:9b:3e:af:f7:d5:bf:30:14:b3:e1:eb:e2:9e: d3:b8:ff:89:01:46:ad:ca:cd:4e:91:ec:a1:3e:f4:70:15:71: eb:5c:54:01:2c:1c:d3:43:56:03:a1:54:b4:40:63:2c:65:13: 7d:c1:03:d7:e6:73:1c:4b:23:81:d5:73:c2:0d:b7:ef:5c:84: c4:bd:b1:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE87mwhHdWyW0dvi/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI2MDkyMDAyMDAyM1oXDTI2MDkyMjAyMDAwMFowLzEtMCsGA1UEAxMk MjRhYmMyYjEtMGZlZi00OWFlLThhZGYtNmY4NjFjMGJmYTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyputsdrH7LqqlFJlZMNkq4nZwq42Rq7py3t QlIhcV0Y1dh6KfhfHdpk9Y2CcxDNV6GvONp5PV2oB4U9NDQWuFK+6Q02q9hglNMR GS6ziyjl+GDBNOM/4cU3xS6fmkn2+l4AksQMy2YlYq4oNTy6IGuFr6VXg49kiE3q hAJ5J/8q1rgofgnmzP47eZq4583FDdP2IVf4nNf1UKB4cH2ArXdsyS+p5oW9yqsI PlJqaUfCqo3KYWguYrB7wPwk7/6sVEMnEYhla9+hU71Fncukekw2FHxcbULi3rw0 GoSHy705YuuK40QQ3lhNP2DaxqGUrxlNFY1z1RSsOxUweOc+awIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPOem/lp6B5vD72q/9VTBN7hgfS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00 NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVdEK6dRoQaJJEf0buprxh OHxTcqvr0mz4HdGA415y0pTiVAB3fzFBIAYl3jNmWFqxoKbbpUvRHMjceX62+GvD 7MyIcFFtPziVM88LHI24F1CK2UMK+yhlvbp2K1tf3yUvkE3KJc5FkZSr7eH7GUen dopJS+M+k4R3pvFiKfGvBPOZu0cXEL8UUrDgCchMx80zCsn+jEcDQc5s+uY0rzNS g1tk/A9o/zPxvyf6Rr9nR7yJDT4zr1VIfZs+r/fVvzAUs+Hr4p7TuP+JAUatys1O keyhPvRwFXHrXFQBLBzTQ1YDoVS0QGMsZRN9wQPX5nMcSyOB1XPCDbfvXITEvbGp -----END CERTIFICATE-----Generated at Sun Sep 20 20:53:10 2026 by rpki-client