$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft File: cffdb071-c372-4fb8-ae3c-ab449c400178.mft (raw, json) Hash identifier: dlPP8BbvlABbL2X04F8yNYaC1lXsKRrKNX9xxY9l8co= Subject key identifier: 38:CB:CE:7F:E2:E6:1C:39:C9:AC:00:EF:FF:8B:94:0C:A2:F8:62:D0 Authority key identifier: D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 Certificate issuer: /CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Certificate serial: 010D0C9F4328584F3D778494BD0B7E9A7FED2A3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft Manifest number: 010D0C9F4328584073A81F0B758DBA9E7925CABA Signing time: Sun 20 Sep 2026 18:00:23 +0000 Manifest this update: Sun 20 Sep 2026 18:00:23 +0000 Manifest next update: Wed 23 Sep 2026 18:00:00 +0000 Files and hashes: 1: 0352d911-2e18-33fc-aaaf-abf4b4e22500.roa (hash: TMqM/a3AUFAU47PaDf3iTQkSFqE5UV2JPDu//K8M2xo=) 2: 2b1281cd-fdbf-34ff-aaeb-c77291387ffa.roa (hash: RtvdJbLHu16JCW/bI3y47EE0ZEeYMhusbCqZrHYcyOE=) 3: 372527a6-bb91-3566-8da6-f837ff4a29fb.roa (hash: hTPf/COr0jOAMCwdCB/IKnJgPNN6VqjlV0bEsjBhURo=) 4: 7b482ca4-5c3b-30cc-8860-bdb20dc446e3.roa (hash: S8/tmZUbbAW4jVEg0CKbTV2svZ6Y6LMSSvOMvBbQlPQ=) 5: 7ba90678-5506-3097-8a4a-c53ede395ba8.roa (hash: lAkkSkwXSWRQItbo60g/1zEQsMi2SteNVPwzwOAm22E=) 6: bf398656-87b8-31bc-bc34-40b0e06987a0.roa (hash: /7AsZ4VAFz/Y/xzAzRG42vYmfm3zKZGY3ehEer1j34g=) 7: cffdb071-c372-4fb8-ae3c-ab449c400178.crl (hash: ATTMQVi+omHxPzvka5NbRARd+FXq9bnssufvRpHia6s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3d:77:84:94:bd:0b:7e:9a:7f:ed:2a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Validity Not Before: Sep 20 18:00:23 2026 GMT Not After : Sep 23 18:00:00 2026 GMT Subject: CN=6f133778-c732-42cc-9d9a-77138b7fe09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b0:2b:e0:21:83:02:0a:e6:c9:d0:12:d5:88: 06:e0:52:03:d9:a1:70:79:59:0e:06:9a:a4:06:3e: d9:b1:23:0d:1e:7a:24:26:a0:5c:c5:e7:01:22:5b: 9e:2e:84:a7:9c:42:09:bd:ba:1c:41:91:ed:ea:5b: 8b:2c:e1:55:3c:72:6f:e8:b0:9e:3b:9d:a7:fc:ca: a9:4b:4e:2f:3f:90:d1:25:be:68:de:92:fa:64:46: ae:9f:77:63:51:3f:c2:b2:82:d4:f0:99:fe:d4:ee: dc:f9:55:77:ea:f4:ef:0d:52:8e:0f:5e:d1:c0:06: fa:b8:43:84:9a:e4:f7:cc:e8:bf:ba:c5:d6:92:aa: ff:ff:8c:74:ce:a1:0a:8c:26:ac:b7:06:ee:db:70: 54:6f:14:ed:b0:4c:d7:53:e0:ed:4d:cf:7a:a9:00: 3f:ac:b6:d2:dd:38:91:7a:0f:62:59:3a:cf:20:fb: d3:0f:30:4d:71:3d:f2:e7:8b:ca:fa:e9:16:46:28: c4:03:ec:78:d2:64:3d:ca:45:f7:ee:7e:fc:be:21: 98:14:c9:aa:25:77:7d:f5:5a:26:06:66:4d:30:fa: f1:0c:1b:1b:0b:da:b4:98:24:65:56:00:14:fa:86: 2f:99:22:06:e7:e6:88:35:b0:b9:ce:e4:7c:3a:08: a7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CB:CE:7F:E2:E6:1C:39:C9:AC:00:EF:FF:8B:94:0C:A2:F8:62:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl X509v3 Authority Key Identifier: keyid:D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:5a:43:26:60:13:90:e2:0e:d9:f3:0f:2e:7d:c3:d5:8a:84: ca:a2:5c:6c:80:d6:53:1d:eb:be:56:40:38:37:fb:09:b4:2b: c1:cf:2d:b0:c9:28:1b:7a:b0:2a:fb:95:07:b5:f4:96:e7:5e: 8f:68:c8:ee:34:6a:18:98:be:73:4d:01:2c:1b:39:c7:59:19: 8e:5c:10:f5:5d:29:17:e3:18:ca:0e:31:2c:a4:c1:2d:8b:17: 69:67:e6:43:3f:93:c1:7b:b8:b4:a8:0a:a6:49:2b:e1:17:5b: f3:a0:9a:7c:1f:1c:00:3d:f1:dc:d6:7a:74:64:bf:92:c2:5a: d5:05:75:2b:f4:cb:55:30:61:f5:a1:b5:6c:18:4d:f0:fb:3d: b9:50:52:4f:8a:42:e7:a1:fd:2f:50:04:98:5c:dc:f4:7a:08: 8a:b2:ea:00:14:f5:b2:71:19:48:04:9c:90:92:dd:34:de:15: 09:82:74:2d:33:36:45:5a:18:87:17:29:4d:14:47:c5:52:8b: 77:4e:c6:7a:25:fe:68:a0:f3:3e:57:07:ad:17:30:df:64:e4: e5:0d:36:5c:b3:6b:64:e6:d1:5e:54:75:3a:b4:47:50:6b:58: 62:4b:0f:ce:77:ba:96:94:d4:5a:38:53:af:12:d9:72:13:9b: d4:bb:bd:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE89d4SUvQt+mn/tKjwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmZGIwNzEtYzM3Mi00ZmI4LWFlM2MtYWI0NDljNDAw MTc4MB4XDTI2MDkyMDE4MDAyM1oXDTI2MDkyMzE4MDAwMFowLzEtMCsGA1UEAxMk NmYxMzM3NzgtYzczMi00MmNjLTlkOWEtNzcxMzhiN2ZlMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbAr4CGDAgrmydAS1YgG4FID2aFweVkOBpqk Bj7ZsSMNHnokJqBcxecBIlueLoSnnEIJvbocQZHt6luLLOFVPHJv6LCeO52n/Mqp S04vP5DRJb5o3pL6ZEaun3djUT/CsoLU8Jn+1O7c+VV36vTvDVKOD17RwAb6uEOE muT3zOi/usXWkqr//4x0zqEKjCastwbu23BUbxTtsEzXU+DtTc96qQA/rLbS3TiR eg9iWTrPIPvTDzBNcT3y54vK+ukWRijEA+x40mQ9ykX37n78viGYFMmqJXd99Vom BmZNMPrxDBsbC9q0mCRlVgAU+oYvmSIG5+aINbC5zuR8Ogin7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDjLzn/i5hw5yawA7/+LlAyi+GLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZk YjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0OWM0MDAxNzgvY2ZmZGIwNzEtYzM3Mi00 ZmI4LWFlM2MtYWI0NDljNDAwMTc4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2ZmZGIwNzEtYzM3Mi00ZmI4LWFl M2MtYWI0NDljNDAwMTc4L2NmZmRiMDcxLWMzNzItNGZiOC1hZTNjLWFiNDQ5YzQw MDE3OC5jcmwwHwYDVR0jBBgwFoAU0G9rpKq4NruHn3CfJlRBiJL9bcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZkYjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0 OWM0MDAxNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlWkMmYBOQ4g7Z8w8ufcPV ioTKolxsgNZTHeu+VkA4N/sJtCvBzy2wySgberAq+5UHtfSW516PaMjuNGoYmL5z TQEsGznHWRmOXBD1XSkX4xjKDjEspMEtixdpZ+ZDP5PBe7i0qAqmSSvhF1vzoJp8 HxwAPfHc1np0ZL+SwlrVBXUr9MtVMGH1obVsGE3w+z25UFJPikLnof0vUASYXNz0 egiKsuoAFPWycRlIBJyQkt003hUJgnQtMzZFWhiHFylNFEfFUot3TsZ6Jf5ooPM+ VwetFzDfZOTlDTZcs2tk5tFeVHU6tEdQa1hiSw/Od7qWlNRaOFOvEtlyE5vUu72i -----END CERTIFICATE-----Generated at Mon Sep 21 13:59:53 2026 by rpki-client