$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft File: dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft (raw, json) Hash identifier: R0ugDN/8HcJI/482h+wmQXxh6RD4C1f5D1WgBIFZd88= Subject key identifier: 38:2D:47:39:4C:C1:E0:40:E4:DE:9C:E6:98:7E:B3:67:E1:FC:0D:BA Authority key identifier: 0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5 Certificate issuer: /CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1 Certificate serial: 010D0C9F4328584F5373A629C5FDDFE114A9B350 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft Manifest number: 010D0C9F4328584073A85AF7DD80F4FAF711A8AC Signing time: Mon 28 Sep 2026 15:00:23 +0000 Manifest this update: Mon 28 Sep 2026 15:00:23 +0000 Manifest next update: Wed 30 Sep 2026 15:00:00 +0000 Files and hashes: 1: 7539456a-1ede-30db-a5cf-fe160402f89e.roa (hash: QAwF/4Rc3jbykzymBR0GkN9jEJPBc7IMFRx5PNxNvS8=) 2: b830bb09-441e-3d90-85c0-99ed71209328.roa (hash: WFTtLOSUraLO/eXzoXpcWavRoBkMApBRWLj8LR44uOU=) 3: dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl (hash: /cX+gCkPR2fcj2cydjyOY9k/79/egBGjvGXcyX0WTxs=) 4: e3d2621e-3210-3d0a-8255-6e3c48edd5da.roa (hash: yselvESTBejYIDIhzm8HP3fkc2PEW0tYi2/JqA2r6Po=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:73:a6:29:c5:fd:df:e1:14:a9:b3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1 Validity Not Before: Sep 28 15:00:23 2026 GMT Not After : Sep 30 15:00:00 2026 GMT Subject: CN=c2a1a31b-323a-461c-a922-f3f3795555eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7c:c8:d2:03:e7:0e:9a:cc:f9:e3:7a:85:7b: 1f:4f:78:2d:03:77:8b:e6:60:a6:17:8b:39:4a:fb: 91:4a:f1:22:40:a5:3b:03:ce:34:5d:61:a3:f2:0d: d3:20:a1:27:fb:72:a0:79:6e:c8:c4:d9:75:43:c7: 20:3c:01:4f:22:88:61:da:5c:cc:47:5b:bf:1b:ee: 45:4d:d7:86:b3:65:7a:e4:7a:53:8f:77:89:5d:57: 39:20:10:4b:31:a9:41:3e:1f:d0:59:8f:fb:f2:3c: a3:0e:f1:20:03:3a:26:01:ae:37:b7:d0:eb:a9:05: 96:a5:e8:67:45:7f:fc:18:2e:d9:c3:2f:a9:a5:56: 39:ed:00:5d:bc:ad:1f:54:b4:80:45:92:90:28:7f: 57:ac:79:34:82:f0:55:b3:d2:c8:1b:e9:07:db:08: ba:54:e2:71:8c:94:6a:dc:c3:06:69:28:9b:ce:8f: 0e:76:65:cc:73:86:9c:15:3f:01:fa:f0:a4:9b:c5: 9b:6a:79:98:c4:aa:ca:af:a0:c2:1d:0c:96:cd:fc: d7:37:99:5b:fa:98:d8:36:fc:97:d6:39:5a:8a:25: 2c:ca:21:3c:b6:0c:83:a7:22:5c:47:4d:e4:d5:1a: e3:ff:f5:9e:f7:f6:3e:84:cd:b6:72:e5:bf:2c:a2: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2D:47:39:4C:C1:E0:40:E4:DE:9C:E6:98:7E:B3:67:E1:FC:0D:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl X509v3 Authority Key Identifier: keyid:0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:3f:6d:40:fa:a4:ea:01:0e:6a:1f:7a:c2:8b:5c:98:15:ed: 73:35:fe:bc:66:f6:39:ed:09:3c:1b:7b:94:96:e9:24:c2:6f: e1:f6:54:0c:d3:a4:03:ef:d0:3b:c7:59:62:88:4b:76:97:f9: b1:7d:5b:d0:fa:b7:ed:31:32:9c:0f:22:54:58:aa:a8:94:e3: 77:17:87:df:3e:2e:19:9c:33:ec:79:52:ba:f2:b2:df:00:39: 90:ef:c9:58:93:d8:6d:7c:cb:03:80:c8:5b:b5:1b:c7:e4:3a: f8:73:84:b1:64:3d:f9:1e:dd:75:1d:10:73:60:a6:d7:54:0e: 20:dc:21:ed:ca:0a:d9:8e:2d:4f:fd:85:23:f5:6d:ef:92:5b: cb:b9:10:91:f8:e7:55:cf:d8:9c:52:3a:ad:5d:9d:93:e9:a1: c2:a1:c9:01:8a:31:bf:e2:d6:bc:f3:b3:0d:8e:01:1b:cb:9d: 52:44:82:18:ef:06:66:33:a5:8b:3c:d9:d1:7e:7c:f4:0c:4a: 5b:92:d4:a5:e9:c7:87:33:f9:4f:26:95:a5:ce:99:35:8e:1d: 3c:15:e7:d4:f4:75:22:da:26:9a:51:13:a3:1a:dd:20:9d:05: 04:d7:14:e8:c0:36:6e:90:67:19:58:6b:ad:91:28:2e:0b:8e: 07:b7:eb:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Tc6Ypxf3f4RSps1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNiMGE1OTctZjZlYi00Yzk3LWFhNmMtMzZkMDRiZDdj MmQxMB4XDTI2MDkyODE1MDAyM1oXDTI2MDkzMDE1MDAwMFowLzEtMCsGA1UEAxMk YzJhMWEzMWItMzIzYS00NjFjLWE5MjItZjNmMzc5NTU1NWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXzI0gPnDprM+eN6hXsfT3gtA3eL5mCmF4s5 SvuRSvEiQKU7A840XWGj8g3TIKEn+3KgeW7IxNl1Q8cgPAFPIohh2lzMR1u/G+5F TdeGs2V65HpTj3eJXVc5IBBLMalBPh/QWY/78jyjDvEgAzomAa43t9DrqQWWpehn RX/8GC7Zwy+ppVY57QBdvK0fVLSARZKQKH9XrHk0gvBVs9LIG+kH2wi6VOJxjJRq 3MMGaSibzo8OdmXMc4acFT8B+vCkm8WbanmYxKrKr6DCHQyWzfzXN5lb+pjYNvyX 1jlaiiUsyiE8tgyDpyJcR03k1Rrj//We9/Y+hM22cuW/LKKQtQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDgtRzlMweBA5N6c5ph+s2fh/A26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Iw YTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQwNGJkN2MyZDEvZGNiMGE1OTctZjZlYi00 Yzk3LWFhNmMtMzZkMDRiZDdjMmQxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNiMGE1OTctZjZlYi00Yzk3LWFh NmMtMzZkMDRiZDdjMmQxL2RjYjBhNTk3LWY2ZWItNGM5Ny1hYTZjLTM2ZDA0YmQ3 YzJkMS5jcmwwHwYDVR0jBBgwFoAUCk3RL4DlL9n5CrZdj//AsSxmWLUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2IwYTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQw NGJkN2MyZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgP21A+qTqAQ5qH3rCi1yY Fe1zNf68ZvY57Qk8G3uUlukkwm/h9lQM06QD79A7x1liiEt2l/mxfVvQ+rftMTKc DyJUWKqolON3F4ffPi4ZnDPseVK68rLfADmQ78lYk9htfMsDgMhbtRvH5Dr4c4Sx ZD35Ht11HRBzYKbXVA4g3CHtygrZji1P/YUj9W3vklvLuRCR+OdVz9icUjqtXZ2T 6aHCockBijG/4ta887MNjgEby51SRIIY7wZmM6WLPNnRfnz0DEpbktSl6ceHM/lP JpWlzpk1jh08FefU9HUi2iaaUROjGt0gnQUE1xTowDZukGcZWGutkSguC44Ht+sr -----END CERTIFICATE-----Generated at Mon Sep 28 21:47:19 2026 by rpki-client