$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: 9GSTG0KDLdZ/AatZZZgFDkaXT/hrUpBnml10HM33ZoI= Subject key identifier: 6F:0E:49:A2:E5:FF:67:0B:29:85:37:59:EA:91:E3:50:0A:1D:63:A8 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584F466C729F7E61BA1111D8E6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70CC12 Signing time: Wed 23 Sep 2026 23:00:22 +0000 Manifest this update: Wed 23 Sep 2026 23:00:22 +0000 Manifest next update: Fri 25 Sep 2026 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: NF4okbmdhvs6XDmqdzURYyVig6i0FtAdH+1Q9jyPq8I=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: u4KzEmZRAks+oF9rsTEwv2qkS9IimZiGCkntM/SM668=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: hvaNxfDsvQdXxuzfqSVV+oUPAnS75tOTUmVBreqhwI8=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: WYi4aGT+0Lk7l/sFvzQj4GuBdANs04OMbR3o+MYY1AE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:6c:72:9f:7e:61:ba:11:11:d8:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Sep 23 23:00:22 2026 GMT Not After : Sep 25 23:00:00 2026 GMT Subject: CN=23b00450-a94b-4a66-b568-f70d29b6f5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:89:d9:f4:cb:03:33:60:df:6b:70:d9:2d:56: 71:63:ad:ef:57:73:26:94:b9:7d:82:ff:12:8e:67: 1a:19:e1:eb:e1:2e:87:e2:1d:db:2b:8b:57:54:51: 66:1b:c7:5a:27:25:b0:75:4e:f1:56:cf:f9:74:b4: 3f:94:d6:ef:ec:94:37:d3:5a:c4:a8:36:3c:86:bd: 5f:66:9b:31:07:c6:0a:bc:fe:09:bc:1a:f5:63:28: f6:74:60:a0:b1:98:7d:ec:85:55:cc:ed:11:7b:fb: 5d:58:93:c2:26:81:08:14:8c:e3:48:b7:9e:fd:59: 15:6b:ef:f1:3b:96:da:15:00:03:06:05:24:91:e4: aa:43:25:a9:80:64:c5:b7:4c:1b:92:f5:fb:56:9f: ef:1b:f9:2f:81:bd:ea:27:4d:39:12:53:63:27:fc: e2:6c:1c:90:f8:73:58:e8:43:ce:ea:55:8c:3e:d6: a0:11:b2:30:61:5e:26:d5:c1:12:2a:0c:ff:f3:3e: 01:82:a5:bb:7e:cb:7b:06:ed:e7:23:93:7d:57:96: f4:89:6d:0a:4a:b1:fe:dc:ee:c0:a7:df:07:86:04: dd:67:bd:83:a7:63:e2:bd:05:8f:d7:6d:6f:6e:fd: a8:ec:5c:c9:de:fe:ba:4b:4e:28:70:59:31:e7:2f: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0E:49:A2:E5:FF:67:0B:29:85:37:59:EA:91:E3:50:0A:1D:63:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:39:04:89:ef:60:72:2e:76:27:01:90:01:26:d3:61:2c:be: d5:10:4b:4f:37:c5:85:d2:25:77:98:bd:6c:7c:28:37:21:82: 5e:43:0f:f7:13:9f:46:59:35:b6:b9:a6:93:d8:2d:ba:14:59: 56:32:7f:df:9f:76:f2:b5:e7:5c:f3:c0:f1:08:90:d1:ee:8a: 75:98:70:e5:7d:e8:b5:d2:82:cd:5b:7f:bc:17:38:68:3d:11: bb:bb:45:93:87:70:2f:4d:e8:08:68:3e:6d:8f:a7:08:59:9c: 85:a3:7f:ca:84:cd:6a:cc:9c:55:b0:cb:39:f7:96:c9:0d:ea: 20:0e:15:6c:14:a6:d0:03:64:42:1a:40:1a:ab:5c:99:03:3f: 06:1c:2e:b1:8d:84:10:63:29:3c:39:c3:7a:df:87:ca:35:f9: 36:95:bc:e5:93:84:7a:b1:84:70:71:ca:52:9d:b9:bf:5a:1c: 90:37:61:d7:66:c3:36:a0:09:10:8f:b3:05:48:08:78:94:ba: e4:61:0b:0f:be:5d:ad:51:d7:34:e8:a6:c0:5b:2d:3e:da:42: 24:4a:f7:ea:11:5e:1b:75:cf:64:75:e0:a4:6c:cc:4e:bc:69: 3f:a5:f3:ac:69:3b:ba:76:bd:fe:c8:59:cc:62:9a:40:bb:a0: 3a:64:ea:f9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9GbHKffmG6ERHY5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI2MDkyMzIzMDAyMloXDTI2MDkyNTIzMDAwMFowLzEtMCsGA1UEAxMk MjNiMDA0NTAtYTk0Yi00YTY2LWI1NjgtZjcwZDI5YjZmNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4nZ9MsDM2Dfa3DZLVZxY63vV3MmlLl9gv8S jmcaGeHr4S6H4h3bK4tXVFFmG8daJyWwdU7xVs/5dLQ/lNbv7JQ301rEqDY8hr1f ZpsxB8YKvP4JvBr1Yyj2dGCgsZh97IVVzO0Re/tdWJPCJoEIFIzjSLee/VkVa+/x O5baFQADBgUkkeSqQyWpgGTFt0wbkvX7Vp/vG/kvgb3qJ005ElNjJ/zibByQ+HNY 6EPO6lWMPtagEbIwYV4m1cESKgz/8z4BgqW7fst7Bu3nI5N9V5b0iW0KSrH+3O7A p98HhgTdZ72Dp2PivQWP121vbv2o7FzJ3v66S04ocFkx5y8mMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG8OSaLl/2cLKYU3WeqR41AKHWOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjOQSJ72ByLnYnAZABJtNh LL7VEEtPN8WF0iV3mL1sfCg3IYJeQw/3E59GWTW2uaaT2C26FFlWMn/fn3bytedc 88DxCJDR7op1mHDlfei10oLNW3+8FzhoPRG7u0WTh3AvTegIaD5tj6cIWZyFo3/K hM1qzJxVsMs595bJDeogDhVsFKbQA2RCGkAaq1yZAz8GHC6xjYQQYyk8OcN634fK Nfk2lbzlk4R6sYRwccpSnbm/WhyQN2HXZsM2oAkQj7MFSAh4lLrkYQsPvl2tUdc0 6KbAWy0+2kIkSvfqEV4bdc9kdeCkbMxOvGk/pfOsaTu6dr3+yFnMYppAu6A6ZOr5 -----END CERTIFICATE-----Generated at Thu Sep 24 20:42:08 2026 by rpki-client