$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft File: df1c4d20-5b5b-4073-83b7-529a82c159fd.mft (raw, json) Hash identifier: 0cxUXtmGWbLpTWc0FXTa6o48bwkXQ2H73ebpwHHXzsE= Subject key identifier: D2:28:11:F0:F8:29:68:6D:64:69:46:2E:B1:34:C7:28:89:66:3B:04 Authority key identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 Certificate issuer: /CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Certificate serial: 010D0C9F4328584F4C5B23B251DFFF2193BE9040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft Manifest number: 010D0C9F4328584073A838657FFAC70B59F37733 Signing time: Sat 26 Sep 2026 02:00:23 +0000 Manifest this update: Sat 26 Sep 2026 02:00:23 +0000 Manifest next update: Mon 28 Sep 2026 02:00:00 +0000 Files and hashes: 1: 0ceb1403-3b7c-379d-b030-7fd9c941239b.roa (hash: vBx9wmMjylu+zQlPJYUtm3v2WgK5uqrrmOZtrrGl7b0=) 2: 6dfabb17-4437-3c66-996a-7acc0579861a.roa (hash: 9GpyrSJsOM4u3xYF+N6XjASxlebr43CKRvbIUlSWEOo=) 3: df1c4d20-5b5b-4073-83b7-529a82c159fd.crl (hash: 7YG1RXcFAtH1djBnD59cBCMkoM7NMg5H6GDx+ug7HAA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:5b:23:b2:51:df:ff:21:93:be:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Validity Not Before: Sep 26 02:00:23 2026 GMT Not After : Sep 28 02:00:00 2026 GMT Subject: CN=e08fcc99-27c4-486a-bc87-9cfff225c384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8e:f7:99:52:7a:ce:91:c8:c1:7a:27:20:3a: 46:11:10:97:32:02:2f:e5:38:a2:84:09:89:1f:12: 31:b3:56:11:53:94:d1:e5:da:0e:7c:46:e4:51:7c: 83:4a:1e:62:83:a5:e4:ec:57:b2:f2:18:d7:76:97: 35:11:f0:80:fe:94:ca:71:06:6f:97:b7:ba:10:9a: 40:eb:c4:88:8e:2e:01:4a:50:f9:2c:63:ba:22:03: ad:01:e8:08:ae:66:c6:31:e4:4e:42:72:6b:50:2e: 16:62:9d:b7:e9:85:56:7f:60:24:f2:65:0b:e2:08: 3c:66:39:dc:33:f7:37:50:b9:24:82:bb:a4:2b:56: 4a:89:2b:bb:73:2c:d4:91:74:c6:c2:f0:c6:4e:5a: ba:2d:d6:54:54:60:39:4a:3d:99:f0:8d:3b:46:a5: 6f:c0:1d:0b:97:4c:8a:7d:ce:c8:c1:5d:a9:cc:4c: 61:37:ba:75:ab:3a:3e:e2:ee:5c:b7:04:67:bd:e4: 72:98:55:5a:ea:90:0d:07:bb:ac:a5:c9:63:01:01: d8:c2:b5:fa:96:b3:cb:d5:af:ca:ed:dd:ad:49:2c: 81:20:0c:7a:6b:b7:ea:c1:69:8d:1a:9b:e8:f4:9b: ae:4f:fe:0b:2f:44:1b:00:60:66:f1:38:5f:20:d8: eb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:28:11:F0:F8:29:68:6D:64:69:46:2E:B1:34:C7:28:89:66:3B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl X509v3 Authority Key Identifier: keyid:36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:37:c7:a2:40:58:c6:ec:78:4f:55:23:ae:75:3e:39:e3:e7: a1:80:65:37:e6:0a:73:1c:ac:ea:20:01:26:e6:1f:6b:69:e0: 87:c0:51:63:49:71:43:bd:8c:51:1f:0b:dd:40:d5:45:9a:9a: 4f:a8:9f:3a:66:48:3f:1a:d8:5f:94:8e:dd:f7:35:7f:11:f4: c8:9e:e4:3e:56:57:b5:a5:cb:e4:26:cb:61:d1:94:cb:dd:7b: 61:a3:d5:ce:60:9f:f6:48:40:9c:a4:10:3c:0b:33:76:cf:5c: a5:40:12:5b:4e:64:e6:4f:f0:0d:c5:b5:72:97:87:d0:c0:14: 36:1e:66:79:80:7d:ec:22:7b:98:10:94:da:38:ff:ff:7d:21: c6:6a:5a:28:3c:ab:0f:aa:83:43:47:46:77:a7:be:55:1f:76: 6b:36:b2:1f:2e:87:14:92:e2:15:70:2c:33:e8:f4:ef:9b:1e: 4c:93:ff:3e:90:89:dd:a1:55:9c:a9:77:6e:d5:d5:93:0b:57: 98:65:05:51:09:59:51:20:89:20:e8:14:75:60:b5:83:3a:af: ae:76:89:76:a9:40:13:c5:a7:1c:7c:ab:09:8a:f4:1d:f7:76: c1:54:d7:76:3f:6c:24:ea:8e:5f:0b:c3:13:a7:42:43:c9:86: ec:77:2e:25 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9MWyOyUd//IZO+kEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxYzRkMjAtNWI1Yi00MDczLTgzYjctNTI5YTgyYzE1 OWZkMB4XDTI2MDkyNjAyMDAyM1oXDTI2MDkyODAyMDAwMFowLzEtMCsGA1UEAxMk ZTA4ZmNjOTktMjdjNC00ODZhLWJjODctOWNmZmYyMjVjMzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY73mVJ6zpHIwXonIDpGERCXMgIv5TiihAmJ HxIxs1YRU5TR5doOfEbkUXyDSh5ig6Xk7Fey8hjXdpc1EfCA/pTKcQZvl7e6EJpA 68SIji4BSlD5LGO6IgOtAegIrmbGMeROQnJrUC4WYp236YVWf2Ak8mUL4gg8Zjnc M/c3ULkkgrukK1ZKiSu7cyzUkXTGwvDGTlq6LdZUVGA5Sj2Z8I07RqVvwB0Ll0yK fc7IwV2pzExhN7p1qzo+4u5ctwRnveRymFVa6pANB7uspcljAQHYwrX6lrPL1a/K 7d2tSSyBIAx6a7fqwWmNGpvo9JuuT/4LL0QbAGBm8ThfINjrbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNIoEfD4KWhtZGlGLrE0xyiJZjsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFj NGQyMC01YjViLTQwNzMtODNiNy01MjlhODJjMTU5ZmQvZGYxYzRkMjAtNWI1Yi00 MDczLTgzYjctNTI5YTgyYzE1OWZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGYxYzRkMjAtNWI1Yi00MDczLTgz YjctNTI5YTgyYzE1OWZkL2RmMWM0ZDIwLTViNWItNDA3My04M2I3LTUyOWE4MmMx NTlmZC5jcmwwHwYDVR0jBBgwFoAUNrw0KynM+RarIlemQ3NzemhZ61cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFjNGQyMC01YjViLTQwNzMtODNiNy01Mjlh ODJjMTU5ZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnN8eiQFjG7HhPVSOudT45 4+ehgGU35gpzHKzqIAEm5h9raeCHwFFjSXFDvYxRHwvdQNVFmppPqJ86Zkg/Gthf lI7d9zV/EfTInuQ+Vle1pcvkJsth0ZTL3Xtho9XOYJ/2SECcpBA8CzN2z1ylQBJb TmTmT/ANxbVyl4fQwBQ2HmZ5gH3sInuYEJTaOP//fSHGalooPKsPqoNDR0Z3p75V H3ZrNrIfLocUkuIVcCwz6PTvmx5Mk/8+kIndoVWcqXdu1dWTC1eYZQVRCVlRIIkg 6BR1YLWDOq+udol2qUATxaccfKsJivQd93bBVNd2P2wk6o5fC8MTp0JDyYbsdy4l -----END CERTIFICATE-----Generated at Sat Sep 26 16:37:34 2026 by rpki-client