$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft File: 2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft (raw, json) Hash identifier: oXa89QA73xcRHhT/UA9v03H8a7CEH7Pn8wBf2atlhy0= Subject key identifier: F6:C9:B8:83:A3:55:BD:2B:C3:C8:2B:5D:B2:B8:3C:C1:6D:43:F0:F5 Authority key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Certificate issuer: /CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Certificate serial: 010D0C9F4328584F3B23E7F2C98C99B7E750C480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft Manifest number: 010D0C9F43285842C17DF555B8C50D6E9612E918 Signing time: Sat 19 Sep 2026 22:00:23 +0000 Manifest this update: Sat 19 Sep 2026 22:00:23 +0000 Manifest next update: Tue 22 Sep 2026 22:00:00 +0000 Files and hashes: 1: 07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa (hash: 3W2Dm4j2Udo9x0u4t0baGeuQ5iBZX8X78UPFCYYn7Wk=) 2: 2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl (hash: /RKYrnl7TBgz+0fs0Z3rFZwAp5n11uRAi5nn+hnfIoI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:23:e7:f2:c9:8c:99:b7:e7:50:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Validity Not Before: Sep 19 22:00:23 2026 GMT Not After : Sep 22 22:00:00 2026 GMT Subject: CN=20e6e9e3-dd9c-490c-a0bc-e675b8645ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:fc:32:75:2b:15:6c:3e:5f:1c:d2:a3:0f: 5e:3b:c2:eb:da:ea:3c:e8:40:b2:5c:6d:f2:9f:32: 5a:3e:1e:8f:13:8a:84:5a:ea:57:aa:17:b1:c9:cd: 3f:72:58:48:ed:86:78:4c:16:73:19:b2:90:41:6e: 28:49:57:5c:be:2b:94:f7:6d:a9:a9:9f:87:5e:30: 0e:8c:9c:0d:f2:7d:2d:95:73:f1:81:29:39:1f:55: 92:e2:33:d5:72:2e:6b:af:96:0a:27:25:bb:49:c3: cb:e9:af:ed:e9:2d:2e:7f:0d:b1:12:24:7b:21:bd: 55:8d:e9:e9:a5:82:6d:7a:c2:85:5e:24:14:f9:61: 0f:7d:49:f0:3d:49:f4:e8:3d:89:15:d1:31:86:24: 47:17:67:1f:fc:98:f5:45:c1:8d:d6:57:27:47:77: ae:4a:dd:28:ab:40:00:4c:97:53:23:fa:e6:1f:cd: d5:05:5f:5b:b5:86:02:f8:3c:d8:94:17:1f:49:c9: fc:8c:c3:bb:1c:34:1d:5d:b8:7d:15:66:31:e1:08: 43:bd:82:41:06:bc:87:6a:24:b4:24:29:3b:cb:9f: 32:2c:eb:27:56:9a:37:16:f5:8c:16:78:74:2c:a6: b0:fc:6a:ff:e9:3a:08:21:3d:68:82:bf:ff:55:8a: 6c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C9:B8:83:A3:55:BD:2B:C3:C8:2B:5D:B2:B8:3C:C1:6D:43:F0:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl X509v3 Authority Key Identifier: keyid:CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:5b:b3:12:7a:eb:62:60:b3:29:3c:fb:98:5d:8c:fa:ff:3d: fb:8e:15:7b:b6:25:4a:1b:cb:06:b6:16:8a:71:fa:8f:b7:16: 41:25:e6:64:06:88:a5:c7:d9:16:2a:ee:dd:58:a8:57:df:f2: 15:e3:61:e8:1a:60:58:d6:39:e4:32:c4:a0:3c:f7:b6:1a:fd: 7e:d8:a1:57:68:d9:06:10:5b:78:3c:88:02:ef:ef:03:bb:77: c2:d6:04:7f:72:52:ee:d0:1b:23:b5:29:27:81:63:8e:41:87: 54:5d:2d:55:47:6b:7a:3c:e3:a8:f8:dd:fe:f6:7e:ad:f3:ae: de:cf:28:2e:5a:6f:37:f2:ee:1c:68:af:5c:c5:97:b2:a0:ff: c9:51:73:59:04:c8:3c:75:f2:a5:28:b6:37:8e:4c:05:69:b5: e3:e1:c4:51:df:ce:91:b6:d9:ee:a7:fc:42:13:c1:e2:34:c4: ef:ab:45:c7:34:98:37:24:6e:3e:74:e7:07:19:3b:a3:2f:56: dd:96:c5:af:4a:b7:b8:b8:e0:b1:b8:fe:d3:e1:cc:b8:e9:59: 9e:7b:aa:12:53:e6:19:89:a8:8a:ef:b4:92:db:b1:1d:e1:3d: 32:92:ff:7d:a6:ae:33:e0:a8:48:e2:66:a2:cd:cf:03:95:c4: f0:65:4f:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE87I+fyyYyZt+dQxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1Mzg0OWMtNmY3Ny00ZTY5LThiMzktYmNiODVkYTkw ZjRiMB4XDTI2MDkxOTIyMDAyM1oXDTI2MDkyMjIyMDAwMFowLzEtMCsGA1UEAxMk MjBlNmU5ZTMtZGQ5Yy00OTBjLWEwYmMtZTY3NWI4NjQ1ZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbj8MnUrFWw+XxzSow9eO8Lr2uo86ECyXG3y nzJaPh6PE4qEWupXqhexyc0/clhI7YZ4TBZzGbKQQW4oSVdcviuU922pqZ+HXjAO jJwN8n0tlXPxgSk5H1WS4jPVci5rr5YKJyW7ScPL6a/t6S0ufw2xEiR7Ib1Vjenp pYJtesKFXiQU+WEPfUnwPUn06D2JFdExhiRHF2cf/Jj1RcGN1lcnR3euSt0oq0AA TJdTI/rmH83VBV9btYYC+DzYlBcfScn8jMO7HDQdXbh9FWYx4QhDvYJBBryHaiS0 JCk7y58yLOsnVpo3FvWMFnh0LKaw/Gr/6ToIIT1ogr//VYpslQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPbJuIOjVb0rw8grXbK4PMFtQ/D1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUz ODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRhOTBmNGIvMmE1Mzg0OWMtNmY3Ny00 ZTY5LThiMzktYmNiODVkYTkwZjRiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE1Mzg0OWMtNmY3Ny00ZTY5LThi MzktYmNiODVkYTkwZjRiLzJhNTM4NDljLTZmNzctNGU2OS04YjM5LWJjYjg1ZGE5 MGY0Yi5jcmwwHwYDVR0jBBgwFoAUz/guqqcZWw8Bit3a0J9Ruj1J1WowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4 NWRhOTBmNGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcW7MSeutiYLMpPPuYXYz6 /z37jhV7tiVKG8sGthaKcfqPtxZBJeZkBoilx9kWKu7dWKhX3/IV42HoGmBY1jnk MsSgPPe2Gv1+2KFXaNkGEFt4PIgC7+8Du3fC1gR/clLu0BsjtSkngWOOQYdUXS1V R2t6POOo+N3+9n6t867ezyguWm838u4caK9cxZeyoP/JUXNZBMg8dfKlKLY3jkwF abXj4cRR386Rttnup/xCE8HiNMTvq0XHNJg3JG4+dOcHGTujL1bdlsWvSre4uOCx uP7T4cy46Vmee6oSU+YZiaiK77SS27Ed4T0ykv99pq4z4KhI4maizc8DlcTwZU+8 -----END CERTIFICATE-----Generated at Sun Sep 20 20:10:24 2026 by rpki-client