$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/394f8a71-e67c-4be3-b260-617b3f6602fe.mft File: 394f8a71-e67c-4be3-b260-617b3f6602fe.mft (raw, json) Hash identifier: UeteOtg8N5mkBPmzleT0rbRCo2mfDQ2G6o6tDpx6dik= Subject key identifier: 79:3B:45:0B:A0:C5:B3:D4:08:EF:E7:51:F3:14:0B:8E:7C:3D:B2:8D Authority key identifier: CE:93:CA:03:FE:BF:F4:6C:2C:FE:B8:06:1C:66:46:1E:AC:A2:E5:73 Certificate issuer: /CN=394f8a71-e67c-4be3-b260-617b3f6602fe Certificate serial: 010D0C9F4328584F3E0C6D2F3AC366786089C360 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/394f8a71-e67c-4be3-b260-617b3f6602fe.mft Manifest number: 010D0C9F4328584EFB1CD4D52ED6677A0143D29D Signing time: Sun 20 Sep 2026 23:00:24 +0000 Manifest this update: Sun 20 Sep 2026 23:00:24 +0000 Manifest next update: Wed 23 Sep 2026 23:00:00 +0000 Files and hashes: 1: 06b7fe3a-c402-3e2d-a08e-00bc55dece03.roa (hash: h0VtTKQBFCTpa0p2xt/SMw6JlJZGgdoqTMMyrjo9Peo=) 2: 394f8a71-e67c-4be3-b260-617b3f6602fe.crl (hash: xZY3+foje/N1eyJr58xj2UtgPe4Y6AvVvuJXF2XItjc=) 3: 3ca5fc08-f5ed-3515-8229-1c4dca6fbdcd.roa (hash: VCvGV3lF7Yc8gTNnZy5DkO5y4BzqZj5d1G6E/zCUO1A=) 4: 56c8442f-d5cb-39a8-8816-567874ec42d2.roa (hash: 7GckMVBKaXVzOXdE/781RJJ442GPfuRp+hio6sG1iMo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/394f8a71-e67c-4be3-b260-617b3f6602fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/394f8a71-e67c-4be3-b260-617b3f6602fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:0c:6d:2f:3a:c3:66:78:60:89:c3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=394f8a71-e67c-4be3-b260-617b3f6602fe Validity Not Before: Sep 20 23:00:24 2026 GMT Not After : Sep 23 23:00:00 2026 GMT Subject: CN=30988a23-c4fb-4848-b6e9-98406a6d59d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:89:85:9e:a6:ad:74:b5:ab:cb:ff:26:eb:5b: f3:4c:bd:ea:17:d6:de:9e:ed:e1:13:e7:ef:85:e2: a7:d4:13:ae:90:13:db:8e:3c:bf:69:04:0b:b9:48: f6:0a:64:e1:f7:f1:2c:d1:3e:71:5f:0b:e8:9c:26: 90:ed:34:fb:12:68:25:3a:0d:fa:34:22:12:6f:b8: 53:b1:31:42:b4:c2:30:af:f9:23:41:64:05:df:c2: f7:bc:6d:9d:9f:be:d5:c8:5c:ab:94:19:49:d2:68: bb:1e:44:6a:ae:86:bb:2e:4b:63:a7:02:35:79:25: ef:26:ef:76:a6:7f:57:fa:30:df:d4:74:93:7a:2b: a8:69:28:be:be:31:d2:8c:ac:66:60:ff:4b:8d:37: df:10:11:30:e2:d0:5d:93:8c:11:bc:9a:f6:d9:34: 6b:c2:1b:a1:81:58:08:08:f8:f7:98:2e:ec:d1:1b: 3d:21:06:f0:32:d6:83:c7:7a:6b:96:7b:35:9d:df: 98:eb:b8:00:ea:4f:c6:85:bc:38:53:57:cf:bb:e2: f2:93:d1:7c:b7:b0:b5:ec:73:8c:68:e0:ea:6a:25: b1:d9:4a:f4:f2:5e:d1:6b:47:82:e0:e8:09:6d:ed: 1b:96:e6:a4:42:a2:76:0b:a5:ec:ea:4a:ab:76:99: 32:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3B:45:0B:A0:C5:B3:D4:08:EF:E7:51:F3:14:0B:8E:7C:3D:B2:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/394f8a71-e67c-4be3-b260-617b3f6602fe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/394f8a71-e67c-4be3-b260-617b3f6602fe.crl X509v3 Authority Key Identifier: keyid:CE:93:CA:03:FE:BF:F4:6C:2C:FE:B8:06:1C:66:46:1E:AC:A2:E5:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:7f:c8:f1:fb:35:13:6a:a2:7d:d3:30:e1:1c:9b:99:88:56: b8:90:3a:fb:3a:87:91:27:d7:b5:e1:07:e3:3a:41:c2:18:c5: 9f:37:df:8b:e2:ae:95:ae:07:5f:c2:9c:26:c1:ba:15:cb:98: 85:a9:89:67:56:74:c4:68:6b:59:ba:71:4a:10:6d:0a:93:6f: 7a:9f:77:16:43:ec:0d:e6:9f:69:13:64:ab:be:21:95:7b:58: 5a:3e:97:07:fa:b2:bd:b2:33:75:be:ac:26:70:af:97:f4:5a: 33:64:97:23:3c:2a:35:ea:41:1e:9f:20:c2:e7:70:2b:10:8c: ff:96:9b:40:47:9c:84:c3:29:21:73:ad:9d:69:a8:5d:c4:ff: e7:19:5f:ed:a4:8a:f6:4a:57:c2:f8:1d:6f:22:56:cb:74:7d: 18:a3:2d:ad:bf:4c:fe:ec:3b:64:8d:9b:8b:72:9b:6a:1e:02: 93:14:20:1b:b9:8a:c6:55:45:7c:df:31:17:b0:df:cd:83:f1: 4e:ef:44:33:5e:98:af:c4:6f:77:cc:e5:d9:a0:14:51:ce:ca: ff:2e:02:01:03:7f:4f:52:e3:48:eb:fe:cf:2d:9a:9b:f2:6c: 3f:c5:c3:28:29:fa:64:9c:65:a0:ae:ef:96:9f:f0:10:20:8f: e9:d4:59:c2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8+DG0vOsNmeGCJw2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk0ZjhhNzEtZTY3Yy00YmUzLWIyNjAtNjE3YjNmNjYw MmZlMB4XDTI2MDkyMDIzMDAyNFoXDTI2MDkyMzIzMDAwMFowLzEtMCsGA1UEAxMk MzA5ODhhMjMtYzRmYi00ODQ4LWI2ZTktOTg0MDZhNmQ1OWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYmFnqatdLWry/8m61vzTL3qF9benu3hE+fv heKn1BOukBPbjjy/aQQLuUj2CmTh9/Es0T5xXwvonCaQ7TT7EmglOg36NCISb7hT sTFCtMIwr/kjQWQF38L3vG2dn77VyFyrlBlJ0mi7HkRqroa7LktjpwI1eSXvJu92 pn9X+jDf1HSTeiuoaSi+vjHSjKxmYP9LjTffEBEw4tBdk4wRvJr22TRrwhuhgVgI CPj3mC7s0Rs9IQbwMtaDx3prlns1nd+Y67gA6k/Ghbw4U1fPu+Lyk9F8t7C17HOM aODqaiWx2Ur08l7Ra0eC4OgJbe0bluakQqJ2C6Xs6kqrdpkyYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHk7RQugxbPUCO/nUfMUC458PbKNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zOTRm OGE3MS1lNjdjLTRiZTMtYjI2MC02MTdiM2Y2NjAyZmUvMzk0ZjhhNzEtZTY3Yy00 YmUzLWIyNjAtNjE3YjNmNjYwMmZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMzk0ZjhhNzEtZTY3Yy00YmUzLWIy NjAtNjE3YjNmNjYwMmZlLzM5NGY4YTcxLWU2N2MtNGJlMy1iMjYwLTYxN2IzZjY2 MDJmZS5jcmwwHwYDVR0jBBgwFoAUzpPKA/6/9Gws/rgGHGZGHqyi5XMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8zOTRmOGE3MS1lNjdjLTRiZTMtYjI2MC02MTdi M2Y2NjAyZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFf8jx+zUTaqJ90zDhHJuZ iFa4kDr7OoeRJ9e14QfjOkHCGMWfN9+L4q6VrgdfwpwmwboVy5iFqYlnVnTEaGtZ unFKEG0Kk296n3cWQ+wN5p9pE2SrviGVe1haPpcH+rK9sjN1vqwmcK+X9FozZJcj PCo16kEenyDC53ArEIz/lptAR5yEwykhc62daahdxP/nGV/tpIr2SlfC+B1vIlbL dH0Yoy2tv0z+7DtkjZuLcptqHgKTFCAbuYrGVUV83zEXsN/Ng/FO70QzXpivxG93 zOXZoBRRzsr/LgIBA39PUuNI6/7PLZqb8mw/xcMoKfpknGWgru+Wn/AQII/p1FnC -----END CERTIFICATE-----Generated at Mon Sep 21 11:44:56 2026 by rpki-client