$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.mft File: ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.mft (raw, json) Hash identifier: L/gCqQPBa1CYtOo+JHkks4Rfv1te/6JrjOfRNXMyfPY= Subject key identifier: AC:28:90:F2:A7:FE:48:E5:78:D8:4B:FD:3F:D6:4A:80:1C:64:8F:4C Authority key identifier: 6C:6E:CD:76:06:4D:44:1A:D5:03:65:F3:E3:70:73:87:15:2A:71:91 Certificate issuer: /CN=ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011 Certificate serial: 010D0C9F4328584F4277FD80F0E6011FDB9CD0A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.mft Manifest number: 010D0C9F4328584EBF56A86918CFA99C61A24231 Signing time: Tue 22 Sep 2026 13:00:23 +0000 Manifest this update: Tue 22 Sep 2026 13:00:23 +0000 Manifest next update: Thu 24 Sep 2026 13:00:00 +0000 Files and hashes: 1: 256bba70-dac5-35c3-bf6f-924d5a16193c.roa (hash: 7NzdQG4pNLaJ5JZO5AC65gpfnj4e/pCpxdRIVZU9d1w=) 2: 8e1910a3-a333-3289-ac32-c769b9abf29a.roa (hash: 0/Ae4a+L30vM40tTqYZePK0pH0YRAkdhBa1o+ta0+/0=) 3: bc7fde31-81ce-3520-8133-fc9e3d699ece.roa (hash: uSX98FGEJzev5KynH1qpdlDI8ACOZd8y5gyskN8Sylo=) 4: ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.crl (hash: 8U/KRX7H8NG8U1WIzBO95jrZRqTnOPNSufRYUMBeYYc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:fd:80:f0:e6:01:1f:db:9c:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011 Validity Not Before: Sep 22 13:00:23 2026 GMT Not After : Sep 24 13:00:00 2026 GMT Subject: CN=53e3f779-abc9-4a19-a76d-d52b2216b176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8a:95:d8:a4:5a:02:f8:83:65:b2:e0:99:c9: 9b:f7:82:8f:2f:96:f3:12:3c:ac:3b:0f:8a:09:38: 36:22:22:4a:af:a3:54:40:38:12:2a:55:56:9e:86: a0:28:fe:37:3e:88:6a:76:ad:5c:c0:c7:be:d8:74: 06:ca:fc:47:48:d9:73:a7:67:07:78:d3:d3:24:6c: cc:5e:ca:ff:7c:6e:81:aa:27:8f:ab:e5:e9:0b:f9: 8c:ae:5b:38:81:9c:a3:9f:54:2f:03:48:be:d2:ed: 10:7d:bf:2e:71:0b:1f:77:b9:47:03:22:45:ad:7b: b5:83:e0:bf:f5:c5:15:9a:bd:42:5a:df:bc:ec:d9: 51:81:2e:6d:51:0c:eb:43:32:0c:aa:55:5c:71:3e: 4b:2a:74:20:65:0c:ad:cd:46:f3:43:c3:c0:1d:55: 09:27:cc:0a:16:96:d1:30:be:6a:0c:24:aa:dc:3e: 74:fc:76:d4:90:be:b0:ee:10:32:92:76:25:61:9f: 50:85:e7:2d:09:7a:55:15:7d:66:ea:a6:a8:75:44: 91:df:c9:a6:ac:e3:e8:c7:77:41:8d:67:97:f0:ca: 62:10:49:fd:b7:38:74:c8:79:86:9a:44:03:5e:2f: 07:7f:7b:95:9c:e5:85:61:51:02:4e:e5:03:5f:43: 7a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:28:90:F2:A7:FE:48:E5:78:D8:4B:FD:3F:D6:4A:80:1C:64:8F:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.crl X509v3 Authority Key Identifier: keyid:6C:6E:CD:76:06:4D:44:1A:D5:03:65:F3:E3:70:73:87:15:2A:71:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c7:a9:4e:79:e3:cc:76:6b:7c:bb:6f:c8:ff:08:e5:16:b9: bf:92:c8:36:8c:97:bb:0c:dc:50:4b:61:d3:c8:da:ad:71:0a: 22:f3:7c:10:c0:23:95:5a:b7:57:37:4e:39:2f:51:92:b7:4a: 4e:a8:8c:21:aa:f1:44:b5:b9:53:14:2b:ce:3e:a2:ec:0c:f0: de:55:d2:86:9d:d4:37:7c:e3:3b:b9:36:75:19:ac:32:04:76: 92:c8:8d:b7:66:c1:3c:70:9a:84:b2:69:fd:e8:5f:db:a4:29: 93:9b:d4:d2:d8:a3:e5:b6:07:1c:79:e5:73:08:ac:ed:5a:46: 05:b3:7f:4e:08:52:64:01:fb:09:00:03:c2:0e:3d:6c:0c:37: df:b1:85:e4:65:fd:2e:44:f6:d9:a7:49:49:ac:4f:0f:5a:8b: c7:61:82:c9:13:d4:4d:1c:74:03:d1:16:4d:5c:51:7c:f9:d5: 08:76:3c:3c:59:1c:af:47:9f:eb:82:f5:30:ac:61:b1:41:9c: a3:61:38:84:3f:97:b1:f6:4f:f3:a9:f6:cf:87:60:80:55:49: 91:8b:76:ef:23:ad:87:ba:01:7c:9d:d8:9c:a7:3e:22:40:39: 32:9a:d4:8d:fc:9a:71:a4:c3:10:eb:10:cc:39:d2:8a:b2:3a: bc:17:f4:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Cd/2A8OYBH9uc0KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYyYTlhMGUtMWY5YS00YzNhLTliODUtNWQ2MzlmMzVk MDExMB4XDTI2MDkyMjEzMDAyM1oXDTI2MDkyNDEzMDAwMFowLzEtMCsGA1UEAxMk NTNlM2Y3NzktYWJjOS00YTE5LWE3NmQtZDUyYjIyMTZiMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIqV2KRaAviDZbLgmcmb94KPL5bzEjysOw+K CTg2IiJKr6NUQDgSKlVWnoagKP43Pohqdq1cwMe+2HQGyvxHSNlzp2cHeNPTJGzM Xsr/fG6BqiePq+XpC/mMrls4gZyjn1QvA0i+0u0Qfb8ucQsfd7lHAyJFrXu1g+C/ 9cUVmr1CWt+87NlRgS5tUQzrQzIMqlVccT5LKnQgZQytzUbzQ8PAHVUJJ8wKFpbR ML5qDCSq3D50/HbUkL6w7hAyknYlYZ9QhectCXpVFX1m6qaodUSR38mmrOPox3dB jWeX8MpiEEn9tzh0yHmGmkQDXi8Hf3uVnOWFYVECTuUDX0N6nQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKwokPKn/kjleNhL/T/WSoAcZI9MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9lZjJh OWEwZS0xZjlhLTRjM2EtOWI4NS01ZDYzOWYzNWQwMTEvZWYyYTlhMGUtMWY5YS00 YzNhLTliODUtNWQ2MzlmMzVkMDExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZWYyYTlhMGUtMWY5YS00YzNhLTli ODUtNWQ2MzlmMzVkMDExL2VmMmE5YTBlLTFmOWEtNGMzYS05Yjg1LTVkNjM5ZjM1 ZDAxMS5jcmwwHwYDVR0jBBgwFoAUbG7NdgZNRBrVA2Xz43BzhxUqcZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9lZjJhOWEwZS0xZjlhLTRjM2EtOWI4NS01ZDYz OWYzNWQwMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQx6lOeePMdmt8u2/I/wjl Frm/ksg2jJe7DNxQS2HTyNqtcQoi83wQwCOVWrdXN045L1GSt0pOqIwhqvFEtblT FCvOPqLsDPDeVdKGndQ3fOM7uTZ1GawyBHaSyI23ZsE8cJqEsmn96F/bpCmTm9TS 2KPltgcceeVzCKztWkYFs39OCFJkAfsJAAPCDj1sDDffsYXkZf0uRPbZp0lJrE8P WovHYYLJE9RNHHQD0RZNXFF8+dUIdjw8WRyvR5/rgvUwrGGxQZyjYTiEP5ex9k/z qfbPh2CAVUmRi3bvI62HugF8ndicpz4iQDkymtSN/JpxpMMQ6xDMOdKKsjq8F/To -----END CERTIFICATE-----Generated at Tue Sep 22 16:59:23 2026 by rpki-client