$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.mft File: bb678ebe-0d8f-4513-aec9-decdadbd1e1c.mft (raw, json) Hash identifier: T+9Z075sID0RxXVUzpcgtIQ6VHooOvt5GAa8w1NR6VE= Subject key identifier: A5:48:BF:84:24:61:3A:1E:41:37:61:61:8A:01:4F:B8:49:EB:60:23 Authority key identifier: 54:31:AB:87:54:53:F8:07:D0:F3:F2:DF:90:AE:C7:CD:C7:96:04:5B Certificate issuer: /CN=bb678ebe-0d8f-4513-aec9-decdadbd1e1c Certificate serial: 010D0C9F4328584F409B7AFE32A56C1126A27200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.mft Manifest number: 010D0C9F432858472BF367D04DB1D2762C6BD278 Signing time: Mon 21 Sep 2026 21:00:22 +0000 Manifest this update: Mon 21 Sep 2026 21:00:22 +0000 Manifest next update: Wed 23 Sep 2026 21:00:00 +0000 Files and hashes: 1: 05ce43ff-ab24-3b50-ae65-c77439766681.roa (hash: PFfdu4lbJmDpJfqr8d/buSUUnjRmLfUcmj5C1kMhYUY=) 2: bb678ebe-0d8f-4513-aec9-decdadbd1e1c.crl (hash: gcGWRTrRB9k1PC11MEiYtlH6PfdqSq+1doqTBcwabMY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:9b:7a:fe:32:a5:6c:11:26:a2:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb678ebe-0d8f-4513-aec9-decdadbd1e1c Validity Not Before: Sep 21 21:00:22 2026 GMT Not After : Sep 23 21:00:00 2026 GMT Subject: CN=09d69de0-75b8-4677-8595-15bf9f95aa48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:22:c0:a5:3e:d2:24:01:df:78:e9:6b:75:a6: d7:e3:26:ca:d6:13:23:04:75:b2:2a:c3:80:42:5b: 7f:96:b6:36:76:c3:b3:8c:d9:e5:a1:5b:07:73:a4: 42:63:83:06:5b:bc:05:02:3a:27:92:99:0b:7d:52: c5:9b:69:0e:88:84:be:f9:d8:95:ce:25:f9:1d:cb: 52:27:0d:53:f0:98:24:eb:45:be:26:14:08:63:3c: cf:a5:19:b1:75:fb:69:38:ac:54:3d:7a:32:6d:85: 2a:d4:b6:4e:ef:c4:7e:fd:4d:76:68:3a:e4:9a:28: 07:ea:52:e7:6f:10:53:68:46:05:2e:3a:2c:9b:e7: 05:c5:3c:d8:8f:e5:ce:a2:8b:14:5c:94:b0:7f:b3: e9:ff:5a:85:05:83:09:85:14:3e:4f:2e:4f:d7:27: dd:f2:11:34:3b:ca:8b:72:38:62:b7:9b:38:f8:c1: 60:ca:af:f5:fb:6b:9d:8e:6d:66:57:e5:6e:7f:bb: 4f:a0:dd:04:01:7f:51:67:2a:be:30:47:95:5d:86: e9:55:b9:8d:c0:1f:87:ed:4a:12:64:bf:18:c5:38: 6e:36:9b:78:b7:a2:1b:81:dc:87:04:80:e3:ea:79: c8:bc:25:7b:3c:0e:d3:a3:10:f6:c2:6b:cf:f1:52: f9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:48:BF:84:24:61:3A:1E:41:37:61:61:8A:01:4F:B8:49:EB:60:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.crl X509v3 Authority Key Identifier: keyid:54:31:AB:87:54:53:F8:07:D0:F3:F2:DF:90:AE:C7:CD:C7:96:04:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:10:9e:07:16:4c:5c:24:ba:f4:7e:84:34:6d:51:45:93:77: f3:1c:39:a8:e0:5c:a5:4f:e3:b1:c9:32:6d:4e:f0:cc:a7:b1: a9:90:bd:84:00:b9:b6:91:33:0a:cd:7b:aa:e5:49:72:fb:b2: 82:16:12:2a:4b:b4:dc:d1:85:6f:f3:8d:47:33:d2:66:fa:d0: 6d:bd:07:57:a9:2c:f1:29:fa:1b:17:85:f2:b5:5b:0f:5f:7d: 2f:73:2d:50:27:51:57:17:44:97:95:9d:b5:b0:9e:2c:3c:47: 39:c9:3b:a8:ca:08:db:0a:b2:cf:e9:f8:8f:7b:2f:43:88:bc: 40:77:4d:db:a5:c1:5f:b5:e8:b5:d7:8c:61:81:eb:04:b4:a5: 30:91:d8:73:1c:cc:8b:0e:71:e0:60:fb:55:1b:b8:93:8a:d7: 24:7b:fc:98:6a:1c:dc:f4:24:89:38:92:f1:1c:35:3e:d4:4d: 2a:b1:07:9b:b6:81:d3:00:5f:60:cd:73:14:e4:cf:e5:91:e3: 95:13:b3:de:b3:6b:53:eb:bc:e8:a0:9d:08:ce:2b:9b:0c:de: 3b:a5:6a:16:42:1b:b4:e8:43:67:5f:49:c4:01:f4:a5:ba:9a: 36:26:77:53:c8:f5:44:22:a7:35:db:70:12:53:aa:61:0a:d1: 1c:6b:c2:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Am3r+MqVsESaicgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI2NzhlYmUtMGQ4Zi00NTEzLWFlYzktZGVjZGFkYmQx ZTFjMB4XDTI2MDkyMTIxMDAyMloXDTI2MDkyMzIxMDAwMFowLzEtMCsGA1UEAxMk MDlkNjlkZTAtNzViOC00Njc3LTg1OTUtMTViZjlmOTVhYTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniLApT7SJAHfeOlrdabX4ybK1hMjBHWyKsOA Qlt/lrY2dsOzjNnloVsHc6RCY4MGW7wFAjonkpkLfVLFm2kOiIS++diVziX5HctS Jw1T8Jgk60W+JhQIYzzPpRmxdftpOKxUPXoybYUq1LZO78R+/U12aDrkmigH6lLn bxBTaEYFLjosm+cFxTzYj+XOoosUXJSwf7Pp/1qFBYMJhRQ+Ty5P1yfd8hE0O8qL cjhit5s4+MFgyq/1+2udjm1mV+Vuf7tPoN0EAX9RZyq+MEeVXYbpVbmNwB+H7UoS ZL8YxThuNpt4t6IbgdyHBIDj6nnIvCV7PA7ToxD2wmvP8VL5eQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKVIv4QkYToeQTdhYYoBT7hJ62AjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYjY3 OGViZS0wZDhmLTQ1MTMtYWVjOS1kZWNkYWRiZDFlMWMvYmI2NzhlYmUtMGQ4Zi00 NTEzLWFlYzktZGVjZGFkYmQxZTFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmI2NzhlYmUtMGQ4Zi00NTEzLWFl YzktZGVjZGFkYmQxZTFjL2JiNjc4ZWJlLTBkOGYtNDUxMy1hZWM5LWRlY2RhZGJk MWUxYy5jcmwwHwYDVR0jBBgwFoAUVDGrh1RT+AfQ8/LfkK7HzceWBFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYjY3OGViZS0wZDhmLTQ1MTMtYWVjOS1kZWNk YWRiZDFlMWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmEJ4HFkxcJLr0foQ0bVFF k3fzHDmo4FylT+OxyTJtTvDMp7GpkL2EALm2kTMKzXuq5Uly+7KCFhIqS7Tc0YVv 841HM9Jm+tBtvQdXqSzxKfobF4XytVsPX30vcy1QJ1FXF0SXlZ21sJ4sPEc5yTuo ygjbCrLP6fiPey9DiLxAd03bpcFftei114xhgesEtKUwkdhzHMyLDnHgYPtVG7iT itcke/yYahzc9CSJOJLxHDU+1E0qsQebtoHTAF9gzXMU5M/lkeOVE7Pes2tT67zo oJ0IziubDN47pWoWQhu06ENnX0nEAfSlupo2JndTyPVEIqc123ASU6phCtEca8Ic -----END CERTIFICATE-----Generated at Tue Sep 22 04:11:30 2026 by rpki-client