$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft File: a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft (raw, json) Hash identifier: DfrMnm+euiDIJ4C/1/r2TXDY7ClwkLB6I8eltSCbHsc= Subject key identifier: 14:59:60:3C:33:22:71:67:D9:1D:F7:8C:E0:D3:4B:A0:5E:E9:94:28 Authority key identifier: 23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3 Certificate issuer: /CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e Certificate serial: 010D0C9F4328584F46A7FAC4A5D7973064F41280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft Manifest number: 010D0C9F4328584073A8340FD2B65F21CD12F5F1 Signing time: Thu 24 Sep 2026 01:00:22 +0000 Manifest this update: Thu 24 Sep 2026 01:00:22 +0000 Manifest next update: Sat 26 Sep 2026 01:00:00 +0000 Files and hashes: 1: a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl (hash: E4MX6j+BZ5vTIEm9n8Y6ksryBaDoFyjKBPkxFh7wi/A=) 2: fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa (hash: VyCjuIvZBWu4Zi+5QrH+E7cdhIcUwJW0ioICt6WKzcU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:fa:c4:a5:d7:97:30:64:f4:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e Validity Not Before: Sep 24 01:00:22 2026 GMT Not After : Sep 26 01:00:00 2026 GMT Subject: CN=0fcf072d-0a79-412e-9f4d-392ce1c4d4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0e:c7:ba:8f:fc:0a:1d:fc:b2:4f:a2:5b:3e: f2:60:fa:4c:1a:48:37:32:1d:99:e3:ec:27:c3:26: fc:fc:a8:5a:5e:56:e6:5f:c7:d1:0d:9b:0b:e8:64: f0:ed:c6:59:42:9e:00:71:f6:20:c3:4f:aa:f4:a0: 45:cf:55:50:8f:4d:12:19:48:45:48:1f:30:67:e8: 4c:23:db:0d:26:63:05:18:09:f1:88:78:bd:c4:51: 5a:74:c6:a7:be:99:fb:84:d0:a6:44:b5:56:ab:cb: b5:38:f6:bf:d5:6e:1d:3f:3a:f3:34:01:0b:e0:5c: e1:01:19:62:19:d7:53:46:83:e0:06:b5:2d:2b:cf: 74:74:03:77:7b:1c:a9:e4:e7:31:48:b0:4c:6e:2f: 97:1e:c2:f2:b5:d4:4e:38:d9:9d:7e:c7:4d:7b:0b: 66:b9:49:7d:1f:09:14:4b:d3:c6:bd:30:99:0a:d0: c8:8d:6c:01:5c:22:bb:4f:43:bb:91:16:f7:d4:ea: 97:d8:a1:1a:94:c2:73:8b:8c:c1:62:00:7f:88:38: 59:bf:2d:d3:f3:18:74:ad:59:43:99:cc:32:6c:1b: b8:1a:2c:13:41:72:65:df:6e:b8:7a:7c:25:a4:90: 58:1a:0a:a7:bd:d5:3b:bb:43:2b:5e:5a:8e:8d:89: 27:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:59:60:3C:33:22:71:67:D9:1D:F7:8C:E0:D3:4B:A0:5E:E9:94:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl X509v3 Authority Key Identifier: keyid:23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8b:07:0e:8c:63:93:c1:62:63:0f:8e:17:e6:05:ec:75:fa: 59:27:a6:f4:e5:22:7a:00:3f:3c:54:26:a7:4e:77:bd:5c:d0: 05:bc:ed:62:04:93:ce:4d:b1:1f:67:c3:cc:b4:ae:7f:ae:10: f5:22:01:d4:fe:98:42:0c:b6:cf:77:60:94:26:a0:84:be:fa: bf:4a:19:a3:2b:42:bf:69:f6:a9:59:93:cd:94:14:84:5c:c6: 23:f3:0d:a4:d2:c8:3d:29:c6:e8:9e:3f:d6:f8:6b:aa:d3:a4: 14:5c:11:94:a4:ed:96:dc:81:c7:3e:16:1f:92:80:96:b3:08: f1:b7:c1:2a:e2:dd:fc:f4:b8:8d:6e:66:de:bf:97:1e:73:f4: 29:d7:0d:ec:09:a0:3a:3c:7f:56:44:d8:56:6c:81:eb:bc:05: 9a:98:1e:c6:4a:26:0b:51:a2:c1:3d:55:70:8e:76:06:ed:46: e4:43:46:09:7f:e1:b7:c7:21:ed:3c:5b:09:17:ba:ef:6b:20: 08:17:da:55:5f:84:77:56:47:34:04:7f:02:cc:03:78:dc:d6: 60:e5:80:d3:b8:1f:fc:b6:a7:a9:2e:ee:78:7b:25:82:6d:c8: c6:b6:56:d1:fd:50:72:ab:28:f1:5f:64:d8:96:2a:7c:85:d5: 94:30:d5:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Gp/rEpdeXMGT0EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjMzNjMDgtYjI3YS00MTIwLTlhZjAtZTJjM2VlZjI3 MTNlMB4XDTI2MDkyNDAxMDAyMloXDTI2MDkyNjAxMDAwMFowLzEtMCsGA1UEAxMk MGZjZjA3MmQtMGE3OS00MTJlLTlmNGQtMzkyY2UxYzRkNGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w7Huo/8Ch38sk+iWz7yYPpMGkg3Mh2Z4+wn wyb8/KhaXlbmX8fRDZsL6GTw7cZZQp4AcfYgw0+q9KBFz1VQj00SGUhFSB8wZ+hM I9sNJmMFGAnxiHi9xFFadManvpn7hNCmRLVWq8u1OPa/1W4dPzrzNAEL4FzhARli GddTRoPgBrUtK890dAN3exyp5OcxSLBMbi+XHsLytdROONmdfsdNewtmuUl9HwkU S9PGvTCZCtDIjWwBXCK7T0O7kRb31OqX2KEalMJzi4zBYgB/iDhZvy3T8xh0rVlD mcwybBu4GiwTQXJl3264enwlpJBYGgqnvdU7u0MrXlqOjYkn5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBRZYDwzInFn2R33jODTS6Be6ZQoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWMz M2MwOC1iMjdhLTQxMjAtOWFmMC1lMmMzZWVmMjcxM2UvYTFjMzNjMDgtYjI3YS00 MTIwLTlhZjAtZTJjM2VlZjI3MTNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFjMzNjMDgtYjI3YS00MTIwLTlh ZjAtZTJjM2VlZjI3MTNlL2ExYzMzYzA4LWIyN2EtNDEyMC05YWYwLWUyYzNlZWYy NzEzZS5jcmwwHwYDVR0jBBgwFoAUI9SA/n2IIi/i7W/sxh+R853mAvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWMzM2MwOC1iMjdhLTQxMjAtOWFmMC1lMmMz ZWVmMjcxM2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABiwcOjGOTwWJjD44X5gXs dfpZJ6b05SJ6AD88VCanTne9XNAFvO1iBJPOTbEfZ8PMtK5/rhD1IgHU/phCDLbP d2CUJqCEvvq/ShmjK0K/afapWZPNlBSEXMYj8w2k0sg9Kcbonj/W+Guq06QUXBGU pO2W3IHHPhYfkoCWswjxt8Eq4t389LiNbmbev5cec/Qp1w3sCaA6PH9WRNhWbIHr vAWamB7GSiYLUaLBPVVwjnYG7UbkQ0YJf+G3xyHtPFsJF7rvayAIF9pVX4R3Vkc0 BH8CzAN43NZg5YDTuB/8tqepLu54eyWCbcjGtlbR/VByqyjxX2TYlip8hdWUMNW8 -----END CERTIFICATE-----Generated at Thu Sep 24 03:13:38 2026 by rpki-client