$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft File: b32217e1-2473-49a5-919e-08e1896c5019.mft (raw, json) Hash identifier: DABxvkdXQ7J9hqsDq+TOQUzMJpelyIjk853i8vg85+E= Subject key identifier: 67:50:79:BF:D2:8E:F4:CE:21:11:3A:A2:38:BC:C3:A3:E8:84:72:42 Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 Certificate issuer: /CN=b32217e1-2473-49a5-919e-08e1896c5019 Certificate serial: 010D0C9F4328584F5F1589EBC1746689035CE580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft Manifest number: 010D0C9F4328584073A820D8419B23CA85A819C9 Signing time: Fri 02 Oct 2026 19:00:24 +0000 Manifest this update: Fri 02 Oct 2026 19:00:24 +0000 Manifest next update: Mon 05 Oct 2026 19:00:00 +0000 Files and hashes: 1: 97d56046-cf12-32f2-948a-53b9605ab643.roa (hash: K4BrwWf/gtq0C2pE1VpxV8N7m+WcU111WtD1ekwRAoA=) 2: a7a900ce-23ee-33b0-85ce-32106cfd925c.roa (hash: uMZsijbiAoHS7ScSgwk07mRTXu86hiF1tnVkgcjBJYk=) 3: b32217e1-2473-49a5-919e-08e1896c5019.crl (hash: cwQ4dwnWzdgi1E6rNIhhH1UMXGiB7Fu12HOAI43S/qk=) 4: e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa (hash: nLCKZpsOvMQZmw1RzAALZgzxjZkPvhTPeExVPgYtGEs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:15:89:eb:c1:74:66:89:03:5c:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019 Validity Not Before: Oct 2 19:00:24 2026 GMT Not After : Oct 5 19:00:00 2026 GMT Subject: CN=81ff6300-b0ea-4df5-865e-a2c89227c02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8b:a2:e2:71:a4:87:f2:59:8d:5f:a2:1c:53: d3:9f:fb:d1:fd:b8:47:87:96:03:e2:6c:a1:07:4e: 55:47:66:20:e8:36:e2:2b:16:c5:20:e9:cc:e6:c5: 12:68:f7:7a:b3:e4:71:41:10:60:e4:1d:01:b2:6f: 46:c5:d1:c5:bc:33:45:e0:14:7d:8a:65:73:54:82: f5:57:c7:23:50:ee:f9:ae:d1:fb:d6:83:18:4c:2a: d3:93:86:d4:66:76:bd:52:8a:d6:e1:b8:5d:dd:e4: d1:24:3f:66:f8:0f:52:63:c1:cb:f5:3a:96:1b:b3: 59:6d:38:c2:56:95:6a:7a:42:59:16:b0:ac:99:6a: 9e:4a:8a:44:5d:38:36:e6:eb:05:9b:59:56:8d:ea: c0:0d:e4:7c:c2:a5:a4:12:3d:4e:cf:bc:cb:cb:30: 09:88:a7:c3:fc:62:ce:fd:4d:a5:9a:dc:dd:81:64: 65:4a:6e:b0:5d:29:45:70:40:3c:6c:e2:ec:64:b9: 6a:36:ea:0e:56:37:85:9a:39:af:ae:cc:3d:d0:a2: 7b:fd:41:87:d6:98:b6:6e:68:04:f5:0e:4d:af:e7: 32:42:af:b9:e6:dd:b7:26:73:64:3b:aa:91:de:3c: c7:b1:d5:b9:f4:87:85:19:f7:fd:db:4a:1c:2a:18: fd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:50:79:BF:D2:8E:F4:CE:21:11:3A:A2:38:BC:C3:A3:E8:84:72:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl X509v3 Authority Key Identifier: keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b0:7a:93:dd:7d:6a:9e:f0:13:a4:3d:3d:56:57:6b:82:c0: 35:52:68:17:1d:e2:a3:09:68:5f:9a:39:8c:a4:5c:81:d9:e6: 4c:a9:cd:c5:f6:f6:3e:55:9e:47:cf:ad:a6:9e:51:4a:3c:d8: 35:df:f2:b7:cd:d7:94:03:e6:5c:45:02:7f:93:a0:b5:e4:d1: fa:bc:1f:c0:e0:21:65:ad:c6:76:15:f3:df:05:8e:f5:4f:06: 97:f2:79:0f:98:68:51:b8:11:a7:f8:4c:bc:5c:7f:4f:79:98: 8a:27:25:8d:e9:ac:ee:b9:92:20:d5:83:c4:97:a7:64:5c:3e: a6:ae:cf:01:11:57:48:dd:df:7d:1f:6c:a1:cf:3e:3f:66:f1: 0f:ee:3b:2c:17:56:c5:59:20:69:f8:b7:33:f1:88:44:bc:2f: 3b:17:6b:d3:6d:4e:c9:d1:fc:0e:97:00:61:ef:a3:0c:9a:4b: 4f:59:5d:a4:f9:e7:91:0c:4e:0e:8a:df:9b:b3:77:d8:2c:5f: 6e:a9:6a:8d:59:d1:3c:aa:e9:f6:36:52:e9:70:57:4d:48:c2: 30:2f:15:29:b5:ad:26:5e:a1:76:75:03:33:1e:58:05:b9:fa: 2b:e2:80:35:61:59:76:b1:6c:72:eb:7a:98:2a:d1:d0:12:17: c2:f0:16:82 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9fFYnrwXRmiQNc5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyMjE3ZTEtMjQ3My00OWE1LTkxOWUtMDhlMTg5NmM1 MDE5MB4XDTI2MTAwMjE5MDAyNFoXDTI2MTAwNTE5MDAwMFowLzEtMCsGA1UEAxMk ODFmZjYzMDAtYjBlYS00ZGY1LTg2NWUtYTJjODkyMjdjMDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYui4nGkh/JZjV+iHFPTn/vR/bhHh5YD4myh B05VR2Yg6DbiKxbFIOnM5sUSaPd6s+RxQRBg5B0Bsm9GxdHFvDNF4BR9imVzVIL1 V8cjUO75rtH71oMYTCrTk4bUZna9UorW4bhd3eTRJD9m+A9SY8HL9TqWG7NZbTjC VpVqekJZFrCsmWqeSopEXTg25usFm1lWjerADeR8wqWkEj1Oz7zLyzAJiKfD/GLO /U2lmtzdgWRlSm6wXSlFcEA8bOLsZLlqNuoOVjeFmjmvrsw90KJ7/UGH1pi2bmgE 9Q5Nr+cyQq+55t23JnNkO6qR3jzHsdW59IeFGff920ocKhj9ZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGdQeb/SjvTOIRE6oji8w6PohHJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIy MTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2YzUwMTkvYjMyMjE3ZTEtMjQ3My00 OWE1LTkxOWUtMDhlMTg5NmM1MDE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjMyMjE3ZTEtMjQ3My00OWE1LTkx OWUtMDhlMTg5NmM1MDE5L2IzMjIxN2UxLTI0NzMtNDlhNS05MTllLTA4ZTE4OTZj NTAxOS5jcmwwHwYDVR0jBBgwFoAUSK4N+KDXdJBYpFq1I6Zut7HAd7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUx ODk2YzUwMTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBysHqT3X1qnvATpD09Vldr gsA1UmgXHeKjCWhfmjmMpFyB2eZMqc3F9vY+VZ5Hz62mnlFKPNg13/K3zdeUA+Zc RQJ/k6C15NH6vB/A4CFlrcZ2FfPfBY71TwaX8nkPmGhRuBGn+Ey8XH9PeZiKJyWN 6azuuZIg1YPEl6dkXD6mrs8BEVdI3d99H2yhzz4/ZvEP7jssF1bFWSBp+Lcz8YhE vC87F2vTbU7J0fwOlwBh76MMmktPWV2k+eeRDE4Oit+bs3fYLF9uqWqNWdE8qun2 NlLpcFdNSMIwLxUpta0mXqF2dQMzHlgFufor4oA1YVl2sWxy63qYKtHQEhfC8BaC -----END CERTIFICATE-----Generated at Sat Oct 3 11:35:58 2026 by rpki-client