$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft File: 20ffd753-1cb0-470b-9810-1f98670d442f.mft (raw, json) Hash identifier: 6AoRF0WhvjVLxWkUw5pU6dT8fjscHfqZ+f4j0JGw3hU= Subject key identifier: 88:85:3B:6F:1D:F2:92:7A:3C:A7:3C:33:21:D2:DC:61:5F:95:B4:B3 Authority key identifier: F6:17:85:03:40:3C:0D:22:37:3B:02:15:DF:8F:9A:50:F8:9B:86:80 Certificate issuer: /CN=20ffd753-1cb0-470b-9810-1f98670d442f Certificate serial: 010D0C9F4328584F4C5B29555E942D2D3CD259C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft Manifest number: 010D0C9F4328584C7C197954A173191D3E24104B Signing time: Sat 26 Sep 2026 02:00:23 +0000 Manifest this update: Sat 26 Sep 2026 02:00:23 +0000 Manifest next update: Tue 29 Sep 2026 02:00:00 +0000 Files and hashes: 1: 1c7c3735-449a-3ae7-9b82-d38b21a81f00.roa (hash: 1WSOqKC4aJvbyZ7K6ugoEh737sobtEc3eAFW6KFKdhk=) 2: 20ffd753-1cb0-470b-9810-1f98670d442f.crl (hash: cy0e1slHosxJD1ioIvODh8IFUllFnmxoSgMrl/EzTPU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:5b:29:55:5e:94:2d:2d:3c:d2:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ffd753-1cb0-470b-9810-1f98670d442f Validity Not Before: Sep 26 02:00:23 2026 GMT Not After : Sep 29 02:00:00 2026 GMT Subject: CN=85f94131-5aef-41c7-b94f-9776a6b1402e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b2:bb:40:72:4b:5c:fa:57:1f:ff:b5:94:34: a1:49:8b:81:e8:a2:9f:90:96:76:98:60:36:b0:2b: 22:49:98:33:90:1c:b3:dc:7c:26:17:2c:78:e2:b1: cb:6c:6e:68:c6:a1:85:b6:fc:ae:f6:dc:19:ec:23: 66:0a:d1:6b:c0:f5:a9:91:b1:4d:74:27:26:44:a9: 24:66:fd:a7:36:94:d8:8b:84:b8:01:a2:fd:53:5b: 1e:eb:16:98:5b:c9:a9:6e:e2:4e:9a:a7:d4:ca:10: 3e:07:14:09:19:62:c9:c3:f3:4a:23:66:f2:88:d8: 9e:b4:cd:66:63:29:85:17:e2:27:fa:c9:d5:c3:ce: 2f:9b:b2:18:5e:07:31:f5:82:e1:56:28:db:26:4c: 2a:52:0e:85:e9:a4:a2:cf:30:ff:53:57:8d:f1:31: 62:38:b8:6b:e3:86:67:35:5f:f6:eb:d9:b0:b6:d4: fc:83:9e:45:ec:33:92:01:d5:fd:c2:3c:16:a0:67: 62:4f:f0:50:e1:8a:20:2c:e2:26:64:cf:f0:62:5f: b2:a4:14:b9:43:cc:1d:5f:a4:46:22:23:16:f9:03: fa:8f:cf:e1:7a:d2:f6:f5:a5:ff:9f:da:9f:a4:25: 2c:8a:81:69:bb:bb:63:1c:2a:9b:ff:7d:cd:5d:db: 62:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:85:3B:6F:1D:F2:92:7A:3C:A7:3C:33:21:D2:DC:61:5F:95:B4:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.crl X509v3 Authority Key Identifier: keyid:F6:17:85:03:40:3C:0D:22:37:3B:02:15:DF:8F:9A:50:F8:9B:86:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4e:2a:ea:2e:0b:3c:61:d0:e9:6f:10:2c:1f:44:1d:78:c5: b0:70:de:20:82:a2:b5:9a:81:02:c6:49:d0:ed:40:8c:6c:81: aa:cc:43:48:de:a3:d7:ba:d4:0d:a4:14:8a:97:87:7b:51:e6: 27:4f:19:79:a0:05:d5:3d:4b:e1:73:05:fa:15:11:5c:55:c6: 97:8f:89:f1:b1:41:34:32:2f:04:56:0a:fd:9e:7b:4e:09:0d: 0c:5d:60:a1:ee:10:bf:e3:cb:2c:c1:25:f3:a5:32:9a:42:70: 25:ed:ab:fd:57:88:ae:8c:03:ff:b5:50:37:a7:06:52:29:2c: da:a7:34:31:c6:c4:24:d4:b5:d3:de:f1:8f:8e:29:a8:a2:12: 81:41:f9:f9:28:a0:27:1e:89:8f:ac:0e:2c:17:10:26:18:83: b5:2f:6b:f8:9a:cb:7f:c5:e4:6d:fe:87:d8:85:f4:30:42:6b: c2:3c:7b:9a:14:2b:6d:17:10:5c:b4:2e:ef:6c:49:4b:dd:91: a4:f9:56:7c:49:e0:18:3b:5d:90:d8:ca:1c:ef:78:2b:99:aa: 94:5f:dd:25:2f:c4:59:24:6e:07:e8:ec:9f:58:76:32:3f:d1: 2e:71:bb:88:a7:41:5c:58:3e:02:4f:d8:f9:22:bd:b9:23:85: d5:e6:66:0d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9MWylVXpQtLTzSWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBmZmQ3NTMtMWNiMC00NzBiLTk4MTAtMWY5ODY3MGQ0 NDJmMB4XDTI2MDkyNjAyMDAyM1oXDTI2MDkyOTAyMDAwMFowLzEtMCsGA1UEAxMk ODVmOTQxMzEtNWFlZi00MWM3LWI5NGYtOTc3NmE2YjE0MDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bK7QHJLXPpXH/+1lDShSYuB6KKfkJZ2mGA2 sCsiSZgzkByz3HwmFyx44rHLbG5oxqGFtvyu9twZ7CNmCtFrwPWpkbFNdCcmRKkk Zv2nNpTYi4S4AaL9U1se6xaYW8mpbuJOmqfUyhA+BxQJGWLJw/NKI2byiNietM1m YymFF+In+snVw84vm7IYXgcx9YLhVijbJkwqUg6F6aSizzD/U1eN8TFiOLhr44Zn NV/269mwttT8g55F7DOSAdX9wjwWoGdiT/BQ4YogLOImZM/wYl+ypBS5Q8wdX6RG IiMW+QP6j8/hetL29aX/n9qfpCUsioFpu7tjHCqb/33NXdtiMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIiFO28d8pJ6PKc8MyHS3GFflbSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yMGZm ZDc1My0xY2IwLTQ3MGItOTgxMC0xZjk4NjcwZDQ0MmYvMjBmZmQ3NTMtMWNiMC00 NzBiLTk4MTAtMWY5ODY3MGQ0NDJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjBmZmQ3NTMtMWNiMC00NzBiLTk4 MTAtMWY5ODY3MGQ0NDJmLzIwZmZkNzUzLTFjYjAtNDcwYi05ODEwLTFmOTg2NzBk NDQyZi5jcmwwHwYDVR0jBBgwFoAU9heFA0A8DSI3OwIV34+aUPibhoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yMGZmZDc1My0xY2IwLTQ3MGItOTgxMC0xZjk4 NjcwZDQ0MmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYTirqLgs8YdDpbxAsH0Qd eMWwcN4ggqK1moECxknQ7UCMbIGqzENI3qPXutQNpBSKl4d7UeYnTxl5oAXVPUvh cwX6FRFcVcaXj4nxsUE0Mi8EVgr9nntOCQ0MXWCh7hC/48sswSXzpTKaQnAl7av9 V4iujAP/tVA3pwZSKSzapzQxxsQk1LXT3vGPjimoohKBQfn5KKAnHomPrA4sFxAm GIO1L2v4mst/xeRt/ofYhfQwQmvCPHuaFCttFxBctC7vbElL3ZGk+VZ8SeAYO12Q 2Moc73grmaqUX90lL8RZJG4H6OyfWHYyP9EucbuIp0FcWD4CT9j5Ir25I4XV5mYN -----END CERTIFICATE-----Generated at Sat Sep 26 13:38:18 2026 by rpki-client