$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft File: 4625cd05-e90e-4f91-9b34-2899122cfc5f.mft (raw, json) Hash identifier: 62VprlWlrU6vc36GLis2BA92YtDVj0S507clmdk0jag= Subject key identifier: C2:5F:A3:04:44:5C:32:19:76:B5:BD:E8:54:2C:1E:AC:A9:72:CE:F5 Authority key identifier: 52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A Certificate issuer: /CN=4625cd05-e90e-4f91-9b34-2899122cfc5f Certificate serial: 010D0C9F4328584FCBD868786FC9CA88501CD680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft Manifest number: 010D0C9F4328584B963D1DFEB59C4ACB2FD6730B Signing time: Tue 10 Nov 2026 18:00:23 +0000 Manifest this update: Tue 10 Nov 2026 18:00:23 +0000 Manifest next update: Fri 13 Nov 2026 18:00:00 +0000 Files and hashes: 1: 00583209-5ea8-3fc8-9999-e6dec99e63c9.roa (hash: acjr3axX7EbetshKcaB02qvPLO/F7v53Zu48Tf3Au0s=) 2: 4625cd05-e90e-4f91-9b34-2899122cfc5f.crl (hash: kYjuZT3oOkCvj5DNHSKxCfLHz4w2bUEqSF9Y6ZvA/Y4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cb:d8:68:78:6f:c9:ca:88:50:1c:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4625cd05-e90e-4f91-9b34-2899122cfc5f Validity Not Before: Nov 10 18:00:23 2026 GMT Not After : Nov 13 18:00:00 2026 GMT Subject: CN=903e5045-7a57-49c6-aee0-de232313dccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:86:11:9c:92:00:de:1b:03:66:21:59:c4:d5: bf:11:f7:5b:44:54:aa:c6:30:82:d8:20:7b:37:11: d7:e5:6c:8b:92:31:bc:a1:69:4e:8b:a7:29:b1:33: 85:f4:b1:df:9a:a7:2f:c2:88:97:1a:ec:a8:45:5c: 4b:8d:7c:dc:41:5a:1a:41:62:42:54:33:9a:6c:34: 20:5a:c2:6c:36:31:1b:8f:fc:9c:60:b0:d0:2b:77: ba:bb:80:46:4d:e2:1b:ef:8c:12:de:e6:f1:2c:e9: 3c:be:f2:ba:5f:96:34:37:48:94:6e:a4:37:72:c6: 39:a1:66:28:53:46:4d:69:cd:3a:99:fb:48:39:4b: 3f:8c:f7:d5:c2:e9:fa:e2:93:a3:6b:be:34:02:fd: 68:1e:9d:58:44:23:8d:bc:c4:51:c7:44:a8:d5:4f: d1:e4:0f:d7:11:b1:c0:c5:31:9f:aa:a4:f2:5f:34: 46:5a:16:03:a3:97:6d:ca:23:65:b9:37:17:b8:5a: a9:4b:b0:71:dd:ef:09:9e:86:a9:28:97:fc:0e:50: b4:7f:ec:8e:13:cf:f4:4f:b4:3c:ef:c4:3c:7a:db: 36:20:ef:70:97:17:4e:6d:df:22:bd:18:4d:04:5c: 95:7e:95:60:bb:1e:79:71:32:85:0f:0f:40:bf:78: 8d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5F:A3:04:44:5C:32:19:76:B5:BD:E8:54:2C:1E:AC:A9:72:CE:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.crl X509v3 Authority Key Identifier: keyid:52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a1:a8:6e:8c:35:65:2c:73:6a:ad:29:ee:82:63:79:e5:22: af:15:2a:14:c4:ee:bf:2a:ec:d3:b0:11:47:ca:c3:23:0a:e3: 8b:b5:83:23:e2:50:f5:17:1a:e0:5d:77:5a:c4:21:92:d2:c1: 2a:36:5a:40:0b:51:bf:9e:fe:b5:17:c7:fa:5a:19:56:70:fe: 4a:40:10:cd:42:07:8c:0f:9f:ef:34:b4:8a:4e:03:d3:78:ad: 68:e1:11:20:44:4e:ae:da:75:7b:a9:93:4b:52:f5:c9:03:4c: 17:e2:6f:20:46:6f:0f:37:84:50:8f:be:0b:bf:9d:aa:97:35: 28:09:b8:0f:c8:c6:45:00:8e:95:4d:77:31:01:a2:47:19:9d: 67:01:23:09:9e:0c:16:11:99:84:20:77:90:d5:f1:6f:51:74: 7e:55:62:43:4e:8e:02:6b:ac:7d:14:f7:f8:55:13:21:d3:2b: e4:37:da:62:0f:fb:17:2c:2a:d6:3c:3d:33:82:9a:82:6f:da: 8c:dc:17:97:d6:76:2b:f0:7d:f6:08:e7:71:93:04:9a:53:0f: a7:e7:bc:c3:34:3f:8a:0d:99:29:48:3b:4c:7f:fe:92:b8:97: ee:51:91:ea:2c:c8:e6:c7:8b:63:f6:ee:64:c1:9d:f7:99:36: cb:b1:bb:ea -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/L2Gh4b8nKiFAc1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYyNWNkMDUtZTkwZS00ZjkxLTliMzQtMjg5OTEyMmNm YzVmMB4XDTI2MTExMDE4MDAyM1oXDTI2MTExMzE4MDAwMFowLzEtMCsGA1UEAxMk OTAzZTUwNDUtN2E1Ny00OWM2LWFlZTAtZGUyMzIzMTNkY2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYYRnJIA3hsDZiFZxNW/EfdbRFSqxjCC2CB7 NxHX5WyLkjG8oWlOi6cpsTOF9LHfmqcvwoiXGuyoRVxLjXzcQVoaQWJCVDOabDQg WsJsNjEbj/ycYLDQK3e6u4BGTeIb74wS3ubxLOk8vvK6X5Y0N0iUbqQ3csY5oWYo U0ZNac06mftIOUs/jPfVwun64pOja740Av1oHp1YRCONvMRRx0So1U/R5A/XEbHA xTGfqqTyXzRGWhYDo5dtyiNluTcXuFqpS7Bx3e8JnoapKJf8DlC0f+yOE8/0T7Q8 78Q8ets2IO9wlxdObd8ivRhNBFyVfpVgux55cTKFDw9Av3iNXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMJfowREXDIZdrW96FQsHqypcs71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80NjI1 Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5MTIyY2ZjNWYvNDYyNWNkMDUtZTkwZS00 ZjkxLTliMzQtMjg5OTEyMmNmYzVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDYyNWNkMDUtZTkwZS00ZjkxLTli MzQtMjg5OTEyMmNmYzVmLzQ2MjVjZDA1LWU5MGUtNGY5MS05YjM0LTI4OTkxMjJj ZmM1Zi5jcmwwHwYDVR0jBBgwFoAUUheecWx1fh1zBe8WvU1WIcoiY1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80NjI1Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5 MTIyY2ZjNWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhoahujDVlLHNqrSnugmN5 5SKvFSoUxO6/KuzTsBFHysMjCuOLtYMj4lD1FxrgXXdaxCGS0sEqNlpAC1G/nv61 F8f6WhlWcP5KQBDNQgeMD5/vNLSKTgPTeK1o4REgRE6u2nV7qZNLUvXJA0wX4m8g Rm8PN4RQj74Lv52qlzUoCbgPyMZFAI6VTXcxAaJHGZ1nASMJngwWEZmEIHeQ1fFv UXR+VWJDTo4Ca6x9FPf4VRMh0yvkN9piD/sXLCrWPD0zgpqCb9qM3BeX1nYr8H32 COdxkwSaUw+n57zDND+KDZkpSDtMf/6SuJfuUZHqLMjmx4tj9u5kwZ33mTbLsbvq -----END CERTIFICATE-----Generated at Tue Nov 10 20:58:53 2026 by rpki-client