$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft File: 8c2a8d95-0290-4218-9b08-d157e5f127f9.mft (raw, json) Hash identifier: PXg5wJYFjMSKvKwoO0kGx1j5rKaQ/ygkjPlHg89Eh4g= Subject key identifier: 65:8B:49:45:DA:D1:1F:49:28:A6:B2:30:D1:FD:C6:5A:2A:0D:B2:59 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584F756AF3FF26836BDAEA06C4BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft Manifest number: 010D0C9F43285843E5E52DE223730459039AA78C Signing time: Sat 10 Oct 2026 19:00:24 +0000 Manifest this update: Sat 10 Oct 2026 19:00:24 +0000 Manifest next update: Tue 13 Oct 2026 19:00:00 +0000 Files and hashes: 1: 07f6b5d0-e80a-344b-a252-2129c64d94b1.roa (hash: 1eJyPkLmsCIUfnq4EMBFRosy+j3vxn9SHsTZMO22s68=) 2: 67fb0afd-db7a-3f5c-be13-2a1761affb5d.roa (hash: Hd0r3pIBcqSxNbXYsO1keF01Jx3wUruzPM0PZZBA+PM=) 3: 8c2a8d95-0290-4218-9b08-d157e5f127f9.crl (hash: tYGll2o/N3FXHBjzV1hlOLNxRzdy57vEuyQS3qP2KTE=) 4: b011365d-0b8a-3c85-a74e-0aa432daa9c4.roa (hash: 6rU8h5bC/77CHZXPAg6Lp7O4lPR/JP8NLPmEa8jgUKo=) 5: b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa (hash: narQswoiHYG43DIewiu5+xYnPoFb7+MWc1D6IYpgpQ0=) 6: d6380c44-3d1d-381d-b9e1-f4928664013c.roa (hash: MVpWxv4VGxcrMG6PLVzFzOi9gKwOXtO9Uv3DtL6VNgc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:75:6a:f3:ff:26:83:6b:da:ea:06:c4:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Oct 10 19:00:24 2026 GMT Not After : Oct 13 19:00:00 2026 GMT Subject: CN=8a9cffc3-7d83-4900-8071-fc8b400e3104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:48:80:35:67:66:a6:96:8d:51:a3:85:ec:43: 6b:ae:a6:04:7d:c3:f1:ab:f2:1e:9e:8d:0e:5b:aa: af:b1:eb:d0:bf:9d:fb:7c:c4:c6:93:fb:34:e9:ed: 21:34:bb:84:e8:7d:68:4e:a6:65:94:b9:75:96:50: a3:8a:88:f9:af:6c:28:fc:ad:cc:fc:20:18:52:57: 95:95:cf:23:dd:73:c7:09:a3:c2:6f:49:c5:c3:ed: 2e:37:d5:67:ad:e4:7e:a6:ba:72:be:1a:b9:28:7d: ad:27:78:c5:3d:64:20:52:69:dd:a7:49:01:69:04: 82:f6:99:b8:99:0e:2a:55:63:fe:2e:c3:44:8e:1d: 54:03:c6:cb:4d:bb:35:79:95:97:41:e2:00:34:9f: 16:a7:b6:8d:96:c5:bc:b1:fd:fe:a7:dd:8a:19:13: 34:ad:b0:52:53:6c:2a:7e:f3:bb:2b:95:c2:a3:04: 0a:9f:ad:63:65:80:ae:92:cb:bd:ab:30:9a:7c:a7: 04:e2:f9:ac:fb:52:0c:a1:4b:cc:80:e8:55:88:e7: 7f:b9:66:10:77:4d:80:f1:19:82:c8:f8:40:4d:3b: 4e:c6:17:d8:ac:dc:50:43:6e:0b:9d:67:bf:38:95: 73:55:4a:3c:31:41:d8:34:9c:bc:0f:e5:70:38:3f: 6b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8B:49:45:DA:D1:1F:49:28:A6:B2:30:D1:FD:C6:5A:2A:0D:B2:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:63:59:c4:d1:ee:aa:4c:16:4a:3c:42:0f:3d:77:8b:f2:e9: a0:de:60:b6:55:60:bd:ce:b6:0f:1d:6a:e1:e5:9c:2f:9c:a5: 66:ac:05:1a:63:69:74:a9:7d:2f:b2:41:a9:90:57:5d:4c:79: 5e:95:3a:bf:a6:fc:34:61:31:e5:93:44:e4:2d:69:e2:72:f6: 7e:ea:bf:78:90:d7:b5:2a:c4:50:eb:af:0d:8e:34:a4:8f:a6: 64:95:f2:7c:29:de:3e:c7:34:7c:32:95:84:b7:f7:d7:c5:2f: e5:f7:22:9d:e8:74:ee:3e:5b:63:36:46:43:14:41:10:ec:df: b4:1e:05:b1:2c:cc:61:13:eb:e8:6d:0a:a2:82:12:09:cd:2a: 54:2d:21:f3:46:ee:3e:2d:d5:a3:a3:3d:4a:c5:29:1b:50:ad: d2:55:b1:a0:f2:d5:58:34:9e:0c:41:db:e1:44:d1:7a:27:97: 17:d3:d2:fc:1e:cd:bb:3d:11:64:57:d0:aa:99:0a:77:be:90: 5a:b5:76:ca:72:35:36:4d:25:98:d5:22:04:49:96:25:72:09: b7:07:3c:d5:9c:82:50:a1:87:d8:5e:aa:3a:51:48:06:0c:ca: 87:45:0f:d6:36:40:e3:fd:bc:da:96:af:ba:29:3f:e6:56:ff: 1b:31:b4:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE91avP/JoNr2uoGxLswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI2MTAxMDE5MDAyNFoXDTI2MTAxMzE5MDAwMFowLzEtMCsGA1UEAxMk OGE5Y2ZmYzMtN2Q4My00OTAwLTgwNzEtZmM4YjQwMGUzMTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00iANWdmppaNUaOF7ENrrqYEfcPxq/Ieno0O W6qvsevQv537fMTGk/s06e0hNLuE6H1oTqZllLl1llCjioj5r2wo/K3M/CAYUleV lc8j3XPHCaPCb0nFw+0uN9VnreR+prpyvhq5KH2tJ3jFPWQgUmndp0kBaQSC9pm4 mQ4qVWP+LsNEjh1UA8bLTbs1eZWXQeIANJ8Wp7aNlsW8sf3+p92KGRM0rbBSU2wq fvO7K5XCowQKn61jZYCuksu9qzCafKcE4vms+1IMoUvMgOhViOd/uWYQd02A8RmC yPhATTtOxhfYrNxQQ24LnWe/OJVzVUo8MUHYNJy8D+VwOD9r5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGWLSUXa0R9JKKayMNH9xloqDbJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvOGMyYThkOTUtMDI5MC00 MjE4LTliMDgtZDE1N2U1ZjEyN2Y5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANY1nE0e6qTBZKPEIPPXeL 8umg3mC2VWC9zrYPHWrh5ZwvnKVmrAUaY2l0qX0vskGpkFddTHlelTq/pvw0YTHl k0TkLWnicvZ+6r94kNe1KsRQ668NjjSkj6ZklfJ8Kd4+xzR8MpWEt/fXxS/l9yKd 6HTuPltjNkZDFEEQ7N+0HgWxLMxhE+vobQqighIJzSpULSHzRu4+LdWjoz1KxSkb UK3SVbGg8tVYNJ4MQdvhRNF6J5cX09L8Hs27PRFkV9CqmQp3vpBatXbKcjU2TSWY 1SIESZYlcgm3BzzVnIJQoYfYXqo6UUgGDMqHRQ/WNkDj/bzalq+6KT/mVv8bMbTU -----END CERTIFICATE-----Generated at Sun Oct 11 16:27:29 2026 by rpki-client