$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft File: d899d3d2-c968-408b-b21e-5744f982c130.mft (raw, json) Hash identifier: wU6u/v+mvl7NYWpEJCZ0Wtf2TpJc/0YjU4ar/D3IPFo= Subject key identifier: 2D:56:C9:61:CD:91:61:50:74:2C:82:96:1A:11:78:25:E7:A5:F6:A2 Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F4328584F7588BD82ABA3752449CA7D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft Manifest number: 010D0C9F4328584373EE2FA83D79ED8AEA2A3DA9 Signing time: Sat 10 Oct 2026 20:00:24 +0000 Manifest this update: Sat 10 Oct 2026 20:00:24 +0000 Manifest next update: Mon 12 Oct 2026 20:00:00 +0000 Files and hashes: 1: d899d3d2-c968-408b-b21e-5744f982c130.crl (hash: 4xNWyBxYLYLFSuyE3kqGz/pEb7h3tiNqMIW3XTCm/ro=) 2: dff21604-1698-3188-98f1-6b0994e52624.roa (hash: kO6uvpyfu58ZgXhle8OIW3nvo7/2izKVBc9gB8hyxJg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:75:88:bd:82:ab:a3:75:24:49:ca:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: Oct 10 20:00:24 2026 GMT Not After : Oct 12 20:00:00 2026 GMT Subject: CN=2b71c5fc-a8ba-454a-8a8e-7a2c5c4068bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ed:33:38:57:79:f3:76:ae:c1:9b:66:4c:0e: 41:86:cb:b7:40:c8:6d:05:70:be:9d:6c:f3:8a:46: 05:f4:eb:3a:1d:e7:75:c1:f2:ff:7b:9b:6a:c5:dd: 4d:e5:97:88:65:ee:f8:9a:cf:2c:44:cc:6a:05:8b: 98:a8:e1:0d:05:e3:5e:ef:e1:fe:d7:cc:57:bf:76: 92:7f:16:93:32:d3:31:88:9f:3b:04:0f:e6:10:e1: 4d:65:2d:8b:f6:d8:af:d7:64:02:a4:3f:b5:ab:35: 81:58:2f:2e:18:9e:b0:a7:3e:31:a8:e4:0c:22:b8: 08:16:1b:cd:50:6d:ce:e7:b5:53:5b:6b:f4:b6:c8: d2:5d:86:79:8a:ce:dc:b3:81:74:a6:dc:dc:2a:84: 3b:10:09:a0:59:8e:dc:d4:e5:45:7d:d3:b9:26:2d: 9c:b0:15:85:57:84:f0:69:d3:1b:4b:96:4d:0d:9b: aa:6f:9c:2e:e5:0c:7f:69:be:e3:32:ce:f3:a9:e5: b4:26:cd:83:c0:3b:55:03:3e:1c:76:7f:4f:18:33: 75:4e:60:70:cc:9f:a0:de:b2:11:64:88:67:3b:d5: 46:07:a7:6a:01:e3:3a:e1:74:0e:86:75:5d:1e:82: 6e:55:64:27:e5:44:06:b8:ed:04:fe:7c:f1:f4:4e: 0d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:56:C9:61:CD:91:61:50:74:2C:82:96:1A:11:78:25:E7:A5:F6:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c7:ca:6d:ac:b2:dc:cc:e0:41:50:31:64:61:b3:be:f9:81: 75:95:0c:f9:b8:fa:08:2f:df:ea:2b:ce:91:7c:22:a9:52:1a: e1:07:14:d3:00:f7:a7:be:36:a1:7d:89:93:15:71:5f:e2:9b: 2b:6d:fa:38:73:3c:ef:6a:29:9a:d7:ad:e4:3f:88:f0:a2:2f: da:9b:32:9e:f3:c2:1c:e9:bc:cf:8b:0f:99:cc:01:7c:ec:2d: af:71:a0:8a:63:ca:84:d2:87:68:72:1f:b1:bf:bc:3c:b1:60: 89:c4:d2:f1:0e:76:9b:47:18:94:0e:a7:73:ac:13:c3:a9:46: 9a:0b:b0:c2:be:ae:9c:c9:81:8a:1e:d0:d1:9c:a6:1b:19:de: 4f:67:9f:1a:83:ac:a0:a1:a9:95:fb:fe:14:a0:d4:f9:7f:33: d2:3f:bb:c1:bd:d6:b8:7f:4b:b1:fe:8a:07:5d:bd:5d:2d:c0: c1:3e:f5:bb:08:0b:cd:f1:b0:45:9a:21:0a:4d:c1:6f:49:d5: cc:ce:93:bb:70:ed:2b:ed:a3:df:69:1a:94:78:98:02:2e:9c: 48:70:f4:f0:f4:9a:2f:6c:ba:15:24:5b:75:28:4e:70:85:58: c6:4a:10:ec:55:d4:d7:b6:2a:94:80:8e:3a:a9:19:ac:52:7a: 07:f5:fb:db -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE91iL2Cq6N1JEnKfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI2MTAxMDIwMDAyNFoXDTI2MTAxMjIwMDAwMFowLzEtMCsGA1UEAxMk MmI3MWM1ZmMtYThiYS00NTRhLThhOGUtN2EyYzVjNDA2OGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre0zOFd583auwZtmTA5Bhsu3QMhtBXC+nWzz ikYF9Os6Hed1wfL/e5tqxd1N5ZeIZe74ms8sRMxqBYuYqOENBeNe7+H+18xXv3aS fxaTMtMxiJ87BA/mEOFNZS2L9tiv12QCpD+1qzWBWC8uGJ6wpz4xqOQMIrgIFhvN UG3O57VTW2v0tsjSXYZ5is7cs4F0ptzcKoQ7EAmgWY7c1OVFfdO5Ji2csBWFV4Tw adMbS5ZNDZuqb5wu5Qx/ab7jMs7zqeW0Js2DwDtVAz4cdn9PGDN1TmBwzJ+g3rIR ZIhnO9VGB6dqAeM64XQOhnVdHoJuVWQn5UQGuO0E/nzx9E4NrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC1WyWHNkWFQdCyClhoReCXnpfaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZDg5OWQzZDItYzk2OC00 MDhiLWIyMWUtNTc0NGY5ODJjMTMwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXx8ptrLLczOBBUDFkYbO+ +YF1lQz5uPoIL9/qK86RfCKpUhrhBxTTAPenvjahfYmTFXFf4psrbfo4czzvaima 163kP4jwoi/amzKe88Ic6bzPiw+ZzAF87C2vcaCKY8qE0odoch+xv7w8sWCJxNLx DnabRxiUDqdzrBPDqUaaC7DCvq6cyYGKHtDRnKYbGd5PZ58ag6ygoamV+/4UoNT5 fzPSP7vBvda4f0ux/ooHXb1dLcDBPvW7CAvN8bBFmiEKTcFvSdXMzpO7cO0r7aPf aRqUeJgCLpxIcPTw9JovbLoVJFt1KE5whVjGShDsVdTXtiqUgI46qRmsUnoH9fvb -----END CERTIFICATE-----Generated at Sun Oct 11 13:49:45 2026 by rpki-client