$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.mft File: da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.mft (raw, json) Hash identifier: mDFHgf+DOFAf4AOPNkPo0YVL9yQ6OPDzEuKGwx8M35Q= Subject key identifier: EB:43:2E:FB:F3:57:F1:97:AF:F5:01:1F:E7:93:5D:35:58:C4:90:93 Authority key identifier: C6:C9:37:5C:37:E0:05:0F:93:5E:4B:9B:61:92:67:4D:EA:FD:75:02 Certificate issuer: /CN=da839ff9-2f32-4c6b-ad01-c0b5bda9b0de Certificate serial: 010D0C9F4328584F4006A20A5FEFBE5DB487DF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.mft Manifest number: 010D0C9F4328584195A8E2F0CF67A566DC45B604 Signing time: Mon 21 Sep 2026 16:00:23 +0000 Manifest this update: Mon 21 Sep 2026 16:00:23 +0000 Manifest next update: Wed 23 Sep 2026 16:00:00 +0000 Files and hashes: 1: ce91baa4-4505-349d-a0fb-18653fe49913.roa (hash: IlET0yakzkpyhJysDYg3uqghh4JtrX4xXV+6oDDIEA4=) 2: da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.crl (hash: vmeLcIeCaJzH7jMn+zmGK0SYAJR4jdSCTDJYI4zs5pY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:06:a2:0a:5f:ef:be:5d:b4:87:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da839ff9-2f32-4c6b-ad01-c0b5bda9b0de Validity Not Before: Sep 21 16:00:23 2026 GMT Not After : Sep 23 16:00:00 2026 GMT Subject: CN=67bc3f22-f5ed-4107-8318-f38c3d3a6f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:2a:c2:10:80:de:78:96:87:3b:b7:5e:1d: 3d:ee:8b:ab:bb:ef:3e:c3:bb:8c:20:ea:3c:a5:b5: 27:66:98:4b:0c:6f:69:15:14:ad:70:32:7e:8b:c9: af:09:ac:24:44:08:be:0c:95:b3:2a:08:2d:19:09: a3:f8:35:65:e1:f7:24:a9:9b:83:22:9d:b8:ad:9c: d9:29:cf:9e:57:6c:5a:96:25:44:35:df:26:0b:28: e4:b4:cc:3d:4b:ef:8f:82:70:c8:ee:fe:0b:6d:bc: 9a:ab:3f:f3:9a:dd:83:a3:a7:f7:7a:d2:d9:71:6a: 96:b0:9c:b6:e4:35:cd:62:93:4c:55:c0:42:e9:66: af:c7:72:fd:2c:9c:fb:f5:18:d1:da:e6:dd:1c:92: 26:03:79:e4:a1:93:0b:50:c4:69:13:64:d3:f3:2a: e6:65:d5:c3:50:97:43:70:a2:11:47:a5:ad:51:ae: 04:6c:23:a1:f2:3b:50:28:3e:86:e0:47:af:4a:2b: d3:c4:bb:85:8a:32:5d:71:1c:6f:d4:0c:59:30:46: ee:e6:54:d5:41:14:54:35:b7:bc:64:24:bb:fe:03: 9e:b4:f4:95:8a:62:f1:c9:cc:01:59:b8:92:6e:10: 96:b9:66:7b:f9:57:de:1e:f5:2c:92:a4:ee:e0:f7: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:43:2E:FB:F3:57:F1:97:AF:F5:01:1F:E7:93:5D:35:58:C4:90:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.crl X509v3 Authority Key Identifier: keyid:C6:C9:37:5C:37:E0:05:0F:93:5E:4B:9B:61:92:67:4D:EA:FD:75:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:aa:c3:25:1b:99:31:9c:75:7c:b5:c7:59:e6:44:3f:a1:f6: 17:b1:28:44:35:0e:d5:21:6e:0a:43:65:9f:a8:27:2f:14:a0: 81:79:05:7e:80:0e:84:ae:d5:fe:c0:82:a0:28:dc:a1:a0:18: b3:9f:77:12:4c:71:8c:e3:ce:0f:68:c9:aa:94:9a:6c:22:bb: 16:7f:33:66:81:32:86:3b:b7:20:ed:1b:a7:aa:52:1d:ca:fc: fd:8d:9a:a7:fa:22:7c:16:5e:00:95:3f:0a:e6:98:05:4c:de: 99:62:16:39:68:ab:28:fa:25:96:84:8b:c0:71:55:e4:69:bf: c6:9e:4a:b3:4b:c7:5e:f4:1f:7f:0c:79:b8:e4:1f:43:fc:18: 55:75:94:4a:d2:ac:15:5e:3e:1c:66:e3:17:1c:f8:fb:87:a2: f8:6b:93:35:f0:ac:db:7d:ff:3f:36:cd:9f:52:db:e9:26:07: 51:7a:89:43:3e:f1:49:23:d4:8d:c3:f8:b0:a7:f6:4b:77:dc: 46:84:e5:67:3e:be:c3:b0:1e:a3:d9:8a:15:39:d0:05:b9:04: d1:b6:0a:07:fc:b2:65:d7:1b:9f:52:9f:21:a6:df:a1:2e:4f: b6:4c:20:7e:a7:4f:fc:ad:b0:04:68:51:ee:f2:af:df:55:7d: d2:ac:6f:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9ABqIKX+++XbSH30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE4MzlmZjktMmYzMi00YzZiLWFkMDEtYzBiNWJkYTli MGRlMB4XDTI2MDkyMTE2MDAyM1oXDTI2MDkyMzE2MDAwMFowLzEtMCsGA1UEAxMk NjdiYzNmMjItZjVlZC00MTA3LTgzMTgtZjM4YzNkM2E2ZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLoqwhCA3niWhzu3Xh097ouru+8+w7uMIOo8 pbUnZphLDG9pFRStcDJ+i8mvCawkRAi+DJWzKggtGQmj+DVl4fckqZuDIp24rZzZ Kc+eV2xaliVENd8mCyjktMw9S++PgnDI7v4Lbbyaqz/zmt2Do6f3etLZcWqWsJy2 5DXNYpNMVcBC6Wavx3L9LJz79RjR2ubdHJImA3nkoZMLUMRpE2TT8yrmZdXDUJdD cKIRR6WtUa4EbCOh8jtQKD6G4EevSivTxLuFijJdcRxv1AxZMEbu5lTVQRRUNbe8 ZCS7/gOetPSVimLxycwBWbiSbhCWuWZ7+VfeHvUskqTu4Pdy5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOtDLvvzV/GXr/UBH+eTXTVYxJCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYTgz OWZmOS0yZjMyLTRjNmItYWQwMS1jMGI1YmRhOWIwZGUvZGE4MzlmZjktMmYzMi00 YzZiLWFkMDEtYzBiNWJkYTliMGRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGE4MzlmZjktMmYzMi00YzZiLWFk MDEtYzBiNWJkYTliMGRlL2RhODM5ZmY5LTJmMzItNGM2Yi1hZDAxLWMwYjViZGE5 YjBkZS5jcmwwHwYDVR0jBBgwFoAUxsk3XDfgBQ+TXkubYZJnTer9dQIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYTgzOWZmOS0yZjMyLTRjNmItYWQwMS1jMGI1 YmRhOWIwZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUqsMlG5kxnHV8tcdZ5kQ/ ofYXsShENQ7VIW4KQ2WfqCcvFKCBeQV+gA6ErtX+wIKgKNyhoBizn3cSTHGM484P aMmqlJpsIrsWfzNmgTKGO7cg7RunqlIdyvz9jZqn+iJ8Fl4AlT8K5pgFTN6ZYhY5 aKso+iWWhIvAcVXkab/GnkqzS8de9B9/DHm45B9D/BhVdZRK0qwVXj4cZuMXHPj7 h6L4a5M18Kzbff8/Ns2fUtvpJgdReolDPvFJI9SNw/iwp/ZLd9xGhOVnPr7DsB6j 2YoVOdAFuQTRtgoH/LJl1xufUp8hpt+hLk+2TCB+p0/8rbAEaFHu8q/fVX3SrG/A -----END CERTIFICATE-----Generated at Tue Sep 22 11:52:01 2026 by rpki-client