$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft File: 1ff04835-864a-40da-a12f-dcad0faabb8c.mft (raw, json) Hash identifier: oZuzfDfRXVMmllHgx8N8HQqHTbXLWfw1yRPzWPBFcTY= Subject key identifier: 65:82:CE:D9:FD:93:34:B3:F3:D6:7E:22:3C:6A:3D:11:DF:80:BC:78 Authority key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Certificate issuer: /CN=1ff04835-864a-40da-a12f-dcad0faabb8c Certificate serial: 010D0C9F4328584F4D2B95B0AAFE80DDDAF5A740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft Manifest number: 010D0C9F432858499C42A1E525F529435CBAF424 Signing time: Sat 26 Sep 2026 09:00:23 +0000 Manifest this update: Sat 26 Sep 2026 09:00:23 +0000 Manifest next update: Sun 27 Sep 2026 17:00:00 +0000 Files and hashes: 1: 1ff04835-864a-40da-a12f-dcad0faabb8c.crl (hash: yOzodec9BwIZ3r6V2CIo7dUqjexFHjibARoNROjvEfQ=) 2: 2cdfafd9-8f03-3005-bf1a-d8a0a4240613.roa (hash: ptuyiloCkG2pyRZ617lXSYeDsr5jqXRC9l8XTe6/DA4=) 3: 7240f3c2-ab10-300d-8db2-697e0432d604.roa (hash: sr8RYv8O4otgxc4cTBEh1OWY4eNscOfNlaw8g0sRowA=) 4: 778be72c-f792-3d93-925f-6e82eb6eba9f.roa (hash: 2U0c5NYFnADVfBpoJFlp6B8I08cMsqm/aie2q3fQzAg=) 5: ff28fe0a-8825-3849-aa9d-8532ce44050e.roa (hash: c6QQ55Uc8zX6MOFKn8uqsY+E655WLai84Q0CwN6+VaE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:2b:95:b0:aa:fe:80:dd:da:f5:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff04835-864a-40da-a12f-dcad0faabb8c Validity Not Before: Sep 26 09:00:23 2026 GMT Not After : Sep 27 17:00:00 2026 GMT Subject: CN=00551b14-dccf-4355-8729-d4613f965167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:73:9d:36:71:ae:4e:cd:39:d2:43:d1:9a: 53:df:4b:eb:83:35:e6:f1:22:ea:95:31:a2:d8:c5: ac:21:82:ab:10:e0:f6:5e:0b:9e:90:69:d4:7d:35: e4:e3:15:13:3b:0f:10:b8:35:64:f2:79:76:09:6e: a3:6e:1f:c6:47:05:c6:5c:a3:c0:0c:8f:b4:89:44: de:60:4d:99:98:fb:ff:8a:b6:40:41:01:df:89:2b: fa:93:95:dc:6a:31:ad:53:89:64:f4:0a:1a:9d:4c: 68:2e:88:7a:ee:ba:56:b4:39:d6:50:28:bf:74:38: 93:c6:18:19:5e:e8:68:84:17:c9:32:8e:68:af:ff: 82:aa:51:cd:23:24:1a:8b:a1:61:46:fc:70:60:46: f5:c5:81:a5:b3:f3:19:d5:6d:6d:58:3c:50:11:c4: 78:95:a4:e7:65:65:40:c0:51:2e:5a:fa:6e:10:9a: 00:63:4e:89:58:52:f8:d9:36:23:a4:c9:28:73:1d: da:49:8f:af:3e:3d:3e:c7:5c:e2:8b:27:99:23:53: 99:27:6e:7f:cd:1e:71:c0:c4:36:b7:93:04:62:f3: 4b:90:5d:46:8f:3f:96:24:89:e4:53:52:14:2c:b1: 33:e5:25:20:d5:fe:6c:cf:58:44:fe:28:41:a1:10: 9d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:82:CE:D9:FD:93:34:B3:F3:D6:7E:22:3C:6A:3D:11:DF:80:BC:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl X509v3 Authority Key Identifier: keyid:73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d7:7d:63:a4:e5:80:7b:41:50:a5:dc:5f:26:28:4f:a6:34: 64:9b:78:68:7f:1a:c8:b1:c5:9c:ae:62:12:5a:5b:c5:54:1a: e9:7c:aa:8c:d5:30:6d:4a:4f:7e:62:98:fc:da:41:66:2f:1c: f0:14:b3:b5:bf:35:fd:a9:61:43:cf:f9:15:0a:cb:aa:c0:eb: 79:23:12:c6:89:1c:0f:c8:67:bc:4a:d5:45:6b:b0:26:af:6b: ca:25:e3:96:a0:f0:d8:ad:85:31:11:f1:05:2c:be:6a:cc:ea: 56:96:96:ee:8f:42:e6:32:6f:c4:f6:57:27:cc:3b:93:09:0f: d0:db:30:c1:c9:5e:9e:b4:06:66:96:9c:e9:bf:d0:8a:bd:08: f5:7f:6f:01:6a:37:4c:5a:0a:af:e3:4b:59:00:a7:1b:f2:fc: 90:66:aa:cb:ee:ca:a4:03:00:1a:4a:58:76:ed:d7:2e:60:9a: d9:47:d8:89:75:38:32:73:0b:c4:45:b5:8f:ee:a1:da:7b:64: 25:96:94:e0:c0:3d:96:2b:13:18:81:cf:93:33:53:6f:ae:bb: 43:f9:42:23:7b:fb:cb:63:d5:bf:02:ee:8c:9c:cb:a1:d5:b3: 58:dd:8c:2d:a0:84:00:b4:e3:ac:88:6a:38:a3:01:30:7f:8a: f5:b8:99:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9NK5Wwqv6A3dr1p0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFi YjhjMB4XDTI2MDkyNjA5MDAyM1oXDTI2MDkyNzE3MDAwMFowLzEtMCsGA1UEAxMk MDA1NTFiMTQtZGNjZi00MzU1LTg3MjktZDQ2MTNmOTY1MTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ9znTZxrk7NOdJD0ZpT30vrgzXm8SLqlTGi 2MWsIYKrEOD2XguekGnUfTXk4xUTOw8QuDVk8nl2CW6jbh/GRwXGXKPADI+0iUTe YE2ZmPv/irZAQQHfiSv6k5XcajGtU4lk9AoanUxoLoh67rpWtDnWUCi/dDiTxhgZ XuhohBfJMo5or/+CqlHNIyQai6FhRvxwYEb1xYGls/MZ1W1tWDxQEcR4laTnZWVA wFEuWvpuEJoAY06JWFL42TYjpMkocx3aSY+vPj0+x1ziiyeZI1OZJ25/zR5xwMQ2 t5MEYvNLkF1Gjz+WJInkU1IULLEz5SUg1f5sz1hE/ihBoRCdhwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGWCztn9kzSz89Z+IjxqPRHfgLx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYw NDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvMWZmMDQ4MzUtODY0YS00 MGRhLWExMmYtZGNhZDBmYWFiYjhjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmMDQ4MzUtODY0YS00MGRhLWEx MmYtZGNhZDBmYWFiYjhjLzFmZjA0ODM1LTg2NGEtNDBkYS1hMTJmLWRjYWQwZmFh YmI4Yy5jcmwwHwYDVR0jBBgwFoAUcw/uVLxy0c4qnDR9x78gVvTym4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2Fk MGZhYWJiOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0131jpOWAe0FQpdxfJihP pjRkm3hofxrIscWcrmISWlvFVBrpfKqM1TBtSk9+Ypj82kFmLxzwFLO1vzX9qWFD z/kVCsuqwOt5IxLGiRwPyGe8StVFa7Amr2vKJeOWoPDYrYUxEfEFLL5qzOpWlpbu j0LmMm/E9lcnzDuTCQ/Q2zDByV6etAZmlpzpv9CKvQj1f28BajdMWgqv40tZAKcb 8vyQZqrL7sqkAwAaSlh27dcuYJrZR9iJdTgycwvERbWP7qHae2QllpTgwD2WKxMY gc+TM1NvrrtD+UIje/vLY9W/Au6MnMuh1bNY3YwtoIQAtOOsiGo4owEwf4r1uJkt -----END CERTIFICATE-----Generated at Sat Sep 26 16:30:05 2026 by rpki-client