$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft File: 2d88838e-541a-4661-8501-3c7d2eb5849d.mft (raw, json) Hash identifier: Vj6uyqixYn1eYR5VtoJLxFgIQ+aRThiLSYAWpjv/kto= Subject key identifier: BC:BE:B3:CD:2C:9A:A9:96:EC:8E:C4:F4:A6:33:B5:90:C1:E1:1E:EA Authority key identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Certificate issuer: /CN=2d88838e-541a-4661-8501-3c7d2eb5849d Certificate serial: 010D0C9F4328584F3D1E2B2619FCD40E9804E2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft Manifest number: 010D0C9F43285848B22C5EC19A391EA7020C1FE7 Signing time: Sun 20 Sep 2026 15:00:23 +0000 Manifest this update: Sun 20 Sep 2026 15:00:23 +0000 Manifest next update: Wed 23 Sep 2026 15:00:00 +0000 Files and hashes: 1: 2d88838e-541a-4661-8501-3c7d2eb5849d.crl (hash: XdRsbuEUMGbJNhlDrmmGcRFCW8lkxkJ1WFjDABUMJts=) 2: 35dd38da-ef2c-3aa2-965d-09739043ca44.roa (hash: pP1CFghpYk9E9wBLyPpEwYQZouVKRCIXjGy+UOeU4LA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3d:1e:2b:26:19:fc:d4:0e:98:04:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d88838e-541a-4661-8501-3c7d2eb5849d Validity Not Before: Sep 20 15:00:23 2026 GMT Not After : Sep 23 15:00:00 2026 GMT Subject: CN=12305f75-89f4-415b-9279-4e774e3e6e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f8:18:38:7a:06:69:18:d1:91:9c:f2:89:0e: ef:ec:41:0e:c4:7e:8d:16:32:98:6e:27:e0:c0:1f: 08:b6:ec:f0:7f:a8:bd:9b:d7:90:49:12:81:5e:50: 27:23:5b:69:d4:c2:b8:2b:1f:30:38:29:be:22:66: 19:2a:ad:bb:5f:92:07:73:45:a4:ed:7d:ec:71:b3: 89:2c:5f:12:90:85:b4:70:06:f9:b8:09:64:a3:23: f7:73:49:1b:00:fb:91:18:c5:84:1c:56:e8:9d:c9: 4f:77:3a:f0:53:ce:c5:81:29:7b:4f:ff:2b:54:8b: 46:25:a7:b0:0f:fd:a5:44:46:9e:87:5b:70:ab:50: e6:37:59:c0:d9:3f:81:5b:2d:a8:5b:49:c9:7f:ce: 02:f6:1e:0e:d9:ba:d8:8d:1b:3b:ca:5f:a8:7c:c0: 7b:8d:4e:6c:de:cd:98:6e:05:a1:8f:74:79:09:a1: 69:cc:e8:5c:37:d3:3a:c2:3f:f5:3e:eb:4b:fc:85: 47:ea:74:b7:55:fe:9f:12:8d:8a:d8:26:f2:34:f4: 2a:53:3c:be:5c:2d:58:a5:eb:94:76:67:fc:d9:f0: 92:8a:9b:1b:6e:55:e6:e3:50:af:39:91:c1:56:6d: 3d:91:1d:91:94:2a:fb:6d:45:e1:25:c7:49:8c:1f: b1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BE:B3:CD:2C:9A:A9:96:EC:8E:C4:F4:A6:33:B5:90:C1:E1:1E:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl X509v3 Authority Key Identifier: keyid:4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:3f:79:f9:17:f6:91:e7:21:9b:40:12:d0:65:91:48:f8:8f: 99:0e:77:36:27:ca:ba:58:52:0f:5c:e2:80:45:ad:32:f3:51: bf:5b:fc:47:f8:d1:fe:d2:2b:6c:05:6a:18:d6:25:4a:9f:47: 0e:55:c5:d9:17:a3:31:fb:e2:d7:2e:f4:78:35:94:63:b4:5b: e9:b1:d9:91:3b:0b:d4:d4:4c:4d:60:4b:9d:1f:2f:86:6c:71: 7d:0c:bc:f9:c4:01:7a:0b:f4:c7:2b:8a:e8:02:74:b7:60:04: 59:ec:da:be:2e:94:b9:51:1e:c6:86:a8:2f:cb:55:c4:72:65: a4:a6:49:83:7e:a0:c4:1f:71:ff:59:fa:e5:5f:57:8a:5b:2e: 33:03:5d:c6:f0:ea:1c:cc:73:8e:02:7b:1e:ee:ad:c8:55:b0: 71:64:4a:42:ed:85:39:de:0e:14:d6:14:03:b1:2d:17:0c:bd: 7f:c4:14:02:41:a5:f9:77:77:2c:9d:b4:34:12:73:2a:f0:94: 15:33:6f:4a:14:a9:a9:9c:db:43:74:bd:ea:ce:1e:1e:60:6c: 7a:55:40:22:8c:e5:b0:8f:ee:95:58:41:c4:81:e5:a8:d3:fd: e7:d7:ad:5c:c3:38:b8:bd:21:c4:c5:d9:da:5b:ea:81:66:33: de:97:ff:16 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE89HismGfzUDpgE4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ4ODgzOGUtNTQxYS00NjYxLTg1MDEtM2M3ZDJlYjU4 NDlkMB4XDTI2MDkyMDE1MDAyM1oXDTI2MDkyMzE1MDAwMFowLzEtMCsGA1UEAxMk MTIzMDVmNzUtODlmNC00MTViLTkyNzktNGU3NzRlM2U2ZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofgYOHoGaRjRkZzyiQ7v7EEOxH6NFjKYbifg wB8Ituzwf6i9m9eQSRKBXlAnI1tp1MK4Kx8wOCm+ImYZKq27X5IHc0Wk7X3scbOJ LF8SkIW0cAb5uAlkoyP3c0kbAPuRGMWEHFbonclPdzrwU87FgSl7T/8rVItGJaew D/2lREaeh1twq1DmN1nA2T+BWy2oW0nJf84C9h4O2brYjRs7yl+ofMB7jU5s3s2Y bgWhj3R5CaFpzOhcN9M6wj/1PutL/IVH6nS3Vf6fEo2K2CbyNPQqUzy+XC1YpeuU dmf82fCSipsbblXm41CvOZHBVm09kR2RlCr7bUXhJcdJjB+xhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLy+s80smqmW7I7E9KYztZDB4R7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4 ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmViNTg0OWQvMmQ4ODgzOGUtNTQxYS00 NjYxLTg1MDEtM2M3ZDJlYjU4NDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmQ4ODgzOGUtNTQxYS00NjYxLTg1 MDEtM2M3ZDJlYjU4NDlkLzJkODg4MzhlLTU0MWEtNDY2MS04NTAxLTNjN2QyZWI1 ODQ5ZC5jcmwwHwYDVR0jBBgwFoAUTp1zO/YPWvaeN0YoUwnEekJJWC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdk MmViNTg0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASP3n5F/aR5yGbQBLQZZFI +I+ZDnc2J8q6WFIPXOKARa0y81G/W/xH+NH+0itsBWoY1iVKn0cOVcXZF6Mx++LX LvR4NZRjtFvpsdmROwvU1ExNYEudHy+GbHF9DLz5xAF6C/THK4roAnS3YARZ7Nq+ LpS5UR7Ghqgvy1XEcmWkpkmDfqDEH3H/WfrlX1eKWy4zA13G8OoczHOOAnse7q3I VbBxZEpC7YU53g4U1hQDsS0XDL1/xBQCQaX5d3csnbQ0EnMq8JQVM29KFKmpnNtD dL3qzh4eYGx6VUAijOWwj+6VWEHEgeWo0/3n161cwzi4vSHExdnaW+qBZjPel/8W -----END CERTIFICATE-----Generated at Mon Sep 21 13:34:11 2026 by rpki-client