$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft File: 5a81d94a-3591-433e-8f6e-da4b9078552b.mft (raw, json) Hash identifier: uukGtW/YTpdROAlynmsVdbUURxlDOtx41vej/83UAJs= Subject key identifier: 17:9A:AD:CB:CE:F0:AD:C1:56:36:52:BE:6D:AE:FD:AB:C8:D2:0B:C7 Authority key identifier: 55:AB:70:12:4D:D4:0F:5D:1E:96:31:F5:55:2E:6E:F0:48:22:A1:A9 Certificate issuer: /CN=5a81d94a-3591-433e-8f6e-da4b9078552b Certificate serial: 010D0C9F4328584F40246A26F8862E0C75CB7390 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft Manifest number: 010D0C9F43285848562F8573C59705F64E791A8E Signing time: Mon 21 Sep 2026 17:00:22 +0000 Manifest this update: Mon 21 Sep 2026 17:00:22 +0000 Manifest next update: Thu 24 Sep 2026 17:00:00 +0000 Files and hashes: 1: 5a81d94a-3591-433e-8f6e-da4b9078552b.crl (hash: 8dcgc+V52a4tyUPE6IP4Cuerzg+PhBXH02VOW46nubc=) 2: c8c1518e-9bc6-3e4c-bd13-27a89b2c0c26.roa (hash: yviAXZX3LyvJzUBuQxx2J6gL4mxTVnP8GGwg3jo1p+c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:24:6a:26:f8:86:2e:0c:75:cb:73:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a81d94a-3591-433e-8f6e-da4b9078552b Validity Not Before: Sep 21 17:00:22 2026 GMT Not After : Sep 24 17:00:00 2026 GMT Subject: CN=a18cb2cd-e870-45f3-83ad-28e860453911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a1:9b:71:11:70:03:2d:94:47:d9:75:8b:3f: 81:5f:d1:da:7d:a3:ef:23:84:1d:cf:e0:74:c4:84: dd:d6:e7:b7:23:b2:16:78:a8:f9:ca:83:b2:99:cd: af:85:de:8b:1a:d0:8b:fc:5f:8a:f9:6e:ce:58:1d: 83:fc:02:2d:32:a1:48:81:55:dc:16:a7:ee:26:9d: e2:6c:c4:8c:44:22:63:22:f6:11:16:48:55:53:fb: 57:33:62:5e:55:f8:3b:ba:d6:87:2f:ac:f1:95:a3: 6f:7c:82:d5:c3:be:b0:47:b8:14:e4:5b:8b:7e:96: 03:bc:b1:62:9f:72:46:a7:92:34:f7:c1:80:c1:ec: da:d7:47:dc:d6:12:d9:eb:07:43:87:7e:93:e4:9c: bc:ce:a0:e1:a6:a8:ca:be:f6:a9:ab:7b:ea:a3:fb: 7e:c3:7d:f2:9f:6d:95:65:26:cd:d4:eb:f1:15:69: e9:d4:e0:59:ea:16:c1:88:52:6a:6d:de:34:d7:48: 65:8e:bb:15:06:8f:71:e7:c8:7e:a9:ef:7d:8c:00: e0:36:a2:73:b2:fa:3b:a1:d3:cb:c1:ef:05:e0:51: 11:93:cd:26:40:0d:a5:6d:f0:bd:19:90:67:ba:77: 5f:6f:2d:45:e3:a6:ac:11:d1:7e:fd:87:0d:37:47: a2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9A:AD:CB:CE:F0:AD:C1:56:36:52:BE:6D:AE:FD:AB:C8:D2:0B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.crl X509v3 Authority Key Identifier: keyid:55:AB:70:12:4D:D4:0F:5D:1E:96:31:F5:55:2E:6E:F0:48:22:A1:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:76:0e:1f:fe:2b:f1:b4:eb:41:29:5d:a8:39:7d:9b:0d:60: c3:43:3a:c5:f9:c7:28:f5:59:0a:65:3a:b4:6b:03:af:e1:2d: 39:ca:d7:23:62:3c:c8:6c:fe:aa:0a:23:c0:09:43:a6:45:62: a8:9f:0f:fc:2f:f1:b1:36:bc:62:04:27:d4:3c:d1:94:34:4a: a8:68:df:1c:d0:71:eb:2f:ff:4b:a0:ec:63:63:68:93:2a:84: da:77:f4:8e:c3:b1:ec:11:12:e8:4f:e2:8d:97:c5:c5:d5:c3: 3e:a6:6b:fc:5c:3e:c0:14:ba:af:46:a3:c6:81:7c:d7:d4:21: 1a:94:b8:c6:aa:b6:05:e2:51:42:83:e2:6b:40:ca:eb:ff:78: 5c:0f:1d:0e:aa:84:67:af:c7:3f:11:6d:65:1c:a1:99:1f:ac: 01:6f:4e:78:c3:6e:6b:99:31:dd:91:dc:0e:89:c3:c4:b8:ab: ca:46:e2:d3:c5:b5:64:0d:77:39:25:58:eb:38:66:54:64:23: 2c:49:ad:f6:fa:8b:e6:7b:7b:a8:cb:ca:34:6a:c7:45:fa:df: dc:f2:bb:da:c4:aa:44:3e:3d:61:b0:7a:d1:5d:26:b9:c3:77: d6:78:b7:7b:6f:37:e1:02:2b:cb:04:1b:9d:87:6b:1d:55:de: 24:cc:5e:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9AJGom+IYuDHXLc5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4MWQ5NGEtMzU5MS00MzNlLThmNmUtZGE0YjkwNzg1 NTJiMB4XDTI2MDkyMTE3MDAyMloXDTI2MDkyNDE3MDAwMFowLzEtMCsGA1UEAxMk YTE4Y2IyY2QtZTg3MC00NWYzLTgzYWQtMjhlODYwNDUzOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKGbcRFwAy2UR9l1iz+BX9HafaPvI4Qdz+B0 xITd1ue3I7IWeKj5yoOymc2vhd6LGtCL/F+K+W7OWB2D/AItMqFIgVXcFqfuJp3i bMSMRCJjIvYRFkhVU/tXM2JeVfg7utaHL6zxlaNvfILVw76wR7gU5FuLfpYDvLFi n3JGp5I098GAweza10fc1hLZ6wdDh36T5Jy8zqDhpqjKvvapq3vqo/t+w33yn22V ZSbN1OvxFWnp1OBZ6hbBiFJqbd4010hljrsVBo9x58h+qe99jADgNqJzsvo7odPL we8F4FERk80mQA2lbfC9GZBnundfby1F46asEdF+/YcNN0eiZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBearcvO8K3BVjZSvm2u/avI0gvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YTgx ZDk0YS0zNTkxLTQzM2UtOGY2ZS1kYTRiOTA3ODU1MmIvNWE4MWQ5NGEtMzU5MS00 MzNlLThmNmUtZGE0YjkwNzg1NTJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWE4MWQ5NGEtMzU5MS00MzNlLThm NmUtZGE0YjkwNzg1NTJiLzVhODFkOTRhLTM1OTEtNDMzZS04ZjZlLWRhNGI5MDc4 NTUyYi5jcmwwHwYDVR0jBBgwFoAUVatwEk3UD10eljH1VS5u8EgioakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YTgxZDk0YS0zNTkxLTQzM2UtOGY2ZS1kYTRi OTA3ODU1MmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLdg4f/ivxtOtBKV2oOX2b DWDDQzrF+cco9VkKZTq0awOv4S05ytcjYjzIbP6qCiPACUOmRWKonw/8L/GxNrxi BCfUPNGUNEqoaN8c0HHrL/9LoOxjY2iTKoTad/SOw7HsERLoT+KNl8XF1cM+pmv8 XD7AFLqvRqPGgXzX1CEalLjGqrYF4lFCg+JrQMrr/3hcDx0OqoRnr8c/EW1lHKGZ H6wBb054w25rmTHdkdwOicPEuKvKRuLTxbVkDXc5JVjrOGZUZCMsSa32+ovme3uo y8o0asdF+t/c8rvaxKpEPj1hsHrRXSa5w3fWeLd7bzfhAivLBBudh2sdVd4kzF6I -----END CERTIFICATE-----Generated at Tue Sep 22 01:25:18 2026 by rpki-client