$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft File: a856eb04-e27d-4da2-8c39-a38263828e38.mft (raw, json) Hash identifier: GVBaB9iCesKal3eZVhmhboZglHj0n5lY0XsN5a2OdG8= Subject key identifier: 3A:03:AC:59:9D:A6:AB:BD:80:E4:CA:42:EB:F2:50:05:8D:F6:9B:6B Authority key identifier: 7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 Certificate issuer: /CN=a856eb04-e27d-4da2-8c39-a38263828e38 Certificate serial: 010D0C9F4328584F3DD0D1D17F0D3C8944C2CC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft Manifest number: 010D0C9F432858482F910EBCA643DC9360F49517 Signing time: Sun 20 Sep 2026 21:00:23 +0000 Manifest this update: Sun 20 Sep 2026 21:00:23 +0000 Manifest next update: Tue 22 Sep 2026 21:00:00 +0000 Files and hashes: 1: 82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa (hash: JD4BhMUNRIMYhsbDEXqpTevKKBQMmSuMOZ/Gd4L71GU=) 2: a856eb04-e27d-4da2-8c39-a38263828e38.crl (hash: nzXa3YHtdNOjcXxyPNythMK8tNcYzGLN44Y5UTT3i7Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3d:d0:d1:d1:7f:0d:3c:89:44:c2:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a856eb04-e27d-4da2-8c39-a38263828e38 Validity Not Before: Sep 20 21:00:23 2026 GMT Not After : Sep 22 21:00:00 2026 GMT Subject: CN=ecb40e9a-9707-40c4-85cd-3a46ae0cef85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0f:55:26:19:a1:e4:8a:b4:73:5d:d3:19:59: 16:1b:16:db:2c:45:a0:40:6b:ad:1c:d1:03:2e:f7: 34:d4:02:3a:6d:fa:b7:f5:c1:e4:ab:01:8b:97:ce: 44:ec:b6:f3:f0:f2:3f:5c:43:61:33:c9:b6:f8:6f: c1:28:35:ba:c0:66:a9:71:09:6a:4b:39:5b:40:1a: fa:21:e1:a5:10:44:d2:ef:7f:49:cb:91:84:3a:08: 79:5a:e3:27:da:16:9e:52:16:24:8d:8c:3e:42:df: 04:1b:9d:ab:2d:72:83:e6:4e:73:88:10:0f:58:a6: 82:38:1b:77:15:1f:3e:ff:dd:5f:51:e0:49:67:37: 92:2f:8c:0f:ff:09:0b:a9:e7:80:78:95:53:ec:8f: d2:9f:11:48:dd:d6:60:ea:d6:1b:8b:ba:e0:3e:ed: e0:9d:86:71:65:86:9d:56:0e:eb:50:ae:80:68:48: 0c:bc:71:94:a5:67:08:7b:b1:50:86:ea:a0:4c:5c: 4c:f6:54:c4:fc:6b:e6:5f:fa:fc:05:61:3f:dd:56: cf:53:66:62:cb:8f:80:2a:5c:63:22:e3:39:0d:55: 87:43:5c:15:67:a4:02:35:29:a9:eb:6e:45:45:58: 82:0e:be:1c:5c:c6:9b:ac:2a:88:f1:8f:09:7c:4f: dc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:03:AC:59:9D:A6:AB:BD:80:E4:CA:42:EB:F2:50:05:8D:F6:9B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl X509v3 Authority Key Identifier: keyid:7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ff:3a:da:7b:44:d1:b8:03:a3:3f:6e:67:32:2f:9c:73:5b: d5:64:7c:80:89:b7:22:0e:e3:e4:1a:7d:4f:e2:04:cb:29:86: 61:df:9f:74:f0:d9:a1:c6:91:ad:db:61:de:c5:69:86:7a:6c: ea:65:c2:2c:92:c2:ac:41:04:7a:f4:70:07:5b:44:5e:87:6e: 80:e8:24:7d:8a:7c:1a:42:7e:c4:e5:dd:d9:6e:0f:47:df:b2: 7f:8c:75:b4:ad:fc:66:7e:61:9d:78:3a:a4:27:e2:ab:39:e9: 7f:a5:87:dc:fb:d1:a4:0c:42:6b:fa:51:84:b4:f1:4b:af:f9: b7:fa:c6:8d:58:7c:b8:eb:05:f3:14:25:48:40:58:1a:1f:ad: d7:a6:fd:f3:6f:90:9f:1d:91:b2:a7:61:b1:4b:fa:21:1a:b2: b0:92:10:cb:fc:b7:5d:c3:67:67:67:e8:0d:31:86:ad:01:c9: cb:23:fb:e1:fd:e5:03:77:0d:c9:46:af:c0:2e:af:c4:c8:a5: 96:b4:eb:7b:df:61:b7:2f:e8:1a:64:72:e4:a2:ca:a9:d6:da: 02:2b:32:3b:47:db:72:27:68:ab:ea:d6:b8:cb:f3:f1:c4:41: ec:60:fb:b2:58:a5:99:37:0a:02:47:f9:87:1f:22:b3:09:46: aa:83:45:2a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE890NHRfw08iUTCzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg1NmViMDQtZTI3ZC00ZGEyLThjMzktYTM4MjYzODI4 ZTM4MB4XDTI2MDkyMDIxMDAyM1oXDTI2MDkyMjIxMDAwMFowLzEtMCsGA1UEAxMk ZWNiNDBlOWEtOTcwNy00MGM0LTg1Y2QtM2E0NmFlMGNlZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ9VJhmh5Iq0c13TGVkWGxbbLEWgQGutHNED Lvc01AI6bfq39cHkqwGLl85E7Lbz8PI/XENhM8m2+G/BKDW6wGapcQlqSzlbQBr6 IeGlEETS739Jy5GEOgh5WuMn2haeUhYkjYw+Qt8EG52rLXKD5k5ziBAPWKaCOBt3 FR8+/91fUeBJZzeSL4wP/wkLqeeAeJVT7I/SnxFI3dZg6tYbi7rgPu3gnYZxZYad Vg7rUK6AaEgMvHGUpWcIe7FQhuqgTFxM9lTE/GvmX/r8BWE/3VbPU2Ziy4+AKlxj IuM5DVWHQ1wVZ6QCNSmp625FRViCDr4cXMabrCqI8Y8JfE/cDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDoDrFmdpqu9gOTKQuvyUAWN9ptrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hODU2 ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgyNjM4MjhlMzgvYTg1NmViMDQtZTI3ZC00 ZGEyLThjMzktYTM4MjYzODI4ZTM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTg1NmViMDQtZTI3ZC00ZGEyLThj MzktYTM4MjYzODI4ZTM4L2E4NTZlYjA0LWUyN2QtNGRhMi04YzM5LWEzODI2Mzgy OGUzOC5jcmwwHwYDVR0jBBgwFoAUet2XIbvAmhBpFftZXdBp16maeaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hODU2ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgy NjM4MjhlMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCB/zrae0TRuAOjP25nMi+c c1vVZHyAibciDuPkGn1P4gTLKYZh35908NmhxpGt22HexWmGemzqZcIsksKsQQR6 9HAHW0Reh26A6CR9inwaQn7E5d3Zbg9H37J/jHW0rfxmfmGdeDqkJ+KrOel/pYfc +9GkDEJr+lGEtPFLr/m3+saNWHy46wXzFCVIQFgaH63Xpv3zb5CfHZGyp2GxS/oh GrKwkhDL/Lddw2dnZ+gNMYatAcnLI/vh/eUDdw3JRq/ALq/EyKWWtOt732G3L+ga ZHLkosqp1toCKzI7R9tyJ2ir6ta4y/PxxEHsYPuyWKWZNwoCR/mHHyKzCUaqg0Uq -----END CERTIFICATE-----Generated at Mon Sep 21 13:18:56 2026 by rpki-client