$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft File: e35c7007-7a33-480f-a32e-40481f8f1792.mft (raw, json) Hash identifier: GTJnxbgWbUvSjmN2I5eVLQyj9DLVfPC2f9GEyd807PU= Subject key identifier: 61:95:25:D2:6A:B5:87:1A:38:7B:F6:8C:8A:00:38:E9:D9:ED:B4:84 Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC Certificate issuer: /CN=e35c7007-7a33-480f-a32e-40481f8f1792 Certificate serial: 010D0C9F4328584F409B8175C960C74945782F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft Manifest number: 010D0C9F4328584073A828D6B15D74B5AB65F355 Signing time: Mon 21 Sep 2026 21:00:22 +0000 Manifest this update: Mon 21 Sep 2026 21:00:22 +0000 Manifest next update: Wed 23 Sep 2026 21:00:00 +0000 Files and hashes: 1: 0ce0c169-ef1f-32ec-967d-086703bd7584.roa (hash: sCd+d2bmxarkgXxiEdf0tzBmfzY22L0hxaIeGBYSmIc=) 2: 14f2a9f3-f45d-3130-a7b0-514fb7251684.roa (hash: lAUamxi1pOkq2IAVC2ySof92Iso+VCJO13FTByGD4Vw=) 3: 2c8c6ad3-e963-3175-a096-858ac3ef6191.roa (hash: LMJ/LeOc9g1474KU/aRdAKe08uPclG9lbT6VKxLit3Q=) 4: 5388bc64-7e00-3aef-b50b-4426eee59515.roa (hash: jp767eK1jmwoHXRdkoayME/Ac9mXXLwdGTPpWd8X1ds=) 5: 715a79b8-7d6d-38c6-aaad-3e50a6ebe785.roa (hash: oYia0bT5uCAyQAyzBZe+uRMUbixWJF7e8vgXVgAKG08=) 6: a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa (hash: s8YmLLGI6+EdTuWtLUpvTq9bGErN8jGHfiMlveskcD4=) 7: e35c7007-7a33-480f-a32e-40481f8f1792.crl (hash: TkD/5CS7YaQm9WYBxcXd3Uz5s2jEdic73FMOtBLT1hY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:9b:81:75:c9:60:c7:49:45:78:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792 Validity Not Before: Sep 21 21:00:22 2026 GMT Not After : Sep 23 21:00:00 2026 GMT Subject: CN=d285cd62-bd69-4041-b6bf-e5155b23b8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c6:8c:13:8a:0d:d3:67:de:e8:bd:f3:f1:d2: 3a:7e:41:bd:bf:27:52:bd:82:90:ac:16:b4:12:cc: ee:5c:95:b9:f8:ab:6f:24:c4:89:96:4e:fe:43:df: 74:73:70:64:38:ef:80:4c:cb:23:07:75:63:f1:40: ef:75:a6:2d:90:2c:ae:29:a9:6f:69:57:c7:a4:0d: 10:ec:96:96:c0:b1:43:5e:8b:41:9d:36:ef:43:c2: f9:3f:31:07:a3:32:5b:7a:9c:8f:9c:98:94:c9:82: 18:83:4f:e5:6d:d5:03:6d:a7:68:e5:db:e3:c9:8b: c5:6a:08:1e:a5:10:43:d7:e9:30:d1:c9:f1:2d:b5: b6:c8:f7:da:dc:26:28:51:84:c4:08:4a:7f:82:c3: 24:18:2d:17:e1:36:23:5a:55:3b:ac:71:98:6d:50: 05:97:a9:1d:b1:9f:70:1b:99:9b:19:c3:36:a4:5e: 61:82:9b:ca:30:53:9f:38:bd:16:4f:91:77:2e:83: 3a:30:43:90:50:ae:4b:fd:0d:5b:d8:6d:f8:61:0a: a1:32:85:33:a8:db:c6:ef:78:93:9f:0c:82:05:99: 44:68:37:be:e9:c9:ab:ce:ce:92:eb:b2:32:13:67: cf:cf:3c:ef:81:56:b1:39:bb:aa:93:56:cd:76:d3: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:95:25:D2:6A:B5:87:1A:38:7B:F6:8C:8A:00:38:E9:D9:ED:B4:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl X509v3 Authority Key Identifier: keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:77:05:3d:3f:9a:31:dd:55:a9:ac:45:19:1f:09:3e:53:56: eb:3c:fd:4d:c8:c9:0f:6a:d5:f3:c6:b6:ca:af:9e:78:df:69: d6:1c:45:02:07:3b:db:0e:54:7b:9d:2d:c9:19:07:7f:da:76: e2:a6:b9:4e:45:4d:d8:40:a3:15:61:46:54:b3:dc:72:aa:84: b6:b1:48:16:ec:fb:58:7b:bd:9c:eb:18:39:e9:b4:93:6b:26: 88:cf:db:8b:d9:7d:b1:47:e0:70:07:f2:02:f0:17:1d:fc:37: de:a1:15:db:e6:71:43:40:3c:a5:dc:db:01:8f:d4:4a:c2:f3: 22:c9:9c:50:0c:88:d7:fb:39:a7:2a:61:a0:5a:96:c1:5c:ee: 1a:a5:79:03:54:e8:1c:a8:72:b3:fc:4c:28:4f:af:f5:d5:dd: 74:9f:42:d9:06:4f:c9:af:c0:d9:6d:ca:0d:14:f6:f2:63:18: 42:f2:02:63:ca:da:26:b1:41:5d:e2:ab:9a:6b:fc:2f:85:f8: 0a:5d:50:56:3c:93:8f:09:ee:86:be:9a:09:71:f5:ec:5a:44: 6c:78:4b:a1:c6:a4:61:42:27:1d:36:31:7d:52:e8:47:f8:8d: 36:45:88:09:40:c6:4a:b9:d0:4e:81:08:f8:c2:9c:be:a5:34: d5:ac:f3:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Am4F1yWDHSUV4LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM1YzcwMDctN2EzMy00ODBmLWEzMmUtNDA0ODFmOGYx NzkyMB4XDTI2MDkyMTIxMDAyMloXDTI2MDkyMzIxMDAwMFowLzEtMCsGA1UEAxMk ZDI4NWNkNjItYmQ2OS00MDQxLWI2YmYtZTUxNTViMjNiOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8aME4oN02fe6L3z8dI6fkG9vydSvYKQrBa0 EszuXJW5+KtvJMSJlk7+Q990c3BkOO+ATMsjB3Vj8UDvdaYtkCyuKalvaVfHpA0Q 7JaWwLFDXotBnTbvQ8L5PzEHozJbepyPnJiUyYIYg0/lbdUDbado5dvjyYvFagge pRBD1+kw0cnxLbW2yPfa3CYoUYTECEp/gsMkGC0X4TYjWlU7rHGYbVAFl6kdsZ9w G5mbGcM2pF5hgpvKMFOfOL0WT5F3LoM6MEOQUK5L/Q1b2G34YQqhMoUzqNvG73iT nwyCBZlEaDe+6cmrzs6S67IyE2fPzzzvgVaxObuqk1bNdtN74wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGGVJdJqtYcaOHv2jIoAOOnZ7bSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVj NzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4ZjE3OTIvZTM1YzcwMDctN2EzMy00 ODBmLWEzMmUtNDA0ODFmOGYxNzkyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTM1YzcwMDctN2EzMy00ODBmLWEz MmUtNDA0ODFmOGYxNzkyL2UzNWM3MDA3LTdhMzMtNDgwZi1hMzJlLTQwNDgxZjhm MTc5Mi5jcmwwHwYDVR0jBBgwFoAUacWTs8tKT2vyxx4ZsnpmhbrC6uwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4 MWY4ZjE3OTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWdwU9P5ox3VWprEUZHwk+ U1brPP1NyMkPatXzxrbKr55432nWHEUCBzvbDlR7nS3JGQd/2nbiprlORU3YQKMV YUZUs9xyqoS2sUgW7PtYe72c6xg56bSTayaIz9uL2X2xR+BwB/IC8Bcd/DfeoRXb 5nFDQDyl3NsBj9RKwvMiyZxQDIjX+zmnKmGgWpbBXO4apXkDVOgcqHKz/EwoT6/1 1d10n0LZBk/Jr8DZbcoNFPbyYxhC8gJjytomsUFd4quaa/wvhfgKXVBWPJOPCe6G vpoJcfXsWkRseEuhxqRhQicdNjF9UuhH+I02RYgJQMZKudBOgQj4wpy+pTTVrPMy -----END CERTIFICATE-----Generated at Tue Sep 22 17:42:48 2026 by rpki-client