$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft File: 2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft (raw, json) Hash identifier: jC35Okge482k1BTNl20/zNclVj9TKm4A6YppWHblKXk= Subject key identifier: E1:BF:24:41:3D:63:AE:7D:F6:27:41:DC:47:E6:44:B2:5B:09:87:F1 Authority key identifier: 0D:E9:A2:3A:3C:19:17:08:EE:9B:09:41:29:66:81:70:CB:E2:0F:37 Certificate issuer: /CN=2fa99450-94b8-4a0e-be53-8ce7f88d51db Certificate serial: 010D0C9F4328584F51D3B20ED0F6F3A33193A940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft Manifest number: 010D0C9F4328584A8CC4A9824E40400F2C2AA3A1 Signing time: Mon 28 Sep 2026 01:02:22 +0000 Manifest this update: Mon 28 Sep 2026 01:02:22 +0000 Manifest next update: Tue 29 Sep 2026 16:00:00 +0000 Files and hashes: 1: 06acc10b-bae5-3cff-b7b6-ec7871adffb5.roa (hash: ZyCOTxQx+JsJfoCxk5aMByQA8Nx3goykLYt0ehy5ixQ=) 2: 2fa99450-94b8-4a0e-be53-8ce7f88d51db.crl (hash: 3xkzpwjJ5uTtTYr3gj6HrQPxfZ6IMcwdsTAGwKymCE4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d3:b2:0e:d0:f6:f3:a3:31:93:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa99450-94b8-4a0e-be53-8ce7f88d51db Validity Not Before: Sep 28 01:02:22 2026 GMT Not After : Sep 29 16:00:00 2026 GMT Subject: CN=bc42e3ab-39a1-4300-986c-7c643917352d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6c:ff:74:35:82:c8:f6:0f:f8:23:06:4d:38: 94:e3:1b:74:c3:73:1a:f8:90:04:e5:b4:c9:d4:b3: e1:ef:c9:03:e7:05:4c:34:8b:c9:8a:ce:56:56:85: 6f:cd:e7:52:23:f8:f6:0f:35:f0:cd:b9:1f:b8:6a: 36:f3:33:38:8e:12:f9:0c:5d:8c:af:2a:30:00:bb: c8:ab:dc:4f:37:83:bd:53:e6:4d:a8:3d:90:28:4d: 67:33:4b:11:66:99:b1:80:be:d3:85:58:57:13:ec: 7f:cf:cf:ee:b4:ad:4b:a2:cb:47:8a:a5:39:7b:5f: 6e:f6:0e:76:4b:62:a7:ed:e1:b3:0c:a0:1a:86:3f: 50:87:25:7b:92:7a:8d:5a:17:56:81:0b:ef:b5:8d: 2a:6a:ab:d1:23:d5:49:8d:c0:0d:16:8e:10:2b:84: b9:a6:29:c3:c7:df:db:5f:d6:c1:c2:43:d9:b5:0d: 9c:6d:96:33:4e:d1:36:4e:76:94:9d:76:bb:87:dd: c9:82:5b:9a:79:a3:3f:44:b9:bb:14:2b:2d:87:03: e0:90:ea:b6:d0:b1:70:46:dd:a9:5e:7f:fe:0e:e1: 1b:9e:bf:e2:dd:73:e6:de:64:14:06:6d:d0:17:9b: c6:e5:76:b0:b4:d6:44:5a:88:1f:d4:b2:5c:a7:ec: b2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BF:24:41:3D:63:AE:7D:F6:27:41:DC:47:E6:44:B2:5B:09:87:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.crl X509v3 Authority Key Identifier: keyid:0D:E9:A2:3A:3C:19:17:08:EE:9B:09:41:29:66:81:70:CB:E2:0F:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:eb:18:a0:06:0f:cf:ef:18:62:50:8e:6a:d1:bf:4b:3a:c2: c2:fc:8c:2f:0b:66:5d:4c:51:ff:8f:4f:89:54:22:f8:fe:8a: 0c:3b:45:e0:16:87:4d:39:bd:42:32:ea:6c:de:c6:43:35:85: 09:ce:67:96:ef:4a:5c:ad:71:36:63:bf:36:40:2e:40:ce:5b: 21:b3:48:ee:81:37:9e:57:9a:ac:df:e8:b4:b8:8c:dc:22:a4: 56:b7:6e:7f:85:d6:da:8a:bc:17:42:4b:dd:db:1b:b7:8b:8a: c3:d3:4d:7c:aa:3e:38:5c:7f:8e:53:47:3a:ea:21:6e:0d:b9: 0a:0c:d4:82:b2:3c:cd:7c:90:85:99:1b:db:81:94:13:fb:a4: 0d:85:ba:16:c6:17:8e:33:11:ef:40:ec:ce:f9:78:db:2f:47: 29:f9:12:a8:77:08:32:79:99:4e:35:d9:ec:3a:7b:90:4c:f3: a6:0a:b3:ca:5c:40:19:00:ff:43:70:c8:ba:bf:92:a3:d7:7b: 1d:80:91:b2:3b:7a:12:e3:6c:f5:03:ee:d1:9d:91:4c:8d:51: 91:02:8a:25:28:e6:6a:1f:75:ff:31:dd:5b:f9:a1:1b:9c:db: 3e:ef:a2:c9:87:a3:7a:e8:9c:51:75:8a:b7:e2:6c:fd:4b:3c: f3:c2:e0:53 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9R07IO0PbzozGTqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZhOTk0NTAtOTRiOC00YTBlLWJlNTMtOGNlN2Y4OGQ1 MWRiMB4XDTI2MDkyODAxMDIyMloXDTI2MDkyOTE2MDAwMFowLzEtMCsGA1UEAxMk YmM0MmUzYWItMzlhMS00MzAwLTk4NmMtN2M2NDM5MTczNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGz/dDWCyPYP+CMGTTiU4xt0w3Ma+JAE5bTJ 1LPh78kD5wVMNIvJis5WVoVvzedSI/j2DzXwzbkfuGo28zM4jhL5DF2MryowALvI q9xPN4O9U+ZNqD2QKE1nM0sRZpmxgL7ThVhXE+x/z8/utK1LostHiqU5e19u9g52 S2Kn7eGzDKAahj9QhyV7knqNWhdWgQvvtY0qaqvRI9VJjcANFo4QK4S5pinDx9/b X9bBwkPZtQ2cbZYzTtE2TnaUnXa7h93JgluaeaM/RLm7FCsthwPgkOq20LFwRt2p Xn/+DuEbnr/i3XPm3mQUBm3QF5vG5XawtNZEWogf1LJcp+yyOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOG/JEE9Y6599idB3EfmRLJbCYfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZmE5 OTQ1MC05NGI4LTRhMGUtYmU1My04Y2U3Zjg4ZDUxZGIvMmZhOTk0NTAtOTRiOC00 YTBlLWJlNTMtOGNlN2Y4OGQ1MWRiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmZhOTk0NTAtOTRiOC00YTBlLWJl NTMtOGNlN2Y4OGQ1MWRiLzJmYTk5NDUwLTk0YjgtNGEwZS1iZTUzLThjZTdmODhk NTFkYi5jcmwwHwYDVR0jBBgwFoAUDemiOjwZFwjumwlBKWaBcMviDzcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZmE5OTQ1MC05NGI4LTRhMGUtYmU1My04Y2U3 Zjg4ZDUxZGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA06xigBg/P7xhiUI5q0b9L OsLC/IwvC2ZdTFH/j0+JVCL4/ooMO0XgFodNOb1CMups3sZDNYUJzmeW70pcrXE2 Y782QC5Azlshs0jugTeeV5qs3+i0uIzcIqRWt25/hdbairwXQkvd2xu3i4rD0018 qj44XH+OU0c66iFuDbkKDNSCsjzNfJCFmRvbgZQT+6QNhboWxheOMxHvQOzO+Xjb L0cp+RKodwgyeZlONdnsOnuQTPOmCrPKXEAZAP9DcMi6v5Kj13sdgJGyO3oS42z1 A+7RnZFMjVGRAoolKOZqH3X/Md1b+aEbnNs+76LJh6N66JxRdYq34mz9SzzzwuBT -----END CERTIFICATE-----Generated at Mon Sep 28 14:48:18 2026 by rpki-client