$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft File: cb00fdf5-e28b-4e9d-9620-9504972438e2.mft (raw, json) Hash identifier: 8q/pVFHLSnlDjriAsG0gnjP7ewoEuD8XXtyUmY1HUtk= Subject key identifier: D3:32:59:EF:28:25:69:E1:6A:EC:57:D1:25:DD:49:0F:E4:58:9A:AE Authority key identifier: 49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C Certificate issuer: /CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Certificate serial: 010D0C9F4328584F3D005C88B41DF6A0F8D8C780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft Manifest number: 010D0C9F4328584A89D04070D903DD88600D0C39 Signing time: Sun 20 Sep 2026 14:00:22 +0000 Manifest this update: Sun 20 Sep 2026 14:00:22 +0000 Manifest next update: Tue 22 Sep 2026 14:00:00 +0000 Files and hashes: 1: 8e87b93f-f077-3393-9870-dbc62c961c83.roa (hash: WQgJpg5pZ5j//kCWYsTUK1dWdH0Dw7Aj8vrXFKnHV/M=) 2: cb00fdf5-e28b-4e9d-9620-9504972438e2.crl (hash: gePHwhZXtfEkwowhTc2FX8weQnPdAViZSPQnX5HQ+xk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3d:00:5c:88:b4:1d:f6:a0:f8:d8:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Validity Not Before: Sep 20 14:00:22 2026 GMT Not After : Sep 22 14:00:00 2026 GMT Subject: CN=287ad153-bae2-4979-9fed-fdcebd2e25b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:92:c3:5c:15:83:e1:af:d0:bc:ff:e6:ca:1e: 8f:6a:64:07:72:75:8a:1b:48:80:bb:65:2b:ba:e4: b2:30:fd:ce:9c:f0:3a:13:06:c2:7d:e2:99:b4:a0: 49:eb:0c:c0:77:a2:6f:5f:38:05:43:95:b4:79:98: 10:2c:17:a0:e5:ad:80:db:ea:98:41:a0:78:6a:00: a1:c0:72:63:45:16:f3:a6:b6:f9:b2:97:9f:5d:06: 92:a5:35:e9:37:df:b8:93:1d:e6:49:bc:6b:f8:60: df:72:7b:8e:3e:57:4e:c8:a5:c1:52:5a:3e:b4:96: 7f:97:20:ff:96:0e:08:78:2b:7d:f4:e6:6d:c2:65: fa:52:07:1a:d0:09:a6:84:60:40:6b:41:63:f0:3e: 2b:b3:40:38:dc:08:ab:08:7e:af:5d:fe:76:b0:1b: e6:81:c5:0d:1c:76:dd:78:b4:fe:c9:d7:e8:b0:75: 3e:af:3d:e8:99:70:0b:d2:a4:46:92:cd:e1:0a:85: 9c:db:03:be:1d:b5:81:a7:b5:5d:02:d5:67:11:21: 6e:4a:ad:76:2a:54:61:b7:07:2a:2c:fc:0f:91:09: fc:eb:3f:f2:42:55:b1:c2:2d:ac:9c:c6:ac:64:ad: 55:63:f5:22:f6:b7:b2:39:b0:f2:a7:83:3a:b7:49: 04:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:32:59:EF:28:25:69:E1:6A:EC:57:D1:25:DD:49:0F:E4:58:9A:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl X509v3 Authority Key Identifier: keyid:49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:21:e0:97:8e:36:cf:2c:c9:60:5b:66:32:e4:7f:80:10:6d: 9a:da:cc:ee:ed:22:36:c0:53:6b:8b:fa:e5:ea:e1:37:da:67: a6:4a:77:b9:ce:e0:3a:39:7f:5b:65:08:9c:9d:ca:f2:99:93: db:c4:64:2a:8a:e2:a4:87:c9:7c:25:ea:0e:92:2d:59:52:c2: 77:45:55:af:4c:5e:e6:9b:fd:3b:b2:11:90:18:24:ab:e5:09: c1:89:15:7b:2a:89:d1:44:59:43:2a:c4:df:50:2c:d0:49:2c: 5b:d7:49:98:ca:31:e8:ac:56:9b:f3:ec:d5:66:b6:45:02:21: b5:e2:d2:39:07:11:1a:bd:90:b4:80:93:aa:e8:e3:ad:bb:b7: 62:dc:ec:ca:c8:88:6b:ad:5b:b9:6f:77:71:a3:72:7a:64:14: 4e:06:71:36:a0:29:65:a9:e6:4f:fa:34:7e:85:09:a2:f7:d7: ad:2e:35:68:a6:35:6b:d5:1f:82:5a:2c:61:61:7e:13:7e:0a: 99:62:19:73:54:ec:29:03:46:23:17:a4:6b:4b:e6:38:6f:0f: 3a:2d:d4:47:92:43:f4:82:8d:7a:04:cd:1b:c3:b4:12:d6:ec: be:8d:f3:48:81:bb:bb:c8:00:5f:df:d4:2b:71:02:6d:90:6d: 91:f1:41:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE89AFyItB32oPjYx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwMGZkZjUtZTI4Yi00ZTlkLTk2MjAtOTUwNDk3MjQz OGUyMB4XDTI2MDkyMDE0MDAyMloXDTI2MDkyMjE0MDAwMFowLzEtMCsGA1UEAxMk Mjg3YWQxNTMtYmFlMi00OTc5LTlmZWQtZmRjZWJkMmUyNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJLDXBWD4a/QvP/myh6PamQHcnWKG0iAu2Ur uuSyMP3OnPA6EwbCfeKZtKBJ6wzAd6JvXzgFQ5W0eZgQLBeg5a2A2+qYQaB4agCh wHJjRRbzprb5spefXQaSpTXpN9+4kx3mSbxr+GDfcnuOPldOyKXBUlo+tJZ/lyD/ lg4IeCt99OZtwmX6Ugca0AmmhGBAa0Fj8D4rs0A43AirCH6vXf52sBvmgcUNHHbd eLT+ydfosHU+rz3omXAL0qRGks3hCoWc2wO+HbWBp7VdAtVnESFuSq12KlRhtwcq LPwPkQn86z/yQlWxwi2snMasZK1VY/Ui9reyObDyp4M6t0kESwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNMyWe8oJWnhauxX0SXdSQ/kWJquMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAw ZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0OTcyNDM4ZTIvY2IwMGZkZjUtZTI4Yi00 ZTlkLTk2MjAtOTUwNDk3MjQzOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwMGZkZjUtZTI4Yi00ZTlkLTk2 MjAtOTUwNDk3MjQzOGUyL2NiMDBmZGY1LWUyOGItNGU5ZC05NjIwLTk1MDQ5NzI0 MzhlMi5jcmwwHwYDVR0jBBgwFoAUSQg4xK2zZNCjDdT3tkAvyShQuIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAwZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0 OTcyNDM4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCIeCXjjbPLMlgW2Yy5H+A EG2a2szu7SI2wFNri/rl6uE32memSne5zuA6OX9bZQicncrymZPbxGQqiuKkh8l8 JeoOki1ZUsJ3RVWvTF7mm/07shGQGCSr5QnBiRV7KonRRFlDKsTfUCzQSSxb10mY yjHorFab8+zVZrZFAiG14tI5BxEavZC0gJOq6OOtu7di3OzKyIhrrVu5b3dxo3J6 ZBROBnE2oCllqeZP+jR+hQmi99etLjVopjVr1R+CWixhYX4TfgqZYhlzVOwpA0Yj F6RrS+Y4bw86LdRHkkP0go16BM0bw7QS1uy+jfNIgbu7yABf39QrcQJtkG2R8UEU -----END CERTIFICATE-----Generated at Mon Sep 21 07:21:57 2026 by rpki-client