$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft File: 12797d33-d775-45fc-9d2a-a3e7bbe51152.mft (raw, json) Hash identifier: Z8DnZGm+uVHpB8/enuBuLCm9A7V+B6yFdZMYd/szC5w= Subject key identifier: D4:19:FD:4D:A9:F5:54:A2:F9:D6:84:F8:83:9F:3E:00:81:69:DC:32 Authority key identifier: 9E:FA:EF:7E:45:43:9E:B6:9C:B0:84:8E:C2:07:C7:A4:26:5B:71:81 Certificate issuer: /CN=12797d33-d775-45fc-9d2a-a3e7bbe51152 Certificate serial: 010D0C9F4328584F45071869E2F5BA1E47C4E700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft Manifest number: 010D0C9F4328584073A84F6DF615383F4872A99A Signing time: Wed 23 Sep 2026 11:00:23 +0000 Manifest this update: Wed 23 Sep 2026 11:00:23 +0000 Manifest next update: Sat 26 Sep 2026 11:00:00 +0000 Files and hashes: 1: 12797d33-d775-45fc-9d2a-a3e7bbe51152.crl (hash: DvzEZ5+4EoknDt0wBWkcPvPJfxRrq+4/8c1o9tBUt7Q=) 2: 4ea5dc75-2190-35f3-bd26-725aff932395.roa (hash: U3joA6PN98DJ2fDmLBrzgmLd0tv/dhbQvoURVykd9AU=) 3: 5d993454-0791-3f69-942d-d641d50ae8c7.roa (hash: CQ0XV3gHMd4dDsy87sxDZmWQ/9U9eZqtbP/8xhPq+zU=) 4: f09c3f26-10f7-3b2f-b86c-9b92161da077.roa (hash: QCUzm/kqJzAEODvcOHYqLKN6ycEFzZ06HopoaR0yQXI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:07:18:69:e2:f5:ba:1e:47:c4:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12797d33-d775-45fc-9d2a-a3e7bbe51152 Validity Not Before: Sep 23 11:00:23 2026 GMT Not After : Sep 26 11:00:00 2026 GMT Subject: CN=3a1920d3-058f-4479-9005-89b09577bfec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0b:22:be:6c:61:00:45:ec:30:9f:a1:32:06: ba:2a:3e:2c:cb:ac:7b:a2:dd:53:6a:2e:cb:49:ce: b0:20:3f:ca:ff:48:04:ea:04:ab:78:f4:a9:f6:84: 14:f7:3c:b4:b2:29:4a:8d:52:62:a6:a6:a5:89:75: c9:6c:f8:2c:29:35:8f:b6:5c:5a:58:df:ec:4e:c5: e9:fc:1b:97:cd:6f:63:60:6e:fb:3a:01:b8:5e:4e: 64:1e:6f:8b:e8:9a:b8:16:70:25:16:8a:e0:99:98: 31:c1:94:b2:d1:ed:08:15:98:7b:b1:88:45:f3:1f: b9:f0:23:60:9e:4a:88:d2:43:8f:d9:2e:43:9e:ba: a1:1a:6c:91:c4:3e:b3:7e:d2:bd:1a:db:9e:ae:5a: 61:be:81:d3:d8:2c:67:ef:a7:06:95:f2:61:52:86: 5e:14:b5:94:73:1a:27:5f:7a:a8:25:98:10:b8:db: 33:40:97:f1:a2:bc:4c:26:be:54:44:74:92:5b:a4: fd:2b:45:4f:50:0f:ec:74:2a:58:48:52:2b:4b:cf: c5:4d:d2:6b:0a:b6:d8:01:2d:6f:34:e0:ef:85:f9: fa:2b:af:22:b6:37:37:7d:db:d8:41:23:18:86:17: e8:44:ca:dc:96:fb:59:5b:88:ff:8c:0d:79:7f:26: 2b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:19:FD:4D:A9:F5:54:A2:F9:D6:84:F8:83:9F:3E:00:81:69:DC:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.crl X509v3 Authority Key Identifier: keyid:9E:FA:EF:7E:45:43:9E:B6:9C:B0:84:8E:C2:07:C7:A4:26:5B:71:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:13:30:18:0a:d0:38:9d:52:fc:37:82:91:fe:1b:9f:09:2e: ff:23:29:4c:34:1f:37:51:9a:65:4f:61:fd:3f:69:10:e9:df: aa:20:8d:e3:67:4b:02:56:96:69:39:9f:1a:89:d3:f3:a6:1b: e4:8f:86:f9:3a:70:46:53:40:ac:49:3f:3a:29:27:dd:99:9b: 42:28:a2:bd:41:44:ac:14:6c:ed:90:c1:a8:f3:e7:2c:9b:b1: 46:e7:02:93:18:20:b4:e0:88:02:fb:5f:84:65:5a:96:7d:7e: e8:3f:08:e4:58:8f:15:db:e0:a9:1c:5e:19:0d:10:ea:9a:9e: b5:3e:29:26:a0:7e:50:ac:b3:d5:0e:60:31:8d:1d:42:7a:af: b8:63:a6:ff:89:84:f9:d6:a6:d8:3c:61:e6:9d:00:db:4f:80: e4:89:60:c0:01:77:f8:3d:94:ca:95:35:72:1b:6d:81:f1:c2: 5a:7a:17:32:a8:f8:2d:29:76:70:ae:45:9a:2f:f5:fb:74:6f: 47:61:a7:cd:0c:1a:3c:71:85:a7:d4:6b:bf:00:f4:37:a3:dd: 6a:0f:fd:70:af:bb:ef:73:11:06:e5:61:31:99:91:79:6e:95: 5c:fa:92:b2:27:2e:8f:86:51:4b:b8:82:b8:7a:0b:8d:88:29: 4c:28:5a:0d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9FBxhp4vW6HkfE5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI3OTdkMzMtZDc3NS00NWZjLTlkMmEtYTNlN2JiZTUx MTUyMB4XDTI2MDkyMzExMDAyM1oXDTI2MDkyNjExMDAwMFowLzEtMCsGA1UEAxMk M2ExOTIwZDMtMDU4Zi00NDc5LTkwMDUtODliMDk1NzdiZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwsivmxhAEXsMJ+hMga6Kj4sy6x7ot1Tai7L Sc6wID/K/0gE6gSrePSp9oQU9zy0silKjVJipqaliXXJbPgsKTWPtlxaWN/sTsXp /BuXzW9jYG77OgG4Xk5kHm+L6Jq4FnAlForgmZgxwZSy0e0IFZh7sYhF8x+58CNg nkqI0kOP2S5DnrqhGmyRxD6zftK9GtuerlphvoHT2Cxn76cGlfJhUoZeFLWUcxon X3qoJZgQuNszQJfxorxMJr5URHSSW6T9K0VPUA/sdCpYSFIrS8/FTdJrCrbYAS1v NODvhfn6K68itjc3fdvYQSMYhhfoRMrclvtZW4j/jA15fyYrgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNQZ/U2p9VSi+daE+IOfPgCBadwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMjc5 N2QzMy1kNzc1LTQ1ZmMtOWQyYS1hM2U3YmJlNTExNTIvMTI3OTdkMzMtZDc3NS00 NWZjLTlkMmEtYTNlN2JiZTUxMTUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTI3OTdkMzMtZDc3NS00NWZjLTlk MmEtYTNlN2JiZTUxMTUyLzEyNzk3ZDMzLWQ3NzUtNDVmYy05ZDJhLWEzZTdiYmU1 MTE1Mi5jcmwwHwYDVR0jBBgwFoAUnvrvfkVDnracsISOwgfHpCZbcYEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMjc5N2QzMy1kNzc1LTQ1ZmMtOWQyYS1hM2U3 YmJlNTExNTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUEzAYCtA4nVL8N4KR/huf CS7/IylMNB83UZplT2H9P2kQ6d+qII3jZ0sCVpZpOZ8aidPzphvkj4b5OnBGU0Cs ST86KSfdmZtCKKK9QUSsFGztkMGo8+csm7FG5wKTGCC04IgC+1+EZVqWfX7oPwjk WI8V2+CpHF4ZDRDqmp61PikmoH5QrLPVDmAxjR1Ceq+4Y6b/iYT51qbYPGHmnQDb T4DkiWDAAXf4PZTKlTVyG22B8cJaehcyqPgtKXZwrkWaL/X7dG9HYafNDBo8cYWn 1Gu/APQ3o91qD/1wr7vvcxEG5WExmZF5bpVc+pKyJy6PhlFLuIK4eguNiClMKFoN -----END CERTIFICATE-----Generated at Thu Sep 24 09:46:16 2026 by rpki-client