$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.mft File: 0ca7346d-fe29-4c44-aeef-2693f005a12d.mft (raw, json) Hash identifier: pqKktbrMIfBe2frBjn0H4Iy1j62CGksGQn2P3PbntYM= Subject key identifier: 11:50:98:97:5F:FE:7D:39:EC:D4:62:C4:22:ED:57:8B:B0:B8:9F:6E Authority key identifier: 41:81:00:FB:EF:F6:A6:ED:EC:6F:04:F6:40:65:7A:B4:9A:B1:BE:C3 Certificate issuer: /CN=0ca7346d-fe29-4c44-aeef-2693f005a12d Certificate serial: 010D0C9F4328584F457E32C88423F0ACFC4B2480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.mft Manifest number: 010D0C9F4328584E5B158E8A451412CA23AF0C55 Signing time: Wed 23 Sep 2026 15:00:23 +0000 Manifest this update: Wed 23 Sep 2026 15:00:23 +0000 Manifest next update: Sat 26 Sep 2026 15:00:00 +0000 Files and hashes: 1: 0ca7346d-fe29-4c44-aeef-2693f005a12d.crl (hash: yiZB9I7A0/kr2LTY4A87FPFnvgLGfMpk8bEtxMkpvy0=) 2: 0fa69968-fdce-37b5-a023-28d1f3870b91.roa (hash: ecMtnuMsuNheNB3dGf9oMP/pweJjehlW+4ZTyCCEOJ0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:7e:32:c8:84:23:f0:ac:fc:4b:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ca7346d-fe29-4c44-aeef-2693f005a12d Validity Not Before: Sep 23 15:00:23 2026 GMT Not After : Sep 26 15:00:00 2026 GMT Subject: CN=d546154d-98d2-4a6e-9a30-afb109d06ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bd:86:79:01:e2:34:e3:1c:66:61:b9:93:4f: 76:ed:dc:c8:6a:de:3d:bb:3c:92:67:c2:9c:6c:45: 7c:94:f1:8c:94:bb:04:d7:cd:f1:3e:89:2f:5a:70: 0e:a0:4b:45:95:21:5c:ae:a8:c6:8a:0d:69:4a:7f: a9:98:26:fc:39:69:f7:80:c6:09:ca:1a:e8:bd:43: 5e:9c:32:2d:97:7b:2c:61:de:1f:ef:7c:cf:48:75: 49:29:b9:bf:eb:92:9e:32:11:7c:34:12:06:54:8f: f1:2b:05:cd:b9:23:d2:99:37:37:6b:ec:18:aa:1c: 43:e0:12:9a:97:5f:3e:30:9e:64:9d:41:9f:0f:57: 8f:6b:89:85:ea:02:37:6b:41:53:ed:e7:c9:b6:1d: 2a:00:d3:70:e7:9b:2b:10:23:12:8d:9d:be:44:a3: 75:af:24:b1:4c:8d:b8:49:37:12:59:91:df:8e:3c: 53:5c:bf:b6:13:02:c5:62:cc:fb:ce:26:97:1a:e1: 16:ca:f5:07:83:4e:05:5d:fc:7e:c4:ad:8b:f7:40: f3:3c:d4:f8:b9:33:5d:9d:33:ce:50:a4:5d:48:9a: c6:c4:73:e7:c7:75:11:57:ef:ab:fd:87:92:b8:63: da:97:b6:93:a2:2e:9e:37:14:36:67:d8:10:6a:11: f3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:50:98:97:5F:FE:7D:39:EC:D4:62:C4:22:ED:57:8B:B0:B8:9F:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.crl X509v3 Authority Key Identifier: keyid:41:81:00:FB:EF:F6:A6:ED:EC:6F:04:F6:40:65:7A:B4:9A:B1:BE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:67:c9:cb:2b:b2:6a:2a:87:28:35:13:89:dc:e8:af:fd:92: 26:da:5f:f9:22:32:47:d3:52:25:c5:f9:ae:34:8d:7e:70:81: e0:52:90:6f:a8:f0:4c:06:ec:cf:cb:88:e4:64:9c:10:3f:f1: 50:24:30:0e:97:67:41:ce:0b:a0:ff:8e:87:6d:8e:b3:17:29: d4:fa:00:33:c2:df:ce:97:5d:d9:64:a8:d0:a8:81:05:d3:04: 16:19:95:02:ce:cb:a4:ac:51:bb:28:7b:bc:75:ab:e3:2e:75: 2d:98:a4:d1:b0:6e:f7:6c:1f:6f:9b:c0:53:9f:cf:e8:9c:a4: 96:97:50:19:2f:95:43:4f:0c:d5:ef:55:31:9e:89:93:1f:41: fc:77:73:4c:1d:58:87:09:7a:f2:2c:7b:94:02:75:4e:d1:ef: ba:6b:f0:5f:fe:a2:50:80:cd:b2:05:22:cd:8e:ca:14:7b:b2: 26:06:bc:70:e2:9c:56:ce:35:c0:a4:36:9c:4b:55:62:31:33: 19:48:70:3e:ad:67:07:5e:68:2b:5e:94:4c:e9:56:af:7c:a0: 40:3b:2e:d9:fc:73:01:cb:f0:ba:3b:ab:e2:3c:fe:a1:2e:8b: c6:c3:f1:82:86:94:8f:77:84:9d:ca:9c:d9:11:c9:41:cf:9e: cc:3f:98:7e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9FfjLIhCPwrPxLJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNhNzM0NmQtZmUyOS00YzQ0LWFlZWYtMjY5M2YwMDVh MTJkMB4XDTI2MDkyMzE1MDAyM1oXDTI2MDkyNjE1MDAwMFowLzEtMCsGA1UEAxMk ZDU0NjE1NGQtOThkMi00YTZlLTlhMzAtYWZiMTA5ZDA2ZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb2GeQHiNOMcZmG5k0927dzIat49uzySZ8Kc bEV8lPGMlLsE183xPokvWnAOoEtFlSFcrqjGig1pSn+pmCb8OWn3gMYJyhrovUNe nDItl3ssYd4f73zPSHVJKbm/65KeMhF8NBIGVI/xKwXNuSPSmTc3a+wYqhxD4BKa l18+MJ5knUGfD1ePa4mF6gI3a0FT7efJth0qANNw55srECMSjZ2+RKN1rySxTI24 STcSWZHfjjxTXL+2EwLFYsz7ziaXGuEWyvUHg04FXfx+xK2L90DzPNT4uTNdnTPO UKRdSJrGxHPnx3URV++r/YeSuGPal7aToi6eNxQ2Z9gQahHzrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBFQmJdf/n057NRixCLtV4uwuJ9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wY2E3 MzQ2ZC1mZTI5LTRjNDQtYWVlZi0yNjkzZjAwNWExMmQvMGNhNzM0NmQtZmUyOS00 YzQ0LWFlZWYtMjY5M2YwMDVhMTJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMGNhNzM0NmQtZmUyOS00YzQ0LWFl ZWYtMjY5M2YwMDVhMTJkLzBjYTczNDZkLWZlMjktNGM0NC1hZWVmLTI2OTNmMDA1 YTEyZC5jcmwwHwYDVR0jBBgwFoAUQYEA++/2pu3sbwT2QGV6tJqxvsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wY2E3MzQ2ZC1mZTI5LTRjNDQtYWVlZi0yNjkz ZjAwNWExMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVZ8nLK7JqKocoNROJ3Oiv /ZIm2l/5IjJH01IlxfmuNI1+cIHgUpBvqPBMBuzPy4jkZJwQP/FQJDAOl2dBzgug /46HbY6zFynU+gAzwt/Ol13ZZKjQqIEF0wQWGZUCzsukrFG7KHu8davjLnUtmKTR sG73bB9vm8BTn8/onKSWl1AZL5VDTwzV71UxnomTH0H8d3NMHViHCXryLHuUAnVO 0e+6a/Bf/qJQgM2yBSLNjsoUe7ImBrxw4pxWzjXApDacS1ViMTMZSHA+rWcHXmgr XpRM6VavfKBAOy7Z/HMBy/C6O6viPP6hLovGw/GChpSPd4SdypzZEclBz57MP5h+ -----END CERTIFICATE-----Generated at Wed Sep 23 19:44:39 2026 by rpki-client