$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/21732a88-a633-4eb1-af32-60e5e0e1082e.mft File: 21732a88-a633-4eb1-af32-60e5e0e1082e.mft (raw, json) Hash identifier: Qb47t+O72im46Qj0H2bdBCi2YHjYiTKm47RC95yNXVg= Subject key identifier: 0E:42:B2:E1:6D:1E:24:96:F7:42:4B:9A:80:C4:2D:29:C0:5A:F1:A8 Authority key identifier: 4D:F1:90:12:40:73:2C:5D:DC:39:67:AD:C1:9B:29:46:E7:C6:56:B2 Certificate issuer: /CN=21732a88-a633-4eb1-af32-60e5e0e1082e Certificate serial: 010D0C9F4328584F67B11F7BC289A2641C55F4A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/21732a88-a633-4eb1-af32-60e5e0e1082e.mft Manifest number: 010D0C9F4328584E7212C57E6D88413E8E3664F1 Signing time: Mon 05 Oct 2026 21:00:24 +0000 Manifest this update: Mon 05 Oct 2026 21:00:24 +0000 Manifest next update: Thu 08 Oct 2026 21:00:00 +0000 Files and hashes: 1: 21732a88-a633-4eb1-af32-60e5e0e1082e.crl (hash: i3sCkTwquG8LVxc8gffgKqfUL7Re/Qww37NRFDuIdrU=) 2: 3007964c-cd8a-3105-8337-e66286af91ee.asa (hash: L77FQZ7YGw6iHN3CV3B4mZJW3wIHaiTG7tEn+Wumzbk=) 3: 7d3dcf77-088d-36e6-8449-c065fc8400b6.asa (hash: hIwSgNJNz2ce7uSZN2Gd+ataeb4p7Tba/ob9PUcIGFw=) 4: 923e61cc-df16-3897-a731-3f8adcb8327f.roa (hash: L8BeF7PeXoMVIumCfA8hfJ7/KFhCoMX8ppuhnHz0SqM=) 5: a60234c3-31b1-3bbe-9f20-c72c5ed4ec72.roa (hash: YKIAi89o6rhNutKbhqZM8fEqdwbei3DviJjt14zimCc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/21732a88-a633-4eb1-af32-60e5e0e1082e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/21732a88-a633-4eb1-af32-60e5e0e1082e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:b1:1f:7b:c2:89:a2:64:1c:55:f4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21732a88-a633-4eb1-af32-60e5e0e1082e Validity Not Before: Oct 5 21:00:24 2026 GMT Not After : Oct 8 21:00:00 2026 GMT Subject: CN=4e1e600f-b468-4c5b-a828-11668a370fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:9c:a7:8e:55:51:8c:8b:cf:c1:c3:72:5d: f6:0a:e3:b0:15:a9:4b:c7:b6:1e:9c:44:e5:ab:f5: a5:0e:3d:fe:83:68:15:51:89:4d:8a:d1:81:6b:f9: 59:ea:7c:83:bc:28:c4:c2:9d:fb:14:a7:4e:4c:dd: 7f:bc:9e:d5:86:38:5d:39:3a:37:75:24:13:9b:23: 22:01:84:84:5e:61:11:dc:79:4d:23:36:bb:f2:e0: 59:ea:e1:fb:62:9d:94:26:e2:3c:8a:c5:7a:3c:c4: 24:7b:2c:5d:79:61:3c:c8:a9:e1:07:28:12:95:fe: 59:d5:6e:e4:a5:14:bb:fe:5f:33:41:80:fa:5f:31: e8:a1:8b:b8:54:56:66:59:3d:04:90:97:e1:60:89: c0:ed:39:d9:59:63:b3:bb:1c:8c:bd:ee:ea:2a:70: a7:57:98:7f:e7:87:8b:60:41:6b:84:5d:4e:5d:39: e3:3b:a7:46:f1:4c:ac:99:2a:53:a5:ae:99:9e:06: bd:5d:31:5b:36:4e:15:87:d5:4a:c5:ac:4b:ac:01: b8:fd:52:af:fc:1c:11:e5:d3:13:4b:b7:20:cb:61: 52:77:c8:d3:25:9f:dc:a2:80:7c:0a:44:66:fa:46: 32:d6:b0:92:d5:73:d5:55:1e:b2:6b:d0:54:0c:d3: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:42:B2:E1:6D:1E:24:96:F7:42:4B:9A:80:C4:2D:29:C0:5A:F1:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/21732a88-a633-4eb1-af32-60e5e0e1082e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/21732a88-a633-4eb1-af32-60e5e0e1082e.crl X509v3 Authority Key Identifier: keyid:4D:F1:90:12:40:73:2C:5D:DC:39:67:AD:C1:9B:29:46:E7:C6:56:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a1:ac:3f:27:1a:a5:c7:77:b7:3a:6c:40:60:33:19:32:e9: a0:32:8a:6a:c7:97:e6:74:a1:bf:89:cb:33:4d:d8:70:39:14: c3:d0:17:c5:bb:af:57:b1:dc:ea:5f:ac:58:40:ab:ea:41:6f: f2:79:5e:0a:b4:09:09:68:df:7e:d6:fc:20:79:e1:67:e2:bb: 38:13:c3:bb:eb:ae:26:3c:99:42:c4:0f:ce:7c:c3:05:b0:35: fe:dd:c9:91:4f:ed:4c:c5:70:3b:f3:2e:63:d8:7f:21:a3:6a: 3c:18:f3:8f:da:66:36:b8:16:04:f3:af:e5:e2:74:9b:64:04: 0e:54:d8:cc:91:eb:04:50:77:fd:7a:7e:d8:91:e3:12:10:1e: 52:67:dd:21:37:ae:8e:30:8d:a6:2e:c0:29:15:ea:9c:cb:d9: 00:83:6d:bd:d2:56:23:8f:e3:bc:f8:17:48:03:18:24:bc:6a: 9e:18:03:7e:dd:1b:fc:51:c3:ef:57:c7:b6:17:e2:f9:1d:49: 2b:4a:ee:59:38:62:13:01:7f:20:40:45:c9:7d:31:01:b6:ef: 4f:f1:62:e9:4a:ce:b6:ef:14:0f:e1:e9:3c:80:24:f6:93:f3: 90:fc:12:be:d0:76:d7:d2:4a:80:e6:cc:8e:cd:46:2f:25:c5: 0a:4e:65:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9nsR97womiZBxV9KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE3MzJhODgtYTYzMy00ZWIxLWFmMzItNjBlNWUwZTEw ODJlMB4XDTI2MTAwNTIxMDAyNFoXDTI2MTAwODIxMDAwMFowLzEtMCsGA1UEAxMk NGUxZTYwMGYtYjQ2OC00YzViLWE4MjgtMTE2NjhhMzcwZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWucp45VUYyLz8HDcl32CuOwFalLx7YenETl q/WlDj3+g2gVUYlNitGBa/lZ6nyDvCjEwp37FKdOTN1/vJ7VhjhdOTo3dSQTmyMi AYSEXmER3HlNIza78uBZ6uH7Yp2UJuI8isV6PMQkeyxdeWE8yKnhBygSlf5Z1W7k pRS7/l8zQYD6XzHooYu4VFZmWT0EkJfhYInA7TnZWWOzuxyMve7qKnCnV5h/54eL YEFrhF1OXTnjO6dG8UysmSpTpa6Znga9XTFbNk4Vh9VKxaxLrAG4/VKv/BwR5dMT S7cgy2FSd8jTJZ/cooB8CkRm+kYy1rCS1XPVVR6ya9BUDNOyxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA5CsuFtHiSW90JLmoDELSnAWvGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yMTcz MmE4OC1hNjMzLTRlYjEtYWYzMi02MGU1ZTBlMTA4MmUvMjE3MzJhODgtYTYzMy00 ZWIxLWFmMzItNjBlNWUwZTEwODJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjE3MzJhODgtYTYzMy00ZWIxLWFm MzItNjBlNWUwZTEwODJlLzIxNzMyYTg4LWE2MzMtNGViMS1hZjMyLTYwZTVlMGUx MDgyZS5jcmwwHwYDVR0jBBgwFoAUTfGQEkBzLF3cOWetwZspRufGVrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yMTczMmE4OC1hNjMzLTRlYjEtYWYzMi02MGU1 ZTBlMTA4MmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnoaw/Jxqlx3e3OmxAYDMZ MumgMopqx5fmdKG/icszTdhwORTD0BfFu69XsdzqX6xYQKvqQW/yeV4KtAkJaN9+ 1vwgeeFn4rs4E8O7664mPJlCxA/OfMMFsDX+3cmRT+1MxXA78y5j2H8ho2o8GPOP 2mY2uBYE86/l4nSbZAQOVNjMkesEUHf9en7YkeMSEB5SZ90hN66OMI2mLsApFeqc y9kAg2290lYjj+O8+BdIAxgkvGqeGAN+3Rv8UcPvV8e2F+L5HUkrSu5ZOGITAX8g QEXJfTEBtu9P8WLpSs627xQP4ek8gCT2k/OQ/BK+0HbX0kqA5syOzUYvJcUKTmVz -----END CERTIFICATE-----Generated at Tue Oct 6 20:35:39 2026 by rpki-client