$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/423661c1-1874-440d-9de8-948e2ed69ebe.mft File: 423661c1-1874-440d-9de8-948e2ed69ebe.mft (raw, json) Hash identifier: DMNEm6wIG5LJ5pU+kqIaxnlBkK8SgViojGnL7FMl1a8= Subject key identifier: 82:AC:23:28:27:C9:BD:FB:31:5F:B2:E4:A9:70:05:00:69:2D:EC:E6 Authority key identifier: 30:65:5F:DE:52:15:DB:5B:65:78:83:A5:C4:75:C5:FB:E9:CD:4C:6E Certificate issuer: /CN=423661c1-1874-440d-9de8-948e2ed69ebe Certificate serial: 010D0C9F4328584F4DC082CD483E61DBF34B2440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/423661c1-1874-440d-9de8-948e2ed69ebe.mft Manifest number: 010D0C9F4328584E5DB191719F84F152094BD459 Signing time: Sat 26 Sep 2026 14:00:24 +0000 Manifest this update: Sat 26 Sep 2026 14:00:24 +0000 Manifest next update: Tue 29 Sep 2026 14:00:00 +0000 Files and hashes: 1: 423661c1-1874-440d-9de8-948e2ed69ebe.crl (hash: 9dfYoemEqDibqUpM+I9SIN5YJqSCd4vKgnPUaEiNFKY=) 2: 815c3afd-92c5-39a7-8fba-0297b1e1cc99.roa (hash: XdUqICW/xMd7EnMyy9qktxsxJw5vlzY9r/lYaCMWEHw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/423661c1-1874-440d-9de8-948e2ed69ebe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/423661c1-1874-440d-9de8-948e2ed69ebe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:c0:82:cd:48:3e:61:db:f3:4b:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=423661c1-1874-440d-9de8-948e2ed69ebe Validity Not Before: Sep 26 14:00:24 2026 GMT Not After : Sep 29 14:00:00 2026 GMT Subject: CN=bf9c76f1-7405-4341-a589-a6572084d475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:07:72:f9:47:f0:6e:c8:2a:06:be:69:82: 62:a6:ee:bc:96:70:73:21:e1:0a:0b:d2:89:e2:9f: 31:e4:ac:6a:c4:35:7d:2d:bb:3a:35:b2:dd:72:87: 86:c2:1b:67:83:a4:d4:8d:4a:d6:d1:84:1c:30:d4: af:fd:fa:95:5d:88:19:0d:5c:eb:c7:3f:15:3f:8c: fa:47:c3:23:b6:04:5a:97:90:ab:54:d7:09:97:9b: a8:aa:f5:1a:8a:ae:7c:59:a7:e3:83:0d:d0:35:c9: c8:1a:e3:87:61:0c:f9:87:df:1e:2a:15:8e:57:4c: f5:c3:a6:2f:c2:ee:c7:77:5e:98:50:f6:f4:1f:50: 63:79:7b:ef:02:1b:5f:3f:7c:4d:f8:cc:c9:3a:a9: b6:95:f3:d2:83:e9:af:85:66:17:6c:93:1a:56:30: 1c:8b:1c:14:54:13:df:54:4f:6c:f7:7d:10:c5:44: 5f:e9:f7:13:f0:94:25:98:02:57:56:5c:42:75:f3: 59:89:19:3f:8c:5b:b4:22:a7:ce:60:05:4b:11:50: 98:13:cc:b0:9d:5e:6d:02:7d:d3:58:48:ea:94:c8: 1a:4d:8b:c7:ab:c9:4f:70:0b:b8:f8:b5:96:00:14: 77:10:2f:b3:5a:9d:c3:a1:b8:85:2a:93:cf:a2:21: 98:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AC:23:28:27:C9:BD:FB:31:5F:B2:E4:A9:70:05:00:69:2D:EC:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/423661c1-1874-440d-9de8-948e2ed69ebe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe/423661c1-1874-440d-9de8-948e2ed69ebe.crl X509v3 Authority Key Identifier: keyid:30:65:5F:DE:52:15:DB:5B:65:78:83:A5:C4:75:C5:FB:E9:CD:4C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/423661c1-1874-440d-9de8-948e2ed69ebe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:fe:71:8f:5a:97:db:2c:31:84:63:99:10:ff:64:0c:04:ae: b4:53:c0:68:f6:17:92:6a:3b:c4:e2:97:f7:0e:43:4e:05:a9: 41:45:b2:8a:d5:85:8c:d9:e4:4c:00:59:d3:2b:a5:f6:25:4c: e7:a9:b1:f4:8e:6e:23:0c:88:ca:c1:60:c8:c0:e2:b9:e3:63: 2d:80:ce:b7:44:22:38:37:b6:19:82:5b:20:73:fa:cc:ae:fc: 20:24:c4:3f:34:2d:5d:2a:70:98:1e:4d:25:c6:13:7d:30:d5: ed:ff:41:62:0b:71:94:fc:82:4a:ef:23:a4:2d:de:d6:24:bc: 70:01:f8:49:11:ad:53:17:88:20:58:03:f0:28:c8:2c:e3:ec: 6e:77:92:77:a7:bb:1f:0f:4c:2c:62:36:ae:0a:84:ae:8d:f5: 7d:31:24:e9:dc:7d:da:41:fe:11:e3:ef:5b:25:d1:27:14:a7: 1f:79:3f:77:68:b5:8e:60:76:29:e7:3d:17:1d:53:c2:3b:d1: 44:20:e2:a7:e7:a3:f3:9f:9a:0c:be:26:01:83:5f:80:1a:93: 01:29:1d:c3:a2:eb:fe:08:21:eb:6f:27:fa:ce:cc:d4:34:d9: e6:48:4c:38:bd:97:8c:87:78:ea:19:93:19:43:ea:ce:43:af: ab:9f:67:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9NwILNSD5h2/NLJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIzNjYxYzEtMTg3NC00NDBkLTlkZTgtOTQ4ZTJlZDY5 ZWJlMB4XDTI2MDkyNjE0MDAyNFoXDTI2MDkyOTE0MDAwMFowLzEtMCsGA1UEAxMk YmY5Yzc2ZjEtNzQwNS00MzQxLWE1ODktYTY1NzIwODRkNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxwHcvlH8G7IKga+aYJipu68lnBzIeEKC9KJ 4p8x5KxqxDV9Lbs6NbLdcoeGwhtng6TUjUrW0YQcMNSv/fqVXYgZDVzrxz8VP4z6 R8MjtgRal5CrVNcJl5uoqvUaiq58Wafjgw3QNcnIGuOHYQz5h98eKhWOV0z1w6Yv wu7Hd16YUPb0H1BjeXvvAhtfP3xN+MzJOqm2lfPSg+mvhWYXbJMaVjAcixwUVBPf VE9s930QxURf6fcT8JQlmAJXVlxCdfNZiRk/jFu0IqfOYAVLEVCYE8ywnV5tAn3T WEjqlMgaTYvHq8lPcAu4+LWWABR3EC+zWp3DobiFKpPPoiGYkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIKsIygnyb37MV+y5KlwBQBpLezmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80MjM2 NjFjMS0xODc0LTQ0MGQtOWRlOC05NDhlMmVkNjllYmUvNDIzNjYxYzEtMTg3NC00 NDBkLTlkZTgtOTQ4ZTJlZDY5ZWJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDIzNjYxYzEtMTg3NC00NDBkLTlk ZTgtOTQ4ZTJlZDY5ZWJlLzQyMzY2MWMxLTE4NzQtNDQwZC05ZGU4LTk0OGUyZWQ2 OWViZS5jcmwwHwYDVR0jBBgwFoAUMGVf3lIV21tleIOlxHXF++nNTG4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80MjM2NjFjMS0xODc0LTQ0MGQtOWRlOC05NDhl MmVkNjllYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBg/nGPWpfbLDGEY5kQ/2QM BK60U8Bo9heSajvE4pf3DkNOBalBRbKK1YWM2eRMAFnTK6X2JUznqbH0jm4jDIjK wWDIwOK542MtgM63RCI4N7YZglsgc/rMrvwgJMQ/NC1dKnCYHk0lxhN9MNXt/0Fi C3GU/IJK7yOkLd7WJLxwAfhJEa1TF4ggWAPwKMgs4+xud5J3p7sfD0wsYjauCoSu jfV9MSTp3H3aQf4R4+9bJdEnFKcfeT93aLWOYHYp5z0XHVPCO9FEIOKn56Pzn5oM viYBg1+AGpMBKR3Douv+CCHrbyf6zszUNNnmSEw4vZeMh3jqGZMZQ+rOQ6+rn2fK -----END CERTIFICATE-----Generated at Sun Sep 27 00:41:15 2026 by rpki-client