$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.mft File: 4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.mft (raw, json) Hash identifier: kZuxlsD/yfWdemlrhthkvGMDoiFsuhy3AgQWRY6Xzs0= Subject key identifier: B7:BD:2E:78:30:E4:6B:40:3F:D4:0C:F9:6B:DA:14:44:AB:5E:9A:5F Authority key identifier: EA:EA:34:E3:0A:39:B4:E9:DA:6C:77:2D:5D:2C:1E:06:68:E6:B0:F7 Certificate issuer: /CN=4ab620dc-8a2e-4e97-b3cd-f95f8317bdef Certificate serial: 010D0C9F4328584FD75C822CABDB6679A35FFA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.mft Manifest number: 010D0C9F4328584DAEACA7CEA1AD0003D7F4CDD3 Signing time: Sat 14 Nov 2026 21:00:26 +0000 Manifest this update: Sat 14 Nov 2026 21:00:26 +0000 Manifest next update: Tue 17 Nov 2026 21:00:00 +0000 Files and hashes: 1: 0d82ebbc-ac29-3456-9be7-2c6fc8b240af.roa (hash: NvDL8BL2WGNkdCaFGaP9hXIlRwFVrYyVgm69VkgwAC4=) 2: 4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.crl (hash: BIqRozZU2RONzQ6Umbb+OlfqRrcFCS+7VcpLCqzIs30=) 3: a0c9abd3-ad95-3318-9bae-d90ac27f5096.roa (hash: 8lAj/csFiUb5vd6hZy/vGxP7Jt0Xvgxr0AhJEjMg7aI=) 4: ada64c84-e0db-3030-900c-6b5364f63872.asa (hash: 8/GAkpgjjBslvxUSdeA/r00SdeeY/Q0fdb99WuLa/hQ=) 5: ce929f7a-e7ef-3e6c-99b0-adc2ae953bcc.roa (hash: luUoNaYQfMyTp63obvVFJCV7nMk8X1GPHrFWLkPdcm0=) 6: e184cf88-3810-3c49-bf5d-d5964990d5d1.roa (hash: YhNrZ17JTCtErBeAYRp2BTACC+D//LOh/L0K0a4JJ3w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d7:5c:82:2c:ab:db:66:79:a3:5f:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab620dc-8a2e-4e97-b3cd-f95f8317bdef Validity Not Before: Nov 14 21:00:26 2026 GMT Not After : Nov 17 21:00:00 2026 GMT Subject: CN=2d7f4a9d-a781-4b2f-be7f-ec05b8693425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c1:09:75:b5:43:d7:71:f8:95:b1:b4:2c:91: 58:4a:c2:bd:e3:fb:3e:a5:21:fa:f7:59:79:09:1d: 70:0e:d7:0d:4c:6b:80:49:af:69:8c:92:f0:40:cf: 5c:25:ed:df:f6:25:fb:13:1f:80:c4:52:08:9b:14: f0:ab:4b:8a:e9:06:d9:00:db:a3:5e:64:99:fb:fe: fe:f0:13:08:3d:c6:26:83:51:7a:f7:70:19:c0:18: 1c:26:d2:6f:33:7f:4f:b4:a6:50:91:61:97:91:32: cb:ce:57:2a:c4:cf:37:47:d0:c7:3d:b1:30:ad:fc: db:e7:42:16:00:00:b2:14:db:50:f5:5d:9b:bd:46: d5:de:b9:d7:54:ec:ec:0f:a2:62:e2:aa:3f:c4:22: c3:21:51:4e:fb:ff:55:7a:16:08:f4:4b:c8:08:01: d5:ec:11:d0:86:46:18:c3:a3:0f:c9:45:d0:c4:9e: de:07:f1:c9:03:17:f1:b5:fb:f8:34:8d:1a:10:d3: e0:71:ed:69:12:98:84:a4:e8:da:18:d2:41:e6:ef: a4:d9:dd:2f:6d:e8:d2:5b:c0:f7:a1:69:93:db:a8: 7b:a6:47:58:92:bd:36:e2:86:f6:a3:04:c1:00:d6: cc:7e:5b:e2:3f:85:7a:02:70:86:d0:c8:1e:fe:22: 78:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BD:2E:78:30:E4:6B:40:3F:D4:0C:F9:6B:DA:14:44:AB:5E:9A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.crl X509v3 Authority Key Identifier: keyid:EA:EA:34:E3:0A:39:B4:E9:DA:6C:77:2D:5D:2C:1E:06:68:E6:B0:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:0c:3b:cd:83:5c:20:b1:b6:4a:5f:b7:6f:3a:82:79:f7:86: f0:0d:62:2e:cc:46:a8:68:26:b7:5b:b7:ea:39:80:25:59:b0: 15:79:6d:46:1b:7d:6d:8d:be:c0:27:43:d8:d7:70:55:d7:5f: 93:59:91:de:79:98:61:20:68:89:d7:87:b1:7c:ad:a5:03:d8: 26:b2:08:b8:e7:6c:80:fa:81:20:cd:96:00:7b:80:db:86:7a: 73:ae:7c:cd:2c:df:06:d2:41:d8:00:bc:3d:c8:13:67:a9:1a: 67:57:de:66:25:ac:6d:2f:e3:44:cb:0a:b2:7a:68:1b:4c:f2: 92:d7:28:48:52:7a:06:54:6a:21:6f:4a:82:0a:53:1d:40:9f: 4e:25:eb:5c:d9:8d:1f:5d:f3:11:c3:61:15:16:b1:ee:23:e8: 27:38:fe:55:92:ca:34:9f:c6:be:85:88:8f:c9:2b:34:8d:ef: 3a:68:24:62:83:a3:18:28:b0:a4:8c:42:69:cf:40:a9:74:fa: b2:be:82:bf:0d:01:93:5e:be:1f:4e:03:f2:da:cf:05:66:b1: a8:a9:07:04:c4:c1:e7:a1:7a:56:de:55:60:be:76:19:c0:e4: 5b:ba:0e:c6:83:29:73:2f:a2:ea:2a:9b:7d:5c:2f:6d:09:5e: 82:7a:52:4f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/XXIIsq9tmeaNf+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiNjIwZGMtOGEyZS00ZTk3LWIzY2QtZjk1ZjgzMTdi ZGVmMB4XDTI2MTExNDIxMDAyNloXDTI2MTExNzIxMDAwMFowLzEtMCsGA1UEAxMk MmQ3ZjRhOWQtYTc4MS00YjJmLWJlN2YtZWMwNWI4NjkzNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MEJdbVD13H4lbG0LJFYSsK94/s+pSH691l5 CR1wDtcNTGuASa9pjJLwQM9cJe3f9iX7Ex+AxFIImxTwq0uK6QbZANujXmSZ+/7+ 8BMIPcYmg1F693AZwBgcJtJvM39PtKZQkWGXkTLLzlcqxM83R9DHPbEwrfzb50IW AACyFNtQ9V2bvUbV3rnXVOzsD6Ji4qo/xCLDIVFO+/9VehYI9EvICAHV7BHQhkYY w6MPyUXQxJ7eB/HJAxfxtfv4NI0aENPgce1pEpiEpOjaGNJB5u+k2d0vbejSW8D3 oWmT26h7pkdYkr024ob2owTBANbMflviP4V6AnCG0Mge/iJ4UwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLe9Lngw5GtAP9QM+WvaFESrXppfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80YWI2 MjBkYy04YTJlLTRlOTctYjNjZC1mOTVmODMxN2JkZWYvNGFiNjIwZGMtOGEyZS00 ZTk3LWIzY2QtZjk1ZjgzMTdiZGVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNGFiNjIwZGMtOGEyZS00ZTk3LWIz Y2QtZjk1ZjgzMTdiZGVmLzRhYjYyMGRjLThhMmUtNGU5Ny1iM2NkLWY5NWY4MzE3 YmRlZi5jcmwwHwYDVR0jBBgwFoAU6uo04wo5tOnabHctXSweBmjmsPcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80YWI2MjBkYy04YTJlLTRlOTctYjNjZC1mOTVm ODMxN2JkZWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkDDvNg1wgsbZKX7dvOoJ5 94bwDWIuzEaoaCa3W7fqOYAlWbAVeW1GG31tjb7AJ0PY13BV11+TWZHeeZhhIGiJ 14exfK2lA9gmsgi452yA+oEgzZYAe4DbhnpzrnzNLN8G0kHYALw9yBNnqRpnV95m JaxtL+NEywqyemgbTPKS1yhIUnoGVGohb0qCClMdQJ9OJetc2Y0fXfMRw2EVFrHu I+gnOP5Vkso0n8a+hYiPySs0je86aCRig6MYKLCkjEJpz0CpdPqyvoK/DQGTXr4f TgPy2s8FZrGoqQcExMHnoXpW3lVgvnYZwORbug7GgylzL6LqKpt9XC9tCV6CelJP -----END CERTIFICATE-----Generated at Sun Nov 15 15:51:51 2026 by rpki-client