$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft File: 681d813c-8566-4f01-b8f3-989dcf8d983e.mft (raw, json) Hash identifier: Ew+tHzjsTYJ4lJW4YifJakE0Ol8KnxT1Hmg2wHSgsNQ= Subject key identifier: F2:BB:39:C6:F5:26:F8:27:45:30:7B:2F:22:DC:D4:59:B1:2E:A9:1A Authority key identifier: 99:A5:0D:75:63:4A:1E:EF:E7:CD:0B:9D:7A:DA:64:0F:FD:82:38:71 Certificate issuer: /CN=681d813c-8566-4f01-b8f3-989dcf8d983e Certificate serial: 010D0C9F4328584F48A23479B3444E18FBD92DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft Manifest number: 010D0C9F4328584DBF038A7EB1FDDA5706A7E711 Signing time: Thu 24 Sep 2026 18:00:23 +0000 Manifest this update: Thu 24 Sep 2026 18:00:23 +0000 Manifest next update: Sat 26 Sep 2026 18:00:00 +0000 Files and hashes: 1: 681d813c-8566-4f01-b8f3-989dcf8d983e.crl (hash: nZFWDMArLXPBy/Z/ONSTboIoD+YEp2J51gm4LfXZDXs=) 2: bd41b623-bbc6-3d69-adb3-afa7f5e7d9db.roa (hash: YyP9nPXC4nCxeZIG6KpdM+v6SBb3jARghXye5Qbizp0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:a2:34:79:b3:44:4e:18:fb:d9:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681d813c-8566-4f01-b8f3-989dcf8d983e Validity Not Before: Sep 24 18:00:23 2026 GMT Not After : Sep 26 18:00:00 2026 GMT Subject: CN=a31cae12-c788-4495-9929-8f8021329998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:a2:0b:e1:9f:33:b8:5a:b7:78:04:44:2d: 77:6d:03:63:f2:03:2c:8d:a9:bd:3a:41:cd:c1:2f: f6:e4:23:5e:a6:95:73:57:7d:6b:b4:34:6c:e3:48: 6b:b9:bd:6e:86:81:eb:06:a0:5d:9a:bf:e2:19:89: 67:a2:cb:4f:36:f1:e6:84:c6:64:ed:90:3b:c2:60: 8e:3a:08:d2:dd:c4:6e:49:bd:fa:48:89:d2:5a:4e: 4f:d1:26:03:45:a5:b3:e9:10:f0:39:d0:6e:c7:a0: 7c:a0:fa:c1:3e:01:5f:9e:98:01:bf:c7:d8:51:72: 53:46:5e:1c:ab:ed:7e:f2:d4:89:9b:02:a1:c4:d7: fa:49:b5:36:e2:5b:ec:a0:8a:5f:bc:11:2f:b0:4f: e4:89:9e:8b:0c:9c:a5:4b:58:54:4e:df:6d:26:57: b8:dc:79:47:e7:53:51:d0:1e:e7:4b:07:87:65:2e: b9:c1:5c:f8:aa:27:d4:3d:8b:e4:e1:de:75:bf:8f: 0c:b3:44:b8:53:02:39:9a:33:17:bd:c5:f6:dc:cd: b8:6d:96:31:3d:07:1c:28:20:8c:ca:25:02:e4:13: d5:ec:07:13:83:d0:f7:36:08:51:1d:63:71:0c:22: 58:64:69:7f:e8:80:97:d5:c1:16:d4:b4:bb:69:fd: 26:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BB:39:C6:F5:26:F8:27:45:30:7B:2F:22:DC:D4:59:B1:2E:A9:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.crl X509v3 Authority Key Identifier: keyid:99:A5:0D:75:63:4A:1E:EF:E7:CD:0B:9D:7A:DA:64:0F:FD:82:38:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:52:4e:2a:76:89:66:3e:dc:8b:a7:a4:bc:3a:8d:cf:81:c3: 27:db:0f:7d:e6:b9:50:f1:3e:fa:a8:75:b6:4e:37:43:80:7c: e0:2f:ca:a7:a6:db:40:02:f4:9d:9d:76:ef:06:22:82:08:6a: f1:54:67:8a:ca:bb:1f:4f:46:74:0e:39:6f:70:40:2b:68:a1: 1c:98:09:bf:93:a5:7a:26:0d:44:e4:bc:ba:6b:7c:a7:45:ae: ed:20:c0:d8:1d:0e:f5:32:ef:d8:76:79:be:4a:57:3a:df:2b: 4c:67:8e:9c:96:5f:5f:9b:c9:e8:e0:b6:68:17:5c:8a:44:2f: bd:13:dd:f1:46:4e:78:0b:f5:34:d5:b1:fa:c1:44:e5:66:6a: 0b:85:00:d1:15:97:d4:c8:b1:09:78:aa:bc:1a:ea:39:76:2a: 6c:4c:58:9d:06:6d:96:0c:48:38:d2:f0:0d:41:69:1b:e3:62: 6d:17:d0:90:f9:cc:fb:ba:a6:3d:cb:e4:0d:c3:38:ba:f9:64: 48:e0:96:a7:43:b2:c5:50:f1:5e:53:93:a9:74:e7:79:16:28: ef:28:7c:06:f1:ad:8f:cc:83:0e:51:44:87:58:a1:56:3f:49: ae:24:3b:34:52:0e:a8:e7:61:c7:6e:b2:3a:4a:90:ae:37:3e: 2d:ad:ee:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9IojR5s0ROGPvZLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjgxZDgxM2MtODU2Ni00ZjAxLWI4ZjMtOTg5ZGNmOGQ5 ODNlMB4XDTI2MDkyNDE4MDAyM1oXDTI2MDkyNjE4MDAwMFowLzEtMCsGA1UEAxMk YTMxY2FlMTItYzc4OC00NDk1LTk5MjktOGY4MDIxMzI5OTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzryiC+GfM7hat3gERC13bQNj8gMsjam9OkHN wS/25CNeppVzV31rtDRs40hrub1uhoHrBqBdmr/iGYlnostPNvHmhMZk7ZA7wmCO OgjS3cRuSb36SInSWk5P0SYDRaWz6RDwOdBux6B8oPrBPgFfnpgBv8fYUXJTRl4c q+1+8tSJmwKhxNf6SbU24lvsoIpfvBEvsE/kiZ6LDJylS1hUTt9tJle43HlH51NR 0B7nSweHZS65wVz4qifUPYvk4d51v48Ms0S4UwI5mjMXvcX23M24bZYxPQccKCCM yiUC5BPV7AcTg9D3NghRHWNxDCJYZGl/6ICX1cEW1LS7af0mPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPK7Ocb1JvgnRTB7LyLc1FmxLqkaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82ODFk ODEzYy04NTY2LTRmMDEtYjhmMy05ODlkY2Y4ZDk4M2UvNjgxZDgxM2MtODU2Ni00 ZjAxLWI4ZjMtOTg5ZGNmOGQ5ODNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjgxZDgxM2MtODU2Ni00ZjAxLWI4 ZjMtOTg5ZGNmOGQ5ODNlLzY4MWQ4MTNjLTg1NjYtNGYwMS1iOGYzLTk4OWRjZjhk OTgzZS5jcmwwHwYDVR0jBBgwFoAUmaUNdWNKHu/nzQudetpkD/2COHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82ODFkODEzYy04NTY2LTRmMDEtYjhmMy05ODlk Y2Y4ZDk4M2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeUk4qdolmPtyLp6S8Oo3P gcMn2w995rlQ8T76qHW2TjdDgHzgL8qnpttAAvSdnXbvBiKCCGrxVGeKyrsfT0Z0 DjlvcEAraKEcmAm/k6V6Jg1E5Ly6a3ynRa7tIMDYHQ71Mu/Ydnm+Slc63ytMZ46c ll9fm8no4LZoF1yKRC+9E93xRk54C/U01bH6wUTlZmoLhQDRFZfUyLEJeKq8Guo5 dipsTFidBm2WDEg40vANQWkb42JtF9CQ+cz7uqY9y+QNwzi6+WRI4JanQ7LFUPFe U5OpdOd5FijvKHwG8a2PzIMOUUSHWKFWP0muJDs0Ug6o52HHbrI6SpCuNz4tre6h -----END CERTIFICATE-----Generated at Thu Sep 24 22:27:04 2026 by rpki-client