$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/7b3f3998-8e70-47c2-94e8-307a39db87d5.mft File: 7b3f3998-8e70-47c2-94e8-307a39db87d5.mft (raw, json) Hash identifier: XrAfoNcnPm4Pd6C7TVbIpsRQ0ia5+z1q9u7LheEgEZM= Subject key identifier: 28:43:3B:60:01:57:07:C7:58:B7:E5:A7:38:DA:99:B1:D5:BB:10:D1 Authority key identifier: 10:AF:4A:6F:F0:86:60:37:47:CA:9A:A5:06:6F:4F:42:78:36:F5:3E Certificate issuer: /CN=7b3f3998-8e70-47c2-94e8-307a39db87d5 Certificate serial: 010D0C9F4328584F520E548B75A021466C3F3F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/7b3f3998-8e70-47c2-94e8-307a39db87d5.mft Manifest number: 010D0C9F4328584E08BC5C742086CB6BFB2EA1BA Signing time: Mon 28 Sep 2026 03:00:25 +0000 Manifest this update: Mon 28 Sep 2026 03:00:25 +0000 Manifest next update: Thu 01 Oct 2026 03:00:00 +0000 Files and hashes: 1: 01fcde38-7bee-3e19-9f58-fcf7f7971734.roa (hash: Ci9nZFMnGGbmTa0IN7q5WXv9BAN39SZ4YqfwWr+ZINc=) 2: 7b3f3998-8e70-47c2-94e8-307a39db87d5.crl (hash: rg+qg7o7BHEksx3nZMY1LeF2DzfBW1qpm67fdaMWmRU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/7b3f3998-8e70-47c2-94e8-307a39db87d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/7b3f3998-8e70-47c2-94e8-307a39db87d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:52:0e:54:8b:75:a0:21:46:6c:3f:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b3f3998-8e70-47c2-94e8-307a39db87d5 Validity Not Before: Sep 28 03:00:25 2026 GMT Not After : Oct 1 03:00:00 2026 GMT Subject: CN=9e1beabf-17ca-4b2f-8bee-0aa3faf91cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:89:bc:bb:36:c8:fe:8a:d8:04:8d:02:35:40: f1:17:b7:08:93:b6:a3:20:e7:c2:99:83:9f:f4:15: 73:2d:96:0e:25:28:9c:82:fc:20:5d:5f:b6:5a:27: 41:42:a6:6d:f7:d0:89:d6:21:30:67:77:7a:3f:61: 58:06:71:60:2a:f5:73:85:89:96:eb:c2:71:5b:58: c7:36:8a:df:84:93:e4:27:81:b2:83:b8:3a:f0:9f: 48:a0:53:85:85:c8:6b:76:94:ac:c8:27:1b:99:95: b5:a3:89:44:ad:11:24:08:26:28:7f:8d:67:a4:ad: f9:b4:45:31:20:b1:e7:17:57:cb:c3:25:1e:e4:86: 2d:9e:00:74:2d:5b:d7:b0:ac:4c:3f:6c:89:63:e4: 26:f3:90:1e:db:85:2d:b0:b3:8c:c8:12:42:d4:9e: f5:8d:d4:6f:c9:d0:fd:da:8f:ac:95:7c:2d:88:f9: 1f:9a:f6:e8:66:4d:0f:8b:03:1c:3a:2b:69:b1:3f: 99:65:ed:a1:c0:de:46:ba:83:19:c7:7c:41:de:13: 4b:44:20:89:21:cd:70:66:dd:22:ee:05:56:b5:e2: 46:18:d9:ef:66:68:8f:63:aa:16:d3:75:09:b9:4d: d2:10:b2:da:72:37:de:89:b4:92:ae:3e:24:4e:36: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:43:3B:60:01:57:07:C7:58:B7:E5:A7:38:DA:99:B1:D5:BB:10:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/7b3f3998-8e70-47c2-94e8-307a39db87d5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/7b3f3998-8e70-47c2-94e8-307a39db87d5.crl X509v3 Authority Key Identifier: keyid:10:AF:4A:6F:F0:86:60:37:47:CA:9A:A5:06:6F:4F:42:78:36:F5:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:cd:2d:52:ea:4a:4c:29:95:aa:2b:59:48:73:82:6e:6c:44: 66:5e:38:4f:fa:96:99:5b:82:4e:06:e4:40:b6:63:62:84:4e: bf:51:eb:82:99:32:20:bd:ac:e4:bf:82:90:96:55:e3:21:93: d7:f0:06:30:4b:ca:99:2c:88:67:14:ae:b1:85:32:cc:a6:c0: cd:07:e0:d9:93:f3:74:ad:2a:44:bb:b5:3e:bd:92:c3:9f:25: a9:90:98:7c:9a:47:16:8a:50:d6:80:06:45:0f:df:37:c5:16: 3b:67:4b:45:ba:18:58:9c:3d:cd:d9:fa:2c:9d:3d:e7:2f:c9: 19:d5:0b:e4:fa:e3:c5:04:0c:97:71:96:9d:57:43:0d:42:58: ac:47:6c:85:68:e3:28:e1:f9:73:85:93:66:47:ba:2c:e7:9e: 74:da:23:b9:73:1f:d0:6b:58:61:41:9b:2f:cf:62:18:1c:2b: b5:0f:b6:1b:33:c9:35:53:b1:72:e6:c4:44:65:0c:95:81:e1: 8d:0e:cd:4e:80:8d:22:ec:27:53:19:c0:b6:1b:ed:2a:8f:51: 68:a3:6a:c4:54:ec:05:46:ea:10:5f:45:63:45:81:36:f8:ac: b8:18:a3:14:9d:a2:4f:25:7d:b3:05:2b:cc:ec:5b:1c:ed:5f: 78:c6:73:3f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9SDlSLdaAhRmw/P0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzZjM5OTgtOGU3MC00N2MyLTk0ZTgtMzA3YTM5ZGI4 N2Q1MB4XDTI2MDkyODAzMDAyNVoXDTI2MTAwMTAzMDAwMFowLzEtMCsGA1UEAxMk OWUxYmVhYmYtMTdjYS00YjJmLThiZWUtMGFhM2ZhZjkxY2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4m8uzbI/orYBI0CNUDxF7cIk7ajIOfCmYOf 9BVzLZYOJSicgvwgXV+2WidBQqZt99CJ1iEwZ3d6P2FYBnFgKvVzhYmW68JxW1jH NorfhJPkJ4Gyg7g68J9IoFOFhchrdpSsyCcbmZW1o4lErREkCCYof41npK35tEUx ILHnF1fLwyUe5IYtngB0LVvXsKxMP2yJY+Qm85Ae24UtsLOMyBJC1J71jdRvydD9 2o+slXwtiPkfmvboZk0PiwMcOitpsT+ZZe2hwN5GuoMZx3xB3hNLRCCJIc1wZt0i 7gVWteJGGNnvZmiPY6oW03UJuU3SELLacjfeibSSrj4kTjb/BwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFChDO2ABVwfHWLflpzjambHVuxDRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83YjNm Mzk5OC04ZTcwLTQ3YzItOTRlOC0zMDdhMzlkYjg3ZDUvN2IzZjM5OTgtOGU3MC00 N2MyLTk0ZTgtMzA3YTM5ZGI4N2Q1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvN2IzZjM5OTgtOGU3MC00N2MyLTk0 ZTgtMzA3YTM5ZGI4N2Q1LzdiM2YzOTk4LThlNzAtNDdjMi05NGU4LTMwN2EzOWRi ODdkNS5jcmwwHwYDVR0jBBgwFoAUEK9Kb/CGYDdHypqlBm9PQng29T4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi83YjNmMzk5OC04ZTcwLTQ3YzItOTRlOC0zMDdh MzlkYjg3ZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFzS1S6kpMKZWqK1lIc4Ju bERmXjhP+paZW4JOBuRAtmNihE6/UeuCmTIgvazkv4KQllXjIZPX8AYwS8qZLIhn FK6xhTLMpsDNB+DZk/N0rSpEu7U+vZLDnyWpkJh8mkcWilDWgAZFD983xRY7Z0tF uhhYnD3N2fosnT3nL8kZ1Qvk+uPFBAyXcZadV0MNQlisR2yFaOMo4flzhZNmR7os 55502iO5cx/Qa1hhQZsvz2IYHCu1D7YbM8k1U7Fy5sREZQyVgeGNDs1OgI0i7CdT GcC2G+0qj1Foo2rEVOwFRuoQX0VjRYE2+Ky4GKMUnaJPJX2zBSvM7Fsc7V94xnM/ -----END CERTIFICATE-----Generated at Mon Sep 28 14:16:16 2026 by rpki-client