$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/ec3e698c-c88d-4621-b933-5d412f17844a.mft File: ec3e698c-c88d-4621-b933-5d412f17844a.mft (raw, json) Hash identifier: n8aYSc1xO0tBikXKTrp+3xM3WJt7K7GsMeJGzZibLrk= Subject key identifier: A5:86:47:66:E0:23:3D:83:94:EB:32:CA:7A:E2:C3:F9:70:E2:AF:AA Authority key identifier: 84:53:1C:65:81:35:D3:CF:34:2C:DC:C5:ED:A4:FD:5A:CB:BC:B3:74 Certificate issuer: /CN=ec3e698c-c88d-4621-b933-5d412f17844a Certificate serial: 010D0C9F4328584F48DDCA5D9A6A89F47C5B5BE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/ec3e698c-c88d-4621-b933-5d412f17844a.mft Manifest number: 010D0C9F4328584E4553FF24C96547D559F027E1 Signing time: Thu 24 Sep 2026 20:00:23 +0000 Manifest this update: Thu 24 Sep 2026 20:00:23 +0000 Manifest next update: Sat 26 Sep 2026 20:00:00 +0000 Files and hashes: 1: 5fb90c3d-1482-3aff-a634-46d4272d54a2.roa (hash: hFA9kVjx4HEDfSLxMzSU1KoVxWxPpO36cloLSwEcwdQ=) 2: 9ca001d3-ce56-3ac8-ad18-32ea3df3c497.roa (hash: 1RXkPQA8r8wLkKz+GQLaJBItso7wmKLbXndgdqerbAM=) 3: e46bb1df-0975-383a-9c16-6f1506a689f4.roa (hash: VR8bYvdb5TDX/xFH8EP29i1UI1kj4BSVg29YeAq6uLI=) 4: ec3e698c-c88d-4621-b933-5d412f17844a.crl (hash: L3FcfepAf4zNJMOuWp2smoi5nP3ahIvS+SVtJRqH51s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/ec3e698c-c88d-4621-b933-5d412f17844a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/ec3e698c-c88d-4621-b933-5d412f17844a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:dd:ca:5d:9a:6a:89:f4:7c:5b:5b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3e698c-c88d-4621-b933-5d412f17844a Validity Not Before: Sep 24 20:00:23 2026 GMT Not After : Sep 26 20:00:00 2026 GMT Subject: CN=17ac5af8-ae81-4c09-a187-d618f938188a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:24:42:8c:fb:e4:e1:79:38:d3:07:b8:a4:0d: cc:6d:35:ae:8a:0a:63:dd:be:da:5a:ca:ab:91:85: 51:c8:02:48:f4:d1:c7:a9:ba:c0:fc:7e:3e:d0:71: 60:c1:64:b9:d5:6a:2f:78:b9:01:95:4d:e9:f8:7c: b1:2d:5b:b7:21:29:09:57:1e:ee:49:0c:37:03:9d: 8c:d7:be:f9:6b:c2:c2:68:b0:91:3e:34:92:93:41: 00:27:79:19:e0:6a:b7:2c:a6:b6:45:f7:60:31:cc: de:3d:62:ca:01:05:ea:f4:69:9e:30:f3:e4:f2:7b: 5a:27:a7:39:46:eb:13:ee:1b:2b:41:cf:85:b1:59: c2:19:65:81:d0:81:5a:21:5c:6e:0e:f4:38:66:1b: a6:42:7d:ba:48:11:3b:28:63:06:ae:a9:61:90:ed: cd:9e:83:7f:0b:11:65:50:e6:67:40:1b:e0:fa:0f: 9f:fd:cb:a1:7b:94:0d:6e:7a:06:2b:e6:06:71:f6: ad:d3:5e:16:a0:20:a8:c2:04:8d:08:8b:d4:af:55: 54:6b:a2:f1:bd:7b:2d:d7:57:2b:c6:40:7c:37:29: 60:ad:71:ff:3d:f5:15:c0:e5:b3:4f:1c:c2:3d:3b: 7e:b7:e4:ee:93:af:13:79:24:30:48:41:0d:69:92: c5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:86:47:66:E0:23:3D:83:94:EB:32:CA:7A:E2:C3:F9:70:E2:AF:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/ec3e698c-c88d-4621-b933-5d412f17844a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/ec3e698c-c88d-4621-b933-5d412f17844a.crl X509v3 Authority Key Identifier: keyid:84:53:1C:65:81:35:D3:CF:34:2C:DC:C5:ED:A4:FD:5A:CB:BC:B3:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:e3:fd:2e:da:f6:fd:8d:93:76:d9:72:59:a8:c4:d6:16:2e: b7:e7:96:13:ae:e3:76:70:40:3c:63:2b:98:80:ad:3c:8c:81: 3c:b4:2a:b6:3f:df:44:80:ce:8c:6a:e8:96:3e:2e:19:50:4a: 5f:a5:38:0c:0e:32:ee:b5:23:04:6a:91:bd:b5:d6:cb:2e:ce: e7:44:59:98:e5:cc:c9:71:f1:70:23:e6:c9:65:94:c5:12:27: 29:0a:35:85:9b:3b:78:04:f7:84:9b:6e:8f:cc:87:b6:22:27: 4c:d1:65:69:8e:a1:07:a6:29:af:1a:b2:4b:25:44:83:eb:7c: 2b:b0:5f:0d:df:cd:49:9d:70:fc:39:4b:e4:8e:f6:fc:e9:dd: c5:7c:05:db:3a:47:7f:4d:2b:71:fb:02:c5:39:91:64:8a:20: 38:d8:fa:2a:6a:ea:fc:1d:e1:14:c7:f8:f3:15:bf:6f:b1:39: 89:30:6b:a9:86:4b:8a:c9:dc:25:5e:d6:5a:c7:08:2b:e9:a0: 58:5d:d4:d2:12:1b:46:cc:86:89:53:31:a3:6a:78:ff:fa:d2: 2e:4c:e9:a4:45:5e:77:0e:de:00:82:93:32:20:cc:e4:af:fa: a9:c7:5a:36:51:bf:7d:6b:48:d8:1f:bb:86:fe:0a:6f:fb:e1: bf:aa:1c:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9I3cpdmmqJ9HxbW+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMzZTY5OGMtYzg4ZC00NjIxLWI5MzMtNWQ0MTJmMTc4 NDRhMB4XDTI2MDkyNDIwMDAyM1oXDTI2MDkyNjIwMDAwMFowLzEtMCsGA1UEAxMk MTdhYzVhZjgtYWU4MS00YzA5LWExODctZDYxOGY5MzgxODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSRCjPvk4Xk40we4pA3MbTWuigpj3b7aWsqr kYVRyAJI9NHHqbrA/H4+0HFgwWS51WoveLkBlU3p+HyxLVu3ISkJVx7uSQw3A52M 1775a8LCaLCRPjSSk0EAJ3kZ4Gq3LKa2RfdgMczePWLKAQXq9GmeMPPk8ntaJ6c5 RusT7hsrQc+FsVnCGWWB0IFaIVxuDvQ4ZhumQn26SBE7KGMGrqlhkO3NnoN/CxFl UOZnQBvg+g+f/cuhe5QNbnoGK+YGcfat014WoCCowgSNCIvUr1VUa6LxvXst11cr xkB8NylgrXH/PfUVwOWzTxzCPTt+t+Tuk68TeSQwSEENaZLFPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKWGR2bgIz2DlOsyynriw/lw4q+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lYzNl Njk4Yy1jODhkLTQ2MjEtYjkzMy01ZDQxMmYxNzg0NGEvZWMzZTY5OGMtYzg4ZC00 NjIxLWI5MzMtNWQ0MTJmMTc4NDRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWMzZTY5OGMtYzg4ZC00NjIxLWI5 MzMtNWQ0MTJmMTc4NDRhL2VjM2U2OThjLWM4OGQtNDYyMS1iOTMzLTVkNDEyZjE3 ODQ0YS5jcmwwHwYDVR0jBBgwFoAUhFMcZYE10880LNzF7aT9Wsu8s3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lYzNlNjk4Yy1jODhkLTQ2MjEtYjkzMy01ZDQx MmYxNzg0NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCe4/0u2vb9jZN22XJZqMTW Fi6355YTruN2cEA8YyuYgK08jIE8tCq2P99EgM6MauiWPi4ZUEpfpTgMDjLutSME apG9tdbLLs7nRFmY5czJcfFwI+bJZZTFEicpCjWFmzt4BPeEm26PzIe2IidM0WVp jqEHpimvGrJLJUSD63wrsF8N381JnXD8OUvkjvb86d3FfAXbOkd/TStx+wLFOZFk iiA42Poqaur8HeEUx/jzFb9vsTmJMGuphkuKydwlXtZaxwgr6aBYXdTSEhtGzIaJ UzGjanj/+tIuTOmkRV53Dt4AgpMyIMzkr/qpx1o2Ub99a0jYH7uG/gpv++G/qhzK -----END CERTIFICATE-----Generated at Fri Sep 25 18:16:03 2026 by rpki-client