$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: FPpCpKuo/v17czdGvz6yee1FW9pQeSKpyPiIUakFUvY= Subject key identifier: 87:07:AC:A4:79:27:78:0B:6B:03:C7:81:69:23:8E:AC:9B:9D:A3:72 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584F4E90F244600D465F306D0000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD079B55 Signing time: Sat 26 Sep 2026 21:00:23 +0000 Manifest this update: Sat 26 Sep 2026 21:00:23 +0000 Manifest next update: Mon 28 Sep 2026 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: epcK/6sakbvEbxXdToDpiNkRGEQb/6eXxz/R6w+tlA4=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: 8cWGGEnBqB2bEY5EY4ao3gO1kHZtU4IBcdEtqNcU2Zs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4e:90:f2:44:60:0d:46:5f:30:6d:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Sep 26 21:00:23 2026 GMT Not After : Sep 28 21:00:00 2026 GMT Subject: CN=26237da3-3117-48e4-a37e-085dc194c62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a5:51:73:ae:40:bd:f2:5b:92:3f:79:9b:35: 25:5c:f2:6e:0d:ee:ba:91:46:48:4d:32:b5:74:15: af:fb:0e:a5:c9:df:73:ea:ef:9e:7c:5a:77:98:a8: 69:bf:00:4c:b8:c5:8c:2e:e5:6d:ae:17:02:61:b3: 96:f5:68:54:0a:79:88:c2:22:55:88:15:d0:13:57: 5f:43:35:74:aa:fb:ad:7a:11:d8:d1:9e:5b:73:5b: f8:ba:ec:c7:34:c0:c8:aa:71:84:57:a0:55:fc:bf: 08:66:2e:e5:9b:24:1c:73:ea:ec:2a:0f:e0:06:1e: 9a:42:a3:23:47:56:e7:eb:b5:e5:8b:67:39:a0:20: e6:4d:b6:c1:0e:80:cc:ef:c5:e8:9b:00:a9:e4:7f: 3d:9d:e8:11:77:86:61:7c:66:46:17:99:d0:26:ce: eb:63:28:6e:53:fd:f5:14:ae:0c:e4:0e:33:cb:f7: 41:97:50:6d:cc:9a:60:53:0e:93:03:04:ca:67:06: 27:af:f0:2f:6a:30:fa:b2:21:98:90:88:51:97:d6: d9:be:00:5f:0c:ae:fb:61:b4:4a:11:ee:3a:0e:a9: e0:ff:96:1d:33:a2:d5:d6:6f:6a:73:b0:ba:90:68: 46:5c:b8:09:ad:33:8b:9e:ea:44:28:2e:e4:59:37: 95:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:07:AC:A4:79:27:78:0B:6B:03:C7:81:69:23:8E:AC:9B:9D:A3:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a5:fc:c7:b5:97:54:5c:33:04:f4:a3:35:55:4a:27:08:70: 3a:41:8e:a3:6d:18:56:70:de:54:d3:f8:b8:c8:4b:0a:49:44: 73:ec:b3:95:64:ca:e1:8a:9f:62:04:2e:66:56:88:c1:bf:7b: c1:92:34:cf:4c:05:c2:08:08:ba:c2:be:85:15:65:e2:e1:c7: 96:92:78:61:7d:69:f5:0e:60:46:78:4e:bd:87:03:00:7c:cf: d0:e5:5d:79:86:f0:99:31:3a:f4:01:f5:9e:59:46:60:87:51: a5:8b:cc:86:db:d9:0d:39:97:df:11:49:8a:b7:89:18:74:43: 9f:82:f1:67:88:c8:b1:d9:b7:c4:5c:5f:e6:f6:bf:5f:7d:bd: 93:8c:56:d9:78:08:cc:47:65:94:80:c8:1d:90:ef:2a:be:de: a6:18:12:b2:54:52:d5:5b:0c:bc:5c:38:63:68:05:03:39:f3: f3:d3:dd:53:20:cb:24:32:fb:b5:bd:09:f1:06:f8:9f:33:5f: 18:1a:3d:47:68:db:b0:11:f3:32:dd:5a:77:f4:d8:8f:19:41: 81:27:5e:b0:20:7b:ef:dd:2c:60:78:d2:97:c2:87:d4:68:e5: d4:1e:24:96:3f:1f:a5:6a:a5:c8:7f:a3:f1:75:51:bf:51:44: 1f:a3:84:8a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9OkPJEYA1GXzBtAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI2MDkyNjIxMDAyM1oXDTI2MDkyODIxMDAwMFowLzEtMCsGA1UEAxMk MjYyMzdkYTMtMzExNy00OGU0LWEzN2UtMDg1ZGMxOTRjNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaVRc65AvfJbkj95mzUlXPJuDe66kUZITTK1 dBWv+w6lyd9z6u+efFp3mKhpvwBMuMWMLuVtrhcCYbOW9WhUCnmIwiJViBXQE1df QzV0qvutehHY0Z5bc1v4uuzHNMDIqnGEV6BV/L8IZi7lmyQcc+rsKg/gBh6aQqMj R1bn67Xli2c5oCDmTbbBDoDM78XomwCp5H89negRd4ZhfGZGF5nQJs7rYyhuU/31 FK4M5A4zy/dBl1BtzJpgUw6TAwTKZwYnr/AvajD6siGYkIhRl9bZvgBfDK77YbRK Ee46Dqng/5YdM6LV1m9qc7C6kGhGXLgJrTOLnupEKC7kWTeVkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIcHrKR5J3gLawPHgWkjjqybnaNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAipfzHtZdUXDME9KM1VUon CHA6QY6jbRhWcN5U0/i4yEsKSURz7LOVZMrhip9iBC5mVojBv3vBkjTPTAXCCAi6 wr6FFWXi4ceWknhhfWn1DmBGeE69hwMAfM/Q5V15hvCZMTr0AfWeWUZgh1Gli8yG 29kNOZffEUmKt4kYdEOfgvFniMix2bfEXF/m9r9ffb2TjFbZeAjMR2WUgMgdkO8q vt6mGBKyVFLVWwy8XDhjaAUDOfPz091TIMskMvu1vQnxBvifM18YGj1HaNuwEfMy 3Vp39NiPGUGBJ16wIHvv3SxgeNKXwofUaOXUHiSWPx+laqXIf6PxdVG/UUQfo4SK -----END CERTIFICATE-----Generated at Sun Sep 27 07:03:27 2026 by rpki-client