$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft File: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft (raw, json) Hash identifier: giQXsGO0psUdx29MMFobzwXHlxI1E2OuxHhDkMc7lBE= Subject key identifier: 5D:AB:ED:ED:9F:BF:5A:B2:D6:F0:77:E4:F1:70:BD:AC:75:E8:84:69 Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584F5602C5A517C0B02A0C8581E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft Manifest number: 010D0C9F4328584073A856D03CF168C619A11D35 Signing time: Tue 29 Sep 2026 13:00:23 +0000 Manifest this update: Tue 29 Sep 2026 13:00:23 +0000 Manifest next update: Fri 02 Oct 2026 13:00:00 +0000 Files and hashes: 1: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (hash: ojfoZRjt7lBBWCkKNd5hp/24C8zieYlTfiCUaOjYUig=) 2: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl (hash: XLvd3y0nUpaX3onscmzMJxzVmB6wMHKS954a0kodBNM=) 3: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (hash: dLpx0X9iRCwC7L3HJITKdWeMI4JStXhJ8pY4izrgdpo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:02:c5:a5:17:c0:b0:2a:0c:85:81:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Sep 29 13:00:23 2026 GMT Not After : Oct 2 13:00:00 2026 GMT Subject: CN=415066db-244b-4b48-97cb-5adb8835fc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5b:e2:85:17:50:09:aa:e7:dc:17:9a:53:18: c0:59:3f:5b:67:8d:e2:fc:27:04:e8:0a:fa:a6:4a: 7d:d4:0b:99:da:54:e4:0f:fe:ff:92:e3:56:5a:f8: 09:90:93:3c:77:03:ef:3c:f8:4b:c6:10:f6:9f:58: a4:fd:e3:ac:e3:a8:4e:84:53:c6:9d:67:29:93:0d: 23:1f:23:2a:9b:32:93:c4:f4:82:fb:53:90:16:d4: bf:e8:b7:98:57:c6:cd:f7:c7:0c:0e:a9:bb:e6:2d: 4b:56:2b:6b:6b:9a:9b:7d:62:2c:97:bc:89:f1:12: 31:b9:57:d0:90:61:2b:21:d3:9a:de:7c:cf:fd:bc: a9:45:b6:04:02:30:b4:e5:d9:f1:f3:13:80:66:87: 42:c7:3a:f0:13:10:12:1c:34:99:d7:26:a6:b5:28: 8f:e1:f8:b0:ab:fb:85:33:0b:9c:28:b7:de:9c:9a: d2:b2:00:e1:9a:7f:c7:eb:05:22:17:2f:5d:0e:4d: 3d:27:44:b6:15:51:e3:42:52:bb:89:b9:97:2b:fa: f9:34:61:ed:c9:09:53:2b:b9:1d:ce:3e:62:d4:3c: 9d:ec:4d:4a:33:72:a0:04:c9:88:b7:0f:07:8f:67: 82:66:b7:70:37:b6:5a:a9:3d:4c:92:1d:16:d7:07: b3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AB:ED:ED:9F:BF:5A:B2:D6:F0:77:E4:F1:70:BD:AC:75:E8:84:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:1a:65:3b:98:05:e8:b5:b8:2a:b4:6d:51:37:51:8f:2b:48: 67:24:b3:62:29:72:75:bc:39:2b:3d:ed:0b:78:d7:b3:0d:c4: 7e:67:ad:fe:ed:b3:1a:a5:9f:28:9e:dc:c6:e8:a0:5a:80:1c: fe:aa:50:ab:0f:da:7a:87:f7:03:38:5d:73:03:4a:88:ae:2c: 9a:4a:3d:10:c3:ee:0b:2c:1c:a9:5f:f9:65:ad:24:0e:42:17: e7:b1:4e:10:21:17:16:a1:c0:7b:ba:2a:2f:0c:23:49:0a:ab: 7d:08:9f:67:4a:bb:10:86:9b:f8:15:51:9d:4c:e9:28:23:fe: dd:e5:53:c7:30:43:6e:50:8f:1a:24:68:d3:1c:d5:aa:b8:b5: ed:89:de:86:04:c3:59:ed:c5:6a:9c:a9:6b:b3:9e:1f:ca:cb: a3:e2:89:8d:66:00:40:fc:82:2d:7b:73:de:63:e1:63:a0:3c: 1b:f8:13:81:29:d9:48:65:62:89:b6:a8:f5:24:72:89:f7:a6: 17:49:5c:f4:20:9d:f0:71:89:eb:70:c0:2f:b9:1e:7c:9d:a0: e2:6b:48:b3:c9:02:5c:89:87:f8:dc:da:ad:ee:ea:5b:be:d7: 50:4a:85:b2:74:e2:e8:26:66:de:46:0a:7d:c3:8b:d8:02:e7: b0:98:16:85 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9WAsWlF8CwKgyFgeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI2MDkyOTEzMDAyM1oXDTI2MTAwMjEzMDAwMFowLzEtMCsGA1UEAxMk NDE1MDY2ZGItMjQ0Yi00YjQ4LTk3Y2ItNWFkYjg4MzVmYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFvihRdQCarn3BeaUxjAWT9bZ43i/CcE6Ar6 pkp91AuZ2lTkD/7/kuNWWvgJkJM8dwPvPPhLxhD2n1ik/eOs46hOhFPGnWcpkw0j HyMqmzKTxPSC+1OQFtS/6LeYV8bN98cMDqm75i1LVitra5qbfWIsl7yJ8RIxuVfQ kGErIdOa3nzP/bypRbYEAjC05dnx8xOAZodCxzrwExASHDSZ1yamtSiP4fiwq/uF MwucKLfenJrSsgDhmn/H6wUiFy9dDk09J0S2FVHjQlK7ibmXK/r5NGHtyQlTK7kd zj5i1Dyd7E1KM3KgBMmItw8Hj2eCZrdwN7ZaqT1Mkh0W1wez1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF2r7e2fv1qy1vB35PFwvax16IRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNDIwZjM4ZWItMjY4My00 Yjc5LThhNWMtYjE2ZmVkYWFhOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0GmU7mAXotbgqtG1RN1GP K0hnJLNiKXJ1vDkrPe0LeNezDcR+Z63+7bMapZ8ontzG6KBagBz+qlCrD9p6h/cD OF1zA0qIriyaSj0Qw+4LLBypX/llrSQOQhfnsU4QIRcWocB7uiovDCNJCqt9CJ9n SrsQhpv4FVGdTOkoI/7d5VPHMENuUI8aJGjTHNWquLXtid6GBMNZ7cVqnKlrs54f ysuj4omNZgBA/IIte3PeY+FjoDwb+BOBKdlIZWKJtqj1JHKJ96YXSVz0IJ3wcYnr cMAvuR58naDia0izyQJciYf43Nqt7upbvtdQSoWydOLoJmbeRgp9w4vYAuewmBaF -----END CERTIFICATE-----Generated at Tue Sep 29 17:28:06 2026 by rpki-client