$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft File: 66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft (raw, json) Hash identifier: /xW+UQ+J4Cm5ZTnHqXcGE77ho3zRUbj+64UUwQ+1WHc= Subject key identifier: 8D:68:F0:20:DD:4D:88:17:46:17:F5:EC:14:48:9E:32:FE:C9:A2:B9 Authority key identifier: 27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB Certificate issuer: /CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe Certificate serial: 010D0C9F4328584F5697B0E874C44E7305E73520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft Manifest number: 010D0C9F4328584720528DA38C7982779313B004 Signing time: Tue 29 Sep 2026 18:00:25 +0000 Manifest this update: Tue 29 Sep 2026 18:00:25 +0000 Manifest next update: Thu 01 Oct 2026 18:00:00 +0000 Files and hashes: 1: 16633004-e46a-3fb4-be3b-681f6a980807.roa (hash: jesvysUgjHr+koHDzWsUC47U8ByLU+sy0zPJzcpxqMc=) 2: 66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl (hash: bnVsykXfeKnTRRDP+zHc46o6f2IhEFH7BwK5QUJ/eEs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:97:b0:e8:74:c4:4e:73:05:e7:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe Validity Not Before: Sep 29 18:00:25 2026 GMT Not After : Oct 1 18:00:00 2026 GMT Subject: CN=9b009592-fa2d-4dc5-a478-02d24b6ddf73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:55:24:ba:c2:8f:61:76:a1:07:2c:cd:40:59: e2:71:8c:cd:e9:32:dc:c6:87:df:27:35:d0:e3:6c: 80:fc:4f:29:70:4f:b7:01:a1:59:2a:79:02:6f:0d: 4d:90:7e:f1:d2:04:4f:7c:db:9f:32:29:88:04:a3: cd:93:51:83:ae:6c:15:d3:3b:bd:ab:3d:ae:6f:30: 86:64:0c:98:c9:6a:f8:a7:4e:7f:66:60:99:e1:05: 8d:35:84:10:49:5b:2c:f2:59:f1:0c:f6:c0:d2:a6: f9:5a:62:2c:e5:d6:9c:71:e2:9d:86:47:68:53:82: 02:9b:18:cb:92:9f:18:2e:63:b1:2f:df:01:eb:d8: 82:ec:6f:7a:b4:7f:73:75:da:72:b9:86:b6:00:1c: 3f:44:bd:b8:f2:2f:8c:d6:a7:f0:70:b3:a2:ae:5b: de:17:08:99:d6:63:fd:f7:27:e9:95:66:2c:0a:95: eb:fa:d8:8e:64:56:d0:db:da:77:7e:88:d1:09:15: 79:01:84:56:db:94:c0:ba:a8:b5:60:9f:86:73:56: 0b:78:99:d5:39:ed:96:30:de:63:04:e5:80:a1:fe: 46:63:f7:0d:81:c6:89:1b:34:37:18:9d:5f:5b:43: 48:00:6d:3a:b4:a5:6b:69:aa:c4:57:13:8f:06:65: ca:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:68:F0:20:DD:4D:88:17:46:17:F5:EC:14:48:9E:32:FE:C9:A2:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl X509v3 Authority Key Identifier: keyid:27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:82:c5:16:63:55:3f:cd:86:cc:7a:39:2d:5b:30:58:06:61: b7:9e:3b:19:cf:b0:16:6e:49:87:29:82:9b:c1:d9:52:ac:83: 75:f7:8c:e5:10:aa:7b:81:e7:0f:ef:c1:3a:82:3c:c3:f7:a2: c6:ff:67:e5:73:c0:16:46:ee:6b:79:59:6f:b6:9e:d8:36:59: 5e:c1:41:b0:cf:f9:16:bd:81:ec:8b:b7:c4:c0:97:92:93:9d: e2:62:b4:7a:ba:5a:53:3f:c9:d4:63:ea:c6:bc:ab:65:a5:07: 37:fc:b9:04:49:64:7b:21:ea:58:c5:30:e8:ec:34:07:fa:bf: de:f6:5f:de:09:68:6d:89:ca:40:55:e9:18:68:f8:14:43:4b: 03:53:0f:56:de:55:52:06:2f:49:56:42:7c:fb:c2:91:fe:2a: de:64:68:14:90:2d:0b:ff:10:b0:4b:5c:8b:6c:7e:80:cc:45: 60:6e:84:80:86:64:d2:c8:e3:a4:39:4c:f4:1a:69:23:a0:bf: 7e:51:65:23:05:b0:4e:83:18:b0:88:ac:88:49:16:7c:6e:97: 0b:fc:fa:6e:46:75:07:8c:74:ab:04:02:77:b5:a4:20:04:fd: 6d:fa:a3:52:69:7c:be:df:49:65:88:fb:88:a3:0d:58:43:03: f8:e5:f4:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Wl7DodMROcwXnNSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZDRhNDAtNzVkMy00MTEyLWE0YzgtNmRlOWNhNTcx ZmZlMB4XDTI2MDkyOTE4MDAyNVoXDTI2MTAwMTE4MDAwMFowLzEtMCsGA1UEAxMk OWIwMDk1OTItZmEyZC00ZGM1LWE0NzgtMDJkMjRiNmRkZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglUkusKPYXahByzNQFnicYzN6TLcxoffJzXQ 42yA/E8pcE+3AaFZKnkCbw1NkH7x0gRPfNufMimIBKPNk1GDrmwV0zu9qz2ubzCG ZAyYyWr4p05/ZmCZ4QWNNYQQSVss8lnxDPbA0qb5WmIs5dacceKdhkdoU4ICmxjL kp8YLmOxL98B69iC7G96tH9zddpyuYa2ABw/RL248i+M1qfwcLOirlveFwiZ1mP9 9yfplWYsCpXr+tiOZFbQ29p3fojRCRV5AYRW25TAuqi1YJ+Gc1YLeJnVOe2WMN5j BOWAof5GY/cNgcaJGzQ3GJ1fW0NIAG06tKVraarEVxOPBmXKcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI1o8CDdTYgXRhf17BRInjL+yaK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNk NGE0MC03NWQzLTQxMTItYTRjOC02ZGU5Y2E1NzFmZmUvNjZjZDRhNDAtNzVkMy00 MTEyLWE0YzgtNmRlOWNhNTcxZmZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZDRhNDAtNzVkMy00MTEyLWE0 YzgtNmRlOWNhNTcxZmZlLzY2Y2Q0YTQwLTc1ZDMtNDExMi1hNGM4LTZkZTljYTU3 MWZmZS5jcmwwHwYDVR0jBBgwFoAUJ4LHseRo4uvhVpDdLeNlrXlb7MswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNkNGE0MC03NWQzLTQxMTItYTRjOC02ZGU5 Y2E1NzFmZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAggsUWY1U/zYbMejktWzBY BmG3njsZz7AWbkmHKYKbwdlSrIN194zlEKp7gecP78E6gjzD96LG/2flc8AWRu5r eVlvtp7YNllewUGwz/kWvYHsi7fEwJeSk53iYrR6ulpTP8nUY+rGvKtlpQc3/LkE SWR7IepYxTDo7DQH+r/e9l/eCWhticpAVekYaPgUQ0sDUw9W3lVSBi9JVkJ8+8KR /ireZGgUkC0L/xCwS1yLbH6AzEVgboSAhmTSyOOkOUz0GmkjoL9+UWUjBbBOgxiw iKyISRZ8bpcL/PpuRnUHjHSrBAJ3taQgBP1t+qNSaXy+30lliPuIow1YQwP45fQ9 -----END CERTIFICATE-----Generated at Wed Sep 30 12:10:46 2026 by rpki-client