$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft File: 67b004e8-3b23-4f9d-9325-beac85825fe1.mft (raw, json) Hash identifier: rDQZQPmUsBrqrqu9nOVaLrz5DhNcTO6i21GTzwvMMCI= Subject key identifier: AF:00:95:9E:9F:96:81:10:26:81:50:08:08:5E:73:EE:0D:04:0F:C1 Authority key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE Certificate issuer: /CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Certificate serial: 010D0C9F4328584F53CCFD22047D7CB8A6AED000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft Manifest number: 010D0C9F4328584073A8217092B11F7DC63DB1B5 Signing time: Mon 28 Sep 2026 18:00:24 +0000 Manifest this update: Mon 28 Sep 2026 18:00:24 +0000 Manifest next update: Thu 01 Oct 2026 18:00:00 +0000 Files and hashes: 1: 06b87a17-da72-35cd-99c5-447ec65e01d5.roa (hash: 8cAyviKHkqxv+hxpYrhSi4SasDrhmqdv41yPdiV3u/E=) 2: 67b004e8-3b23-4f9d-9325-beac85825fe1.crl (hash: 0cYfywLjiBdL/7Ps7BxpFgas3J9L23AVoccGofn4F9A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:cc:fd:22:04:7d:7c:b8:a6:ae:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Validity Not Before: Sep 28 18:00:24 2026 GMT Not After : Oct 1 18:00:00 2026 GMT Subject: CN=b33d21ac-2236-47e8-b085-d20ece14a54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:d7:ef:ec:cf:5d:a1:06:70:61:ad:75:ad: e9:39:dc:f4:9d:af:5f:1e:42:09:c3:1e:ae:1e:14: 3e:ea:56:1f:dd:3a:f9:4f:ff:dc:f9:7b:81:58:af: f1:d2:f5:c5:ed:30:11:8e:99:d8:7e:97:91:9b:7c: 89:e3:ba:44:50:29:0d:61:4a:8d:cd:c4:e8:2d:87: 2d:72:ed:a7:54:a6:9b:06:17:ea:bc:a4:7c:a5:1c: 39:85:d7:8f:75:e0:d1:7e:26:04:d7:d7:30:d6:8c: 64:aa:28:d7:82:48:93:d6:fb:88:a4:cd:34:a4:78: ca:e7:84:61:06:d2:b5:25:88:64:97:46:3f:2f:95: 57:39:db:cd:24:d9:17:3c:74:63:72:c7:5e:22:82: fd:71:3a:96:b5:9b:59:3d:1b:c8:e2:0b:cb:55:29: 6c:60:f2:ec:9b:64:8e:7f:23:13:c1:57:4e:5c:f5: 3f:52:de:c8:91:8d:75:46:df:70:1c:57:76:7c:96: 31:b1:54:ed:7b:b0:db:97:2f:38:15:00:02:3d:83: 8a:7b:cf:75:16:2e:01:2d:95:5f:ce:1b:7c:91:36: f7:9a:de:d9:0b:28:09:94:5a:1c:d8:ed:86:23:21: dc:1e:50:b0:cc:10:6f:f2:99:79:7b:6e:d5:d0:3e: d6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:00:95:9E:9F:96:81:10:26:81:50:08:08:5E:73:EE:0D:04:0F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl X509v3 Authority Key Identifier: keyid:40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:85:d2:94:46:f0:c8:5e:36:1a:27:19:c4:2d:cf:e6:98:a1: a8:15:43:10:dd:60:4e:63:1d:e7:c1:94:cf:80:bd:ec:b2:ac: 30:9b:b7:ea:87:72:ec:1d:e8:a9:4d:5d:59:90:98:ec:7e:bd: 7e:79:76:cb:9e:16:5a:03:8f:4f:4d:84:63:8d:00:71:f1:96: f8:1a:64:2a:bd:fc:2e:60:2e:6a:32:e3:ed:cf:3e:fc:e4:47: bf:b1:6c:da:4b:58:5c:35:c7:b1:8f:4b:5f:4a:6f:2d:fe:76: fc:b4:61:3c:3a:ad:86:e8:bf:9e:bb:6c:c3:e4:0d:cb:7a:bd: 76:d3:f6:19:d2:0f:cc:eb:ac:b7:24:5b:71:d9:c6:9e:20:91: 93:93:a7:66:7e:8a:63:40:34:b8:39:c0:64:80:de:2f:8c:2b: 9a:74:43:c4:61:30:c0:23:b7:23:f6:47:43:0b:1a:f4:ed:54: c7:8d:cc:66:c9:e4:6d:e7:dd:e1:f9:8d:48:40:e8:f8:3a:10: 0e:13:b7:59:64:70:47:e1:7f:05:29:38:b1:12:bf:62:4c:bc: 19:76:5e:bf:d8:a1:70:ca:f8:d3:70:1c:57:7e:e9:7f:f9:61: 5f:28:fb:e7:c6:7e:f8:bd:26:be:e5:ce:d3:36:8e:aa:5f:21: 73:c5:d2:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9TzP0iBH18uKau0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1 ZmUxMB4XDTI2MDkyODE4MDAyNFoXDTI2MTAwMTE4MDAwMFowLzEtMCsGA1UEAxMk YjMzZDIxYWMtMjIzNi00N2U4LWIwODUtZDIwZWNlMTRhNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymjX7+zPXaEGcGGtda3pOdz0na9fHkIJwx6u HhQ+6lYf3Tr5T//c+XuBWK/x0vXF7TARjpnYfpeRm3yJ47pEUCkNYUqNzcToLYct cu2nVKabBhfqvKR8pRw5hdePdeDRfiYE19cw1oxkqijXgkiT1vuIpM00pHjK54Rh BtK1JYhkl0Y/L5VXOdvNJNkXPHRjcsdeIoL9cTqWtZtZPRvI4gvLVSlsYPLsm2SO fyMTwVdOXPU/Ut7IkY11Rt9wHFd2fJYxsVTte7Dbly84FQACPYOKe891Fi4BLZVf zht8kTb3mt7ZCygJlFoc2O2GIyHcHlCwzBBv8pl5e27V0D7WAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK8AlZ6floEQJoFQCAhec+4NBA/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82N2Iw MDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvNjdiMDA0ZTgtM2IyMy00 ZjlkLTkzMjUtYmVhYzg1ODI1ZmUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjdiMDA0ZTgtM2IyMy00ZjlkLTkz MjUtYmVhYzg1ODI1ZmUxLzY3YjAwNGU4LTNiMjMtNGY5ZC05MzI1LWJlYWM4NTgy NWZlMS5jcmwwHwYDVR0jBBgwFoAUQFyQ+sCtey1+tsX0s1WQ8mUc/q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFj ODU4MjVmZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrhdKURvDIXjYaJxnELc/m mKGoFUMQ3WBOYx3nwZTPgL3ssqwwm7fqh3LsHeipTV1ZkJjsfr1+eXbLnhZaA49P TYRjjQBx8Zb4GmQqvfwuYC5qMuPtzz785Ee/sWzaS1hcNcexj0tfSm8t/nb8tGE8 Oq2G6L+eu2zD5A3Ler120/YZ0g/M66y3JFtx2caeIJGTk6dmfopjQDS4OcBkgN4v jCuadEPEYTDAI7cj9kdDCxr07VTHjcxmyeRt593h+Y1IQOj4OhAOE7dZZHBH4X8F KTixEr9iTLwZdl6/2KFwyvjTcBxXful/+WFfKPvnxn74vSa+5c7TNo6qXyFzxdLU -----END CERTIFICATE-----Generated at Tue Sep 29 13:29:20 2026 by rpki-client