$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft (raw, json) Hash identifier: ULdXH9RW5PCg7LYa9WObvlXr4L/tKXoo0L4/aHRmFB0= Subject key identifier: 8D:85:3C:86:CB:D8:E9:78:B4:D3:0D:C5:2F:58:3E:96:BA:A3:2B:BD Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F4328584F47963CADD048276AB7696600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft Manifest number: 010D0C9F4328584073A84BBB6D274A47E14404B3 Signing time: Thu 24 Sep 2026 09:00:22 +0000 Manifest this update: Thu 24 Sep 2026 09:00:22 +0000 Manifest next update: Sat 26 Sep 2026 09:00:00 +0000 Files and hashes: 1: 3091c4d9-02ad-3cf4-9fb6-ef7b9ba52414.roa (hash: ERl4HQNmt19kfMcR+FZFWp6L9l1PjrQdDQ46MM7VQiY=) 2: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl (hash: mxdSS0hZVX/RYm5qDa9m0QFa+JNRsAUohUeyucQw2Rk=) 3: b5ca30b5-ebfd-33ea-9d6a-6bbdadcec801.roa (hash: hHbsv6K9hQTXumWbwFFShGQvoFDpveF6/QU/CWM/9yU=) 4: e6965540-cbd0-3930-b638-a04886e69eac.roa (hash: PW9BT//WYhi6VWyKc5QQYCTUy7GbgMflIwHyKRlFVDc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:47:96:3c:ad:d0:48:27:6a:b7:69:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: Sep 24 09:00:22 2026 GMT Not After : Sep 26 09:00:00 2026 GMT Subject: CN=79d10cea-0ac6-4a24-a334-9332da1d6e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e5:34:2a:23:aa:88:95:ae:98:ef:25:a9:6f: 21:ab:a0:d1:8d:a5:3d:f3:be:e2:64:42:85:c2:a7: bc:bb:58:f9:28:13:c9:de:09:ff:90:4e:3b:8b:7d: 86:28:1c:47:51:fe:f5:67:41:7c:c5:9a:1c:ad:6e: 3f:a7:0d:be:19:4f:dc:ad:6b:ce:bb:02:ae:cd:63: 68:16:75:d6:28:cc:86:3d:52:ce:02:a3:eb:e4:76: fd:ac:f2:ef:50:50:c3:44:cf:0f:a5:42:6b:79:46: 5c:d4:0e:15:68:bf:84:17:45:3d:68:ac:c7:22:41: a2:04:53:d4:16:fd:9f:aa:82:29:68:c2:59:d2:f6: cd:9c:5b:c1:2b:a1:33:f3:70:94:3b:ea:3f:aa:23: 8c:02:fe:58:81:76:3c:a0:b8:c6:7f:fb:1c:64:f1: 94:8e:f4:d3:bf:47:1e:38:3e:f5:2e:7f:fa:fc:4d: 22:5f:bb:e1:8c:d9:1d:cd:dd:0a:57:ca:1e:a9:6a: a6:7e:b4:8c:fb:18:61:69:cf:67:96:40:cc:c4:88: bb:5b:44:1e:5d:a2:6c:aa:ae:37:5d:cd:7f:05:ec: 9c:a4:8b:f4:ec:de:51:b0:53:41:ff:5c:b6:17:4f: 62:53:67:83:ae:85:a8:6b:40:6d:67:19:9b:e2:94: 21:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:85:3C:86:CB:D8:E9:78:B4:D3:0D:C5:2F:58:3E:96:BA:A3:2B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b4:23:85:cf:72:4f:ea:8f:21:b5:9c:c3:3e:fc:e9:c7:8e: 24:f6:78:b2:68:8d:db:68:02:1a:c6:8c:a5:39:62:8b:80:12: 9f:3c:25:63:f0:f0:8a:fb:5b:aa:b4:45:97:67:cc:3e:df:a2: 34:7a:2c:4b:16:ba:8f:39:47:99:5b:a9:74:74:06:f9:2d:60: 5f:b7:c0:fa:63:69:0d:cc:8f:65:48:7a:d9:2a:e4:3e:14:cf: a7:c5:a0:26:31:54:05:4e:86:d6:06:b3:6b:20:e6:1b:f6:af: 32:bc:0b:7c:5e:60:85:e6:f4:16:c4:f1:23:8e:7f:9f:69:f5: 49:6d:96:59:65:0d:30:a1:20:54:d3:33:47:5a:7f:1e:ee:6d: 10:4a:12:11:dc:d1:2f:56:18:dd:72:69:5b:e9:fc:3e:5b:f3: 6b:9a:a5:56:9f:ee:b0:fd:e0:be:b6:b5:81:7f:7a:92:cc:f2: cb:58:34:38:97:75:f6:69:4a:38:8b:32:3b:84:d9:70:47:80: 6b:27:d4:b3:42:bc:7c:fd:8a:6e:56:85:2a:c3:de:87:f9:ad: 0a:e1:4f:68:ae:88:8f:6b:0b:2f:7e:e2:d8:c4:2e:b8:de:8f: a1:6d:f7:5a:aa:14:53:8a:52:77:33:10:3c:c5:dd:47:2f:b6: 5c:c9:6a:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Hljyt0EgnardpZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI2MDkyNDA5MDAyMloXDTI2MDkyNjA5MDAwMFowLzEtMCsGA1UEAxMk NzlkMTBjZWEtMGFjNi00YTI0LWEzMzQtOTMzMmRhMWQ2ZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuU0KiOqiJWumO8lqW8hq6DRjaU9877iZEKF wqe8u1j5KBPJ3gn/kE47i32GKBxHUf71Z0F8xZocrW4/pw2+GU/crWvOuwKuzWNo FnXWKMyGPVLOAqPr5Hb9rPLvUFDDRM8PpUJreUZc1A4VaL+EF0U9aKzHIkGiBFPU Fv2fqoIpaMJZ0vbNnFvBK6Ez83CUO+o/qiOMAv5YgXY8oLjGf/scZPGUjvTTv0ce OD71Ln/6/E0iX7vhjNkdzd0KV8oeqWqmfrSM+xhhac9nlkDMxIi7W0QeXaJsqq43 Xc1/BeycpIv07N5RsFNB/1y2F09iU2eDroWoa0BtZxmb4pQhSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI2FPIbL2Ol4tNMNxS9YPpa6oyu9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvNzA0YTc2MWYtYjcxYS00 ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBttCOFz3JP6o8htZzDPvzp x44k9niyaI3baAIaxoylOWKLgBKfPCVj8PCK+1uqtEWXZ8w+36I0eixLFrqPOUeZ W6l0dAb5LWBft8D6Y2kNzI9lSHrZKuQ+FM+nxaAmMVQFTobWBrNrIOYb9q8yvAt8 XmCF5vQWxPEjjn+fafVJbZZZZQ0woSBU0zNHWn8e7m0QShIR3NEvVhjdcmlb6fw+ W/NrmqVWn+6w/eC+trWBf3qSzPLLWDQ4l3X2aUo4izI7hNlwR4BrJ9SzQrx8/Ypu VoUqw96H+a0K4U9oroiPawsvfuLYxC643o+hbfdaqhRTilJ3MxA8xd1HL7ZcyWri -----END CERTIFICATE-----Generated at Thu Sep 24 14:19:19 2026 by rpki-client