$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft File: 8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft (raw, json) Hash identifier: 7KbxyLYNqNIiWT7e4XS08Gru7LRR5E32K4W7x5nDILY= Subject key identifier: E8:00:55:C6:FF:35:5D:72:2F:CE:D6:6A:51:F8:B9:8F:87:1C:BE:3A Authority key identifier: 78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D Certificate issuer: /CN=8020a399-7e83-4bb5-8d8d-e424e2edac2b Certificate serial: 010D0C9F4328584F5602C2BB33E145E4AAB25F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft Manifest number: 010D0C9F4328584A629AFAFAF4C26B8EDA69D052 Signing time: Tue 29 Sep 2026 13:00:23 +0000 Manifest this update: Tue 29 Sep 2026 13:00:23 +0000 Manifest next update: Fri 02 Oct 2026 13:00:00 +0000 Files and hashes: 1: 8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl (hash: CZCVKf/OqjfpSuYOG+vvkhfdNtF90aLWVR4mXdGDiIY=) 2: 9b8f3de7-adff-3b45-8b51-de811d42f4ce.roa (hash: fhwCpnzZ2VIorKubvEda0vDjI2pf1WTkciwcRJzTzSI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:02:c2:bb:33:e1:45:e4:aa:b2:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8020a399-7e83-4bb5-8d8d-e424e2edac2b Validity Not Before: Sep 29 13:00:23 2026 GMT Not After : Oct 2 13:00:00 2026 GMT Subject: CN=b67dc41f-5dde-4ed6-9898-f23552916a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:ea:b9:bb:72:74:e9:d7:c2:1c:76:e3:a3: 27:bd:f6:3f:c1:81:d0:32:7c:06:c9:4d:c4:70:71: d3:c1:47:dc:20:08:b6:21:88:cf:a5:f2:f7:52:98: 66:9f:ed:d6:82:b4:c1:f9:6d:7f:3c:4d:ef:ac:07: 86:93:95:9c:09:04:53:80:22:19:74:bb:8e:ea:30: fd:2e:0c:68:ac:01:89:6a:df:19:0e:3c:3c:86:59: 1d:8e:72:f5:24:f3:1f:40:57:6f:a7:63:1f:65:ba: 25:01:a9:65:19:75:93:32:3f:e2:31:d3:98:98:fb: 24:1e:5d:38:1a:b2:64:4b:ae:d5:23:29:01:87:a0: 3e:0c:0d:90:a8:18:e8:8b:a8:34:fc:47:14:9e:3e: 13:2a:75:ba:f6:12:45:2b:43:f7:5a:95:31:91:46: c3:c8:58:e0:89:de:5d:bc:6d:1e:bb:2f:ea:1b:46: 9a:27:08:63:71:69:e6:fb:72:95:ef:d4:a4:d2:c8: 80:9c:3d:48:ca:9c:ea:f8:c3:5b:3e:2e:f1:fc:5a: a7:d6:6c:c9:b6:25:24:79:c0:32:99:5d:4b:25:6a: 21:2c:71:3c:72:cb:45:1e:4f:cf:0b:27:3a:e2:04: cf:35:26:e2:46:33:65:4c:cb:3f:03:d0:4f:07:45: e3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:00:55:C6:FF:35:5D:72:2F:CE:D6:6A:51:F8:B9:8F:87:1C:BE:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl X509v3 Authority Key Identifier: keyid:78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e9:4a:09:8e:a1:0f:4b:9d:ef:36:67:08:66:83:93:f1:60:18: ab:99:7a:f5:85:c3:61:b0:cc:51:8a:e4:45:29:24:92:cb:76: 28:37:ce:a3:0a:83:d0:d2:f5:4f:90:69:7f:94:0b:56:dc:a4: 2c:2f:00:01:cb:22:23:cd:c4:3e:92:41:ec:10:1f:22:51:8d: ac:1e:f6:45:29:93:8a:d0:95:9c:76:e9:6b:8a:e4:10:62:e0: 83:3b:a8:62:96:5a:63:b7:16:99:89:43:a2:b4:65:a3:7c:ee: c6:3f:e9:a6:c9:db:d2:3b:1d:31:6e:21:40:e0:48:c5:6b:98: 1e:c5:a6:23:91:91:32:3b:2f:f1:ca:99:5f:47:4b:08:93:e3: 9b:8d:b9:44:26:d6:75:56:4f:aa:ac:d3:fe:b7:b4:e3:30:2c: 72:fe:aa:24:b2:10:9b:63:a3:fd:85:b1:19:ad:d8:0d:ca:01: 68:d8:4a:54:78:68:ae:25:d6:ca:ad:09:20:43:28:3d:1b:5a: 2b:90:f5:c3:aa:3e:42:f3:bb:c4:d4:f9:be:aa:3e:29:fe:46: 43:4c:eb:6c:3e:02:ab:d9:91:5b:7f:64:49:75:62:4d:43:36: e3:47:a9:aa:f4:fa:62:5f:02:09:7b:48:76:09:f2:51:04:79: 4d:45:00:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9WAsK7M+FF5KqyXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMGEzOTktN2U4My00YmI1LThkOGQtZTQyNGUyZWRh YzJiMB4XDTI2MDkyOTEzMDAyM1oXDTI2MTAwMjEzMDAwMFowLzEtMCsGA1UEAxMk YjY3ZGM0MWYtNWRkZS00ZWQ2LTk4OTgtZjIzNTUyOTE2YTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfLqubtydOnXwhx246MnvfY/wYHQMnwGyU3E cHHTwUfcIAi2IYjPpfL3Uphmn+3WgrTB+W1/PE3vrAeGk5WcCQRTgCIZdLuO6jD9 LgxorAGJat8ZDjw8hlkdjnL1JPMfQFdvp2MfZbolAallGXWTMj/iMdOYmPskHl04 GrJkS67VIykBh6A+DA2QqBjoi6g0/EcUnj4TKnW69hJFK0P3WpUxkUbDyFjgid5d vG0euy/qG0aaJwhjcWnm+3KV79Sk0siAnD1Iypzq+MNbPi7x/Fqn1mzJtiUkecAy mV1LJWohLHE8cstFHk/PCyc64gTPNSbiRjNlTMs/A9BPB0XjNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOgAVcb/NV1yL87WalH4uY+HHL46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDIw YTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0ZTJlZGFjMmIvODAyMGEzOTktN2U4My00 YmI1LThkOGQtZTQyNGUyZWRhYzJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODAyMGEzOTktN2U4My00YmI1LThk OGQtZTQyNGUyZWRhYzJiLzgwMjBhMzk5LTdlODMtNGJiNS04ZDhkLWU0MjRlMmVk YWMyYi5jcmwwHwYDVR0jBBgwFoAUeBxTEnLOMDBJLVBrmal/6fZM5X0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDIwYTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0 ZTJlZGFjMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDpSgmOoQ9Lne82Zwhmg5Px YBirmXr1hcNhsMxRiuRFKSSSy3YoN86jCoPQ0vVPkGl/lAtW3KQsLwAByyIjzcQ+ kkHsEB8iUY2sHvZFKZOK0JWcdulriuQQYuCDO6hillpjtxaZiUOitGWjfO7GP+mm ydvSOx0xbiFA4EjFa5gexaYjkZEyOy/xyplfR0sIk+ObjblEJtZ1Vk+qrNP+t7Tj MCxy/qokshCbY6P9hbEZrdgNygFo2EpUeGiuJdbKrQkgQyg9G1orkPXDqj5C87vE 1Pm+qj4p/kZDTOtsPgKr2ZFbf2RJdWJNQzbjR6mq9PpiXwIJe0h2CfJRBHlNRQDU -----END CERTIFICATE-----Generated at Tue Sep 29 21:35:55 2026 by rpki-client