$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.mft File: 8e34a71f-aa28-4e58-b789-2715811effcc.mft (raw, json) Hash identifier: Ixk1TXYZt3Llan3A6UDbSMzB+L3LIfwe5RI3wvqlJtc= Subject key identifier: 9A:1C:92:90:44:58:54:83:D6:F0:E7:65:F2:8D:A0:29:2A:1F:F7:B0 Authority key identifier: 81:E2:E5:45:2B:2A:E0:16:B1:47:63:52:47:B0:3C:0D:21:7C:31:6B Certificate issuer: /CN=8e34a71f-aa28-4e58-b789-2715811effcc Certificate serial: 010D0C9F4328584F4B8AB5407F779327F6BA7920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.mft Manifest number: 010D0C9F4328584DCFED548B1CF13729576B5190 Signing time: Fri 25 Sep 2026 19:00:23 +0000 Manifest this update: Fri 25 Sep 2026 19:00:23 +0000 Manifest next update: Mon 28 Sep 2026 19:00:00 +0000 Files and hashes: 1: 125d2c8d-6857-3981-a307-ba99a64046dc.roa (hash: OBCtaHXdl0z5NjXV4tFEuZGYiC/8y42svezDh5xxw6k=) 2: 331f3729-ca73-3b46-844b-08d80c0e6351.roa (hash: OnjFlX9HNUYzktYgGDi3WK9w2cxWQsBcenfEeESMuHM=) 3: 8e34a71f-aa28-4e58-b789-2715811effcc.crl (hash: NUjgWgozFoWIX470N1RIHbDYV8PtznKIazbopwHUJyU=) 4: e209f09c-e8e1-33b5-a54b-e827603c3f64.roa (hash: g9aZtb01ZQ1dF3ckUZ6RB8qHl6iXBePaRqgwfNKgJiQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:8a:b5:40:7f:77:93:27:f6:ba:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e34a71f-aa28-4e58-b789-2715811effcc Validity Not Before: Sep 25 19:00:23 2026 GMT Not After : Sep 28 19:00:00 2026 GMT Subject: CN=16e220ca-324b-4d69-b0d6-b0c79af401dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:23:f0:8d:cb:7a:0f:12:42:1a:1e:c0:02:94: e8:1c:7e:84:ff:21:e7:c8:64:bc:b8:67:06:cc:d9: 87:74:bb:a7:98:01:b4:bf:db:1e:28:6d:ea:22:ca: fb:4e:1c:b2:db:41:82:f8:73:4e:05:b6:93:3e:ec: 62:d7:45:42:12:a9:75:96:ff:37:7c:4f:a2:4a:bc: 67:3b:ff:78:47:49:bf:ef:3c:1a:23:d4:b5:57:2c: fa:75:e0:11:60:76:b3:76:f4:e3:cb:e6:03:3c:63: 4b:ce:70:f7:48:a9:82:b0:3e:c0:5e:55:4d:22:0f: 8e:24:ca:3b:08:3f:8c:48:8b:cd:03:6d:d7:07:50: 39:32:c2:0e:2e:53:27:2f:88:c7:df:b1:fe:90:ba: 80:ac:2f:2e:ef:56:31:77:f3:f0:e9:70:0f:a7:5d: a7:9a:77:e2:17:ec:1b:06:f1:64:70:83:45:60:7f: f8:a0:11:76:8b:f6:1f:fd:c5:5a:d5:8e:ee:16:c6: 3a:39:7a:37:0e:25:21:f4:ef:db:02:4b:d2:2a:21: d8:37:bf:45:ec:46:a4:62:58:95:63:88:84:e1:63: d1:c9:f8:6c:85:9c:c7:28:06:35:eb:55:be:98:4e: eb:04:42:e5:a1:51:67:2d:c6:c0:5e:56:8a:b0:b4: bf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1C:92:90:44:58:54:83:D6:F0:E7:65:F2:8D:A0:29:2A:1F:F7:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.crl X509v3 Authority Key Identifier: keyid:81:E2:E5:45:2B:2A:E0:16:B1:47:63:52:47:B0:3C:0D:21:7C:31:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a1:a7:12:e3:30:dd:48:5a:2c:73:b0:75:9d:83:15:b8:4a: d7:de:ef:8a:21:7b:5b:fb:3b:34:de:d4:e2:90:4f:40:ad:58: 81:ec:45:b3:8d:3b:bb:65:11:bb:60:38:c7:5b:c3:e6:76:9a: 50:a3:22:1a:ec:4d:1b:33:a0:ea:c5:3a:54:76:1e:41:59:2b: 28:8f:43:63:88:de:6d:64:8a:21:37:ad:27:00:9d:66:b6:0c: 90:40:10:3f:a3:ec:79:c4:c8:3e:dd:12:11:80:a0:60:97:75: 6b:ef:6f:91:83:eb:55:8a:62:fb:c5:2e:79:34:ea:ce:75:ed: 0f:ad:2a:db:c3:42:61:69:a7:e0:ab:b7:ab:bf:e8:7d:4e:52: 0a:1c:03:90:7f:92:ad:2c:89:09:11:6e:a5:e1:04:cd:d3:09: de:04:55:e0:c7:85:ce:15:f1:ee:11:f7:23:9a:09:83:cf:93: 51:04:5d:eb:56:22:fb:f9:b2:da:36:75:59:dc:07:fd:88:9b: 7e:da:ac:9c:c1:d5:78:38:09:68:cb:c3:51:2b:86:2e:42:dd: 01:e4:7b:f0:cb:bb:60:24:47:af:b6:42:bb:18:75:31:20:9d: c8:73:ae:11:61:9e:29:12:35:bc:32:56:e3:c2:b5:14:88:5c: ff:5c:eb:e4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9LirVAf3eTJ/a6eSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUzNGE3MWYtYWEyOC00ZTU4LWI3ODktMjcxNTgxMWVm ZmNjMB4XDTI2MDkyNTE5MDAyM1oXDTI2MDkyODE5MDAwMFowLzEtMCsGA1UEAxMk MTZlMjIwY2EtMzI0Yi00ZDY5LWIwZDYtYjBjNzlhZjQwMWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSPwjct6DxJCGh7AApToHH6E/yHnyGS8uGcG zNmHdLunmAG0v9seKG3qIsr7Thyy20GC+HNOBbaTPuxi10VCEql1lv83fE+iSrxn O/94R0m/7zwaI9S1Vyz6deARYHazdvTjy+YDPGNLznD3SKmCsD7AXlVNIg+OJMo7 CD+MSIvNA23XB1A5MsIOLlMnL4jH37H+kLqArC8u71Yxd/Pw6XAPp12nmnfiF+wb BvFkcINFYH/4oBF2i/Yf/cVa1Y7uFsY6OXo3DiUh9O/bAkvSKiHYN79F7EakYliV Y4iE4WPRyfhshZzHKAY161W+mE7rBELloVFnLcbAXlaKsLS/nQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJockpBEWFSD1vDnZfKNoCkqH/ewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZTM0 YTcxZi1hYTI4LTRlNTgtYjc4OS0yNzE1ODExZWZmY2MvOGUzNGE3MWYtYWEyOC00 ZTU4LWI3ODktMjcxNTgxMWVmZmNjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGUzNGE3MWYtYWEyOC00ZTU4LWI3 ODktMjcxNTgxMWVmZmNjLzhlMzRhNzFmLWFhMjgtNGU1OC1iNzg5LTI3MTU4MTFl ZmZjYy5jcmwwHwYDVR0jBBgwFoAUgeLlRSsq4BaxR2NSR7A8DSF8MWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZTM0YTcxZi1hYTI4LTRlNTgtYjc4OS0yNzE1 ODExZWZmY2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHoacS4zDdSFosc7B1nYMV uErX3u+KIXtb+zs03tTikE9ArViB7EWzjTu7ZRG7YDjHW8PmdppQoyIa7E0bM6Dq xTpUdh5BWSsoj0NjiN5tZIohN60nAJ1mtgyQQBA/o+x5xMg+3RIRgKBgl3Vr72+R g+tVimL7xS55NOrOde0PrSrbw0Jhaafgq7erv+h9TlIKHAOQf5KtLIkJEW6l4QTN 0wneBFXgx4XOFfHuEfcjmgmDz5NRBF3rViL7+bLaNnVZ3Af9iJt+2qycwdV4OAlo y8NRK4YuQt0B5Hvwy7tgJEevtkK7GHUxIJ3Ic64RYZ4pEjW8MlbjwrUUiFz/XOvk -----END CERTIFICATE-----Generated at Fri Sep 25 22:36:20 2026 by rpki-client