$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft File: c22717c6-604d-4453-a20f-3430af557f6e.mft (raw, json) Hash identifier: KmOPiw+3G+wXZCM6MgqwN6t70dCMN3ws+ymC9pSYs7o= Subject key identifier: 60:CF:C6:C4:66:57:75:57:D2:FD:7B:FA:D5:72:E0:A3:27:98:8D:BB Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e Certificate serial: 010D0C9F4328584F513DDD7A382251D1E1702AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft Manifest number: 010D0C9F432858457DEA3EE13B43652F0FA976CC Signing time: Sun 27 Sep 2026 20:00:23 +0000 Manifest this update: Sun 27 Sep 2026 20:00:23 +0000 Manifest next update: Tue 29 Sep 2026 20:00:00 +0000 Files and hashes: 1: b4363080-9456-3a3d-976f-99d803e806ca.roa (hash: rFRcapJbnlkbdELO88yc9LxSgcw2QDhpGKOPeHWhMYY=) 2: c22717c6-604d-4453-a20f-3430af557f6e.crl (hash: DPVV+scifTFBhLMaWJ6QYB+BD3yaRD9K/oI7UOs81s8=) 3: dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa (hash: GnhQw8HiFSCYLLb/agQaWbCQgVEwlJF7mWUMZglw8M8=) 4: fe7b0e99-c671-383a-a651-229cc6e1a962.roa (hash: Ls+2aSyaPEY6w+rZBm8oVyIgAIzWdjCmroc+FnnsP0Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:3d:dd:7a:38:22:51:d1:e1:70:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e Validity Not Before: Sep 27 20:00:23 2026 GMT Not After : Sep 29 20:00:00 2026 GMT Subject: CN=a82b72ae-8319-43eb-a46f-2c8fd3a5f94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b5:a0:6b:9d:b8:a1:fb:6f:da:4d:27:f3:43: 80:f4:7b:7b:cf:bb:ae:d0:c7:3d:75:7e:07:ae:29: 77:3c:d2:0d:87:e6:90:53:91:a9:db:d5:1a:29:b6: cc:94:c9:b5:aa:38:77:e3:7e:b8:cf:39:77:fb:2a: 97:c8:e3:5d:e2:4a:cd:50:e8:a4:75:83:35:ea:8a: c4:65:0f:b3:40:40:85:f6:b5:51:d9:31:cf:96:20: 4b:6f:ec:4f:c1:d0:34:05:35:29:b9:01:e5:d3:9c: 1e:fb:f1:98:45:49:ff:14:d4:83:f1:50:35:a4:5a: bb:42:39:46:70:e5:43:dc:fb:a5:10:1c:b0:ae:8e: 9b:f8:66:02:0f:2a:f4:b4:2e:90:83:fa:20:ce:87: bf:aa:dd:8d:6c:98:18:0e:61:a1:71:9e:79:56:5f: 9d:1b:d3:84:43:f6:3e:6a:5d:49:2c:58:1a:79:d1: ed:82:83:0e:3d:0f:61:44:68:68:14:02:0f:f4:01: bc:de:23:2e:b8:37:f9:5c:b0:5d:12:8c:58:8a:a7: d7:09:d2:81:08:8d:3e:aa:ad:1c:a7:da:a3:01:6d: 39:d9:5f:08:81:39:a3:86:75:60:5e:d7:39:4f:6d: 07:2e:f1:31:91:7a:8c:46:d0:c4:d0:cd:b3:ce:dd: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CF:C6:C4:66:57:75:57:D2:FD:7B:FA:D5:72:E0:A3:27:98:8D:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl X509v3 Authority Key Identifier: keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:98:d4:f2:75:d7:6e:fd:26:c9:51:86:81:7e:2b:55:97:d4: 77:c0:20:65:6a:51:37:da:6e:af:1a:bd:ca:22:b1:c8:b0:4f: c7:47:63:16:f4:2d:39:2a:89:18:e0:86:54:f4:b8:74:40:70: 0a:bc:56:2c:30:41:3d:78:e5:b4:8e:31:1b:18:3e:8b:d0:01: b1:64:a6:10:a2:76:f0:c3:b5:43:94:97:aa:2b:19:93:13:8b: 16:c2:db:4c:e0:29:5e:82:ea:5c:ee:87:f7:e9:ff:26:5f:7c: 2c:05:0c:0b:9b:3c:80:2f:81:65:55:98:01:61:29:b7:50:e4: 60:98:10:4f:77:1b:3c:39:d8:d2:32:a3:7b:a1:b8:14:94:d0: 5e:0d:d5:02:b7:8b:f8:c6:41:56:e3:de:16:dd:8a:7e:e5:7b: 8a:ed:a4:db:0e:a3:12:fa:3a:83:94:6c:7e:9a:cb:40:36:89: 57:5f:7b:26:01:dc:b7:4c:19:4b:cd:1b:97:5a:8a:41:8d:46: bc:2c:ec:e3:2f:40:0f:aa:44:d2:9f:0c:4a:b5:96:f2:10:ec: 59:7e:5a:62:cf:d9:85:1d:eb:ba:f5:2f:d3:c4:c9:a7:66:95: 0d:1a:02:89:52:17:64:7f:e8:80:a5:38:b8:30:94:57:e2:57: 35:f5:f1:95 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9RPd16OCJR0eFwKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3 ZjZlMB4XDTI2MDkyNzIwMDAyM1oXDTI2MDkyOTIwMDAwMFowLzEtMCsGA1UEAxMk YTgyYjcyYWUtODMxOS00M2ViLWE0NmYtMmM4ZmQzYTVmOTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bWga524oftv2k0n80OA9Ht7z7uu0Mc9dX4H ril3PNINh+aQU5Gp29UaKbbMlMm1qjh34364zzl3+yqXyONd4krNUOikdYM16orE ZQ+zQECF9rVR2THPliBLb+xPwdA0BTUpuQHl05we+/GYRUn/FNSD8VA1pFq7QjlG cOVD3PulEBywro6b+GYCDyr0tC6Qg/ogzoe/qt2NbJgYDmGhcZ55Vl+dG9OEQ/Y+ al1JLFgaedHtgoMOPQ9hRGhoFAIP9AG83iMuuDf5XLBdEoxYiqfXCdKBCI0+qq0c p9qjAW052V8IgTmjhnVgXtc5T20HLvExkXqMRtDE0M2zzt3+RwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGDPxsRmV3VX0v17+tVy4KMnmI27MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3 MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvYzIyNzE3YzYtNjA0ZC00 NDUzLWEyMGYtMzQzMGFmNTU3ZjZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzIyNzE3YzYtNjA0ZC00NDUzLWEy MGYtMzQzMGFmNTU3ZjZlL2MyMjcxN2M2LTYwNGQtNDQ1My1hMjBmLTM0MzBhZjU1 N2Y2ZS5jcmwwHwYDVR0jBBgwFoAU7qMrzzRTqz7xoBFGZHeL3kSWVmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMw YWY1NTdmNmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqmNTydddu/SbJUYaBfitV l9R3wCBlalE32m6vGr3KIrHIsE/HR2MW9C05KokY4IZU9Lh0QHAKvFYsMEE9eOW0 jjEbGD6L0AGxZKYQonbww7VDlJeqKxmTE4sWwttM4Clegupc7of36f8mX3wsBQwL mzyAL4FlVZgBYSm3UORgmBBPdxs8OdjSMqN7obgUlNBeDdUCt4v4xkFW494W3Yp+ 5XuK7aTbDqMS+jqDlGx+mstANolXX3smAdy3TBlLzRuXWopBjUa8LOzjL0APqkTS nwxKtZbyEOxZflpiz9mFHeu69S/TxMmnZpUNGgKJUhdkf+iApTi4MJRX4lc19fGV -----END CERTIFICATE-----Generated at Mon Sep 28 22:42:36 2026 by rpki-client