$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft File: cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft (raw, json) Hash identifier: vdKNG+/9qruz0NVwYuO4HkOH5eOjaGlOxLYegHqD/n8= Subject key identifier: 3B:7E:01:8D:DA:6B:1D:D5:D9:D4:E1:B8:7B:8C:DA:C5:12:84:E8:2F Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584F47B3FC21326922565B038CBC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft Manifest number: 010D0C9F4328584073A84E8087935899AC51511F Signing time: Thu 24 Sep 2026 10:00:24 +0000 Manifest this update: Thu 24 Sep 2026 10:00:24 +0000 Manifest next update: Sat 26 Sep 2026 10:00:00 +0000 Files and hashes: 1: 780cb3e9-7df2-3259-b7b4-f6a912fbdbba.roa (hash: 3EWJnMHPUkw2PldE05v3RwIj55ZH9GxURPxmyeyT6tQ=) 2: 8e4606df-ba0c-3bfb-b611-7a1b50205487.roa (hash: 6R7ZYCY8pr78xPDKpGxVergviZemPUZaZeZumFSlPn0=) 3: c39cca32-f395-3fe4-84da-62da6b8d2a29.roa (hash: FhFb+bo16qLKUVooBqRklDH31AiyLGwt3m64WRXCHus=) 4: c7ec8882-d567-38d8-b18d-49b39b44c840.roa (hash: klMlTZhsEUDL49WKLhONCsI2Co58CsAWYV/Qiuk+0Pc=) 5: cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl (hash: hLQD2n7Pp0YtrrYH0GFD3fHEVqLOTYpmUJh5xkWptAk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:47:b3:fc:21:32:69:22:56:5b:03:8c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Sep 24 10:00:24 2026 GMT Not After : Sep 26 10:00:00 2026 GMT Subject: CN=24ea33c7-e5fc-499e-83da-22ca1bbbb11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:75:9b:ac:5c:3f:52:bb:e8:85:75:21:82:1b: 1a:58:a6:9f:ff:22:ec:51:e3:8d:35:d3:15:9c:15: ad:5d:01:c6:df:1f:72:45:3a:59:47:29:4c:17:d6: a9:91:3d:e5:cb:ff:a8:e2:f9:27:d5:00:1e:ae:a5: f6:f6:c9:7e:aa:53:c9:47:f3:70:c2:12:a3:5d:00: 05:6b:ff:91:93:07:51:1a:ed:25:6c:8d:96:01:4a: de:c8:7a:63:6a:c4:7a:fa:85:f0:5d:1f:b8:ad:7f: 13:43:7f:f3:07:9e:74:b6:10:42:20:78:56:7e:7a: 65:6a:32:8e:ea:76:fc:fb:19:9e:10:33:ab:36:8b: 3f:bf:9f:c4:a9:e5:fd:f6:11:cb:7e:bb:71:b7:1f: 17:28:d5:a0:9e:ce:34:77:3e:6f:d8:05:80:73:ba: bf:50:a1:80:61:84:49:81:44:12:70:cf:85:9a:e1: 60:65:6f:d7:e5:2a:da:16:3b:a8:ec:d6:ab:4a:1a: 8d:6a:98:6e:47:0a:2b:e7:ca:5a:bf:5a:90:51:e7: 4d:55:99:be:8e:e4:88:f5:45:b6:16:c4:ea:5d:ba: a8:02:81:57:11:60:c1:f0:c3:9d:b9:d4:57:44:0e: 02:b6:d8:16:71:c1:dc:d9:20:49:15:6d:d8:65:87: 3c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7E:01:8D:DA:6B:1D:D5:D9:D4:E1:B8:7B:8C:DA:C5:12:84:E8:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b9:d7:f2:0b:7f:fc:4c:ff:d5:a6:b6:93:84:45:07:85:66: e8:33:c5:58:9d:77:c8:a2:0f:98:34:4a:2a:02:ff:2c:3d:36: 3e:d4:09:c7:a2:26:8c:d7:61:81:a2:9e:25:2e:91:14:77:12: 08:72:7a:31:8f:74:65:b6:cd:da:2a:31:01:58:64:1e:2d:2c: 00:8a:95:76:95:36:6e:7d:dc:d6:9c:06:5b:85:31:31:d5:b6: 60:cb:3b:3f:11:5a:0b:2a:a7:d9:b9:3d:fb:e0:4b:ee:f0:9f: 91:6f:3e:f3:f2:fe:26:38:f9:67:1f:29:06:00:32:ff:bc:02: db:e5:a0:33:16:e2:f3:f9:e3:f1:ef:0f:5c:e2:b5:54:4d:b7: 73:0f:0d:11:b1:76:e2:75:f6:1c:62:f5:05:22:58:8e:ef:dc: bf:33:74:ff:d3:02:5c:22:2e:f9:d1:b9:e2:03:04:3f:88:d1: a1:29:f2:c8:ea:04:6d:b2:71:bb:87:b1:21:ef:41:95:fe:4e: 6c:5b:b1:98:c4:ba:aa:28:09:9e:36:4a:e1:75:d5:6c:b4:ee: e9:8a:c6:76:94:a3:8e:0f:d3:b6:6f:25:a3:ef:a0:31:eb:42: c4:d7:a4:c8:b6:b0:3f:6e:07:ef:51:6c:c3:63:60:83:2b:36: d8:19:06:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Hs/whMmkiVlsDjLwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI2MDkyNDEwMDAyNFoXDTI2MDkyNjEwMDAwMFowLzEtMCsGA1UEAxMk MjRlYTMzYzctZTVmYy00OTllLTgzZGEtMjJjYTFiYmJiMTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnWbrFw/UrvohXUhghsaWKaf/yLsUeONNdMV nBWtXQHG3x9yRTpZRylMF9apkT3ly/+o4vkn1QAerqX29sl+qlPJR/NwwhKjXQAF a/+RkwdRGu0lbI2WAUreyHpjasR6+oXwXR+4rX8TQ3/zB550thBCIHhWfnplajKO 6nb8+xmeEDOrNos/v5/EqeX99hHLfrtxtx8XKNWgns40dz5v2AWAc7q/UKGAYYRJ gUQScM+FmuFgZW/X5SraFjuo7NarShqNaphuRwor58pav1qQUedNVZm+juSI9UW2 FsTqXbqoAoFXEWDB8MOdudRXRA4CttgWccHc2SBJFW3YZYc86QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDt+AY3aax3V2dThuHuM2sUShOgvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvY2QxOThkYTQtZGJjYy00 YmVjLWExYTAtMzFkNjFkNWNjYzcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuudfyC3/8TP/VpraThEUH hWboM8VYnXfIog+YNEoqAv8sPTY+1AnHoiaM12GBop4lLpEUdxIIcnoxj3Rlts3a KjEBWGQeLSwAipV2lTZufdzWnAZbhTEx1bZgyzs/EVoLKqfZuT374Evu8J+Rbz7z 8v4mOPlnHykGADL/vALb5aAzFuLz+ePx7w9c4rVUTbdzDw0RsXbidfYcYvUFIliO 79y/M3T/0wJcIi750bniAwQ/iNGhKfLI6gRtsnG7h7Eh70GV/k5sW7GYxLqqKAme NkrhddVstO7pisZ2lKOOD9O2byWj76Ax60LE16TItrA/bgfvUWzDY2CDKzbYGQaY -----END CERTIFICATE-----Generated at Thu Sep 24 17:41:35 2026 by rpki-client