$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json) Hash identifier: JCMiiQf2Rtlsx18piI7Ey8Z7Akyy7/mlHtTTKQrCepk= Subject key identifier: F0:F2:72:FF:67:91:BE:1F:20:11:AD:16:DA:AE:DC:A4:AC:55:18:EF Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584F51F07DFC176D2211D8613D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft Manifest number: 010D0C9F4328584073A83840A2BEE7D9A3337B25 Signing time: Mon 28 Sep 2026 02:00:22 +0000 Manifest this update: Mon 28 Sep 2026 02:00:22 +0000 Manifest next update: Wed 30 Sep 2026 02:00:00 +0000 Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: ymig9RDAizDClr8A1C/bUsppw2WYgmRYT1W7ClOa6qs=) 2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: 8vexb5vCYHKPkOeOj4XgtSYvEcIPtrBc9YK+7+durQE=) 3: b24dbab2-534c-3e59-b62f-16d920e96e56.asa (hash: ORK6OBV2078olV9cWb16omJ+o7jBcvmU2xWSNZc1qFA=) 4: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: 2M4kzXdgFbJuNGGaFisrKClMB1TSlp3GRGlRnAhAC60=) 5: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: jN7EU4c1rekPQM9nUlwDxEhqcmqGJMy2t7Uu55/NFC0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:f0:7d:fc:17:6d:22:11:d8:61:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Sep 28 02:00:22 2026 GMT Not After : Sep 30 02:00:00 2026 GMT Subject: CN=52917fd1-5a6b-4792-8c52-9126c77e735e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:6e:a0:02:94:ac:f6:ef:dd:69:9b:a3:86: f2:72:c5:45:f8:1d:79:71:b9:40:5c:eb:72:02:d4: f8:e9:89:0d:e0:4b:c5:64:11:b1:03:79:47:0d:34: 0e:f9:b8:c3:0a:dd:a3:27:1d:b7:c5:9f:38:d4:de: b4:73:92:aa:19:3a:47:53:72:35:5b:57:9d:c0:fd: f0:c1:81:be:1a:17:3d:b9:38:d8:a4:99:04:ec:aa: 94:57:fa:8e:d6:e3:03:05:bb:8c:b4:2e:03:71:a5: 5a:5a:ac:6b:97:b5:5c:b1:e4:d2:8f:d1:12:be:b2: fd:dd:31:88:7c:b8:77:7c:00:b6:95:5e:18:1e:f4: cd:b0:82:9c:6c:b5:26:df:8c:6c:c9:5f:97:a3:87: f3:ca:0d:c7:be:94:8b:ff:6f:ac:50:0c:67:b4:1e: 2e:0e:a7:dc:61:bf:31:d5:5a:05:aa:be:da:e8:a8: 07:bd:44:f3:c4:27:d8:d2:cd:bf:ac:5c:0c:b5:90: 2c:ec:8d:ed:03:27:ca:2b:0e:ae:b4:c8:94:d2:3f: f6:c6:78:14:04:29:54:8e:4e:f6:f1:64:34:9d:94: 37:65:31:49:3a:e5:c2:9e:70:18:0a:54:31:45:57: b0:79:bc:9f:7c:09:c0:0c:b5:47:68:4a:75:38:25: 8a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F2:72:FF:67:91:BE:1F:20:11:AD:16:DA:AE:DC:A4:AC:55:18:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:8c:e7:f3:81:9d:54:ae:86:1a:31:42:5d:e6:b6:7a:c2:5b: 57:ea:22:ad:db:31:b8:ea:d1:e5:fd:0d:49:59:c9:99:e6:49: 2e:36:a3:cc:88:d5:a1:9e:ad:5f:ba:bd:eb:58:95:a1:9e:e6: 73:0b:ad:5a:15:a6:29:53:16:ab:32:4e:a3:c8:66:e6:b0:e2: 98:40:93:11:6d:f0:08:41:40:fd:b5:a0:c1:3d:a9:89:cc:f3: 41:14:da:ba:c9:e8:b9:bb:2e:2d:e1:74:0d:52:4d:95:9f:c2: c4:05:64:2b:7d:f8:73:f9:47:17:2b:45:ea:09:3b:fe:4e:f9: 04:77:33:61:fd:39:b6:c1:d8:e8:45:ea:83:44:c8:b7:ce:75: 05:f9:23:da:3c:ee:4f:69:0f:12:7f:43:ea:5f:cd:24:ef:9e: cb:f2:0f:63:fb:e0:cd:c7:a9:c6:f2:2a:28:eb:12:bb:47:85: e2:57:da:1f:22:5a:f9:dd:09:64:73:53:60:c9:c0:12:7b:e5: 9f:2a:38:da:d1:ad:2d:17:d1:00:b9:66:94:70:15:f7:5e:82: a6:5a:0e:bf:56:f3:1c:05:88:58:a1:93:69:f9:04:25:68:c2: 74:6c:67:58:16:d5:1d:8f:98:c8:74:ef:0e:2e:e8:22:dd:69: d2:95:a5:f8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9R8H38F20iEdhhPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI2MDkyODAyMDAyMloXDTI2MDkzMDAyMDAwMFowLzEtMCsGA1UEAxMk NTI5MTdmZDEtNWE2Yi00NzkyLThjNTItOTEyNmM3N2U3MzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmxuoAKUrPbv3Wmbo4bycsVF+B15cblAXOty AtT46YkN4EvFZBGxA3lHDTQO+bjDCt2jJx23xZ841N60c5KqGTpHU3I1W1edwP3w wYG+Ghc9uTjYpJkE7KqUV/qO1uMDBbuMtC4DcaVaWqxrl7VcseTSj9ESvrL93TGI fLh3fAC2lV4YHvTNsIKcbLUm34xsyV+Xo4fzyg3HvpSL/2+sUAxntB4uDqfcYb8x 1VoFqr7a6KgHvUTzxCfY0s2/rFwMtZAs7I3tAyfKKw6utMiU0j/2xngUBClUjk72 8WQ0nZQ3ZTFJOuXCnnAYClQxRVewebyffAnADLVHaEp1OCWK8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPDycv9nkb4fIBGtFtqu3KSsVRjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00 NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/jOfzgZ1UroYaMUJd5rZ6 wltX6iKt2zG46tHl/Q1JWcmZ5kkuNqPMiNWhnq1fur3rWJWhnuZzC61aFaYpUxar Mk6jyGbmsOKYQJMRbfAIQUD9taDBPamJzPNBFNq6yei5uy4t4XQNUk2Vn8LEBWQr ffhz+UcXK0XqCTv+TvkEdzNh/Tm2wdjoReqDRMi3znUF+SPaPO5PaQ8Sf0PqX80k 757L8g9j++DNx6nG8ioo6xK7R4XiV9ofIlr53Qlkc1NgycASe+WfKjja0a0tF9EA uWaUcBX3XoKmWg6/VvMcBYhYoZNp+QQlaMJ0bGdYFtUdj5jIdO8OLugi3WnSlaX4 -----END CERTIFICATE-----Generated at Mon Sep 28 21:44:15 2026 by rpki-client