$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: XepfcLZ3Pw/GNi/izDS0E8GnSoiuMB9pf7w1I7JaOtE= Subject key identifier: FC:20:7E:64:82:94:90:07:1F:63:96:23:11:52:A6:39:45:88:9A:E6 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584F625749A6400E03FE9753CC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70CC1D Signing time: Sat 03 Oct 2026 23:00:23 +0000 Manifest this update: Sat 03 Oct 2026 23:00:23 +0000 Manifest next update: Mon 05 Oct 2026 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: 8ftxBwv4PBLgvwdIIntQKKzboZelGZlid7UT+4zFFO0=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: u4KzEmZRAks+oF9rsTEwv2qkS9IimZiGCkntM/SM668=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: FwtFKe+fIs8EMNN2TEgaki41dtY6iAWXKtAqI71Wn7o=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: WYi4aGT+0Lk7l/sFvzQj4GuBdANs04OMbR3o+MYY1AE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:57:49:a6:40:0e:03:fe:97:53:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Oct 3 23:00:23 2026 GMT Not After : Oct 5 23:00:00 2026 GMT Subject: CN=97ac09e7-25d4-4e5e-a55f-53d0ead7166e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:15:a8:ea:de:bd:49:b4:5f:ba:d4:db:40:5c: cc:e0:4c:eb:72:92:28:2d:b2:89:0b:a9:17:c6:7a: 31:a9:05:43:03:7a:d3:16:0a:f4:35:3b:00:11:5c: 6d:71:5e:16:cc:92:10:85:7b:98:9b:f6:1a:9a:0f: d9:1e:2c:d3:9c:aa:26:76:e4:92:43:25:07:c9:e4: 7c:7b:34:f7:46:96:4f:85:c2:52:17:ee:ad:02:da: 38:00:b3:40:18:c1:da:68:68:6a:3d:21:df:a0:d0: 1c:77:05:c4:25:6a:00:42:db:73:ac:52:bd:84:b7: 66:45:ba:7f:52:7f:ca:3f:f0:40:86:54:68:35:e1: 3b:4b:96:5a:19:46:78:57:9f:85:92:d4:8a:44:7b: 02:a4:79:5d:10:c1:8c:f2:b3:6b:84:df:bc:ab:99: 55:bf:39:5d:32:cd:c3:8f:92:33:0b:09:a0:d3:cd: c3:7b:4d:8d:c9:53:b6:c6:69:6a:04:ce:3e:ce:a1: 02:7f:9e:3a:1f:44:da:03:18:6a:46:03:d1:8c:bf: b6:77:96:66:e1:9d:0b:3e:85:83:5d:a0:f3:8c:cb: 86:72:58:10:74:35:16:c2:ba:6b:cd:6e:34:d6:a1: 47:17:21:8a:96:56:3a:e5:1d:1d:2f:4a:95:b6:53: 0f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:20:7E:64:82:94:90:07:1F:63:96:23:11:52:A6:39:45:88:9A:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:45:8a:09:6b:c0:2c:32:fe:5f:da:b8:38:4a:51:6a:e2:18: d9:16:51:1e:f1:e8:fc:a0:f9:48:0d:86:0f:55:fd:ac:39:c7: e4:e5:e5:fe:9d:9b:29:59:0e:64:de:f3:f0:60:7d:dc:a8:52: f0:56:ce:66:df:e9:4f:28:93:0c:15:ca:e7:ea:aa:9e:be:d5: 19:16:c4:97:3d:f7:2d:4e:77:33:9a:b3:0e:b5:bb:4e:d6:5e: 5f:22:86:a8:24:9c:03:d2:bb:e2:28:82:84:01:e5:b9:e3:c9: fe:6b:69:a6:ee:bd:bd:0b:c5:5f:ec:8b:ef:74:ca:28:0e:25: 0e:47:4f:72:6e:47:70:a5:ba:d5:08:ba:aa:8c:49:9b:b5:1b: 21:6d:51:44:e9:63:ce:01:6d:ce:d7:b0:4c:d3:07:7f:9f:7d: 9e:31:b3:1b:00:35:a2:05:d9:7b:9c:78:79:0a:e8:33:85:03: 7e:1b:b7:cd:8f:7a:b6:d6:b9:74:2d:59:6a:58:2b:5a:8e:86: 73:4c:33:e8:ea:aa:4f:a3:e8:c4:0c:a1:3c:31:9b:33:c6:04: 1a:25:98:cf:d2:bb:f1:94:ae:fc:4a:c4:f7:35:d8:65:cb:77: d2:07:82:4f:be:ed:0e:6a:8e:f6:87:83:49:f1:6b:b7:dd:1c: b8:70:38:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9iV0mmQA4D/pdTzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI2MTAwMzIzMDAyM1oXDTI2MTAwNTIzMDAwMFowLzEtMCsGA1UEAxMk OTdhYzA5ZTctMjVkNC00ZTVlLWE1NWYtNTNkMGVhZDcxNjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRWo6t69SbRfutTbQFzM4EzrcpIoLbKJC6kX xnoxqQVDA3rTFgr0NTsAEVxtcV4WzJIQhXuYm/Yamg/ZHizTnKomduSSQyUHyeR8 ezT3RpZPhcJSF+6tAto4ALNAGMHaaGhqPSHfoNAcdwXEJWoAQttzrFK9hLdmRbp/ Un/KP/BAhlRoNeE7S5ZaGUZ4V5+FktSKRHsCpHldEMGM8rNrhN+8q5lVvzldMs3D j5IzCwmg083De02NyVO2xmlqBM4+zqECf546H0TaAxhqRgPRjL+2d5Zm4Z0LPoWD XaDzjMuGclgQdDUWwrprzW401qFHFyGKllY65R0dL0qVtlMPawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPwgfmSClJAHH2OWIxFSpjlFiJrmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAURYoJa8AsMv5f2rg4SlFq 4hjZFlEe8ej8oPlIDYYPVf2sOcfk5eX+nZspWQ5k3vPwYH3cqFLwVs5m3+lPKJMM Fcrn6qqevtUZFsSXPfctTnczmrMOtbtO1l5fIoaoJJwD0rviKIKEAeW548n+a2mm 7r29C8Vf7IvvdMooDiUOR09ybkdwpbrVCLqqjEmbtRshbVFE6WPOAW3O17BM0wd/ n32eMbMbADWiBdl7nHh5CugzhQN+G7fNj3q21rl0LVlqWCtajoZzTDPo6qpPo+jE DKE8MZszxgQaJZjP0rvxlK78SsT3Ndhly3fSB4JPvu0Oao72h4NJ8Wu33Ry4cDj1 -----END CERTIFICATE-----Generated at Sun Oct 4 05:40:42 2026 by rpki-client