$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft File: cadf002a-d081-4e51-89c4-f7121259516d.mft (raw, json) Hash identifier: bBJaMfI8F6Z9qTGRDy/F7w8J2CIcc/mx0+1myY4HT2E= Subject key identifier: BB:A3:E4:5D:84:E2:9D:AB:8F:F7:F7:46:7D:F9:DF:BD:A4:EE:BB:DA Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F4328584F51D3B2C23D915BD831F3E080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft Manifest number: 010D0C9F43285842AD9ECC2C9997439D002F5843 Signing time: Mon 28 Sep 2026 01:02:22 +0000 Manifest this update: Mon 28 Sep 2026 01:02:22 +0000 Manifest next update: Tue 29 Sep 2026 20:00:00 +0000 Files and hashes: 1: 088b1098-9f13-3b9c-9ed2-1c879f079fea.roa (hash: mHcvGXfL8Sc2B2QsxVlm7Vhnc2BG47ZOiGuQpymUEt0=) 2: 966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa (hash: Sgh3LMIklEScC77lv/WSyI+S3Gt0c3XRxDvnhQuUqys=) 3: a8f35c59-b971-3d84-a662-b03a19638ac2.roa (hash: Jb8pg2zhCTBWTwYuIWXe9PzrKC5tz+FN+CB+pZ0Y+bU=) 4: cadf002a-d081-4e51-89c4-f7121259516d.crl (hash: 59eFVA+d0hBFc1PfeAymr05d/HSxbO9VKCwyVbESqsM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d3:b2:c2:3d:91:5b:d8:31:f3:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Sep 28 01:02:22 2026 GMT Not After : Sep 29 20:00:00 2026 GMT Subject: CN=9578406d-7ff7-4528-95db-791ea1a3b8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0f:bf:1d:60:33:d4:61:55:c5:17:cc:aa:80: 49:15:24:81:d9:e0:11:16:ac:7d:cc:9b:5b:1d:d0: 8f:ef:e0:50:f2:b2:4f:e4:6c:39:35:4e:8a:c8:41: ac:98:02:73:0e:ef:70:76:d7:f0:20:59:62:7f:b3: 8a:dc:d0:16:09:d7:bf:a7:83:bf:58:4d:9f:e5:92: 36:20:fd:d8:c6:b9:a9:95:c9:cf:75:47:fb:b1:07: 5f:e6:5c:c0:27:55:a6:36:7c:0b:01:a3:87:77:5d: ed:35:85:a8:b9:49:a6:55:6c:c9:66:e4:22:ad:e2: 1a:7e:98:13:61:e3:06:62:61:5d:a1:5b:6d:61:95: 6a:d3:15:2e:f1:09:24:08:9b:b2:37:1f:9e:fc:5b: f6:80:99:46:6b:0a:ae:a1:af:71:91:1b:7b:85:ec: 78:24:98:73:d1:d4:eb:f5:cc:f4:57:ea:ac:bb:d6: 5f:87:7f:dd:3f:30:dc:0f:b0:1b:b5:08:37:b3:06: 07:20:96:28:fd:b0:ec:4c:00:21:8d:7c:a8:63:cd: 36:16:18:1e:73:24:08:25:73:6b:fc:a4:da:19:e8: 87:07:5f:9d:54:95:7a:89:b9:5c:1d:4b:7c:fd:0f: ae:eb:f1:95:19:6d:5f:73:b0:54:93:b4:56:a2:ac: 0e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A3:E4:5D:84:E2:9D:AB:8F:F7:F7:46:7D:F9:DF:BD:A4:EE:BB:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:aa:b5:9d:d3:45:39:9d:4e:9d:a7:84:e6:cd:89:10:55:df: 7c:5c:82:25:00:98:d6:81:70:d2:03:87:e3:93:25:37:61:d6: 25:3e:79:f4:3e:e9:3d:15:89:d2:1c:e7:1a:3e:9d:76:a3:0e: da:19:4a:ff:e1:7a:0a:61:7f:60:ac:e5:39:1d:e7:64:17:ad: 6a:42:81:a5:77:96:f2:21:4a:69:e3:95:3f:28:39:0b:a5:9e: a5:5f:fc:44:c7:e7:f8:5a:8a:9c:a2:c8:13:ae:76:3d:c9:93: 8b:3d:66:aa:a4:5a:d2:83:85:08:79:8d:76:49:8d:96:1f:3d: 64:42:80:5b:0b:fa:69:e7:2d:86:0e:eb:e8:89:fa:18:d7:73: f7:ed:ab:62:7c:5d:f1:dc:96:21:44:61:90:4b:20:dc:73:35: f1:2a:17:f0:7d:87:fa:52:17:51:95:f1:f5:bf:13:a7:25:76: 31:9e:68:ba:bd:7a:0b:e4:0b:e5:d9:a8:7b:2a:4e:fd:09:18: fb:fe:97:3b:80:70:8e:69:df:5e:a9:26:97:ab:2c:d5:13:ce: 3c:b6:27:cd:8f:b2:8b:4e:30:59:06:91:0e:b2:d2:73:d2:c6: 90:12:f6:e5:93:06:c2:de:cf:5f:e5:91:1d:05:29:cb:b6:a7: 67:5b:dc:e5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9R07LCPZFb2DHz4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI2MDkyODAxMDIyMloXDTI2MDkyOTIwMDAwMFowLzEtMCsGA1UEAxMk OTU3ODQwNmQtN2ZmNy00NTI4LTk1ZGItNzkxZWExYTNiOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg+/HWAz1GFVxRfMqoBJFSSB2eARFqx9zJtb HdCP7+BQ8rJP5Gw5NU6KyEGsmAJzDu9wdtfwIFlif7OK3NAWCde/p4O/WE2f5ZI2 IP3YxrmplcnPdUf7sQdf5lzAJ1WmNnwLAaOHd13tNYWouUmmVWzJZuQireIafpgT YeMGYmFdoVttYZVq0xUu8QkkCJuyNx+e/Fv2gJlGawquoa9xkRt7hex4JJhz0dTr 9cz0V+qsu9Zfh3/dPzDcD7AbtQg3swYHIJYo/bDsTAAhjXyoY802FhgecyQIJXNr /KTaGeiHB1+dVJV6iblcHUt8/Q+u6/GVGW1fc7BUk7RWoqwO/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLuj5F2E4p2rj/f3Rn35372k7rvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvY2FkZjAwMmEtZDA4MS00 ZTUxLTg5YzQtZjcxMjEyNTk1MTZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPqrWd00U5nU6dp4TmzYkQ Vd98XIIlAJjWgXDSA4fjkyU3YdYlPnn0Puk9FYnSHOcaPp12ow7aGUr/4XoKYX9g rOU5HedkF61qQoGld5byIUpp45U/KDkLpZ6lX/xEx+f4WoqcosgTrnY9yZOLPWaq pFrSg4UIeY12SY2WHz1kQoBbC/pp5y2GDuvoifoY13P37atifF3x3JYhRGGQSyDc czXxKhfwfYf6UhdRlfH1vxOnJXYxnmi6vXoL5Avl2ah7Kk79CRj7/pc7gHCOad9e qSaXqyzVE848tifNj7KLTjBZBpEOstJz0saQEvblkwbC3s9f5ZEdBSnLtqdnW9zl -----END CERTIFICATE-----Generated at Mon Sep 28 17:19:32 2026 by rpki-client