$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft File: 628d865a-2d19-4af1-984a-6c443304d9f0.mft (raw, json) Hash identifier: 8GF70ZMZbhRCSF0hJkFibd62o4rrqT+Rc3k9459Xwv8= Subject key identifier: E1:29:8B:7D:75:78:70:CF:B9:05:20:E3:27:DC:AB:8C:61:77:EC:74 Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0 Certificate serial: 010D0C9F4328584F4B4F1DBC47E5AA8364029F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft Manifest number: 010D0C9F43285847F42C26C6F2A071B9C6A01774 Signing time: Fri 25 Sep 2026 17:00:22 +0000 Manifest this update: Fri 25 Sep 2026 17:00:22 +0000 Manifest next update: Sun 27 Sep 2026 17:00:00 +0000 Files and hashes: 1: 0242e3bb-d361-314e-9397-022ca2fba7a8.roa (hash: y4ZNytIRXGvWayWCgZWxaM4+FLptqt2l75J5Wal/yfw=) 2: 1a9639da-a216-3ece-b327-c09a057856a3.roa (hash: GipWLbaJTD9kzGgzQXqINj1tD4DR4Tx8QNqnUrtI0Jg=) 3: 349d3b72-a194-37a3-95c4-97b0c3e9f593.roa (hash: 3jzlj3mHiEliiG7NcevSbq0Cq1Ob0t9jjbgZP2Cc2zU=) 4: 3611eb1d-586a-3087-8c7c-45e34fe9b737.roa (hash: vR7xFDzfUIEyOlY/sb23aXupNN5kwQu0wnLpF43Mvrk=) 5: 628d865a-2d19-4af1-984a-6c443304d9f0.crl (hash: QUobGsIePCqpw+iv9bHweQx5WoyvwZXPH9G4qcwnoX0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:4f:1d:bc:47:e5:aa:83:64:02:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0 Validity Not Before: Sep 25 17:00:22 2026 GMT Not After : Sep 27 17:00:00 2026 GMT Subject: CN=e703ed50-3240-4a4f-9341-be66d802e11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f8:15:f0:ae:6d:80:27:06:74:7f:a3:74:df: 6b:77:8d:34:1d:0a:84:0c:b8:5e:f3:6c:97:94:fa: ab:57:2b:4d:c0:f9:09:6f:e0:37:d6:0d:60:df:38: ca:23:c4:88:20:6a:62:63:b9:c5:28:bf:28:86:1d: be:bd:45:e4:b8:9c:d4:94:7c:a8:6e:13:16:96:0d: 1b:62:8b:8f:d2:93:fe:c8:68:0c:67:e4:fc:c4:24: ea:c5:33:8b:7c:fa:9f:e6:52:cb:b7:bf:66:52:ba: 3c:05:00:53:60:bb:cc:4a:8f:39:b2:56:2f:9d:32: 2f:bd:57:8e:c5:99:19:7b:71:fb:7a:31:cd:cf:dc: 09:18:6a:60:80:e0:d6:a7:09:d5:db:79:d1:d7:1f: db:d8:43:db:01:74:16:4b:75:6c:8e:a1:a1:20:6f: eb:34:c0:63:7b:eb:10:d3:e5:26:2c:15:16:0e:3b: a8:d4:bd:11:5b:3f:59:8e:16:04:8a:d4:43:2e:24: df:73:07:07:b5:9c:65:5c:0c:5a:b4:36:53:62:fd: eb:ea:a4:51:71:51:a2:f7:58:1a:33:0b:9e:e0:18: e7:ad:fb:da:01:36:f1:20:05:04:3a:37:0e:f6:e3: 62:81:da:03:f9:a4:4a:b0:90:06:8c:7d:6a:9a:b6: a8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:29:8B:7D:75:78:70:CF:B9:05:20:E3:27:DC:AB:8C:61:77:EC:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl X509v3 Authority Key Identifier: keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f8:3c:66:9f:fa:a9:e6:a5:bc:ba:3d:d0:c1:5e:0f:37:45: eb:d2:2c:9d:b6:c8:82:e8:23:1d:08:ec:7f:64:9f:cc:82:9f: 98:dc:4b:75:79:66:43:67:3d:57:06:0d:b6:b2:f0:77:fb:60: 11:93:8d:02:0e:2a:2d:49:c6:67:47:26:7d:b7:f5:ed:c2:f2: d7:f8:8b:05:dc:a0:af:2f:70:c3:bb:6e:2a:71:d1:10:38:d5: d0:e1:7d:77:6a:c9:00:95:d2:24:6d:14:a8:96:83:88:fc:f5: c9:09:f3:d0:62:88:55:a6:dc:8a:63:a9:7c:56:a7:3a:e9:24: 0b:da:ec:3d:52:f8:62:d9:f8:4b:16:8a:f6:cc:7a:0f:80:7a: 5a:40:40:b2:00:02:47:00:03:9c:64:67:c6:b2:a7:0a:85:3b: 27:8f:67:5b:7d:81:06:18:93:72:b4:5c:24:e4:34:cc:15:af: 12:f9:95:2d:f7:10:90:64:92:83:2c:5d:9e:e5:9f:59:f0:ff: 88:15:9c:d5:fd:f5:8b:f4:bc:ee:b5:7e:0b:30:28:2c:1e:87: e0:6b:5a:d4:ca:92:03:eb:e8:9f:e0:fd:5a:1d:e6:ce:02:a8: fa:27:88:6e:21:38:de:87:19:c6:a8:52:bf:c7:c1:92:24:d2: 5b:02:cf:aa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9LTx28R+Wqg2QCn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZDg2NWEtMmQxOS00YWYxLTk4NGEtNmM0NDMzMDRk OWYwMB4XDTI2MDkyNTE3MDAyMloXDTI2MDkyNzE3MDAwMFowLzEtMCsGA1UEAxMk ZTcwM2VkNTAtMzI0MC00YTRmLTkzNDEtYmU2NmQ4MDJlMTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfgV8K5tgCcGdH+jdN9rd400HQqEDLhe82yX lPqrVytNwPkJb+A31g1g3zjKI8SIIGpiY7nFKL8ohh2+vUXkuJzUlHyobhMWlg0b YouP0pP+yGgMZ+T8xCTqxTOLfPqf5lLLt79mUro8BQBTYLvMSo85slYvnTIvvVeO xZkZe3H7ejHNz9wJGGpggODWpwnV23nR1x/b2EPbAXQWS3VsjqGhIG/rNMBje+sQ 0+UmLBUWDjuo1L0RWz9ZjhYEitRDLiTfcwcHtZxlXAxatDZTYv3r6qRRcVGi91ga Mwue4BjnrfvaATbxIAUEOjcO9uNigdoD+aRKsJAGjH1qmraoaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOEpi311eHDPuQUg4yfcq4xhd+x0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Mjhk ODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMwNGQ5ZjAvNjI4ZDg2NWEtMmQxOS00 YWYxLTk4NGEtNmM0NDMzMDRkOWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjI4ZDg2NWEtMmQxOS00YWYxLTk4 NGEtNmM0NDMzMDRkOWYwLzYyOGQ4NjVhLTJkMTktNGFmMS05ODRhLTZjNDQzMzA0 ZDlmMC5jcmwwHwYDVR0jBBgwFoAUJYu8/Mz4Vjaea43uldPRD0mYCCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0 MzMwNGQ5ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCa+Dxmn/qp5qW8uj3QwV4P N0Xr0iydtsiC6CMdCOx/ZJ/Mgp+Y3Et1eWZDZz1XBg22svB3+2ARk40CDiotScZn RyZ9t/XtwvLX+IsF3KCvL3DDu24qcdEQONXQ4X13askAldIkbRSoloOI/PXJCfPQ YohVptyKY6l8Vqc66SQL2uw9Uvhi2fhLFor2zHoPgHpaQECyAAJHAAOcZGfGsqcK hTsnj2dbfYEGGJNytFwk5DTMFa8S+ZUt9xCQZJKDLF2e5Z9Z8P+IFZzV/fWL9Lzu tX4LMCgsHofga1rUypID6+if4P1aHebOAqj6J4huITjehxnGqFK/x8GSJNJbAs+q -----END CERTIFICATE-----Generated at Sat Sep 26 13:47:53 2026 by rpki-client