$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft File: 4aeeea60-e12e-4570-a310-cac6f50c2bef.mft (raw, json) Hash identifier: DHxASHsGxfkWdT9HQJTuO49cLtD4bLoRc2DHq9V39zI= Subject key identifier: AA:D7:6D:E4:B6:5C:06:FB:92:05:58:55:9A:AF:82:85:83:8C:72:D0 Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F Certificate issuer: /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef Certificate serial: 010D0C9F4328584FD73EB72C11E8C65F3EBF7F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft Manifest number: 010D0C9F4328584073A82645A47BAF84172CED3F Signing time: Sat 14 Nov 2026 20:00:25 +0000 Manifest this update: Sat 14 Nov 2026 20:00:25 +0000 Manifest next update: Mon 16 Nov 2026 20:00:00 +0000 Files and hashes: 1: 17cbbf97-598d-34ab-88a5-0011ef8780c7.roa (hash: iESa0rgd2ntcse+q45eZvg0xv++6i8nfWRaaVDYj3Gk=) 2: 2ae6d119-4d73-3c4b-94d5-2ba6db842fcc.roa (hash: k9G6LWyIWHitQMresdd0B8DM4Nm/96ojBCWN+imD0n0=) 3: 4aeeea60-e12e-4570-a310-cac6f50c2bef.crl (hash: X8IPFWNST+XZsyIqF0O3M3HesdB/mVBD0w6K5+KnpqE=) 4: 9cdc9f06-fadc-3c2a-a572-a2bfc3dd9abf.roa (hash: ckBS2d5zM+HBb5e0DubANPwSdDqiBS0sSaOldHAVrqk=) 5: acff9046-e5a0-3170-b9bc-60a50523997d.roa (hash: gPi/H9dBi9df0f8gKzXCv7EwhVB8taKsgK48nIfLHpU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d7:3e:b7:2c:11:e8:c6:5f:3e:bf:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef Validity Not Before: Nov 14 20:00:25 2026 GMT Not After : Nov 16 20:00:00 2026 GMT Subject: CN=08d59810-2bc6-4238-8da3-e1b050b0af0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ac:32:2c:2b:a5:12:42:44:5f:bc:98:56:93: 51:56:df:16:64:11:5b:ec:3e:7e:4d:7c:a1:31:ea: 2a:3f:da:d0:90:f7:19:ec:0a:42:58:ae:87:fc:cd: 69:fd:73:c5:40:35:fb:6a:0b:ed:96:84:3e:65:fd: 89:61:9a:56:0d:3b:9e:7a:8f:2f:69:26:90:07:25: 13:21:5b:19:a4:93:20:1e:c6:a5:60:f0:80:5b:c3: 97:6c:4e:ea:70:68:05:38:39:b9:33:8c:f3:b1:ca: 37:0b:16:8f:1a:71:b5:47:88:e6:e7:70:2d:60:13: ba:3c:43:ef:80:24:96:86:f4:d4:a4:ca:83:ca:63: f5:e4:06:a9:16:7c:d0:0d:a7:fa:5e:21:96:df:25: f4:f7:42:a0:cb:08:5c:5e:1c:6b:37:bc:60:e1:0b: a1:7a:07:53:3a:f5:6a:c5:cd:ee:5d:66:98:db:7b: 46:72:5c:e8:20:7b:e2:a4:7f:b2:8c:c1:8e:79:a7: 19:e7:ad:de:42:06:1f:66:b0:68:79:ce:3f:cf:75: 5f:81:09:c7:58:84:42:c6:ed:18:0a:6a:35:24:b7: 88:b6:41:62:5f:d0:a8:33:a3:cf:f6:0c:a5:af:1f: 97:e5:ca:77:a6:37:f5:8e:26:f2:e4:af:55:d3:ab: a9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D7:6D:E4:B6:5C:06:FB:92:05:58:55:9A:AF:82:85:83:8C:72:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl X509v3 Authority Key Identifier: keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:9f:db:87:7a:6f:cd:b4:03:4e:7e:ff:d3:c4:de:a0:0c:90: e3:23:b0:59:04:2d:d5:67:7e:ad:9c:db:3d:61:54:df:52:95: 46:bd:87:8d:96:ac:25:9a:7b:ac:a2:58:26:e0:82:04:e0:69: 4e:a9:0c:bc:03:8e:f4:4e:68:b7:93:f4:04:06:64:48:12:98: 80:f9:9d:1c:ad:71:c0:80:80:7b:8c:8b:75:8c:d9:20:2c:a4: 96:fb:0a:0a:45:64:51:b9:50:dc:71:2a:13:1b:ae:60:82:dd: c6:d5:ce:0e:ae:c7:08:73:40:77:0d:3c:6a:be:6a:b7:0c:32: 26:6f:46:e0:f3:14:9e:f2:86:81:ab:6d:09:65:f8:0d:3b:d1: 31:93:32:20:88:10:d5:5f:40:0b:3f:8e:ee:8b:ca:db:ac:a2: de:13:ee:80:85:88:10:a3:4d:c8:48:39:81:81:24:aa:f8:04: fc:fe:a6:c2:1d:2e:0e:13:d6:01:13:38:a2:83:b6:38:13:20: 36:2b:45:a3:27:5d:b7:84:c0:9a:7d:c9:e9:b7:f9:e5:39:20: fe:42:79:68:1f:b0:1f:f5:53:5c:aa:4c:c5:e5:84:1c:ea:c3: f8:d1:8c:0a:51:50:89:2c:4d:cd:ef:46:48:47:60:ec:75:18: 8e:13:65:94 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/XPrcsEejGXz6/f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFlZWVhNjAtZTEyZS00NTcwLWEzMTAtY2FjNmY1MGMy YmVmMB4XDTI2MTExNDIwMDAyNVoXDTI2MTExNjIwMDAwMFowLzEtMCsGA1UEAxMk MDhkNTk4MTAtMmJjNi00MjM4LThkYTMtZTFiMDUwYjBhZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhawyLCulEkJEX7yYVpNRVt8WZBFb7D5+TXyh MeoqP9rQkPcZ7ApCWK6H/M1p/XPFQDX7agvtloQ+Zf2JYZpWDTueeo8vaSaQByUT IVsZpJMgHsalYPCAW8OXbE7qcGgFODm5M4zzsco3CxaPGnG1R4jm53AtYBO6PEPv gCSWhvTUpMqDymP15AapFnzQDaf6XiGW3yX090KgywhcXhxrN7xg4QuhegdTOvVq xc3uXWaY23tGclzoIHvipH+yjMGOeacZ563eQgYfZrBoec4/z3VfgQnHWIRCxu0Y Cmo1JLeItkFiX9CoM6PP9gylrx+X5cp3pjf1jiby5K9V06upeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKrXbeS2XAb7kgVYVZqvgoWDjHLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVl ZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2ZjUwYzJiZWYvNGFlZWVhNjAtZTEyZS00 NTcwLWEzMTAtY2FjNmY1MGMyYmVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGFlZWVhNjAtZTEyZS00NTcwLWEz MTAtY2FjNmY1MGMyYmVmLzRhZWVlYTYwLWUxMmUtNDU3MC1hMzEwLWNhYzZmNTBj MmJlZi5jcmwwHwYDVR0jBBgwFoAUpJDk1gjBX1VkEHVwfcHmpS1DnY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVlZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2 ZjUwYzJiZWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrn9uHem/NtANOfv/TxN6g DJDjI7BZBC3VZ36tnNs9YVTfUpVGvYeNlqwlmnusolgm4IIE4GlOqQy8A470Tmi3 k/QEBmRIEpiA+Z0crXHAgIB7jIt1jNkgLKSW+woKRWRRuVDccSoTG65ggt3G1c4O rscIc0B3DTxqvmq3DDImb0bg8xSe8oaBq20JZfgNO9ExkzIgiBDVX0ALP47ui8rb rKLeE+6AhYgQo03ISDmBgSSq+AT8/qbCHS4OE9YBEziig7Y4EyA2K0WjJ123hMCa fcnpt/nlOSD+QnloH7Af9VNcqkzF5YQc6sP40YwKUVCJLE3N70ZIR2DsdRiOE2WU -----END CERTIFICATE-----Generated at Sun Nov 15 14:02:01 2026 by rpki-client