$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft File: 4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft (raw, json) Hash identifier: a9hZpgOY50GTWhP1/8NYryP51TFYsAnAX5TSyzxsBLA= Subject key identifier: BE:A7:37:D0:D0:65:47:B5:84:A8:EF:34:BB:B6:F2:82:BF:F7:0E:27 Authority key identifier: 2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 Certificate issuer: /CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Certificate serial: 010D0C9F4328584F4542AF095721286371D0E0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft Manifest number: 010D0C9F4328584BC7EC849A397DD986C4316947 Signing time: Wed 23 Sep 2026 13:00:24 +0000 Manifest this update: Wed 23 Sep 2026 13:00:24 +0000 Manifest next update: Sat 26 Sep 2026 13:00:00 +0000 Files and hashes: 1: 4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl (hash: 2fXF99zO/Ml3+zTpMNTfGNuykYHlW0q0UQajOFRxw0w=) 2: d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa (hash: n6fJ7C1wt8PAcCqemGsEwKCrRDI0AR/2CVpUqMop4Nk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:af:09:57:21:28:63:71:d0:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Validity Not Before: Sep 23 13:00:24 2026 GMT Not After : Sep 26 13:00:00 2026 GMT Subject: CN=c2b548ad-7a51-4e8d-a887-93617931778f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:37:20:33:51:cc:8a:0a:f1:54:e8:78:27: da:4a:1b:0d:78:ab:69:41:59:ed:c7:c3:df:50:ae: 1c:c8:1f:2a:30:2e:3f:c7:32:de:08:49:3b:e4:af: f5:06:ed:71:e4:56:cd:77:6a:d1:96:60:fc:ca:3f: 6b:5c:6a:7a:c1:87:91:dd:38:36:77:32:3d:d0:01: fc:61:71:b4:18:5f:2d:03:51:d2:94:8a:9d:9a:c1: b9:27:5b:e2:b7:4e:33:06:4f:30:60:22:7b:0d:72: e3:b8:47:c0:4b:21:86:34:ca:0b:08:18:53:82:92: ea:79:69:8a:f6:93:88:9f:5f:64:b1:e7:1a:a3:d6: ee:28:f0:ae:9a:a3:ec:28:ab:a3:d9:8e:da:90:f9: 18:93:0d:ec:e8:e0:69:0d:c1:4c:b4:7c:c8:c3:de: 14:43:99:01:21:b6:a4:4a:49:46:b9:aa:d7:cb:67: 6b:a2:ef:55:d7:d9:85:29:96:f0:f4:a9:15:43:67: b8:06:a5:e8:f0:e7:f6:64:c1:47:f3:87:a0:4d:f3: b8:b8:a9:69:c6:ae:c8:0f:73:00:60:5b:71:78:63: 97:43:49:39:6b:7d:62:e6:ec:8a:ba:27:c5:d9:9f: 96:3e:01:8c:61:a0:03:50:41:0e:6d:4f:30:ce:dd: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A7:37:D0:D0:65:47:B5:84:A8:EF:34:BB:B6:F2:82:BF:F7:0E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl X509v3 Authority Key Identifier: keyid:2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6e:d7:ff:88:10:a7:a3:4e:b2:47:83:46:29:e8:8e:be:a7: 41:a3:91:15:22:d0:88:71:7e:6d:95:ed:8d:27:83:6d:36:2c: eb:c8:b2:d8:d0:51:bc:dc:10:ee:2c:42:a7:1e:8c:9c:78:52: b2:cc:16:cb:8c:3a:62:d8:9e:e3:78:f4:2f:8c:1b:cd:43:03: 7c:77:ad:6c:67:28:32:18:54:9e:da:3f:75:59:1c:71:49:6c: b1:f2:19:20:91:0e:b6:c0:8a:0b:68:3c:ca:aa:17:60:90:09: ce:db:5d:bd:15:b1:5f:24:02:21:01:0f:48:af:7d:a2:b4:3a: 59:f7:20:7a:7d:af:25:8d:9e:d1:e4:33:8a:d8:fb:77:a1:38: 3a:13:2a:70:94:53:ef:90:5a:8c:5f:7f:9f:f5:c2:9e:31:47: 66:18:cb:d8:2f:7a:dc:c8:05:b4:76:20:ed:76:3d:9b:94:d8: aa:6a:3a:6b:73:e6:12:28:ff:dd:82:d2:69:b9:23:ce:7d:09: b2:8f:a4:3d:0b:29:14:ac:36:a4:12:59:e5:01:c6:a3:41:6b: 6e:8d:8a:d5:3e:1e:63:b2:4a:96:cf:e7:90:1d:38:8a:50:e7: fc:db:7f:26:0b:32:0b:4f:1e:8c:00:98:07:e5:a8:4a:98:71: 33:c2:d1:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9FQq8JVyEoY3HQ4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRjZGYxZjQtNWU2MC00MzhkLTg5MzQtMGNhMjFkMGI0 NWFmMB4XDTI2MDkyMzEzMDAyNFoXDTI2MDkyNjEzMDAwMFowLzEtMCsGA1UEAxMk YzJiNTQ4YWQtN2E1MS00ZThkLWE4ODctOTM2MTc5MzE3NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBs3IDNRzIoK8VToeCfaShsNeKtpQVntx8Pf UK4cyB8qMC4/xzLeCEk75K/1Bu1x5FbNd2rRlmD8yj9rXGp6wYeR3Tg2dzI90AH8 YXG0GF8tA1HSlIqdmsG5J1vit04zBk8wYCJ7DXLjuEfASyGGNMoLCBhTgpLqeWmK 9pOIn19ksecao9buKPCumqPsKKuj2Y7akPkYkw3s6OBpDcFMtHzIw94UQ5kBIbak SklGuarXy2drou9V19mFKZbw9KkVQ2e4BqXo8Of2ZMFH84egTfO4uKlpxq7ID3MA YFtxeGOXQ0k5a31i5uyKuifF2Z+WPgGMYaADUEEObU8wzt3Y8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL6nN9DQZUe1hKjvNLu28oK/9w4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNk ZjFmNC01ZTYwLTQzOGQtODkzNC0wY2EyMWQwYjQ1YWYvNGRjZGYxZjQtNWU2MC00 MzhkLTg5MzQtMGNhMjFkMGI0NWFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGRjZGYxZjQtNWU2MC00MzhkLTg5 MzQtMGNhMjFkMGI0NWFmLzRkY2RmMWY0LTVlNjAtNDM4ZC04OTM0LTBjYTIxZDBi NDVhZi5jcmwwHwYDVR0jBBgwFoAUKtcrN6YK8Qr5CP1mtfg4wMSxYWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNkZjFmNC01ZTYwLTQzOGQtODkzNC0wY2Ey MWQwYjQ1YWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzbtf/iBCno06yR4NGKeiO vqdBo5EVItCIcX5tle2NJ4NtNizryLLY0FG83BDuLEKnHoyceFKyzBbLjDpi2J7j ePQvjBvNQwN8d61sZygyGFSe2j91WRxxSWyx8hkgkQ62wIoLaDzKqhdgkAnO2129 FbFfJAIhAQ9Ir32itDpZ9yB6fa8ljZ7R5DOK2Pt3oTg6EypwlFPvkFqMX3+f9cKe MUdmGMvYL3rcyAW0diDtdj2blNiqajprc+YSKP/dgtJpuSPOfQmyj6Q9CykUrDak ElnlAcajQWtujYrVPh5jskqWz+eQHTiKUOf8238mCzILTx6MAJgH5ahKmHEzwtFa -----END CERTIFICATE-----Generated at Wed Sep 23 19:04:19 2026 by rpki-client