$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft File: 8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft (raw, json) Hash identifier: XqAuCSQZzLonsK6AC+VlmF+kE4XDcczwiD45qIgPLTk= Subject key identifier: 6F:E7:59:C8:27:F5:F2:6F:65:CF:D8:46:29:D9:2C:FB:96:B0:B8:8A Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 Certificate issuer: /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Certificate serial: 010D0C9F4328584FD7F2566DC9B80BCD40938B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft Manifest number: 010D0C9F43285843FEF07D6FC52B221009C8A315 Signing time: Sun 15 Nov 2026 02:02:23 +0000 Manifest this update: Sun 15 Nov 2026 02:02:23 +0000 Manifest next update: Tue 17 Nov 2026 15:00:00 +0000 Files and hashes: 1: 1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa (hash: eR+0xAoyo26S9oIBa7ytmhVSZawzJGOscsDRlBudae4=) 2: 8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl (hash: ecOyXwcP+uRalVnCf89Hz4DC9QvhKltz7IhZzrX98as=) 3: a91f6701-0585-395e-ad18-03c9b663d0f6.roa (hash: 4O5wR6WoVzmCthQfCO8L7tHw/B7AXDv7NqxA7uLTuiQ=) 4: bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa (hash: z4C8vVFh2ywv5N9HrL7jfYncKbKZcUgAMS0mRX4OofA=) 5: e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa (hash: e2+A8nxQFM4dkpLvcBrfPLxBkAzBrOIODgeNEcDoIB4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d7:f2:56:6d:c9:b8:0b:cd:40:93:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Validity Not Before: Nov 15 02:02:23 2026 GMT Not After : Nov 17 15:00:00 2026 GMT Subject: CN=9fa1ddc1-9c7f-411c-be72-bfc67dd4b711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:b7:c9:c1:c8:a9:e1:2e:0c:40:12:0e:b1: 3d:4b:34:96:e4:b9:2c:68:a6:f4:03:f5:82:e2:5f: fc:26:7f:49:36:df:34:09:91:45:ad:7f:7a:63:78: d9:79:89:1c:f8:54:d8:ca:aa:ac:85:83:05:c2:5d: e0:a3:83:a5:c3:26:13:e5:d4:c1:08:ca:b6:9e:64: b8:bd:a0:57:e4:c8:6f:6c:1c:15:05:4d:97:84:cd: b2:81:58:24:9f:05:f3:20:5a:f5:62:30:c7:d9:cf: 0f:58:90:48:a4:38:35:af:08:e6:26:5a:e5:d7:50: 83:c5:5b:e0:10:7c:9c:51:33:dc:d2:8c:96:4a:62: 22:14:08:73:26:7f:f6:48:0f:e9:d3:75:a2:a8:57: 09:7f:bc:43:ae:62:27:46:00:25:54:f0:a4:94:18: d4:a4:9d:c2:ca:53:d3:58:85:6b:dc:06:35:69:41: 11:4e:9b:1d:82:a8:39:ee:92:f9:ec:14:9e:e1:5c: bc:b4:ac:67:a7:88:4d:22:80:42:4a:95:34:61:5b: 92:c1:2e:10:fc:b4:79:02:47:4b:27:49:49:31:96: 77:74:8d:9c:12:8a:3b:fd:b5:7c:e2:c0:55:c4:7e: dc:44:23:8f:a6:87:27:30:56:ec:4d:47:cb:f8:4d: b0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E7:59:C8:27:F5:F2:6F:65:CF:D8:46:29:D9:2C:FB:96:B0:B8:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl X509v3 Authority Key Identifier: keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:cc:ae:3c:b2:e2:e8:9d:21:cd:fb:7b:85:e7:e4:1b:d7:b7: 98:19:9a:5f:36:29:76:e1:a4:0d:07:49:4c:f9:8d:fb:6f:9c: 97:fe:49:04:1d:a7:a1:bf:e1:69:0c:81:2b:9e:87:07:cb:fa: cf:a1:35:83:de:9b:ef:10:30:87:01:43:73:72:c7:5d:8e:cb: 87:6c:8d:bb:25:55:79:1c:6c:2a:30:a1:e6:56:28:3e:99:99: 99:f5:90:7a:02:63:de:7d:74:66:84:e9:86:97:08:4c:15:cf: 3b:1b:21:0c:f5:4e:ab:e9:e1:d3:1d:80:0c:55:65:5d:9c:91: e5:b3:c6:6a:c8:c1:7d:12:cc:53:fd:bf:f7:3f:72:45:80:a8: 18:69:01:b8:e2:5c:67:71:4f:4c:ac:3d:41:57:d2:05:f3:d6: 47:4f:60:ed:1a:38:ee:96:4c:c5:b7:b8:64:b8:ff:2e:37:8c: 37:83:7e:28:3e:90:cd:ed:d1:e8:82:6d:37:0d:fd:a3:5f:ec: 04:ac:d9:9c:06:2c:69:6d:45:c5:4e:77:dc:ef:e0:56:a4:09: fb:6b:30:6c:fa:79:4c:30:06:5d:e0:d3:dc:99:da:f4:a1:bd: 09:ed:c3:c2:5b:aa:c0:5f:c9:28:b6:cd:9b:bf:dc:ac:18:38: 78:74:c9:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/X8lZtybgLzUCTi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0 OWY4MB4XDTI2MTExNTAyMDIyM1oXDTI2MTExNzE1MDAwMFowLzEtMCsGA1UEAxMk OWZhMWRkYzEtOWM3Zi00MTFjLWJlNzItYmZjNjdkZDRiNzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl63ycHIqeEuDEASDrE9SzSW5LksaKb0A/WC 4l/8Jn9JNt80CZFFrX96Y3jZeYkc+FTYyqqshYMFwl3go4OlwyYT5dTBCMq2nmS4 vaBX5MhvbBwVBU2XhM2ygVgknwXzIFr1YjDH2c8PWJBIpDg1rwjmJlrl11CDxVvg EHycUTPc0oyWSmIiFAhzJn/2SA/p03WiqFcJf7xDrmInRgAlVPCklBjUpJ3CylPT WIVr3AY1aUERTpsdgqg57pL57BSe4Vy8tKxnp4hNIoBCSpU0YVuSwS4Q/LR5AkdL J0lJMZZ3dI2cEoo7/bV84sBVxH7cRCOPpocnMFbsTUfL+E2w+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG/nWcgn9fJvZc/YRinZLPuWsLiKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvOGU0MzNjMWYtYTA3Mi00 ZGZkLTgwOTYtYzZjODYzNGE0OWY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4 NjM0YTQ5ZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjzK48suLonSHN+3uF5+Qb 17eYGZpfNil24aQNB0lM+Y37b5yX/kkEHaehv+FpDIErnocHy/rPoTWD3pvvEDCH AUNzcsddjsuHbI27JVV5HGwqMKHmVig+mZmZ9ZB6AmPefXRmhOmGlwhMFc87GyEM 9U6r6eHTHYAMVWVdnJHls8ZqyMF9EsxT/b/3P3JFgKgYaQG44lxncU9MrD1BV9IF 89ZHT2DtGjjulkzFt7hkuP8uN4w3g34oPpDN7dHogm03Df2jX+wErNmcBixpbUXF Tnfc7+BWpAn7azBs+nlMMAZd4NPcmdr0ob0J7cPCW6rAX8kots2bv9ysGDh4dMnx -----END CERTIFICATE-----Generated at Sun Nov 15 15:35:49 2026 by rpki-client