$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft File: cd7304e1-3bc1-43c1-b035-93ee027063db.mft (raw, json) Hash identifier: hLIVkvI7qDNHHW+EHqC0bQhwedIM4++7/D+ltyE20wo= Subject key identifier: 4E:0A:51:21:17:2E:F2:E5:4F:8A:5B:D1:6A:88:0F:5E:39:14:72:F1 Authority key identifier: EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95 Certificate issuer: /CN=cd7304e1-3bc1-43c1-b035-93ee027063db Certificate serial: 010D0C9F4328584F4DA2B694FB71CD82576A5DE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft Manifest number: 010D0C9F432858415B0D7C3E1166217992E81B50 Signing time: Sat 26 Sep 2026 13:00:23 +0000 Manifest this update: Sat 26 Sep 2026 13:00:23 +0000 Manifest next update: Mon 28 Sep 2026 13:00:00 +0000 Files and hashes: 1: 05f41490-eb46-385a-b1c5-c75862aa15d4.roa (hash: QusCnvXhj6P/NJ4F3c6jvuMct7wjzj0Z2vY+vjQjm9I=) 2: 3ad9037d-cc4e-3a46-981a-715e438d4f71.roa (hash: uEZ2Z/WQQNsbVUg8o8r0MVaN8Akzu9QSUfTNkrp0kY0=) 3: 843faa0c-cfed-3624-b1d7-29c9a1f2e126.roa (hash: gSKKaneCe+nosCRGlVqSQNafXR+g/NoQG0ErkQjXHCo=) 4: cd7304e1-3bc1-43c1-b035-93ee027063db.crl (hash: liK9RJ97qgwB3Ra7AR9vGOqmwgWZ6XELe1sv2+QjesE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:a2:b6:94:fb:71:cd:82:57:6a:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7304e1-3bc1-43c1-b035-93ee027063db Validity Not Before: Sep 26 13:00:23 2026 GMT Not After : Sep 28 13:00:00 2026 GMT Subject: CN=3aea0c67-1782-45be-bfa1-9149e8a02963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:1b:25:c1:85:44:4f:bf:1a:0a:b9:1b:32: a2:6d:cb:c2:e1:a4:01:5c:b4:c4:ab:3f:ba:0c:04: 39:95:26:70:33:4e:fa:5d:1b:1c:9a:3b:ba:dd:59: 46:22:39:1a:d1:6a:98:91:17:fc:69:89:f5:0f:9f: 9d:53:d7:69:e2:ba:73:1a:18:c4:51:b5:ec:51:8c: 5e:ba:93:39:d4:22:94:6d:50:4c:41:60:ee:96:07: 46:e6:1c:15:a5:bd:34:4b:04:5f:d8:44:33:72:26: 09:f8:b8:41:3a:75:e5:e1:57:10:81:25:1a:72:89: 04:27:8c:71:e5:4f:4b:0f:d3:4c:f7:7c:0f:d9:b8: 07:2c:1d:80:4f:33:67:79:8e:73:2b:2f:c3:bc:c1: a2:dc:92:64:25:5c:d2:50:36:25:80:ad:dc:e4:6c: bc:0b:cb:9c:f1:83:a7:9b:f5:22:3c:7a:8c:44:02: ff:42:a8:2d:b4:f6:63:a9:9b:03:0c:2a:93:7f:33: 4d:b1:f1:5a:c5:11:6e:6c:c1:97:72:50:fb:05:c6: 66:8a:36:f4:79:0c:23:b5:a0:02:ca:3e:af:1e:d4: b1:38:c3:10:25:b9:f1:5a:06:4f:b2:38:b6:44:86: 5a:94:58:3c:13:84:0e:31:1d:0d:39:9e:eb:38:98: 8f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0A:51:21:17:2E:F2:E5:4F:8A:5B:D1:6A:88:0F:5E:39:14:72:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl X509v3 Authority Key Identifier: keyid:EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:4f:f8:ac:22:6b:df:46:06:52:50:cc:b6:ac:1a:0b:17:6e: 8a:16:75:2d:89:92:4c:d4:c5:7a:7a:9b:e7:fc:40:9a:0a:2c: fa:8b:9f:3b:f5:93:af:cc:b6:7b:a4:e4:7f:39:6b:1f:41:5a: fb:4c:7e:c4:0d:97:92:d1:b1:77:cf:2d:59:6d:d8:b6:62:c3: 4f:5b:c6:84:f2:34:03:fe:c6:ee:2b:c8:a8:9c:c8:3f:d3:a3: 06:3f:a4:42:40:da:0e:18:57:f4:f1:f6:f8:49:fe:91:cf:95: c4:f6:8b:71:b7:99:23:ad:8f:b1:16:0f:0a:bf:3d:be:dc:ad: 4a:82:93:ce:69:e6:5d:2f:ba:85:aa:c4:56:e2:09:05:9b:f5: 03:e0:a6:87:51:f1:30:2a:e1:92:26:07:76:bc:8e:fa:93:85: 02:47:da:1d:97:14:f5:da:55:af:44:a8:24:b8:fb:8f:b0:0d: 67:2c:01:ad:ae:d0:63:a4:d5:fc:21:68:80:57:8f:ea:e0:68: f7:21:33:d8:ed:d8:6d:1e:9c:4b:52:d3:78:88:62:ba:9d:53: 02:d5:cd:48:84:07:5d:a2:1e:e8:96:43:58:fb:0e:fb:4f:79: 7d:32:da:25:9f:ec:0a:9c:08:f3:ea:70:1c:c8:32:d3:b1:b1: 2d:c9:7c:99 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9NoraU+3HNgldqXeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3MzA0ZTEtM2JjMS00M2MxLWIwMzUtOTNlZTAyNzA2 M2RiMB4XDTI2MDkyNjEzMDAyM1oXDTI2MDkyODEzMDAwMFowLzEtMCsGA1UEAxMk M2FlYTBjNjctMTc4Mi00NWJlLWJmYTEtOTE0OWU4YTAyOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrgbJcGFRE+/Ggq5GzKibcvC4aQBXLTEqz+6 DAQ5lSZwM076XRscmju63VlGIjka0WqYkRf8aYn1D5+dU9dp4rpzGhjEUbXsUYxe upM51CKUbVBMQWDulgdG5hwVpb00SwRf2EQzciYJ+LhBOnXl4VcQgSUacokEJ4xx 5U9LD9NM93wP2bgHLB2ATzNneY5zKy/DvMGi3JJkJVzSUDYlgK3c5Gy8C8uc8YOn m/UiPHqMRAL/QqgttPZjqZsDDCqTfzNNsfFaxRFubMGXclD7BcZmijb0eQwjtaAC yj6vHtSxOMMQJbnxWgZPsji2RIZalFg8E4QOMR0NOZ7rOJiPQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE4KUSEXLvLlT4pb0WqID145FHLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZDcz MDRlMS0zYmMxLTQzYzEtYjAzNS05M2VlMDI3MDYzZGIvY2Q3MzA0ZTEtM2JjMS00 M2MxLWIwMzUtOTNlZTAyNzA2M2RiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2Q3MzA0ZTEtM2JjMS00M2MxLWIw MzUtOTNlZTAyNzA2M2RiL2NkNzMwNGUxLTNiYzEtNDNjMS1iMDM1LTkzZWUwMjcw NjNkYi5jcmwwHwYDVR0jBBgwFoAU7rmdZNXt9QBRjGNxx50ffKrFHZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZDczMDRlMS0zYmMxLTQzYzEtYjAzNS05M2Vl MDI3MDYzZGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6T/isImvfRgZSUMy2rBoL F26KFnUtiZJM1MV6epvn/ECaCiz6i5879ZOvzLZ7pOR/OWsfQVr7TH7EDZeS0bF3 zy1Zbdi2YsNPW8aE8jQD/sbuK8ionMg/06MGP6RCQNoOGFf08fb4Sf6Rz5XE9otx t5kjrY+xFg8Kvz2+3K1KgpPOaeZdL7qFqsRW4gkFm/UD4KaHUfEwKuGSJgd2vI76 k4UCR9odlxT12lWvRKgkuPuPsA1nLAGtrtBjpNX8IWiAV4/q4Gj3ITPY7dhtHpxL UtN4iGK6nVMC1c1IhAddoh7olkNY+w77T3l9Mtoln+wKnAjz6nAcyDLTsbEtyXyZ -----END CERTIFICATE-----Generated at Sun Sep 27 09:57:05 2026 by rpki-client