$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft File: 0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft (raw, json) Hash identifier: hYs7TtvTd0N4T7hgl5LDTYwaV5ixc741aZxWrs2l5ZE= Subject key identifier: 20:6A:4E:81:4C:E4:76:C7:34:69:1E:4F:C2:3C:70:F7:45:C4:BD:7C Authority key identifier: 5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E Certificate issuer: /CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Certificate serial: 010D0C9F4328584F70E19A33BEF761E20D431F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft Manifest number: 010D0C9F43285849EC4A33425EE8DEC9DC534A62 Signing time: Fri 09 Oct 2026 04:00:24 +0000 Manifest this update: Fri 09 Oct 2026 04:00:24 +0000 Manifest next update: Mon 12 Oct 2026 04:00:00 +0000 Files and hashes: 1: 0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl (hash: bO85tFRRIqFpoIpZZKdGd9Xu6s/L0Avj4jVzNv4xu4E=) 2: 7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa (hash: iQO5h+WwwHFjk7yTR0+a/E+giV5r9wOramvN1bH0slI=) 3: 9114f267-64fb-3c87-ba5c-fe28d188d01d.roa (hash: 1nTyva9O7fjgffYi1Jblm1qmUZYzI8pcdzODXbG+W3k=) 4: b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa (hash: I86K9mr8X5ParZN1CX+B+f2jrATmBWGh3aAtfSLAkKY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:e1:9a:33:be:f7:61:e2:0d:43:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Validity Not Before: Oct 9 04:00:24 2026 GMT Not After : Oct 12 04:00:00 2026 GMT Subject: CN=1c1eac04-88b9-4a11-92c2-b3eb6b6b6d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9f:41:bb:50:e4:f1:20:f5:fc:50:a1:20:64: 20:4c:d8:a2:cc:fa:cb:43:36:51:81:23:80:11:18: 5c:b8:d4:4a:e6:37:73:be:56:2c:d8:0a:a2:0b:1f: 12:f4:a0:d5:9b:de:26:b4:4c:4d:83:6b:f7:b8:c8: f2:63:75:e0:c4:bc:e8:e4:2f:30:67:d9:c0:96:87: 73:cc:0c:b2:e5:ca:6d:92:69:69:6d:bb:b3:b9:71: 21:10:fe:b7:fa:45:67:d0:b1:18:38:67:12:e0:63: bc:cd:1e:25:9c:2e:f9:4c:69:ad:5d:dc:0a:3d:29: 4b:03:e1:fa:d1:3a:f1:04:7c:5d:00:fc:a2:23:28: 0f:92:d7:88:83:b2:d8:31:84:71:5e:93:62:57:ac: f1:f0:11:bb:f9:e7:b2:21:5e:f6:d3:42:23:29:7d: e3:3d:e9:22:07:7f:09:6d:c2:1b:ff:d8:e1:f0:67: 86:eb:79:d8:82:a4:6e:ae:37:2d:db:c0:80:1e:01: 0e:50:93:6a:91:23:45:c0:5f:b8:86:7c:8d:33:92: 08:db:c8:6d:7c:83:3c:cf:ea:fa:10:38:3a:7d:51: 00:ae:87:34:2d:ad:f5:bf:59:90:89:3e:e7:46:d1: d4:15:a3:eb:0a:1c:51:e5:4b:e6:0b:e3:ac:f8:ea: fa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6A:4E:81:4C:E4:76:C7:34:69:1E:4F:C2:3C:70:F7:45:C4:BD:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl X509v3 Authority Key Identifier: keyid:5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:32:c6:9a:05:bc:fe:02:17:c0:a6:b8:61:ad:c2:9a:af:c3: fc:3c:68:f3:03:7e:35:82:a2:24:aa:9e:b3:e2:fb:8c:c4:ab: 4e:f2:04:6d:97:71:b1:e6:df:e5:5c:6c:e8:0b:d5:e0:f2:89: ab:89:9d:16:93:0b:d6:25:c4:ba:d6:ed:f9:5b:03:ab:1a:a0: 17:9a:e3:12:a3:a4:b4:07:94:0a:60:bb:a8:97:06:84:e9:5f: 3e:86:14:f5:20:ca:35:5b:e0:fc:35:52:57:61:d7:78:f3:70: 3d:2e:dc:84:03:76:36:4c:a0:56:b6:46:1a:f9:7e:f4:2e:83: 30:c1:d4:3e:ef:2b:be:c9:de:bb:fa:e8:e1:33:95:b7:a8:2f: 20:45:84:3a:e2:1a:54:70:5c:3f:9f:9b:cf:88:88:99:0e:4c: 75:8e:41:83:d8:82:e5:32:40:cd:64:1b:02:8d:bc:e2:41:12: ba:ea:20:54:56:fa:82:ff:86:3b:fc:18:5e:87:e3:a5:d6:6a: 0b:11:9d:e9:0c:9d:d4:32:53:6c:a7:52:88:8d:c8:21:72:82: cc:89:24:89:3b:94:f0:d0:b1:b1:1f:52:2e:f8:e8:2b:ab:92: c8:8e:82:88:cf:ba:3f:81:b8:8b:50:a7:14:c2:50:19:7d:5b: e5:ad:69:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9w4Zozvvdh4g1DH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzM2FmZjUtMTBkMy00NTRhLThiMjctY2E0YzRmNTA4 NTFmMB4XDTI2MTAwOTA0MDAyNFoXDTI2MTAxMjA0MDAwMFowLzEtMCsGA1UEAxMk MWMxZWFjMDQtODhiOS00YTExLTkyYzItYjNlYjZiNmI2ZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ9Bu1Dk8SD1/FChIGQgTNiizPrLQzZRgSOA ERhcuNRK5jdzvlYs2AqiCx8S9KDVm94mtExNg2v3uMjyY3XgxLzo5C8wZ9nAlodz zAyy5cptkmlpbbuzuXEhEP63+kVn0LEYOGcS4GO8zR4lnC75TGmtXdwKPSlLA+H6 0TrxBHxdAPyiIygPkteIg7LYMYRxXpNiV6zx8BG7+eeyIV7200IjKX3jPekiB38J bcIb/9jh8GeG63nYgqRurjct28CAHgEOUJNqkSNFwF+4hnyNM5II28htfIM8z+r6 EDg6fVEAroc0La31v1mQiT7nRtHUFaPrChxR5UvmC+Os+Or6xwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCBqToFM5HbHNGkeT8I8cPdFxL18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMz YWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRjNGY1MDg1MWYvMGMzM2FmZjUtMTBkMy00 NTRhLThiMjctY2E0YzRmNTA4NTFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGMzM2FmZjUtMTBkMy00NTRhLThi MjctY2E0YzRmNTA4NTFmLzBjMzNhZmY1LTEwZDMtNDU0YS04YjI3LWNhNGM0ZjUw ODUxZi5jcmwwHwYDVR0jBBgwFoAUXyLdWFbvJsccr47s7qn9afs9CH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMzYWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRj NGY1MDg1MWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCoMsaaBbz+AhfAprhhrcKa r8P8PGjzA341gqIkqp6z4vuMxKtO8gRtl3Gx5t/lXGzoC9Xg8omriZ0WkwvWJcS6 1u35WwOrGqAXmuMSo6S0B5QKYLuolwaE6V8+hhT1IMo1W+D8NVJXYdd483A9LtyE A3Y2TKBWtkYa+X70LoMwwdQ+7yu+yd67+ujhM5W3qC8gRYQ64hpUcFw/n5vPiIiZ Dkx1jkGD2ILlMkDNZBsCjbziQRK66iBUVvqC/4Y7/Bheh+Ol1moLEZ3pDJ3UMlNs p1KIjcghcoLMiSSJO5Tw0LGxH1Iu+Ogrq5LIjoKIz7o/gbiLUKcUwlAZfVvlrWlY -----END CERTIFICATE-----Generated at Fri Oct 9 20:47:23 2026 by rpki-client