$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft File: 8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft (raw, json) Hash identifier: tBZ7OqTfAEwSXny99iF8JMDKChghol7T8jN4hniz3XE= Subject key identifier: 1D:41:F1:8A:05:55:72:6F:B9:23:FC:49:43:B3:81:24:9E:7E:E8:84 Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C Certificate issuer: /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5 Certificate serial: 010D0C9F4328584F430CD81A818E070AA276E420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft Manifest number: 010D0C9F4328584842AEA7D4A339FCE1EFCDC093 Signing time: Tue 22 Sep 2026 18:00:23 +0000 Manifest this update: Tue 22 Sep 2026 18:00:23 +0000 Manifest next update: Fri 25 Sep 2026 18:00:00 +0000 Files and hashes: 1: 0395e48a-e337-3165-b134-5c62b28818bd.roa (hash: UEIriXeAN/k77UHsCeafGrl7GZVzk0bpGm0PQap0ZWc=) 2: 4a3e3800-5ec5-3b00-932f-a0909a00190a.roa (hash: EN/22o1+l4BKsb+iv5k4OX4QNV21XXd156ICURi1pnk=) 3: 522ee799-00c1-3c81-9a66-32d095f18a7d.roa (hash: Qyf59GOHJLgal1oxIIepod5eLYiH1IDdCQuxcWEeNtM=) 4: 8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl (hash: dRg9MK7j0dcF2N8gqqRLmWAvIAcVnc4vA+KlRbTDE+c=) 5: bab99bc5-d663-3ba0-b545-5274edb63cfa.roa (hash: mBugC18zbMdJPsL7ZfI5cEYqqIav185M1Fc+ncRhOYA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:0c:d8:1a:81:8e:07:0a:a2:76:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5 Validity Not Before: Sep 22 18:00:23 2026 GMT Not After : Sep 25 18:00:00 2026 GMT Subject: CN=aaa1b007-fa73-4f48-97ed-3e25dee3421f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:11:1c:4c:88:08:f0:08:f2:d2:88:c1:f3: 88:33:ce:f2:cc:bb:a4:56:98:4d:e9:83:07:fa:d0: ca:4a:e5:49:45:24:d4:e9:8c:a6:d9:bf:b7:6e:9d: 7d:cf:78:2f:83:7f:65:3c:f1:5f:95:65:9d:82:c0: 41:b1:a9:1f:e3:26:56:eb:f4:9e:85:3f:12:54:bf: ac:8b:38:0a:7e:26:ac:73:14:e6:cd:01:8a:18:46: d0:1b:07:7f:15:fc:56:1a:e2:eb:b3:7c:73:a8:56: 8d:11:7b:43:cd:fa:33:58:03:8e:8d:4c:44:b0:05: 01:ab:d1:39:b7:09:3e:87:be:e7:18:a3:aa:c1:eb: 4b:1a:24:20:c0:ef:06:56:cf:df:e6:f4:c8:85:de: 20:f0:b3:33:ae:e9:16:dc:c0:20:c3:a1:5d:99:b7: 4f:bd:14:23:a9:54:d7:d1:17:84:2d:65:f6:6d:d1: 1b:43:a5:36:db:54:3f:f6:d3:03:68:91:fa:22:30: a1:51:06:a0:82:51:51:59:8b:82:a9:86:df:69:ad: cc:63:5f:61:4f:ab:ea:4f:60:bc:4e:37:e0:c6:e4: 84:f4:38:94:e2:65:11:e0:24:8d:35:09:8b:36:7d: 89:44:86:4f:72:2f:e9:38:c8:93:2b:95:7a:6c:10: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:41:F1:8A:05:55:72:6F:B9:23:FC:49:43:B3:81:24:9E:7E:E8:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl X509v3 Authority Key Identifier: keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:7c:68:ee:26:4e:2a:37:16:df:3d:ec:3d:90:c7:84:93:6a: 8f:7c:6a:d8:0f:4b:cd:b7:ad:d3:47:0e:59:fc:b5:dd:ed:2c: 24:8b:62:02:40:7d:b3:0c:bf:e1:ad:13:d6:10:1a:4d:5c:44: 10:4e:1a:70:6a:6d:90:f3:31:81:0f:28:01:25:31:f0:81:3b: da:02:c8:d8:95:d7:50:26:80:e7:a5:f2:05:1b:97:89:9d:7b: 45:45:6a:b3:79:d1:7a:25:50:08:55:96:3a:7f:c0:d1:ba:49: 4b:e2:af:33:27:91:dc:67:a2:82:aa:f6:8c:c2:d1:0f:9f:a8: 8a:6d:a9:97:3a:14:80:fc:5e:03:fb:d6:1f:90:84:06:c8:c9: c9:c3:d0:04:ff:7b:68:d3:56:c9:9f:8a:13:0c:73:9f:a3:6a: bf:7d:4f:ef:4f:bc:1a:9f:40:4e:23:06:87:f3:5f:aa:e7:09: be:94:15:f4:ed:22:aa:6a:47:e4:31:9f:c6:32:36:8f:93:59: 25:85:d8:ff:26:6e:ae:11:04:b3:26:2a:a8:b5:b8:58:ec:99: a7:38:04:66:06:37:34:e3:94:c4:a3:f4:13:74:5d:4b:c3:a9: 53:e2:85:1b:0d:c0:dd:9e:f2:e5:9a:0d:ee:ae:d5:61:5f:dd: fb:c2:4b:ef -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9DDNgagY4HCqJ25CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM4N2Q4OTQtZDJiYS00ZTMzLThlODQtNDRiOWQ5ZDZl M2Q1MB4XDTI2MDkyMjE4MDAyM1oXDTI2MDkyNTE4MDAwMFowLzEtMCsGA1UEAxMk YWFhMWIwMDctZmE3My00ZjQ4LTk3ZWQtM2UyNWRlZTM0MjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0cRHEyICPAI8tKIwfOIM87yzLukVphN6YMH +tDKSuVJRSTU6Yym2b+3bp19z3gvg39lPPFflWWdgsBBsakf4yZW6/SehT8SVL+s izgKfiascxTmzQGKGEbQGwd/FfxWGuLrs3xzqFaNEXtDzfozWAOOjUxEsAUBq9E5 twk+h77nGKOqwetLGiQgwO8GVs/f5vTIhd4g8LMzrukW3MAgw6FdmbdPvRQjqVTX 0ReELWX2bdEbQ6U221Q/9tMDaJH6IjChUQagglFRWYuCqYbfaa3MY19hT6vqT2C8 TjfgxuSE9DiU4mUR4CSNNQmLNn2JRIZPci/pOMiTK5V6bBACOQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB1B8YoFVXJvuSP8SUOzgSSefuiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Mzg3 ZDg5NC1kMmJhLTRlMzMtOGU4NC00NGI5ZDlkNmUzZDUvODM4N2Q4OTQtZDJiYS00 ZTMzLThlODQtNDRiOWQ5ZDZlM2Q1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODM4N2Q4OTQtZDJiYS00ZTMzLThl ODQtNDRiOWQ5ZDZlM2Q1LzgzODdkODk0LWQyYmEtNGUzMy04ZTg0LTQ0YjlkOWQ2 ZTNkNS5jcmwwHwYDVR0jBBgwFoAUtn9XhLpAdF7cT+Sx8GS3mXk4aDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84Mzg3ZDg5NC1kMmJhLTRlMzMtOGU4NC00NGI5 ZDlkNmUzZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDFfGjuJk4qNxbfPew9kMeE k2qPfGrYD0vNt63TRw5Z/LXd7Swki2ICQH2zDL/hrRPWEBpNXEQQThpwam2Q8zGB DygBJTHwgTvaAsjYlddQJoDnpfIFG5eJnXtFRWqzedF6JVAIVZY6f8DRuklL4q8z J5HcZ6KCqvaMwtEPn6iKbamXOhSA/F4D+9YfkIQGyMnJw9AE/3to01bJn4oTDHOf o2q/fU/vT7wan0BOIwaH81+q5wm+lBX07SKqakfkMZ/GMjaPk1klhdj/Jm6uEQSz JiqotbhY7JmnOARmBjc045TEo/QTdF1Lw6lT4oUbDcDdnvLlmg3urtVhX937wkvv -----END CERTIFICATE-----Generated at Wed Sep 23 10:14:57 2026 by rpki-client