$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft File: 1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft (raw, json) Hash identifier: cd2izMq+bSt8cZbNE3NTSgbbNvhb1kv4gJaSVklSTfA= Subject key identifier: 45:E5:02:4C:A9:7C:DE:50:81:17:DA:DB:35:7B:F9:1E:AC:83:00:B6 Authority key identifier: 3B:8A:3C:69:D1:E2:A3:9B:09:9B:67:76:AF:BE:58:17:2C:DB:0B:4F Certificate issuer: /CN=1df1d88c-4b1d-4a8a-8319-5d784e995be2 Certificate serial: 010D0C9F4328584F47D1CD58DEA5AC43008F1D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft Manifest number: 010D0C9F4328584CCE1A458B83B939037D0FD6E8 Signing time: Thu 24 Sep 2026 11:00:23 +0000 Manifest this update: Thu 24 Sep 2026 11:00:23 +0000 Manifest next update: Sat 26 Sep 2026 11:00:00 +0000 Files and hashes: 1: 1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl (hash: 01jr7dJUGDOf9KKYk1/M6n6FY5KOg9OiUj+/o+mb1c0=) 2: 57b08375-edfa-3ca6-816f-7c71735f8648.roa (hash: gXkpxY7AajA6K0iLKXbTmh8Q34vuhS+dVreK+2hZUWw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:47:d1:cd:58:de:a5:ac:43:00:8f:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1df1d88c-4b1d-4a8a-8319-5d784e995be2 Validity Not Before: Sep 24 11:00:23 2026 GMT Not After : Sep 26 11:00:00 2026 GMT Subject: CN=92a4c8a1-267b-4427-b02a-68a620da7dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:70:de:9e:e7:8d:bb:52:36:d0:db:a0:18:ff: f7:e1:c5:dd:48:88:e4:70:47:aa:65:f7:62:69:1a: ad:c8:d1:6e:1e:be:72:6b:cc:cd:a8:1d:17:a9:03: ac:17:60:ad:1d:be:10:74:d3:92:76:79:96:6e:12: a9:d2:fd:de:83:62:c1:55:0b:0f:80:d6:82:9a:ef: 51:a6:20:5d:f8:29:f7:cc:8a:d8:3a:b6:64:1f:1c: d1:f9:47:46:6b:c2:8d:02:ea:74:db:5e:9c:1d:f8: 43:d4:5c:e4:70:a5:dc:cb:d8:f7:75:9f:78:84:3c: fb:e8:4c:39:0f:4d:fa:47:0e:76:68:e1:24:1f:d6: 49:3d:30:21:1b:98:ad:d0:97:89:c3:72:fc:ba:f0: 7e:e7:77:ed:50:d5:da:b1:47:7c:d2:de:09:eb:23: 36:a7:dd:74:94:2d:a9:c9:5b:81:41:dc:a2:f7:3e: 50:1b:92:78:51:91:3f:72:f3:19:dd:9b:28:be:e1: 4c:68:9d:1d:24:aa:fb:24:78:db:83:e2:ea:19:9d: 32:ce:9f:7f:74:7d:43:e0:a9:3d:96:ff:dd:70:17: 29:f4:88:d8:4c:a2:ab:b9:6b:58:fc:73:52:3f:a9: 41:64:51:68:6a:93:81:7a:32:69:e1:04:ef:5c:73: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E5:02:4C:A9:7C:DE:50:81:17:DA:DB:35:7B:F9:1E:AC:83:00:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl X509v3 Authority Key Identifier: keyid:3B:8A:3C:69:D1:E2:A3:9B:09:9B:67:76:AF:BE:58:17:2C:DB:0B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:1f:e9:86:0e:92:d9:8d:e7:69:40:02:13:d9:d8:92:84:32: 87:02:00:11:a4:15:f1:26:d5:c3:3c:4d:cb:ec:94:72:a5:70: 94:4a:71:18:99:fd:ee:ab:6b:85:c1:55:c4:1f:33:38:05:4d: c0:09:27:ee:9f:c4:54:78:de:d7:c7:4e:f0:fb:54:26:4d:30: fe:15:d1:1d:44:40:61:53:2f:de:c1:c2:ff:8a:51:c2:b8:10: 9c:67:e4:48:03:77:2a:e0:cc:24:32:a7:de:1d:b8:ce:32:58: 7c:0c:ac:de:91:7d:38:2d:b5:a2:b9:f2:40:c4:4d:88:65:af: 54:1c:50:93:26:87:9e:8d:e4:d7:2d:ca:f0:e1:cf:53:03:56: 1f:36:26:75:66:25:41:8b:8c:e0:1e:41:a8:03:2d:09:ca:05: 29:83:74:85:1d:70:f5:2c:ac:c6:60:bc:37:6c:c6:84:06:2d: 73:6c:2d:56:f6:96:aa:32:66:ff:ed:e5:88:f9:24:e8:26:51: bc:94:23:85:b4:97:75:b7:48:8c:28:3e:a8:76:66:e8:1d:86: 53:d5:43:ea:e5:a5:2d:3a:e5:a7:66:61:18:3b:d7:ed:5e:ef: 61:eb:be:05:6b:40:67:7d:fe:22:68:84:63:31:7d:88:6b:7d: 7e:cf:b2:89 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9H0c1Y3qWsQwCPHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRmMWQ4OGMtNGIxZC00YThhLTgzMTktNWQ3ODRlOTk1 YmUyMB4XDTI2MDkyNDExMDAyM1oXDTI2MDkyNjExMDAwMFowLzEtMCsGA1UEAxMk OTJhNGM4YTEtMjY3Yi00NDI3LWIwMmEtNjhhNjIwZGE3ZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHDenueNu1I20NugGP/34cXdSIjkcEeqZfdi aRqtyNFuHr5ya8zNqB0XqQOsF2CtHb4QdNOSdnmWbhKp0v3eg2LBVQsPgNaCmu9R piBd+Cn3zIrYOrZkHxzR+UdGa8KNAup0216cHfhD1FzkcKXcy9j3dZ94hDz76Ew5 D036Rw52aOEkH9ZJPTAhG5it0JeJw3L8uvB+53ftUNXasUd80t4J6yM2p910lC2p yVuBQdyi9z5QG5J4UZE/cvMZ3ZsovuFMaJ0dJKr7JHjbg+LqGZ0yzp9/dH1D4Kk9 lv/dcBcp9IjYTKKruWtY/HNSP6lBZFFoapOBejJp4QTvXHMPxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEXlAkypfN5QgRfa2zV7+R6sgwC2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZGYx ZDg4Yy00YjFkLTRhOGEtODMxOS01ZDc4NGU5OTViZTIvMWRmMWQ4OGMtNGIxZC00 YThhLTgzMTktNWQ3ODRlOTk1YmUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMWRmMWQ4OGMtNGIxZC00YThhLTgz MTktNWQ3ODRlOTk1YmUyLzFkZjFkODhjLTRiMWQtNGE4YS04MzE5LTVkNzg0ZTk5 NWJlMi5jcmwwHwYDVR0jBBgwFoAUO4o8adHio5sJm2d2r75YFyzbC08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZGYxZDg4Yy00YjFkLTRhOGEtODMxOS01ZDc4 NGU5OTViZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC0H+mGDpLZjedpQAIT2diS hDKHAgARpBXxJtXDPE3L7JRypXCUSnEYmf3uq2uFwVXEHzM4BU3ACSfun8RUeN7X x07w+1QmTTD+FdEdREBhUy/ewcL/ilHCuBCcZ+RIA3cq4MwkMqfeHbjOMlh8DKze kX04LbWiufJAxE2IZa9UHFCTJoeejeTXLcrw4c9TA1YfNiZ1ZiVBi4zgHkGoAy0J ygUpg3SFHXD1LKzGYLw3bMaEBi1zbC1W9paqMmb/7eWI+SToJlG8lCOFtJd1t0iM KD6odmboHYZT1UPq5aUtOuWnZmEYO9ftXu9h674Fa0Bnff4iaIRjMX2Ia31+z7KJ -----END CERTIFICATE-----Generated at Fri Sep 25 08:54:05 2026 by rpki-client