$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft File: 643177f7-12a4-4138-aa72-1b5beaada59f.mft (raw, json) Hash identifier: 5JBLG87kq+B4g7heI0cPKtdjhQJFiWTirC7JHnhQOu8= Subject key identifier: 08:56:70:1A:3E:16:64:08:AE:DC:09:73:5B:EF:75:A5:88:18:75:08 Authority key identifier: E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 Certificate issuer: /CN=643177f7-12a4-4138-aa72-1b5beaada59f Certificate serial: 010D0C9F4328584F53EACA9B31C4354DDAC95760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft Manifest number: 010D0C9F4328584B34AFE1DCD460592DE4D3F408 Signing time: Mon 28 Sep 2026 19:00:24 +0000 Manifest this update: Mon 28 Sep 2026 19:00:24 +0000 Manifest next update: Thu 01 Oct 2026 19:00:00 +0000 Files and hashes: 1: 35272512-77fe-37f7-a2ff-bd89d524ad28.roa (hash: 4kcXpUvwopWoVnUjw0wqfKU6DHfLI3Xt122ZX02xZSc=) 2: 4e2655fb-9643-3251-b316-c102da99b510.roa (hash: LO5T5lSLmhECxO8I+Z9vhgabgIv3iOtMibneJKT4xKc=) 3: 643177f7-12a4-4138-aa72-1b5beaada59f.crl (hash: MlFOH6DQBQhnxu0qchAl9B78gZbZRGcjMtR+3ciPGW0=) 4: c87a5cfc-fe40-3889-94da-f7c9b6159f54.roa (hash: qlhW4TJnz+ku6rOdaJskqbBIX/rzLLNyzsINKY03/us=) 5: d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa (hash: KilFcQZLLiqLIVC019vg+wUIb2o+f/U2tG2aC+cHcHQ=) 6: e11fc740-ba35-326a-8f1d-dd0e113c6efe.roa (hash: 8eipGu1MioKYhask2P9Gzd2o3G8ThB18o1VpV2iQtEk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:ea:ca:9b:31:c4:35:4d:da:c9:57:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643177f7-12a4-4138-aa72-1b5beaada59f Validity Not Before: Sep 28 19:00:24 2026 GMT Not After : Oct 1 19:00:00 2026 GMT Subject: CN=5fd85352-eea3-4184-a9e0-4d2fca30e460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cf:97:51:67:72:a3:2f:27:16:33:61:3e:57: 92:9d:64:b6:1d:38:e7:c2:e3:cb:90:d4:3f:d1:d8: 1c:82:47:8b:24:67:8d:ab:a0:c4:5e:e0:b5:93:53: f7:c5:a5:76:84:1d:86:17:51:e9:96:46:9d:de:2b: be:41:ac:76:a1:5a:52:fb:52:54:ed:69:90:0d:5e: 1b:23:00:ba:44:e2:22:07:e8:1f:6c:96:da:38:92: 26:bb:3a:2a:05:16:41:3f:f9:87:04:f0:ad:f2:d1: 7b:f5:d8:88:c1:a9:8f:95:c9:e8:83:4e:51:cf:1a: c5:f5:b4:82:29:40:f7:9f:3f:e2:d0:ee:89:d4:43: f7:3f:fb:0e:3a:ed:24:3c:1d:c1:28:71:1b:10:12: db:30:12:95:a6:1b:29:67:da:72:9c:2e:9e:70:4c: 4e:10:33:46:25:cc:4e:fd:70:ce:7e:95:e0:04:d2: e1:8c:76:33:c5:d6:29:1c:4f:26:af:e2:4c:22:fe: 41:4e:df:da:bc:b0:2e:8b:02:e5:cd:98:ad:79:8f: e4:b3:5b:07:87:01:0f:b8:95:78:7a:84:1d:a4:d1: cb:68:4a:65:f9:5f:0d:1b:11:b3:9f:42:34:6d:ce: d5:15:ab:2f:47:73:a1:87:33:fd:37:a1:03:e2:da: 19:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:56:70:1A:3E:16:64:08:AE:DC:09:73:5B:EF:75:A5:88:18:75:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl X509v3 Authority Key Identifier: keyid:E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ad:1d:b6:ba:fb:0b:33:9e:7a:d3:88:e0:ce:6d:e0:2e:24: 42:d2:9c:cb:b5:5d:47:fe:60:38:ba:80:b8:60:e4:f0:e0:85: 83:fe:fa:df:81:71:69:19:5f:62:7c:b6:42:b6:a8:6e:e9:0a: 38:2a:43:ae:1e:72:6e:30:37:66:73:02:2e:6f:61:dc:5a:c8: e5:c1:2d:a1:1c:9c:00:8e:ef:26:5f:c8:42:43:45:33:37:4f: 4c:b2:ae:fc:32:1e:92:76:ad:61:a2:85:6e:79:7b:bf:7b:e3: 5c:9f:3f:5f:4b:4a:d7:8a:72:43:f3:67:af:8e:25:41:cb:f6: 7b:2c:78:22:a1:ad:13:78:1d:81:00:62:c1:fc:16:90:eb:60: b0:69:17:1c:e8:0c:9a:c6:d1:d5:35:82:28:e8:1a:70:5d:cf: f3:6d:db:25:ae:3b:f1:c6:7e:20:8e:db:60:2a:c2:9d:ee:1a: fb:6c:2a:f8:34:6a:39:96:ba:8a:2c:70:c9:2f:0c:e5:1e:15: 6e:60:13:e7:3d:7d:f5:76:e0:9c:a6:54:90:cc:f0:ce:b3:2b: 0b:f1:78:f1:4c:d4:de:08:f6:e6:97:ba:0f:3f:eb:75:5c:aa: 75:96:2c:06:6f:83:bf:7e:b2:3f:0f:14:a9:c6:27:b3:7d:7a: cc:f0:5c:fe -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9T6sqbMcQ1TdrJV2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzMTc3ZjctMTJhNC00MTM4LWFhNzItMWI1YmVhYWRh NTlmMB4XDTI2MDkyODE5MDAyNFoXDTI2MTAwMTE5MDAwMFowLzEtMCsGA1UEAxMk NWZkODUzNTItZWVhMy00MTg0LWE5ZTAtNGQyZmNhMzBlNDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc+XUWdyoy8nFjNhPleSnWS2HTjnwuPLkNQ/ 0dgcgkeLJGeNq6DEXuC1k1P3xaV2hB2GF1Hplkad3iu+Qax2oVpS+1JU7WmQDV4b IwC6ROIiB+gfbJbaOJImuzoqBRZBP/mHBPCt8tF79diIwamPlcnog05RzxrF9bSC KUD3nz/i0O6J1EP3P/sOOu0kPB3BKHEbEBLbMBKVphspZ9pynC6ecExOEDNGJcxO /XDOfpXgBNLhjHYzxdYpHE8mr+JMIv5BTt/avLAuiwLlzZiteY/ks1sHhwEPuJV4 eoQdpNHLaEpl+V8NGxGzn0I0bc7VFasvR3OhhzP9N6ED4toZUQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAhWcBo+FmQIrtwJc1vvdaWIGHUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NDMx NzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjViZWFhZGE1OWYvNjQzMTc3ZjctMTJhNC00 MTM4LWFhNzItMWI1YmVhYWRhNTlmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjQzMTc3ZjctMTJhNC00MTM4LWFh NzItMWI1YmVhYWRhNTlmLzY0MzE3N2Y3LTEyYTQtNDEzOC1hYTcyLTFiNWJlYWFk YTU5Zi5jcmwwHwYDVR0jBBgwFoAU4IHJ8lxPXkglN0ngXX1t+O7PNiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NDMxNzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjVi ZWFhZGE1OWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMrR22uvsLM55604jgzm3g LiRC0pzLtV1H/mA4uoC4YOTw4IWD/vrfgXFpGV9ifLZCtqhu6Qo4KkOuHnJuMDdm cwIub2HcWsjlwS2hHJwAju8mX8hCQ0UzN09Msq78Mh6Sdq1hooVueXu/e+Ncnz9f S0rXinJD82evjiVBy/Z7LHgioa0TeB2BAGLB/BaQ62CwaRcc6AyaxtHVNYIo6Bpw Xc/zbdslrjvxxn4gjttgKsKd7hr7bCr4NGo5lrqKLHDJLwzlHhVuYBPnPX31duCc plSQzPDOsysL8XjxTNTeCPbml7oPP+t1XKp1liwGb4O/frI/DxSpxiezfXrM8Fz+ -----END CERTIFICATE-----Generated at Tue Sep 29 13:29:55 2026 by rpki-client