$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft File: c43d9850-d596-4753-8190-8f123f903f5a.mft (raw, json) Hash identifier: hMcPY3gMENWzwEMoj77d8nmx6S3mOs+VuZ1VDG1q68Q= Subject key identifier: D9:86:A9:89:8E:50:73:BA:E2:8F:B0:99:B1:28:D5:21:C7:E5:35:CB Authority key identifier: EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F Certificate issuer: /CN=c43d9850-d596-4753-8190-8f123f903f5a Certificate serial: 010D0C9F4328584F4B4F26EADBC80AE8223EA300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft Manifest number: 010D0C9F4328584B7A377BED36F79EE9AE8D70E7 Signing time: Fri 25 Sep 2026 17:00:22 +0000 Manifest this update: Fri 25 Sep 2026 17:00:22 +0000 Manifest next update: Mon 28 Sep 2026 17:00:00 +0000 Files and hashes: 1: 93b01601-df72-3eaf-a64a-71145f132bfa.roa (hash: 8S4Vm24l47QCnIX72bdAd6k1huaDg+wa+FC6SXWiZ1k=) 2: c43d9850-d596-4753-8190-8f123f903f5a.crl (hash: H1ch/hpcRRvVYie7MnVpnWTRWgt+tVU9QRHXgHHciuk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:4f:26:ea:db:c8:0a:e8:22:3e:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43d9850-d596-4753-8190-8f123f903f5a Validity Not Before: Sep 25 17:00:22 2026 GMT Not After : Sep 28 17:00:00 2026 GMT Subject: CN=c54a7d22-b1af-4809-af0b-c42f759d8d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:82:da:79:70:d0:2b:51:8d:64:9b:ec:d2:c0: 3a:90:da:b0:51:a9:eb:62:fc:16:a7:4b:64:c9:0d: 6d:fd:04:63:17:35:12:fe:c8:25:79:86:ab:07:a2: 0e:3b:60:64:bb:8b:7f:ba:b0:c2:22:01:ac:8c:7b: 38:4e:92:40:a9:a2:c0:9a:d5:91:06:12:f1:95:a0: 68:91:bc:31:3f:0b:bb:7c:cd:97:52:2f:ba:32:fe: 8a:5b:c6:94:eb:5d:f6:c4:b1:3c:e5:ab:5d:11:1a: aa:62:d7:7e:65:a0:e6:02:fe:90:2e:7b:f9:8c:26: 7b:99:96:d2:93:1e:55:7c:05:7b:47:6c:14:c3:d9: 7f:c2:be:f0:64:06:cb:3c:43:56:46:be:c7:78:33: 14:71:79:b9:62:63:c3:fb:46:d9:b4:6c:6d:63:fb: 0d:a7:b6:f6:22:c4:59:42:3b:a6:4f:c9:43:fc:2c: 96:fa:41:2c:96:e7:fc:cf:2c:64:9e:cf:51:85:52: b9:56:d0:6d:d8:0f:d0:27:e1:0a:67:26:a0:13:aa: d3:ad:69:31:23:cc:76:62:81:8f:2b:a0:6f:91:56: 4f:53:a8:d4:88:07:10:ef:56:fd:cf:40:91:d2:30: 56:5b:a9:da:f8:d1:48:e8:b0:65:99:2d:34:c2:77: 63:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:86:A9:89:8E:50:73:BA:E2:8F:B0:99:B1:28:D5:21:C7:E5:35:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl X509v3 Authority Key Identifier: keyid:EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:29:52:a4:7c:10:c9:12:58:96:87:1b:3d:62:7e:3d:dc:bf: 73:03:47:d6:75:f8:b5:3a:5f:74:ab:a3:0a:45:cd:93:e8:b9: 50:89:12:57:dd:30:cf:d6:1e:38:ae:fa:bf:d1:b4:71:48:1d: 09:20:7e:57:a1:13:c1:9c:5b:f6:91:1f:ac:de:ef:c2:4e:bf: 95:a1:7b:1c:1e:93:eb:58:d1:35:a5:39:73:24:55:00:15:29: 4b:6b:65:c0:c5:ac:d4:ef:b0:a0:4b:11:7f:f1:92:e1:c4:dd: fc:2f:61:2d:a2:36:9a:a8:53:7b:38:a1:e2:f0:f1:aa:02:52: 78:f6:46:5d:53:70:4b:6e:f7:56:9e:b0:00:df:16:59:92:88: d2:df:19:d7:85:8d:9d:ba:40:28:e0:7e:a1:1f:be:f8:85:c3: dd:72:72:5b:4c:18:1c:57:cd:3d:63:be:b0:49:a5:46:2b:33: fe:71:39:d4:f9:43:29:46:9f:7d:a4:b8:1d:4b:48:93:30:f9: 9d:23:29:07:de:b4:c8:ae:91:e3:6a:3b:01:48:ef:3c:e9:11: 76:90:cf:f9:36:1c:63:a0:16:68:9a:61:61:71:c3:2e:eb:20: f2:b4:94:66:d3:f6:9e:3e:f3:77:02:47:11:87:73:f1:14:92: a8:80:e7:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9LTybq28gK6CI+owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzZDk4NTAtZDU5Ni00NzUzLTgxOTAtOGYxMjNmOTAz ZjVhMB4XDTI2MDkyNTE3MDAyMloXDTI2MDkyODE3MDAwMFowLzEtMCsGA1UEAxMk YzU0YTdkMjItYjFhZi00ODA5LWFmMGItYzQyZjc1OWQ4ZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YLaeXDQK1GNZJvs0sA6kNqwUanrYvwWp0tk yQ1t/QRjFzUS/sgleYarB6IOO2Bku4t/urDCIgGsjHs4TpJAqaLAmtWRBhLxlaBo kbwxPwu7fM2XUi+6Mv6KW8aU6132xLE85atdERqqYtd+ZaDmAv6QLnv5jCZ7mZbS kx5VfAV7R2wUw9l/wr7wZAbLPENWRr7HeDMUcXm5YmPD+0bZtGxtY/sNp7b2IsRZ QjumT8lD/CyW+kEsluf8zyxkns9RhVK5VtBt2A/QJ+EKZyagE6rTrWkxI8x2YoGP K6BvkVZPU6jUiAcQ71b9z0CR0jBWW6na+NFI6LBlmS00wndjWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNmGqYmOUHO64o+wmbEo1SHH5TXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNk OTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEyM2Y5MDNmNWEvYzQzZDk4NTAtZDU5Ni00 NzUzLTgxOTAtOGYxMjNmOTAzZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzQzZDk4NTAtZDU5Ni00NzUzLTgx OTAtOGYxMjNmOTAzZjVhL2M0M2Q5ODUwLWQ1OTYtNDc1My04MTkwLThmMTIzZjkw M2Y1YS5jcmwwHwYDVR0jBBgwFoAU7pVBU5XXCqXb8FoWSdyzUlfYWg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNkOTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEy M2Y5MDNmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKKVKkfBDJEliWhxs9Yn49 3L9zA0fWdfi1Ol90q6MKRc2T6LlQiRJX3TDP1h44rvq/0bRxSB0JIH5XoRPBnFv2 kR+s3u/CTr+VoXscHpPrWNE1pTlzJFUAFSlLa2XAxazU77CgSxF/8ZLhxN38L2Et ojaaqFN7OKHi8PGqAlJ49kZdU3BLbvdWnrAA3xZZkojS3xnXhY2dukAo4H6hH774 hcPdcnJbTBgcV809Y76wSaVGKzP+cTnU+UMpRp99pLgdS0iTMPmdIykH3rTIrpHj ajsBSO886RF2kM/5NhxjoBZommFhccMu6yDytJRm0/aePvN3AkcRh3PxFJKogOfD -----END CERTIFICATE-----Generated at Sat Sep 26 11:35:01 2026 by rpki-client