$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft File: b9ea3438-4142-4de2-a912-7b081a51b42d.mft (raw, json) Hash identifier: wDd1qr/ZjPRQh8cJ6rsCtCTUlcld9uGVdXByZhssc74= Subject key identifier: DC:EA:00:0B:D5:DA:21:0C:B7:92:02:55:4C:75:91:34:E4:5D:B8:6E Authority key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D Certificate issuer: /CN=b9ea3438-4142-4de2-a912-7b081a51b42d Certificate serial: 010D0C9F4328584F7D18541284C284335B6AA0B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft Manifest number: 010D0C9F4328584073A854B5F80ED5C22F9161B5 Signing time: Tue 13 Oct 2026 13:00:23 +0000 Manifest this update: Tue 13 Oct 2026 13:00:23 +0000 Manifest next update: Fri 16 Oct 2026 13:00:00 +0000 Files and hashes: 1: 408f67a4-965c-3201-9f19-0975f3af94df.roa (hash: 2RQ6pDbblixrGhclM1CGcACOSBdSc62uCc5ijwgcbeU=) 2: 99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa (hash: 4aMwsgquv07qEZym+g4TL74VNV0wUC0rJ+ydPAUnyr4=) 3: b9ea3438-4142-4de2-a912-7b081a51b42d.crl (hash: dFcI+4oeYniZmReoLLGCP/wevmVKwbsduchPOFm1120=) 4: e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa (hash: bKELjNnGq7V8JjYYiLsRu07YXwo1WfRNk/kaXu/dJPQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:18:54:12:84:c2:84:33:5b:6a:a0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea3438-4142-4de2-a912-7b081a51b42d Validity Not Before: Oct 13 13:00:23 2026 GMT Not After : Oct 16 13:00:00 2026 GMT Subject: CN=bda9d02f-82f9-4ecf-9fcc-809cf4e6e4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:d0:07:b4:20:d4:53:33:e4:da:ef:08:b2: 45:1c:a9:45:09:63:f0:6a:84:9d:0a:ef:98:60:3e: be:ea:ae:12:e0:7e:d6:b2:4b:8b:64:9a:0f:0d:e0: ef:3e:82:75:3f:cd:2b:30:f2:da:f4:6c:54:36:a3: 96:1a:2a:0b:8b:11:88:bb:ea:41:94:56:bd:2b:1e: 07:13:62:bd:56:92:c6:3e:96:ef:04:83:86:d3:12: 6b:1f:97:97:06:7d:06:1e:98:cf:e8:be:c7:ae:55: e6:5c:e4:a3:0d:93:85:80:05:52:70:c7:ea:71:c3: fc:44:51:a1:f6:f4:e1:f7:c7:5a:bc:9b:55:49:a1: de:1c:c2:c8:b8:d5:20:f2:9c:04:70:5c:05:5d:86: fe:6a:c1:f6:37:0f:cb:aa:1b:74:9c:2f:37:c7:68: 38:e2:73:90:a4:15:8d:51:ae:92:88:8b:db:89:57: ed:b1:96:0c:ff:9e:0a:84:46:c9:8e:53:e2:34:56: f5:b4:e8:c0:58:77:3d:ea:98:6c:7f:9e:0d:a2:5c: f2:67:88:2f:1b:d8:7f:09:a2:ec:8e:b4:42:6e:a0: 76:d3:a9:c1:63:ed:d5:c6:9e:a5:da:8a:ed:f4:24: a2:b9:9c:31:bd:38:50:84:a6:a6:cc:af:a2:24:9c: e9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EA:00:0B:D5:DA:21:0C:B7:92:02:55:4C:75:91:34:E4:5D:B8:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl X509v3 Authority Key Identifier: keyid:24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c1:f6:b9:7d:9c:8b:79:61:59:10:a5:db:16:bf:48:ab:5c: e9:c5:87:d4:ec:d4:62:69:ed:67:7b:dd:b7:fe:ad:11:94:67: cd:62:01:1e:cc:51:1a:ce:56:0e:96:b9:6e:b7:f9:ec:e1:63: 6e:66:f3:88:a7:9f:0f:7b:53:07:b5:78:5c:0f:e3:ec:64:c5: 82:78:db:61:8f:b0:98:a2:da:dd:ce:5d:40:82:2d:f7:33:97: 36:be:ab:fd:2a:3d:7b:78:e8:44:85:f7:f6:f2:dd:40:88:7e: c3:c1:bc:da:56:16:32:72:ec:b8:f5:be:b9:4d:3e:4f:56:6d: d5:f5:f8:00:97:29:c8:53:4d:f7:44:4a:89:31:34:5a:8b:af: 32:7b:97:6f:aa:3b:25:ba:dc:1e:41:38:96:f6:a0:57:da:d3: f2:9f:48:14:f0:2e:68:88:b7:e0:8d:05:7a:d0:b8:56:ca:34: 2b:13:f5:78:20:f3:58:6b:42:f7:26:2b:7d:f2:39:e2:60:7d: ee:e9:78:5e:d1:0c:da:b6:e1:e6:dd:55:c6:a3:ed:38:3a:cf: 21:67:ca:85:cd:a4:5b:9a:2f:c6:4c:12:be:52:6f:54:70:8b: 43:3b:c2:df:63:79:83:55:0b:e6:c5:ec:cf:24:71:8b:9b:40: 81:95:6f:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE99GFQShMKEM1tqoLEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjllYTM0MzgtNDE0Mi00ZGUyLWE5MTItN2IwODFhNTFi NDJkMB4XDTI2MTAxMzEzMDAyM1oXDTI2MTAxNjEzMDAwMFowLzEtMCsGA1UEAxMk YmRhOWQwMmYtODJmOS00ZWNmLTlmY2MtODA5Y2Y0ZTZlNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/fQB7Qg1FMz5NrvCLJFHKlFCWPwaoSdCu+Y YD6+6q4S4H7WskuLZJoPDeDvPoJ1P80rMPLa9GxUNqOWGioLixGIu+pBlFa9Kx4H E2K9VpLGPpbvBIOG0xJrH5eXBn0GHpjP6L7HrlXmXOSjDZOFgAVScMfqccP8RFGh 9vTh98davJtVSaHeHMLIuNUg8pwEcFwFXYb+asH2Nw/Lqht0nC83x2g44nOQpBWN Ua6SiIvbiVftsZYM/54KhEbJjlPiNFb1tOjAWHc96phsf54NolzyZ4gvG9h/CaLs jrRCbqB206nBY+3Vxp6l2ort9CSiuZwxvThQhKamzK+iJJzphwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNzqAAvV2iEMt5ICVUx1kTTkXbhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVh MzQzOC00MTQyLTRkZTItYTkxMi03YjA4MWE1MWI0MmQvYjllYTM0MzgtNDE0Mi00 ZGUyLWE5MTItN2IwODFhNTFiNDJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjllYTM0MzgtNDE0Mi00ZGUyLWE5 MTItN2IwODFhNTFiNDJkL2I5ZWEzNDM4LTQxNDItNGRlMi1hOTEyLTdiMDgxYTUx YjQyZC5jcmwwHwYDVR0jBBgwFoAUJDliXoh2ePZzmBGt5EgWbTk2r20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVhMzQzOC00MTQyLTRkZTItYTkxMi03YjA4 MWE1MWI0MmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOwfa5fZyLeWFZEKXbFr9I q1zpxYfU7NRiae1ne923/q0RlGfNYgEezFEazlYOlrlut/ns4WNuZvOIp58Pe1MH tXhcD+PsZMWCeNthj7CYotrdzl1Agi33M5c2vqv9Kj17eOhEhff28t1AiH7Dwbza VhYycuy49b65TT5PVm3V9fgAlynIU033REqJMTRai68ye5dvqjslutweQTiW9qBX 2tPyn0gU8C5oiLfgjQV60LhWyjQrE/V4IPNYa0L3Jit98jniYH3u6Xhe0QzatuHm 3VXGo+04Os8hZ8qFzaRbmi/GTBK+Um9UcItDO8LfY3mDVQvmxezPJHGLm0CBlW/s -----END CERTIFICATE-----Generated at Tue Oct 13 16:07:29 2026 by rpki-client