$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/299720ca-d74f-4266-9723-557a6914c4f4.mft File: 299720ca-d74f-4266-9723-557a6914c4f4.mft (raw, json) Hash identifier: 2K4Vw0Sn+OTQoio+9GLwAuZqiZS1D4Bdmmv044mahDg= Subject key identifier: 96:42:21:CB:8D:99:1B:35:F1:9A:25:C4:DE:0E:67:28:60:37:74:63 Authority key identifier: 30:57:ED:C3:EE:2A:4D:30:6C:08:48:32:8C:F2:1F:B3:94:33:CA:59 Certificate issuer: /CN=299720ca-d74f-4266-9723-557a6914c4f4 Certificate serial: 010D0C9F4328584F10EA50F3F1A11E883A393300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/299720ca-d74f-4266-9723-557a6914c4f4.mft Manifest number: 010D0C9F4328584E5E53633D6088E2E11BB71B42 Signing time: Fri 04 Sep 2026 19:00:23 +0000 Manifest this update: Fri 04 Sep 2026 19:00:23 +0000 Manifest next update: Mon 07 Sep 2026 19:00:00 +0000 Files and hashes: 1: 08b6bd95-c16d-3a10-b2b7-3df8e6b9db44.roa (hash: FzfZQWDo3geTanBfetHKOLQUFAUnkyWWZPFZQk2U7fQ=) 2: 299720ca-d74f-4266-9723-557a6914c4f4.crl (hash: T5PuqDQIu34WSMgq6oL7jQFc/T4vcgfC5aY5vTAF+uU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/299720ca-d74f-4266-9723-557a6914c4f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/299720ca-d74f-4266-9723-557a6914c4f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:ea:50:f3:f1:a1:1e:88:3a:39:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=299720ca-d74f-4266-9723-557a6914c4f4 Validity Not Before: Sep 4 19:00:23 2026 GMT Not After : Sep 7 19:00:00 2026 GMT Subject: CN=bf509cfe-72e4-471b-9bd0-bae22f5910a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2c:ea:88:b2:d5:54:01:69:76:cb:21:db:84: 75:f5:07:58:b4:a0:e1:c7:c2:d2:78:f9:c0:eb:2d: df:7d:b9:09:76:c6:80:29:9d:e4:cb:5c:7d:de:f0: 80:25:ef:82:64:d0:7c:22:f9:32:38:05:db:af:8a: 88:c6:16:77:89:04:e9:a0:83:18:f8:75:e2:30:67: ff:dc:38:fa:77:29:ff:7e:fc:05:c5:1e:e3:6e:3a: 2a:ff:63:be:88:7a:07:ea:be:75:78:e2:13:3e:fc: b0:05:fc:f2:47:a5:bd:6b:ed:06:5e:4d:8e:cb:17: 9f:0c:e0:cc:98:b3:33:15:55:56:a6:d6:f9:50:f0: 54:7a:56:43:1b:81:d4:59:b5:ac:38:fa:9c:39:38: a0:5f:73:6b:85:c1:c4:ce:7f:1d:8a:e0:d2:f4:bd: f8:84:65:91:00:73:0b:0d:f9:b4:a1:37:49:f6:37: 0e:81:1b:b2:86:91:b1:96:ba:71:1b:f6:aa:d9:68: dd:29:07:ea:51:c0:28:e3:66:b6:8d:8a:58:05:10: 06:14:4e:59:37:79:7f:0e:68:99:9d:d4:12:86:6e: 59:79:e0:44:4f:2f:de:ba:20:d0:80:2e:40:88:8b: d9:fa:f6:8c:3b:59:ac:06:4e:32:03:ab:f0:73:1a: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:42:21:CB:8D:99:1B:35:F1:9A:25:C4:DE:0E:67:28:60:37:74:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/299720ca-d74f-4266-9723-557a6914c4f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4/299720ca-d74f-4266-9723-557a6914c4f4.crl X509v3 Authority Key Identifier: keyid:30:57:ED:C3:EE:2A:4D:30:6C:08:48:32:8C:F2:1F:B3:94:33:CA:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/299720ca-d74f-4266-9723-557a6914c4f4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e8:d1:92:37:3c:fd:69:0c:34:dd:d9:48:be:0c:42:a6:7b: db:24:6c:62:2d:7e:0f:23:ea:5f:17:bf:b6:f5:30:8e:a0:03: 07:c3:95:cf:dc:c8:60:6c:fc:e3:25:66:e4:0d:c9:09:3f:d8: 14:9e:76:36:0d:31:66:e1:5e:bf:e6:8a:c3:6c:0c:4d:5a:12: 90:b6:fc:9d:53:e9:1f:ae:13:bd:51:46:49:3b:3d:65:41:a1: fe:14:1d:ce:d0:31:92:4f:23:b6:47:35:c2:a2:c7:ef:9f:23: fc:23:75:59:cc:ee:59:72:0b:05:99:9d:e6:8c:d3:d2:8e:58: 70:31:8b:f6:a7:e8:6d:8c:1d:83:3a:70:b4:84:fa:59:3f:41: 9b:fa:56:58:35:15:12:bd:07:31:4f:c8:44:36:8b:3c:8c:89: a4:bb:4d:84:e5:2a:bd:d0:72:8e:e2:f1:e8:96:8b:b9:a1:94: 6b:c8:b9:3d:08:bd:da:ee:ee:ae:8e:f4:d9:dd:94:62:2b:99: 84:bd:71:da:98:2c:fc:09:c5:bb:44:79:8d:1f:ef:12:c1:a0: f6:b4:8a:34:c8:89:6c:25:14:bd:96:e3:2e:8a:00:c4:e7:11: 86:f5:dc:d8:fa:6b:2b:06:aa:7c:3d:c7:10:c5:45:9d:c1:10: 4a:e5:e5:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8Q6lDz8aEeiDo5MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk5NzIwY2EtZDc0Zi00MjY2LTk3MjMtNTU3YTY5MTRj NGY0MB4XDTI2MDkwNDE5MDAyM1oXDTI2MDkwNzE5MDAwMFowLzEtMCsGA1UEAxMk YmY1MDljZmUtNzJlNC00NzFiLTliZDAtYmFlMjJmNTkxMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyzqiLLVVAFpdssh24R19QdYtKDhx8LSePnA 6y3ffbkJdsaAKZ3ky1x93vCAJe+CZNB8IvkyOAXbr4qIxhZ3iQTpoIMY+HXiMGf/ 3Dj6dyn/fvwFxR7jbjoq/2O+iHoH6r51eOITPvywBfzyR6W9a+0GXk2OyxefDODM mLMzFVVWptb5UPBUelZDG4HUWbWsOPqcOTigX3NrhcHEzn8diuDS9L34hGWRAHML Dfm0oTdJ9jcOgRuyhpGxlrpxG/aq2WjdKQfqUcAo42a2jYpYBRAGFE5ZN3l/DmiZ ndQShm5ZeeBETy/euiDQgC5AiIvZ+vaMO1msBk4yA6vwcxpPYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJZCIcuNmRs18ZolxN4OZyhgN3RjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yOTk3 MjBjYS1kNzRmLTQyNjYtOTcyMy01NTdhNjkxNGM0ZjQvMjk5NzIwY2EtZDc0Zi00 MjY2LTk3MjMtNTU3YTY5MTRjNGY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjk5NzIwY2EtZDc0Zi00MjY2LTk3 MjMtNTU3YTY5MTRjNGY0LzI5OTcyMGNhLWQ3NGYtNDI2Ni05NzIzLTU1N2E2OTE0 YzRmNC5jcmwwHwYDVR0jBBgwFoAUMFftw+4qTTBsCEgyjPIfs5QzylkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yOTk3MjBjYS1kNzRmLTQyNjYtOTcyMy01NTdh NjkxNGM0ZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB46NGSNzz9aQw03dlIvgxC pnvbJGxiLX4PI+pfF7+29TCOoAMHw5XP3MhgbPzjJWbkDckJP9gUnnY2DTFm4V6/ 5orDbAxNWhKQtvydU+kfrhO9UUZJOz1lQaH+FB3O0DGSTyO2RzXCosfvnyP8I3VZ zO5ZcgsFmZ3mjNPSjlhwMYv2p+htjB2DOnC0hPpZP0Gb+lZYNRUSvQcxT8hENos8 jImku02E5Sq90HKO4vHolou5oZRryLk9CL3a7u6ujvTZ3ZRiK5mEvXHamCz8CcW7 RHmNH+8SwaD2tIo0yIlsJRS9luMuigDE5xGG9dzY+msrBqp8PccQxUWdwRBK5eVm -----END CERTIFICATE-----Generated at Fri Sep 4 23:17:58 2026 by rpki-client