$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/901b298b-3d0f-4827-a436-bc05222082d9/901b298b-3d0f-4827-a436-bc05222082d9.mft File: 901b298b-3d0f-4827-a436-bc05222082d9.mft (raw, json) Hash identifier: ZYncf6rVzlCbTClg2AW4K8IFiFBnrxbhPcWcXzMaeWc= Subject key identifier: D6:5C:A1:6D:18:9C:E6:3A:53:4E:3B:CA:A6:D6:F3:8A:26:38:0C:49 Authority key identifier: D0:B4:42:67:21:8F:08:55:81:37:22:93:1F:17:13:8A:59:A1:63:AC Certificate issuer: /CN=901b298b-3d0f-4827-a436-bc05222082d9 Certificate serial: 010D0C9F4328584FA2517E09A21E86B689253680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/901b298b-3d0f-4827-a436-bc05222082d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/901b298b-3d0f-4827-a436-bc05222082d9/901b298b-3d0f-4827-a436-bc05222082d9.mft Manifest number: 010D0C9F4328584E37795E371345D765D2CF9902 Signing time: Mon 26 Oct 2026 21:00:25 +0000 Manifest this update: Mon 26 Oct 2026 21:00:25 +0000 Manifest next update: Thu 29 Oct 2026 21:00:00 +0000 Files and hashes: 1: 901b298b-3d0f-4827-a436-bc05222082d9.crl (hash: 7KxK/XAVRUFXRyp5Vw/0P9obyglnjzceYCLq4yVK00Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/901b298b-3d0f-4827-a436-bc05222082d9/901b298b-3d0f-4827-a436-bc05222082d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/901b298b-3d0f-4827-a436-bc05222082d9/901b298b-3d0f-4827-a436-bc05222082d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/901b298b-3d0f-4827-a436-bc05222082d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:51:7e:09:a2:1e:86:b6:89:25:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901b298b-3d0f-4827-a436-bc05222082d9 Validity Not Before: Oct 26 21:00:25 2026 GMT Not After : Oct 29 21:00:00 2026 GMT Subject: CN=804d3dd8-66aa-420f-b26f-1f1fa7c58e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f8:2f:ce:14:81:e6:95:31:ba:1e:1c:29:07: 7f:fe:c9:78:c9:a5:08:97:d7:50:ba:73:1f:ac:e5: 41:81:b5:0f:f3:89:4e:c9:b6:90:57:39:fd:66:40: 30:93:ec:a8:65:04:24:97:71:62:c8:2e:16:30:e1: 1a:62:53:09:10:0b:25:ff:63:8f:e1:fc:43:38:f8: 20:3a:d0:48:2c:4a:35:3a:04:dc:9b:39:a5:65:69: e8:8f:e9:23:a8:3c:6e:a4:84:39:08:04:bb:d9:19: 08:51:43:73:93:d5:7b:0e:55:c9:05:79:4c:74:64: 2d:da:34:f3:d2:4e:b1:03:75:c6:53:fb:9a:73:2d: fd:52:0c:27:51:c8:f2:f0:2e:83:63:78:ff:bb:5c: 97:56:ec:73:56:07:bd:47:b1:5a:2a:97:69:e2:45: 8c:0e:1a:68:2c:78:7d:0d:07:a4:6a:a3:ed:8e:7c: 0a:81:74:68:18:35:05:98:00:af:59:31:c3:aa:17: 16:7d:a8:62:d5:e7:b3:3f:f3:2d:3b:f7:33:a9:32: 04:44:55:e7:d5:be:80:84:b8:92:fe:01:53:52:bd: e2:7f:de:b9:c9:ae:77:62:c5:cb:0a:a0:00:fd:a7: 78:a1:57:ae:e7:82:21:a7:26:fc:dc:f7:bd:76:eb: 37:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5C:A1:6D:18:9C:E6:3A:53:4E:3B:CA:A6:D6:F3:8A:26:38:0C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/901b298b-3d0f-4827-a436-bc05222082d9/901b298b-3d0f-4827-a436-bc05222082d9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/901b298b-3d0f-4827-a436-bc05222082d9/901b298b-3d0f-4827-a436-bc05222082d9.crl X509v3 Authority Key Identifier: keyid:D0:B4:42:67:21:8F:08:55:81:37:22:93:1F:17:13:8A:59:A1:63:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/901b298b-3d0f-4827-a436-bc05222082d9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:dc:6d:f4:da:f0:70:3c:31:b2:62:43:ca:75:65:d7:e0:b5: 07:45:14:90:1d:0e:82:ef:b5:ec:b0:21:57:39:42:22:d7:a6: 2f:28:46:5b:f3:9a:9e:09:e7:34:5a:9f:8c:7e:59:60:fd:ed: 8d:06:dd:ac:b6:b3:f8:0f:99:ec:03:57:13:8f:f4:d4:e4:64: 4d:06:24:41:00:e0:e7:74:af:e7:83:75:15:e7:7a:aa:30:d4: 51:48:02:0b:b1:fa:bd:16:58:25:87:6d:66:d3:99:09:06:9e: c6:6d:32:04:96:83:5f:f6:22:db:8f:90:3e:af:4d:6e:90:f2: f8:e8:39:95:aa:b5:89:ee:63:24:a2:71:66:5c:1d:cd:4e:48: dc:cc:6f:65:27:97:6f:16:69:aa:23:22:2e:d9:da:b9:ef:c1: 5e:f7:21:c7:e9:d4:ba:11:7e:98:27:b4:c7:f9:d2:ce:be:61: 0a:56:91:f8:23:c4:fd:6a:c4:51:48:21:6c:68:18:ee:95:e9: 3e:4f:64:84:74:89:51:65:69:5b:71:a7:5f:42:4d:80:e3:f3: d0:3a:da:39:96:96:f6:51:36:07:a5:36:58:0a:7b:c3:22:02: 15:70:8b:32:8b:55:bf:81:aa:0a:eb:da:45:9a:ef:85:22:a1: 25:35:c1:57 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+iUX4Joh6GtoklNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAxYjI5OGItM2QwZi00ODI3LWE0MzYtYmMwNTIyMjA4 MmQ5MB4XDTI2MTAyNjIxMDAyNVoXDTI2MTAyOTIxMDAwMFowLzEtMCsGA1UEAxMk ODA0ZDNkZDgtNjZhYS00MjBmLWIyNmYtMWYxZmE3YzU4ZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifgvzhSB5pUxuh4cKQd//sl4yaUIl9dQunMf rOVBgbUP84lOybaQVzn9ZkAwk+yoZQQkl3FiyC4WMOEaYlMJEAsl/2OP4fxDOPgg OtBILEo1OgTcmzmlZWnoj+kjqDxupIQ5CAS72RkIUUNzk9V7DlXJBXlMdGQt2jTz 0k6xA3XGU/uacy39UgwnUcjy8C6DY3j/u1yXVuxzVge9R7FaKpdp4kWMDhpoLHh9 DQekaqPtjnwKgXRoGDUFmACvWTHDqhcWfahi1eezP/MtO/czqTIERFXn1b6AhLiS /gFTUr3if965ya53YsXLCqAA/ad4oVeu54Ihpyb83Pe9dus3hQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNZcoW0YnOY6U047yqbW84omOAxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85MDFi Mjk4Yi0zZDBmLTQ4MjctYTQzNi1iYzA1MjIyMDgyZDkvOTAxYjI5OGItM2QwZi00 ODI3LWE0MzYtYmMwNTIyMjA4MmQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOTAxYjI5OGItM2QwZi00ODI3LWE0 MzYtYmMwNTIyMjA4MmQ5LzkwMWIyOThiLTNkMGYtNDgyNy1hNDM2LWJjMDUyMjIw ODJkOS5jcmwwHwYDVR0jBBgwFoAU0LRCZyGPCFWBNyKTHxcTilmhY6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85MDFiMjk4Yi0zZDBmLTQ4MjctYTQzNi1iYzA1 MjIyMDgyZDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBK3G302vBwPDGyYkPKdWXX 4LUHRRSQHQ6C77XssCFXOUIi16YvKEZb85qeCec0Wp+Mfllg/e2NBt2strP4D5ns A1cTj/TU5GRNBiRBAODndK/ng3UV53qqMNRRSAILsfq9Flglh21m05kJBp7GbTIE loNf9iLbj5A+r01ukPL46DmVqrWJ7mMkonFmXB3NTkjczG9lJ5dvFmmqIyIu2dq5 78Fe9yHH6dS6EX6YJ7TH+dLOvmEKVpH4I8T9asRRSCFsaBjulek+T2SEdIlRZWlb cadfQk2A4/PQOto5lpb2UTYHpTZYCnvDIgIVcIsyi1W/gaoK69pFmu+FIqElNcFX -----END CERTIFICATE-----Generated at Tue Oct 27 18:05:57 2026 by rpki-client