$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: N/oZWXa9umeMW73tFfW6w/I9F9IjkrVSZ/dXqXzJ0oU= Subject key identifier: 9E:02:01:28:4E:AB:13:EB:7D:11:D9:EB:C5:68:BF:92:FD:4E:34:A6 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584F75A68D4E0118EA7ED1D91DF4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD079B64 Signing time: Sat 10 Oct 2026 21:00:23 +0000 Manifest this update: Sat 10 Oct 2026 21:00:23 +0000 Manifest next update: Mon 12 Oct 2026 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: zs1aymAL1L70omBb109k2+ZcWalm92uAjS7/4FZgAvk=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: zHXtNEA2KzuQJgFrk3Ph2wDLCK/b5Bz4lsOHvCiOhO4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:75:a6:8d:4e:01:18:ea:7e:d1:d9:1d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Oct 10 21:00:23 2026 GMT Not After : Oct 12 21:00:00 2026 GMT Subject: CN=3028e3c2-8657-4165-825f-d580442e8a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:44:91:63:1e:a9:de:d2:b1:9e:5a:ac:ff:f4: 76:f4:ff:01:0c:af:69:4b:e7:88:19:0e:a4:0f:74: a4:af:44:ee:ae:66:6a:83:a7:ec:84:e7:e4:65:b9: c8:f7:f4:d3:72:24:77:ac:de:c2:29:c0:52:b4:65: 0a:a4:99:b1:21:ff:16:16:91:b5:6f:73:32:f9:ae: c4:3f:aa:c7:5d:e1:57:a3:b0:86:61:6c:68:1d:18: dc:cd:8d:96:ab:f1:cf:10:fc:8e:96:e8:0c:81:a4: 15:7e:eb:99:52:f8:09:c9:aa:ec:c9:98:a5:76:f7: f7:06:b3:5c:61:0f:6f:34:00:20:e6:f5:48:6b:da: 1a:ca:a6:1d:08:21:22:3f:0a:ca:87:9e:b8:99:f4: 29:30:35:55:e0:fb:69:f1:65:70:20:7c:30:68:da: 8a:5b:54:3c:d7:9a:7e:53:7e:9b:9e:d2:e4:7c:52: d0:7e:2e:c6:53:77:90:99:0f:50:0e:48:da:68:ea: 87:95:3c:40:19:1a:34:cd:51:38:3c:ef:ea:30:8d: 3b:91:20:16:ce:b1:ec:75:0b:84:d8:05:55:73:34: 71:f5:1a:89:7d:c5:81:2f:d9:96:62:65:e3:76:87: 00:75:51:ba:2e:a5:84:d9:ac:10:a2:19:9d:b3:81: 94:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:02:01:28:4E:AB:13:EB:7D:11:D9:EB:C5:68:BF:92:FD:4E:34:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f5:23:44:85:d4:e8:c5:1a:70:3a:13:b5:e9:a0:52:7d:bf: 52:94:76:ed:24:1d:17:c6:ba:f6:7d:76:74:7c:d3:a6:d8:96: b5:c6:45:61:00:43:c0:dc:62:53:1d:76:88:f2:d5:69:97:fb: 52:99:21:63:d6:9d:56:cc:b5:e9:a4:2c:19:0b:fa:c8:b7:38: 9c:53:f9:7b:07:1a:ba:8d:ce:4c:94:bb:ad:f2:e1:b9:bc:f7: 17:dc:c3:6a:49:db:bb:dd:d6:d4:26:f6:5c:2b:64:d2:c6:6d: 1c:13:17:46:fb:e9:29:e6:4d:4d:76:68:a9:45:06:e9:09:b2: 5c:6e:c8:34:4c:0a:bb:9b:d2:f3:19:e7:a3:18:68:27:63:3d: e3:89:1b:c3:d7:29:4d:35:63:9f:6e:ad:cc:93:45:69:42:3c: 58:13:c1:d7:58:ee:e4:25:be:63:68:11:4c:61:00:c1:eb:4b: e1:16:02:98:f8:7e:b4:fc:9e:43:fa:55:fb:b8:c9:b1:7f:d3: 30:f6:c7:48:da:27:94:d1:d1:08:df:d6:c6:17:00:e5:fd:55: a5:55:5a:5e:cc:d0:2c:52:c3:69:4f:8b:d4:ac:90:80:02:ab: f3:da:1e:7b:8a:1e:16:25:ba:f0:74:59:1d:2c:62:21:77:b6: e2:ec:8e:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE91po1OARjqftHZHfQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI2MTAxMDIxMDAyM1oXDTI2MTAxMjIxMDAwMFowLzEtMCsGA1UEAxMk MzAyOGUzYzItODY1Ny00MTY1LTgyNWYtZDU4MDQ0MmU4YTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ESRYx6p3tKxnlqs//R29P8BDK9pS+eIGQ6k D3Skr0TurmZqg6fshOfkZbnI9/TTciR3rN7CKcBStGUKpJmxIf8WFpG1b3My+a7E P6rHXeFXo7CGYWxoHRjczY2Wq/HPEPyOlugMgaQVfuuZUvgJyarsyZildvf3BrNc YQ9vNAAg5vVIa9oayqYdCCEiPwrKh564mfQpMDVV4Ptp8WVwIHwwaNqKW1Q815p+ U36bntLkfFLQfi7GU3eQmQ9QDkjaaOqHlTxAGRo0zVE4PO/qMI07kSAWzrHsdQuE 2AVVczRx9RqJfcWBL9mWYmXjdocAdVG6LqWE2awQohmds4GUVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ4CAShOqxPrfRHZ68Vov5L9TjSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA79SNEhdToxRpwOhO16aBS fb9SlHbtJB0Xxrr2fXZ0fNOm2Ja1xkVhAEPA3GJTHXaI8tVpl/tSmSFj1p1WzLXp pCwZC/rItzicU/l7Bxq6jc5MlLut8uG5vPcX3MNqSdu73dbUJvZcK2TSxm0cExdG ++kp5k1NdmipRQbpCbJcbsg0TAq7m9LzGeejGGgnYz3jiRvD1ylNNWOfbq3Mk0Vp QjxYE8HXWO7kJb5jaBFMYQDB60vhFgKY+H60/J5D+lX7uMmxf9Mw9sdI2ieU0dEI 39bGFwDl/VWlVVpezNAsUsNpT4vUrJCAAqvz2h57ih4WJbrwdFkdLGIhd7bi7I6h -----END CERTIFICATE-----Generated at Sun Oct 11 17:23:51 2026 by rpki-client