$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft File: 8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft (raw, json) Hash identifier: 2TARpkNVDZI7x8lgMCEGqQEeFVmu+KuLcsWXOzJiXjY= Subject key identifier: B7:75:8D:02:D5:EC:B4:B5:0A:DD:89:47:12:83:63:6F:CB:27:FA:59 Authority key identifier: 78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D Certificate issuer: /CN=8020a399-7e83-4bb5-8d8d-e424e2edac2b Certificate serial: 010D0C9F4328584F7782F81715EA6E0CADEE5E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft Manifest number: 010D0C9F4328584A629AFAFAF4C26B8EDA69D05E Signing time: Sun 11 Oct 2026 13:00:24 +0000 Manifest this update: Sun 11 Oct 2026 13:00:24 +0000 Manifest next update: Wed 14 Oct 2026 13:00:00 +0000 Files and hashes: 1: 8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl (hash: gOlNDSXEMgfEIvhwvTrn60U8nFHU36LoqEKqFWSIuKk=) 2: 9b8f3de7-adff-3b45-8b51-de811d42f4ce.roa (hash: fhwCpnzZ2VIorKubvEda0vDjI2pf1WTkciwcRJzTzSI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:f8:17:15:ea:6e:0c:ad:ee:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8020a399-7e83-4bb5-8d8d-e424e2edac2b Validity Not Before: Oct 11 13:00:24 2026 GMT Not After : Oct 14 13:00:00 2026 GMT Subject: CN=4f05c6bd-b1b7-4381-8315-9ec886aa821b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:27:51:dc:b5:67:fc:b7:88:3a:48:67:b0:c8: 5c:83:bf:03:2c:c8:15:dd:c2:87:ba:32:c6:10:ed: 63:39:ac:23:3e:83:f8:66:d1:7d:7c:61:82:9f:60: 42:38:17:d8:b8:b8:69:3a:cd:2d:36:0c:eb:1a:bb: 72:b9:6d:aa:0a:8c:d2:b3:c6:ab:67:24:a4:c4:fb: 80:d5:d6:d5:e3:64:54:64:4c:20:d1:a7:54:bb:a5: 4a:e7:a2:4f:9b:5a:b4:59:35:ee:b8:8b:82:bc:da: 96:cb:38:42:44:3f:75:70:1a:51:ff:a2:29:b8:d4: 3b:dd:ec:18:17:15:0b:7c:a5:c3:94:1c:79:7c:be: df:9b:06:aa:03:a7:92:61:a8:a6:96:50:35:5d:82: c7:fe:e0:17:07:a7:bc:cb:da:ae:1f:b4:f5:57:25: e0:4a:53:22:83:66:4b:18:4c:90:95:4f:06:17:82: f5:8e:de:c3:11:17:1d:fb:1d:d1:4e:f5:1e:98:24: d6:e4:0c:06:ea:2b:8a:5f:d7:db:37:8b:7f:5e:91: 41:44:18:9a:12:d0:aa:29:97:22:91:d2:e8:e6:30: ed:e6:37:0b:ce:d1:8b:bf:8e:76:4b:5e:85:89:27: 05:60:1d:63:9e:0e:14:c5:89:3d:3c:26:e7:7f:e3: d0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:75:8D:02:D5:EC:B4:B5:0A:DD:89:47:12:83:63:6F:CB:27:FA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl X509v3 Authority Key Identifier: keyid:78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:8e:7d:30:15:6c:72:73:ac:10:91:98:bb:10:82:3c:f0:dc: 7b:f4:96:c3:75:b9:d9:5e:ac:7c:b0:57:95:ec:b0:89:a0:d1: 90:b5:a3:31:5c:48:71:dc:ef:68:48:e8:b5:31:6c:f0:d0:27: 43:93:e4:87:01:69:df:b0:c3:f5:2a:7b:85:f2:e2:20:bc:c9: 95:43:b7:f2:66:dc:a9:ec:8e:24:79:81:77:2b:28:7a:8b:12: a1:01:fe:99:25:8b:96:13:b8:4c:2f:fa:e3:4e:ef:f9:e1:11: 42:26:ad:ac:19:2f:46:a8:16:45:6f:16:f8:57:7b:f7:09:47: 1e:1d:e2:86:6d:4e:d6:43:a7:89:6c:61:1c:98:ae:19:54:27: 3e:a4:3f:a8:6d:e7:be:53:f4:7b:1a:c9:b3:c7:d6:b3:53:e0: eb:71:48:e7:dd:ba:37:44:62:4a:2a:56:33:d5:16:b8:f2:19: 61:e3:74:ac:8d:ba:99:1e:55:55:7a:91:4d:49:5e:b2:0a:7a: fd:84:6e:9a:e0:d3:99:3e:66:be:3b:56:63:00:11:d5:9c:88: 10:a1:6c:9c:32:d8:8f:d8:95:85:40:40:84:26:b5:f4:b7:ec: f2:07:00:f9:88:a1:0d:e8:7f:44:4a:37:66:00:c7:f5:f6:ec: 06:19:d2:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE93gvgXFepuDK3uXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMGEzOTktN2U4My00YmI1LThkOGQtZTQyNGUyZWRh YzJiMB4XDTI2MTAxMTEzMDAyNFoXDTI2MTAxNDEzMDAwMFowLzEtMCsGA1UEAxMk NGYwNWM2YmQtYjFiNy00MzgxLTgzMTUtOWVjODg2YWE4MjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSdR3LVn/LeIOkhnsMhcg78DLMgV3cKHujLG EO1jOawjPoP4ZtF9fGGCn2BCOBfYuLhpOs0tNgzrGrtyuW2qCozSs8arZySkxPuA 1dbV42RUZEwg0adUu6VK56JPm1q0WTXuuIuCvNqWyzhCRD91cBpR/6IpuNQ73ewY FxULfKXDlBx5fL7fmwaqA6eSYaimllA1XYLH/uAXB6e8y9quH7T1VyXgSlMig2ZL GEyQlU8GF4L1jt7DERcd+x3RTvUemCTW5AwG6iuKX9fbN4t/XpFBRBiaEtCqKZci kdLo5jDt5jcLztGLv452S16FiScFYB1jng4UxYk9PCbnf+PQnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLd1jQLV7LS1Ct2JRxKDY2/LJ/pZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDIw YTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0ZTJlZGFjMmIvODAyMGEzOTktN2U4My00 YmI1LThkOGQtZTQyNGUyZWRhYzJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODAyMGEzOTktN2U4My00YmI1LThk OGQtZTQyNGUyZWRhYzJiLzgwMjBhMzk5LTdlODMtNGJiNS04ZDhkLWU0MjRlMmVk YWMyYi5jcmwwHwYDVR0jBBgwFoAUeBxTEnLOMDBJLVBrmal/6fZM5X0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDIwYTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0 ZTJlZGFjMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDhjn0wFWxyc6wQkZi7EII8 8Nx79JbDdbnZXqx8sFeV7LCJoNGQtaMxXEhx3O9oSOi1MWzw0CdDk+SHAWnfsMP1 KnuF8uIgvMmVQ7fyZtyp7I4keYF3Kyh6ixKhAf6ZJYuWE7hML/rjTu/54RFCJq2s GS9GqBZFbxb4V3v3CUceHeKGbU7WQ6eJbGEcmK4ZVCc+pD+obee+U/R7Gsmzx9az U+DrcUjn3bo3RGJKKlYz1Ra48hlh43SsjbqZHlVVepFNSV6yCnr9hG6a4NOZPma+ O1ZjABHVnIgQoWycMtiP2JWFQECEJrX0t+zyBwD5iKEN6H9ESjdmAMf19uwGGdJG -----END CERTIFICATE-----Generated at Sun Oct 11 16:52:11 2026 by rpki-client