$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft File: b2456e11-ca83-4345-8884-0becc0831fb7.mft (raw, json) Hash identifier: +SXbgH6zYpqWKIeZQaQgCcHrtsQ9l8Um6cuCWM0wbkk= Subject key identifier: E8:3D:D2:DD:86:B7:CD:47:B1:2C:D9:DD:42:CB:F0:31:F3:43:21:EB Authority key identifier: E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15 Certificate issuer: /CN=b2456e11-ca83-4345-8884-0becc0831fb7 Certificate serial: 010D0C9F4328584F4A60ED941F6FB6F4A49BF680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft Manifest number: 010D0C9F4328584073A84ABECBFF88BF31560309 Signing time: Fri 25 Sep 2026 09:00:23 +0000 Manifest this update: Fri 25 Sep 2026 09:00:23 +0000 Manifest next update: Mon 28 Sep 2026 09:00:00 +0000 Files and hashes: 1: 0ea31230-a310-3723-8781-993a54e89d70.roa (hash: /tPKz+eX3pPMQzZGp4jF+4vIePfCr88R83MkdOs3rpc=) 2: 34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa (hash: c2FXCOrMi1YJIr/kN952ly71rDmR2CJn+Xo//0wqUbE=) 3: 875a6dd8-0332-3d39-b999-634a325db39c.roa (hash: mN+lOA7gcA86f5M3ihq5E7u5VsYEPSckGJrWvkfuBA8=) 4: b2456e11-ca83-4345-8884-0becc0831fb7.crl (hash: 5wlPNEaA3JZNfmd84NoeQMADdjBklajoWS3MMbdF61Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:60:ed:94:1f:6f:b6:f4:a4:9b:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2456e11-ca83-4345-8884-0becc0831fb7 Validity Not Before: Sep 25 09:00:23 2026 GMT Not After : Sep 28 09:00:00 2026 GMT Subject: CN=bc81aa78-76f9-407d-838e-a7129a54f11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:a3:44:a7:dc:e1:21:a4:9d:fb:dd:b6:c6: 0e:db:5e:91:c5:6e:e9:a5:97:db:1c:8e:72:43:38: 74:d5:18:c1:0b:16:bd:a6:04:d5:04:e7:7e:54:2b: ae:e7:b6:d5:dd:f5:4c:d0:14:a4:e5:bd:c6:76:19: ee:7d:9f:b6:7b:2c:1d:27:4c:3c:83:f2:ea:d8:83: 86:5f:7b:df:28:f6:d8:73:dd:b2:a2:55:8e:42:43: 9c:14:be:05:33:2b:76:6f:20:dc:bb:16:b1:f6:5e: 59:6a:fa:9c:be:d8:e9:21:a6:5b:49:23:1b:ba:31: 65:ad:f6:f1:f7:89:03:97:6d:d1:e2:ac:e1:1d:6c: 16:05:ea:84:ea:71:1d:d7:db:ba:20:05:ba:c3:c7: d9:39:07:e5:44:85:a6:a9:b9:2b:38:b3:b5:1c:03: 52:d3:a7:7b:9f:f2:47:fd:d6:66:cc:b2:6f:ed:e0: 8b:98:d6:b5:42:a0:af:a9:4b:a2:71:45:3a:77:e9: 04:4c:c8:a9:a9:b3:5b:ca:3e:d6:72:af:7d:0a:77: a6:90:b5:df:f6:f0:fb:2c:b8:8b:43:3f:32:cf:92: 57:5f:b9:c0:84:40:99:f7:c7:b6:3c:31:f6:53:df: 53:9f:39:98:8b:66:50:76:2e:3c:b2:c6:26:1d:98: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3D:D2:DD:86:B7:CD:47:B1:2C:D9:DD:42:CB:F0:31:F3:43:21:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl X509v3 Authority Key Identifier: keyid:E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:8d:37:e3:ac:29:a1:54:b8:3c:f2:80:c9:b9:49:51:a4:a2: 84:1e:b5:e4:6a:f1:13:1f:3c:9d:88:3a:2e:df:a5:d7:25:0a: de:a6:4e:67:39:a4:7b:80:b5:3b:21:d9:13:fe:67:7b:bb:91: 16:c5:4d:c0:22:ac:ef:5b:04:61:61:1e:f9:cc:56:73:62:7c: 4b:72:8a:34:07:2f:4d:40:bd:bd:00:22:77:e6:b3:af:95:52: 5c:53:19:46:79:26:c6:90:77:8a:7f:98:c1:6b:88:b3:f8:90: 27:69:e3:25:58:24:a3:98:18:63:a0:62:91:c0:f7:57:4e:de: 48:0c:b9:d7:7a:f3:67:29:42:8b:39:b1:10:b5:16:94:6d:a6: 77:78:1a:93:fa:e9:75:9a:0d:b0:40:2c:55:a8:84:03:d4:76: 56:a2:61:fb:aa:09:d9:30:95:59:30:eb:78:77:af:f9:55:f7: 8f:d3:88:f0:2d:04:18:14:21:18:75:21:f8:fc:09:4a:24:e2: 9f:14:73:b1:22:5e:52:c2:9d:a0:15:b4:d4:65:20:ae:b0:aa: bf:5c:f8:70:bb:dd:a7:69:aa:a5:c7:29:68:71:a3:e0:d2:47: d4:91:ee:1e:a6:a8:75:97:94:e5:39:8b:43:98:2b:e0:78:7a: ac:8b:ae:7d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9KYO2UH2+29KSb9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI0NTZlMTEtY2E4My00MzQ1LTg4ODQtMGJlY2MwODMx ZmI3MB4XDTI2MDkyNTA5MDAyM1oXDTI2MDkyODA5MDAwMFowLzEtMCsGA1UEAxMk YmM4MWFhNzgtNzZmOS00MDdkLTgzOGUtYTcxMjlhNTRmMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsOjRKfc4SGknfvdtsYO216RxW7ppZfbHI5y Qzh01RjBCxa9pgTVBOd+VCuu57bV3fVM0BSk5b3GdhnufZ+2eywdJ0w8g/Lq2IOG X3vfKPbYc92yolWOQkOcFL4FMyt2byDcuxax9l5ZavqcvtjpIaZbSSMbujFlrfbx 94kDl23R4qzhHWwWBeqE6nEd19u6IAW6w8fZOQflRIWmqbkrOLO1HANS06d7n/JH /dZmzLJv7eCLmNa1QqCvqUuicUU6d+kETMipqbNbyj7Wcq99CnemkLXf9vD7LLiL Qz8yz5JXX7nAhECZ98e2PDH2U99TnzmYi2ZQdi48ssYmHZjfYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOg90t2Gt81HsSzZ3ULL8DHzQyHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMjQ1 NmUxMS1jYTgzLTQzNDUtODg4NC0wYmVjYzA4MzFmYjcvYjI0NTZlMTEtY2E4My00 MzQ1LTg4ODQtMGJlY2MwODMxZmI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjI0NTZlMTEtY2E4My00MzQ1LTg4 ODQtMGJlY2MwODMxZmI3L2IyNDU2ZTExLWNhODMtNDM0NS04ODg0LTBiZWNjMDgz MWZiNy5jcmwwHwYDVR0jBBgwFoAU6A36GUDhzVrGEK64RNgLBcQYCxUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMjQ1NmUxMS1jYTgzLTQzNDUtODg4NC0wYmVj YzA4MzFmYjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDFjTfjrCmhVLg88oDJuUlR pKKEHrXkavETHzydiDou36XXJQrepk5nOaR7gLU7IdkT/md7u5EWxU3AIqzvWwRh YR75zFZzYnxLcoo0By9NQL29ACJ35rOvlVJcUxlGeSbGkHeKf5jBa4iz+JAnaeMl WCSjmBhjoGKRwPdXTt5IDLnXevNnKUKLObEQtRaUbaZ3eBqT+ul1mg2wQCxVqIQD 1HZWomH7qgnZMJVZMOt4d6/5VfeP04jwLQQYFCEYdSH4/AlKJOKfFHOxIl5Swp2g FbTUZSCusKq/XPhwu92naaqlxylocaPg0kfUke4epqh1l5TlOYtDmCvgeHqsi659 -----END CERTIFICATE-----Generated at Sat Sep 26 11:19:13 2026 by rpki-client