$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json) Hash identifier: pt3EE6NegtLO6zuCQGE2AYIGfRpDWLvDWUNWLHSuKYo= Subject key identifier: 46:7B:FD:60:6A:64:B3:0E:21:7F:57:98:A9:E4:03:B0:0A:B3:23:0E Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584F2ADAEFA70DA0022722B06800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft Manifest number: 010D0C9F4328584073A83840A2BEE7D9A3337B14 Signing time: Mon 14 Sep 2026 02:00:23 +0000 Manifest this update: Mon 14 Sep 2026 02:00:23 +0000 Manifest next update: Wed 16 Sep 2026 02:00:00 +0000 Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: lfDgJLDBOvxua/drTFBYW8MoRrd/b2YiJ6gkCOrtmwY=) 2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: p8KX8uaTc7iE0KF3d/ecsvKPK9MwEwmfp4AAbjVVtD4=) 3: b24dbab2-534c-3e59-b62f-16d920e96e56.asa (hash: ORK6OBV2078olV9cWb16omJ+o7jBcvmU2xWSNZc1qFA=) 4: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: yIRhilHBVDRHoipxBgMbNqqfjKg9KSYjsEXJ+PMmfsU=) 5: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: w+Du0WesOdb2yeemaRfdJ1Uvr8t0mB2HZE/qPx69ei4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:da:ef:a7:0d:a0:02:27:22:b0:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Sep 14 02:00:23 2026 GMT Not After : Sep 16 02:00:00 2026 GMT Subject: CN=aafcfe25-dc43-4532-9ef7-4e13b8a3a50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:01:58:ad:99:35:e8:81:1c:2c:ab:10:01:bc: 27:84:d2:6a:8c:e5:be:5b:64:ac:0d:64:fd:ba:6c: 2e:8a:f0:fb:25:52:d5:ad:f3:c4:5f:b4:7d:e5:f5: 79:55:0a:e3:7f:2e:36:07:47:9e:18:64:2e:b2:8e: 2e:79:c1:d2:c4:9c:fb:22:66:35:71:6b:d2:5c:c5: f8:2c:38:b5:6a:c4:1b:3c:89:b8:06:cd:49:9e:41: dd:f6:f9:d9:81:77:2e:27:5d:e6:b1:2a:b0:55:3b: 08:3b:82:bb:09:5b:0c:dd:bd:47:b2:38:36:d8:7b: 04:4e:f7:a0:70:c4:4f:cb:ea:6c:fc:f7:22:78:22: 7a:84:89:1e:b4:b7:3c:de:25:59:3c:5b:1d:26:d7: f3:6b:5c:5d:da:e2:49:b1:be:c4:88:a1:47:3d:a8: 1a:7b:d4:fe:8e:db:fb:32:29:d4:f4:03:91:5a:aa: af:d0:32:9d:d1:fa:0f:ac:58:52:55:5e:44:51:47: 4d:7f:ed:85:8d:cd:19:a8:01:5d:15:17:0c:5c:6b: e6:89:97:39:fa:f2:c9:9e:47:83:13:c0:df:63:b5: 45:6e:1c:45:1d:86:e8:eb:a0:73:06:74:d9:76:23: d3:95:aa:1c:85:30:22:30:67:f8:f2:e5:ba:27:c2: 3d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7B:FD:60:6A:64:B3:0E:21:7F:57:98:A9:E4:03:B0:0A:B3:23:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:65:d4:37:a0:17:a9:bd:ce:10:7b:7c:6f:2b:7f:38:94:77: 2a:70:90:da:a7:27:0c:9d:0e:69:16:45:48:9d:38:ee:d1:ae: f4:54:16:3b:34:cb:76:cf:4e:5b:f3:34:76:e5:7c:15:e7:5d: 05:ca:72:81:c2:2b:2e:2d:64:e1:62:76:ea:c3:5d:c1:77:50: 2a:d5:f8:ad:f9:20:a3:64:42:71:d6:67:ec:29:1e:c8:bc:99: 9f:b6:da:d8:9c:da:52:fb:13:bc:fc:38:ee:c5:3e:5a:8f:c5: 10:a7:15:42:d1:76:60:4c:71:8f:23:2d:54:ac:b8:56:82:75: 75:fd:2b:f5:16:f3:6c:43:66:ed:e0:cd:4b:6e:df:2d:75:1e: f0:93:91:7f:23:fe:6d:aa:fa:ff:04:92:19:96:3a:8d:92:fc: e1:1f:0d:6c:b8:fe:05:bb:69:97:3f:1b:f1:3f:03:31:3c:5e: c9:13:f9:a7:1f:e0:1d:b4:6e:84:87:be:cd:3f:c2:f6:5b:1b: d3:3a:60:f9:b7:be:88:2c:39:f1:e0:87:bd:c4:6b:8a:2f:33: fa:78:09:ec:8f:8d:38:f5:dd:15:74:7d:67:97:32:9e:65:1c: 10:50:e8:ae:14:35:c6:ac:0e:1d:fd:8c:45:35:e0:a6:43:b3: 9d:18:b1:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8q2u+nDaACJyKwaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI2MDkxNDAyMDAyM1oXDTI2MDkxNjAyMDAwMFowLzEtMCsGA1UEAxMk YWFmY2ZlMjUtZGM0My00NTMyLTllZjctNGUxM2I4YTNhNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQFYrZk16IEcLKsQAbwnhNJqjOW+W2SsDWT9 umwuivD7JVLVrfPEX7R95fV5VQrjfy42B0eeGGQuso4uecHSxJz7ImY1cWvSXMX4 LDi1asQbPIm4Bs1JnkHd9vnZgXcuJ13msSqwVTsIO4K7CVsM3b1Hsjg22HsETveg cMRPy+ps/PcieCJ6hIketLc83iVZPFsdJtfza1xd2uJJsb7EiKFHPagae9T+jtv7 MinU9AORWqqv0DKd0foPrFhSVV5EUUdNf+2Fjc0ZqAFdFRcMXGvmiZc5+vLJnkeD E8DfY7VFbhxFHYbo66BzBnTZdiPTlaochTAiMGf48uW6J8I9IQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEZ7/WBqZLMOIX9XmKnkA7AKsyMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00 NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQZdQ3oBepvc4Qe3xvK384 lHcqcJDapycMnQ5pFkVInTju0a70VBY7NMt2z05b8zR25XwV510FynKBwisuLWTh Ynbqw13Bd1Aq1fit+SCjZEJx1mfsKR7IvJmfttrYnNpS+xO8/DjuxT5aj8UQpxVC 0XZgTHGPIy1UrLhWgnV1/Sv1FvNsQ2bt4M1Lbt8tdR7wk5F/I/5tqvr/BJIZljqN kvzhHw1suP4Fu2mXPxvxPwMxPF7JE/mnH+AdtG6Eh77NP8L2WxvTOmD5t76ILDnx 4Ie9xGuKLzP6eAnsj4049d0VdH1nlzKeZRwQUOiuFDXGrA4d/YxFNeCmQ7OdGLHZ -----END CERTIFICATE-----Generated at Mon Sep 14 17:52:02 2026 by rpki-client