$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft File: db859a2a-df82-4532-a984-71176499699e.mft (raw, json) Hash identifier: 3IyFD6nYG9jVa6wbzeeqcQ0WUrprnEdfuMH7RL9aa74= Subject key identifier: B4:8B:5C:D3:B1:0B:D5:DA:9F:46:BC:69:AC:F4:13:A6:D1:4F:98:93 Authority key identifier: FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E Certificate issuer: /CN=db859a2a-df82-4532-a984-71176499699e Certificate serial: 010D0C9F4328584F66E0A939A4B34AF84D52A280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft Manifest number: 010D0C9F4328584073A8585128FB207D4D967483 Signing time: Mon 05 Oct 2026 14:00:23 +0000 Manifest this update: Mon 05 Oct 2026 14:00:23 +0000 Manifest next update: Thu 08 Oct 2026 14:00:00 +0000 Files and hashes: 1: 156ce4d8-90cb-328d-a792-dd85d82b760d.roa (hash: +s2ddnX0UjnjQMVf5e3XxJYIy7Vsw6FCg4T2YoQ/9so=) 2: 7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa (hash: /przwnJ6JPHjB6TwkDNJnalqAqOq4TdNadvpESWDhpI=) 3: db859a2a-df82-4532-a984-71176499699e.crl (hash: QbV/ceoqg6MvnySvHmOdLtAF4I+TO0ZDWgyBB/+MOh8=) 4: e830da66-f60b-3f6e-b42e-49ec6ba64356.roa (hash: 5e+/YC99gsYgcHlNag88JCq9ZMGfDeLGLRjSouc6mv8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:e0:a9:39:a4:b3:4a:f8:4d:52:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db859a2a-df82-4532-a984-71176499699e Validity Not Before: Oct 5 14:00:23 2026 GMT Not After : Oct 8 14:00:00 2026 GMT Subject: CN=a4bc2795-35cb-455c-8245-3dd4781c8e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:33:97:73:c2:d0:18:41:7a:14:42:cb:a0: 36:59:59:fa:ee:2b:8a:9d:63:2f:d5:02:c0:f9:2e: ad:15:7d:24:64:ac:07:15:53:99:68:f0:cf:75:c6: 4f:2d:b1:6d:28:10:c6:ed:1f:d6:29:85:45:99:6a: 11:76:d0:6a:54:0c:db:71:43:f1:de:80:ba:d8:47: af:bb:4f:21:52:64:b0:c1:83:1f:86:1f:2f:ba:eb: 35:49:bd:70:68:0a:d5:92:e7:27:ce:0e:b8:06:81: 89:35:bf:2b:03:4a:0f:a4:f3:5f:61:c0:98:35:90: db:52:2a:8a:f1:af:a4:6b:87:8c:04:45:46:f4:4b: e6:5c:0f:e7:42:db:bc:fe:a8:74:2c:42:c6:44:cd: 4c:e9:bc:84:36:1d:5a:1b:c2:1e:1c:8e:f0:28:49: d8:d6:15:d7:e4:c1:04:13:df:d6:cc:40:1b:cc:83: 56:11:f2:07:ec:9e:32:bd:55:a4:d1:b5:e2:36:14: 4c:ba:c0:ee:55:ea:5f:cf:a0:79:5c:d2:b2:9f:3e: 4f:72:5c:e2:a7:c4:cf:d6:e2:e9:6a:64:d4:15:58: bc:4b:89:8b:02:4d:07:a9:49:55:d0:de:6b:f0:af: b6:0b:48:7d:82:12:88:b8:4d:bc:4c:37:ad:17:5a: 5a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8B:5C:D3:B1:0B:D5:DA:9F:46:BC:69:AC:F4:13:A6:D1:4F:98:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl X509v3 Authority Key Identifier: keyid:FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:62:e6:ff:7d:30:a2:a3:01:63:b9:b1:8f:3d:04:3b:a9:e7: 88:44:67:70:b9:bb:01:01:e8:4e:68:66:2d:58:2f:8d:16:50: cf:d4:be:65:d4:b2:50:e9:0c:20:c2:fe:b2:7f:3f:45:65:6a: 6c:f0:e3:7f:4f:bb:96:aa:1f:8a:fc:38:36:f1:97:da:bb:f7: 81:dc:8b:77:7a:49:de:11:57:48:90:42:27:59:a0:07:5b:15: ed:32:ed:61:56:06:8c:44:f1:00:26:e1:df:b3:21:63:7b:b8: 0e:b6:1d:c5:87:88:90:90:1c:2e:b5:33:40:80:b2:79:bb:5d: b6:89:e0:18:d8:12:ac:ca:9b:a4:c2:4f:36:8d:ae:c7:ab:d9: 8c:0c:24:8b:52:b5:3b:fa:c8:08:72:e6:46:d0:a3:02:59:54: c4:e3:e9:4e:0b:66:df:24:e0:2a:66:34:e5:d2:fd:fd:0f:82: 3f:97:ad:6d:86:77:52:57:52:6f:d6:1a:6e:3a:0f:8d:99:86: 76:ca:dc:a0:62:6c:6a:69:fc:f3:fd:fc:37:97:eb:f0:7e:ab: 95:14:1f:88:68:e1:d7:fb:02:6f:7e:8c:e0:a2:fd:2d:58:33: 3d:e7:f4:a0:7f:70:03:22:40:45:66:80:6d:c2:0a:be:7b:99: dc:58:d7:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9m4Kk5pLNK+E1SooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI4NTlhMmEtZGY4Mi00NTMyLWE5ODQtNzExNzY0OTk2 OTllMB4XDTI2MTAwNTE0MDAyM1oXDTI2MTAwODE0MDAwMFowLzEtMCsGA1UEAxMk YTRiYzI3OTUtMzVjYi00NTVjLTgyNDUtM2RkNDc4MWM4ZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCozl3PC0BhBehRCy6A2WVn67iuKnWMv1QLA +S6tFX0kZKwHFVOZaPDPdcZPLbFtKBDG7R/WKYVFmWoRdtBqVAzbcUPx3oC62Eev u08hUmSwwYMfhh8vuus1Sb1waArVkucnzg64BoGJNb8rA0oPpPNfYcCYNZDbUiqK 8a+ka4eMBEVG9EvmXA/nQtu8/qh0LELGRM1M6byENh1aG8IeHI7wKEnY1hXX5MEE E9/WzEAbzINWEfIH7J4yvVWk0bXiNhRMusDuVepfz6B5XNKynz5Pclzip8TP1uLp amTUFVi8S4mLAk0HqUlV0N5r8K+2C0h9ghKIuE28TDetF1paNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLSLXNOxC9Xan0a8aaz0E6bRT5iTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYjg1 OWEyYS1kZjgyLTQ1MzItYTk4NC03MTE3NjQ5OTY5OWUvZGI4NTlhMmEtZGY4Mi00 NTMyLWE5ODQtNzExNzY0OTk2OTllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGI4NTlhMmEtZGY4Mi00NTMyLWE5 ODQtNzExNzY0OTk2OTllL2RiODU5YTJhLWRmODItNDUzMi1hOTg0LTcxMTc2NDk5 Njk5ZS5jcmwwHwYDVR0jBBgwFoAU/0GuHKgSjWDMIT5f7WFJYq02iV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYjg1OWEyYS1kZjgyLTQ1MzItYTk4NC03MTE3 NjQ5OTY5OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0Yub/fTCiowFjubGPPQQ7 qeeIRGdwubsBAehOaGYtWC+NFlDP1L5l1LJQ6Qwgwv6yfz9FZWps8ON/T7uWqh+K /Dg28Zfau/eB3It3ekneEVdIkEInWaAHWxXtMu1hVgaMRPEAJuHfsyFje7gOth3F h4iQkBwutTNAgLJ5u122ieAY2BKsypukwk82ja7Hq9mMDCSLUrU7+sgIcuZG0KMC WVTE4+lOC2bfJOAqZjTl0v39D4I/l61thndSV1Jv1hpuOg+NmYZ2ytygYmxqafzz /fw3l+vwfquVFB+IaOHX+wJvfozgov0tWDM95/Sgf3ADIkBFZoBtwgq+e5ncWNeT -----END CERTIFICATE-----Generated at Tue Oct 6 14:46:31 2026 by rpki-client