$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft File: a856eb04-e27d-4da2-8c39-a38263828e38.mft (raw, json) Hash identifier: +DSh8H5XijJ+C3OvoG4/pagD1HZMijCdf0jv9LpMR2E= Subject key identifier: E3:6D:53:25:B1:B4:B2:9F:20:64:6F:51:52:71:9B:87:5E:95:66:02 Authority key identifier: 7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 Certificate issuer: /CN=a856eb04-e27d-4da2-8c39-a38263828e38 Certificate serial: 010D0C9F4328584FB3119D1A86648F5BC50FED18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft Manifest number: 010D0C9F432858482F910EBCA643DC9360F49543 Signing time: Sun 01 Nov 2026 21:00:23 +0000 Manifest this update: Sun 01 Nov 2026 21:00:23 +0000 Manifest next update: Tue 03 Nov 2026 21:00:00 +0000 Files and hashes: 1: 82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa (hash: KeKIhAQX3q/WR//X8cZIPe3Xg5Ppw88e99iVzpbX6l8=) 2: a856eb04-e27d-4da2-8c39-a38263828e38.crl (hash: feBVWsiNOaxuzlPXuWcq+2SsU9ipsOzByQtCQb/llMw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:11:9d:1a:86:64:8f:5b:c5:0f:ed:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a856eb04-e27d-4da2-8c39-a38263828e38 Validity Not Before: Nov 1 21:00:23 2026 GMT Not After : Nov 3 21:00:00 2026 GMT Subject: CN=f3b02e91-7225-404f-9b33-cc5c2d9389b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:2a:c8:6c:41:d5:6f:8d:f0:87:83:3a:b7: ef:cc:19:1d:ac:ac:99:1c:a2:a7:fc:43:a2:d9:e4: 0b:20:04:34:c8:97:49:79:0d:34:c1:97:2c:90:5c: 2a:30:e3:ff:e5:fc:d1:8a:8a:ad:c7:fa:54:ac:98: 8e:45:92:3c:53:7d:61:18:50:4f:ad:56:23:dc:4f: 3b:14:75:a7:87:6a:eb:93:a9:19:5c:63:88:ba:b6: 8a:a7:27:b2:3d:6b:96:ea:26:b9:7b:43:b6:51:91: 52:c5:a4:f8:a1:1a:07:af:93:25:77:0c:d1:a7:6b: 2a:46:24:b4:aa:b4:f7:de:dd:2a:3a:63:a3:e4:0d: a1:b9:64:25:8b:d5:43:c7:76:88:d0:8b:a2:09:7d: 01:ff:b8:63:f9:70:3a:f2:17:08:ce:0a:bd:8c:9d: 23:ba:71:75:b6:1e:15:29:46:2e:81:07:f7:f6:c0: 17:33:37:3e:9d:9e:af:d7:af:9f:f8:7b:b3:6d:47: da:d4:04:62:ee:94:aa:f3:4e:e2:d8:b3:96:bc:4f: 1e:81:32:ab:77:41:b8:88:b8:31:0c:64:c9:21:43: da:32:75:97:0b:75:09:e7:c7:2a:c4:70:9a:ee:4d: 5c:06:ae:0b:06:cf:ce:5d:4c:16:48:3c:7a:40:82: 90:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6D:53:25:B1:B4:B2:9F:20:64:6F:51:52:71:9B:87:5E:95:66:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl X509v3 Authority Key Identifier: keyid:7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:62:5b:58:d8:1b:a2:9c:82:35:1e:70:64:ff:6c:52:78:ad: 05:7f:9b:43:c2:00:f5:9e:7c:2f:25:68:16:79:e0:44:fb:89: b7:38:e8:fe:23:26:ff:94:cb:68:10:ea:da:88:09:1a:44:7d: 9b:c7:1a:5b:b7:32:21:c8:6c:17:26:f2:98:9e:23:73:7f:26: 74:5d:5b:c3:b5:e5:e5:04:a5:e5:10:c9:b9:2b:46:a8:51:87: 5d:e3:9a:d6:dd:08:b5:79:49:23:56:d0:0e:c3:0a:82:16:ad: df:45:a5:03:68:24:ec:b4:f6:ca:7e:84:69:73:00:b3:75:79: cf:a8:fb:c5:26:60:57:5c:eb:32:d2:35:48:9e:71:e8:27:d1: 0b:88:3b:4b:88:cf:09:6a:02:8d:4c:aa:ad:de:3f:22:1f:0d: 3a:b6:d0:8c:94:f1:9e:3c:1a:4d:23:84:be:c5:24:f8:25:3d: c8:e0:4a:af:da:ad:a3:e1:3e:fb:5d:7c:77:4f:51:8b:6a:3a: 2c:6d:7e:19:2e:bb:48:fc:a8:d3:b4:f0:38:5d:ff:e3:66:55: 37:95:16:0b:2b:4d:0b:83:a0:0e:10:d6:61:05:e1:00:b7:14: eb:f5:b6:c0:91:a9:9d:37:ea:33:b1:25:1a:c6:21:17:b3:3f: b7:5f:5f:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+zEZ0ahmSPW8UP7RgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg1NmViMDQtZTI3ZC00ZGEyLThjMzktYTM4MjYzODI4 ZTM4MB4XDTI2MTEwMTIxMDAyM1oXDTI2MTEwMzIxMDAwMFowLzEtMCsGA1UEAxMk ZjNiMDJlOTEtNzIyNS00MDRmLTliMzMtY2M1YzJkOTM4OWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jgqyGxB1W+N8IeDOrfvzBkdrKyZHKKn/EOi 2eQLIAQ0yJdJeQ00wZcskFwqMOP/5fzRioqtx/pUrJiORZI8U31hGFBPrVYj3E87 FHWnh2rrk6kZXGOIuraKpyeyPWuW6ia5e0O2UZFSxaT4oRoHr5MldwzRp2sqRiS0 qrT33t0qOmOj5A2huWQli9VDx3aI0IuiCX0B/7hj+XA68hcIzgq9jJ0junF1th4V KUYugQf39sAXMzc+nZ6v16+f+HuzbUfa1ARi7pSq807i2LOWvE8egTKrd0G4iLgx DGTJIUPaMnWXC3UJ58cqxHCa7k1cBq4LBs/OXUwWSDx6QIKQEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFONtUyWxtLKfIGRvUVJxm4delWYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hODU2 ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgyNjM4MjhlMzgvYTg1NmViMDQtZTI3ZC00 ZGEyLThjMzktYTM4MjYzODI4ZTM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTg1NmViMDQtZTI3ZC00ZGEyLThj MzktYTM4MjYzODI4ZTM4L2E4NTZlYjA0LWUyN2QtNGRhMi04YzM5LWEzODI2Mzgy OGUzOC5jcmwwHwYDVR0jBBgwFoAUet2XIbvAmhBpFftZXdBp16maeaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hODU2ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgy NjM4MjhlMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5YltY2BuinII1HnBk/2xS eK0Ff5tDwgD1nnwvJWgWeeBE+4m3OOj+Iyb/lMtoEOraiAkaRH2bxxpbtzIhyGwX JvKYniNzfyZ0XVvDteXlBKXlEMm5K0aoUYdd45rW3Qi1eUkjVtAOwwqCFq3fRaUD aCTstPbKfoRpcwCzdXnPqPvFJmBXXOsy0jVInnHoJ9ELiDtLiM8JagKNTKqt3j8i Hw06ttCMlPGePBpNI4S+xST4JT3I4Eqv2q2j4T77XXx3T1GLajosbX4ZLrtI/KjT tPA4Xf/jZlU3lRYLK00Lg6AOENZhBeEAtxTr9bbAkamdN+ozsSUaxiEXsz+3X19v -----END CERTIFICATE-----Generated at Mon Nov 2 08:28:29 2026 by rpki-client