$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.mft File: 2b564b98-807f-4472-b081-8e4364ab6410.mft (raw, json) Hash identifier: eTjpqnVFnLa4hUgo9miyX7Oj7fbBYTSTMrd8mCO9soE= Subject key identifier: 47:40:56:B5:42:C0:4F:2C:54:DA:FB:A9:54:93:AC:95:25:89:9B:E7 Authority key identifier: B6:1D:CE:E8:86:25:13:83:CF:B9:AD:6C:15:01:96:64:E0:6A:03:6D Certificate issuer: /CN=2b564b98-807f-4472-b081-8e4364ab6410 Certificate serial: 010D0C9F4328584F52FC83D1110AE5649A6CA480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.mft Manifest number: 010D0C9F4328584B3EF759725096B45F597B6489 Signing time: Mon 28 Sep 2026 11:00:23 +0000 Manifest this update: Mon 28 Sep 2026 11:00:23 +0000 Manifest next update: Thu 01 Oct 2026 11:00:00 +0000 Files and hashes: 1: 2b564b98-807f-4472-b081-8e4364ab6410.crl (hash: OOrctAHZf7qX4CxGuYi0s8zHGHH5OmDdXjnzbV8sOBU=) 2: 4c721f15-60c0-3a53-9f25-c3d1ec7b721b.asa (hash: R6M5psx5fygV4oUyRPDmFHgg3BewlXZw3JEq5HQC3i8=) 3: 61156331-8ce7-3b7d-934a-aaeeeb0eaf11.roa (hash: M0HPup6nxbZd7ruGh5KCq3XIK8PRoRVwkWfRBDGL6+g=) 4: 71a63c70-3ce0-3c7a-8db2-d4a981430241.roa (hash: AOLstKsvVTaw1LrCO+ug/u7tDOTGO4z4CO/iDG688BU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:52:fc:83:d1:11:0a:e5:64:9a:6c:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b564b98-807f-4472-b081-8e4364ab6410 Validity Not Before: Sep 28 11:00:23 2026 GMT Not After : Oct 1 11:00:00 2026 GMT Subject: CN=41b0c077-f13a-4a93-9c16-0319618e5fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:80:3b:6a:87:31:d3:e6:0c:6e:24:c3:f6: 8d:0d:32:65:de:7d:f1:74:97:f6:2c:71:1c:5e:67: 40:59:09:77:3d:c6:27:f1:a6:99:05:a4:52:2b:17: 38:17:2b:1a:c1:30:18:8c:8c:2f:5c:0b:1e:4a:93: f5:35:fc:40:41:20:bd:80:04:d3:1f:ed:14:3a:09: 6f:40:b4:ad:25:b3:d9:5d:a7:0c:42:87:77:a4:74: ab:48:d0:d8:4e:85:7f:7f:7c:f6:f9:f5:1e:b7:8d: 9c:15:06:8a:69:56:64:d6:00:cc:2e:c5:f8:63:57: 4d:fe:74:22:7f:94:a7:4d:74:6e:8e:0c:a0:41:66: 62:e6:53:c7:99:d3:34:be:8c:dd:53:41:4e:6a:d2: 31:0a:ee:a9:ef:f3:15:5c:33:b4:d9:4e:1d:21:f5: cb:25:6e:2d:0b:3a:8b:6d:b3:c4:a8:4e:d2:67:52: ae:5c:3f:59:0b:fc:5f:b8:7f:7e:c6:1b:b0:eb:3a: 69:9b:8a:75:99:b2:fd:e2:6c:71:86:3e:cf:67:cf: f8:26:cf:c6:59:8c:89:31:5b:13:f0:5a:3b:f8:5e: e1:da:c8:5e:ce:34:5b:a9:75:bd:0c:2f:b7:2a:60: 50:c1:0a:28:44:99:08:20:d5:ce:76:5b:24:e8:b1: ed:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:40:56:B5:42:C0:4F:2C:54:DA:FB:A9:54:93:AC:95:25:89:9B:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.crl X509v3 Authority Key Identifier: keyid:B6:1D:CE:E8:86:25:13:83:CF:B9:AD:6C:15:01:96:64:E0:6A:03:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5c:6b:73:35:27:98:ef:56:cc:84:4d:eb:c3:08:1a:8d:af: 8a:6b:e4:c4:8d:52:d1:0e:04:d3:18:ad:f1:3d:4c:9d:11:48: 3d:4f:39:45:d1:cc:e5:0b:8b:67:6f:a6:aa:3b:d3:ef:1d:b3: c7:0e:5d:85:c6:30:a3:3e:ea:44:73:a7:62:b7:5d:5c:25:8d: 01:9e:1d:9a:a6:4a:2c:ee:ff:41:08:3c:d1:5e:30:ee:9f:27: b4:88:17:76:55:7d:b4:dc:47:5c:eb:a1:f9:41:4f:dd:b0:b5: 75:70:52:9a:4d:ea:7b:a5:b7:99:28:61:85:43:5b:1f:c4:9c: 33:39:4c:b3:a6:d1:6f:24:e7:54:59:20:73:02:9b:11:8d:c6: 12:cf:8d:53:39:1f:1d:ca:d3:15:f7:9f:7c:96:70:02:99:17: a7:18:0d:3b:df:1a:4f:3f:4e:29:41:8c:c2:c4:e9:03:94:a5: dc:c3:a1:e6:22:1d:23:5c:0d:e3:27:da:74:d6:ab:c2:60:c3: 44:14:03:2a:4d:50:aa:f9:f7:22:cd:46:50:c8:f9:b7:a4:f5: 3d:8c:7e:b9:b0:4d:09:b9:91:53:91:ec:2f:ee:45:61:87:06: d9:ea:dd:76:67:32:9c:e9:c3:ac:b4:f4:d0:25:ef:23:e2:73: 9c:0e:dd:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9S/IPREQrlZJpspIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1NjRiOTgtODA3Zi00NDcyLWIwODEtOGU0MzY0YWI2 NDEwMB4XDTI2MDkyODExMDAyM1oXDTI2MTAwMTExMDAwMFowLzEtMCsGA1UEAxMk NDFiMGMwNzctZjEzYS00YTkzLTljMTYtMDMxOTYxOGU1ZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk6AO2qHMdPmDG4kw/aNDTJl3n3xdJf2LHEc XmdAWQl3PcYn8aaZBaRSKxc4FysawTAYjIwvXAseSpP1NfxAQSC9gATTH+0UOglv QLStJbPZXacMQod3pHSrSNDYToV/f3z2+fUet42cFQaKaVZk1gDMLsX4Y1dN/nQi f5SnTXRujgygQWZi5lPHmdM0vozdU0FOatIxCu6p7/MVXDO02U4dIfXLJW4tCzqL bbPEqE7SZ1KuXD9ZC/xfuH9+xhuw6zppm4p1mbL94mxxhj7PZ8/4Js/GWYyJMVsT 8Fo7+F7h2shezjRbqXW9DC+3KmBQwQooRJkIINXOdlsk6LHtBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEdAVrVCwE8sVNr7qVSTrJUliZvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYjU2 NGI5OC04MDdmLTQ0NzItYjA4MS04ZTQzNjRhYjY0MTAvMmI1NjRiOTgtODA3Zi00 NDcyLWIwODEtOGU0MzY0YWI2NDEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmI1NjRiOTgtODA3Zi00NDcyLWIw ODEtOGU0MzY0YWI2NDEwLzJiNTY0Yjk4LTgwN2YtNDQ3Mi1iMDgxLThlNDM2NGFi NjQxMC5jcmwwHwYDVR0jBBgwFoAUth3O6IYlE4PPua1sFQGWZOBqA20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYjU2NGI5OC04MDdmLTQ0NzItYjA4MS04ZTQz NjRhYjY0MTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHXGtzNSeY71bMhE3rwwga ja+Ka+TEjVLRDgTTGK3xPUydEUg9TzlF0czlC4tnb6aqO9PvHbPHDl2FxjCjPupE c6dit11cJY0Bnh2apkos7v9BCDzRXjDunye0iBd2VX203Edc66H5QU/dsLV1cFKa Tep7pbeZKGGFQ1sfxJwzOUyzptFvJOdUWSBzApsRjcYSz41TOR8dytMV9598lnAC mRenGA073xpPP04pQYzCxOkDlKXcw6HmIh0jXA3jJ9p01qvCYMNEFAMqTVCq+fci zUZQyPm3pPU9jH65sE0JuZFTkewv7kVhhwbZ6t12ZzKc6cOstPTQJe8j4nOcDt0P -----END CERTIFICATE-----Generated at Tue Sep 29 10:24:32 2026 by rpki-client