$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft File: 4a2347a0-a386-4424-8887-fb176c5cf0b5.mft (raw, json) Hash identifier: 0GLrPVza+UEs23wfLk9QiTQdK+1fhoLqecudqeiSvsU= Subject key identifier: BD:6E:9A:5F:A3:CE:C5:C0:3E:3B:11:76:93:C6:6B:BA:A5:FA:70:82 Authority key identifier: B8:C4:63:F6:52:C6:6B:14:23:9F:6A:89:24:69:F3:96:4F:79:D8:FD Certificate issuer: /CN=4a2347a0-a386-4424-8887-fb176c5cf0b5 Certificate serial: 010D0C9F4328584FB5299CF7EAE4AB04093BCC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft Manifest number: 010D0C9F4328584B5B22A8A8EF383ECB51D9D19A Signing time: Mon 02 Nov 2026 15:00:24 +0000 Manifest this update: Mon 02 Nov 2026 15:00:24 +0000 Manifest next update: Wed 04 Nov 2026 15:00:00 +0000 Files and hashes: 1: 4a2347a0-a386-4424-8887-fb176c5cf0b5.crl (hash: Pd/7YZl6OoxI9UuLiYXKBgD0gswpokHRP3c9We1N5JI=) 2: a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa (hash: HhcEFq20TQh/LuP9uKoRgX5e0uV65nI5mqyAWzNWcmA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b5:29:9c:f7:ea:e4:ab:04:09:3b:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a2347a0-a386-4424-8887-fb176c5cf0b5 Validity Not Before: Nov 2 15:00:24 2026 GMT Not After : Nov 4 15:00:00 2026 GMT Subject: CN=2bc29868-d8b7-4bb2-b115-3644c742351d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:60:95:74:34:0b:d2:76:46:c5:24:5a:29: 5b:29:7e:7a:e4:8d:64:20:d9:3e:e2:ee:d0:66:74: 04:ea:fb:02:fd:a6:ec:b1:52:0f:e4:14:01:4f:3f: 1f:61:ce:2b:17:9f:07:34:09:6b:ac:74:f4:58:d0: 41:66:5a:3f:0c:49:63:05:dc:6d:5c:2a:e3:20:be: 27:6d:a0:09:ce:87:b5:cb:26:71:ab:a6:af:5c:bd: a2:6f:67:bd:61:b2:1f:84:ef:47:a1:13:51:fa:6e: 47:70:37:e2:1a:08:e3:1d:88:38:a3:03:db:30:15: a8:d1:a3:c1:4d:04:4b:68:ff:23:f9:b2:52:1b:78: 64:78:8b:69:52:37:ac:77:e8:23:bf:5d:e3:64:9f: d1:88:b2:be:96:51:a0:2f:76:ba:25:7a:33:fb:9e: 1e:9c:56:42:70:15:20:64:ce:cc:6e:c9:8d:4b:ff: 23:5b:10:0d:05:4e:fd:64:15:e5:1f:93:2b:23:24: 74:3a:e0:12:98:b9:a2:b1:55:e6:16:7e:b3:1d:f1: 70:bc:c4:bb:8a:bd:30:f1:b9:4b:37:84:bb:7f:69: 9f:a9:79:22:07:07:ed:22:84:63:57:43:ae:2b:b3: 9c:7c:0e:57:fd:d7:ef:46:44:cf:ad:6c:18:51:cd: cc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6E:9A:5F:A3:CE:C5:C0:3E:3B:11:76:93:C6:6B:BA:A5:FA:70:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.crl X509v3 Authority Key Identifier: keyid:B8:C4:63:F6:52:C6:6B:14:23:9F:6A:89:24:69:F3:96:4F:79:D8:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:29:4e:81:fc:37:47:23:59:85:a5:69:d8:7f:be:8a:b2:ea: 3c:95:a8:c7:33:fe:e6:df:5b:87:bb:e1:13:bb:c6:34:f2:1a: 09:ab:a3:46:7a:65:80:02:be:05:07:46:f7:24:07:7c:fc:37: e0:bc:31:a0:fc:9c:da:1d:39:f1:47:81:87:ae:5f:37:47:dd: 32:46:e9:aa:86:8c:c9:a3:60:0a:1d:db:50:b6:f1:99:a9:37: 80:ad:20:b4:aa:20:cb:bf:31:a9:ce:74:e6:32:06:05:6a:07: af:5d:29:86:86:de:9e:c0:42:04:8e:e3:bd:28:a0:b8:4d:ca: c6:fd:6b:e7:9e:0d:85:99:85:cb:10:67:85:09:7b:95:83:ca: d5:f4:17:f9:0a:ed:03:ce:aa:e3:8e:af:bc:54:24:52:89:b8: 2b:25:0b:bf:84:bd:09:6a:1b:e3:31:41:79:fb:6b:9a:b4:8c: 4f:c7:89:91:f3:ea:94:1a:d3:13:7b:5a:08:33:18:b0:b6:99: 63:48:63:4b:f4:51:ab:d6:90:6d:35:9e:4a:d2:1f:10:e3:fb: 16:e8:e7:18:2f:cf:e5:63:74:3a:07:22:01:24:7a:30:29:30: 81:e7:bf:aa:d7:48:82:ab:5b:01:69:2b:ec:69:48:63:a3:1b: 21:2b:55:6c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+1KZz36uSrBAk7zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEyMzQ3YTAtYTM4Ni00NDI0LTg4ODctZmIxNzZjNWNm MGI1MB4XDTI2MTEwMjE1MDAyNFoXDTI2MTEwNDE1MDAwMFowLzEtMCsGA1UEAxMk MmJjMjk4NjgtZDhiNy00YmIyLWIxMTUtMzY0NGM3NDIzNTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojtglXQ0C9J2RsUkWilbKX565I1kINk+4u7Q ZnQE6vsC/abssVIP5BQBTz8fYc4rF58HNAlrrHT0WNBBZlo/DEljBdxtXCrjIL4n baAJzoe1yyZxq6avXL2ib2e9YbIfhO9HoRNR+m5HcDfiGgjjHYg4owPbMBWo0aPB TQRLaP8j+bJSG3hkeItpUjesd+gjv13jZJ/RiLK+llGgL3a6JXoz+54enFZCcBUg ZM7MbsmNS/8jWxANBU79ZBXlH5MrIyR0OuASmLmisVXmFn6zHfFwvMS7ir0w8blL N4S7f2mfqXkiBwftIoRjV0OuK7OcfA5X/dfvRkTPrWwYUc3MiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL1uml+jzsXAPjsRdpPGa7ql+nCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80YTIz NDdhMC1hMzg2LTQ0MjQtODg4Ny1mYjE3NmM1Y2YwYjUvNGEyMzQ3YTAtYTM4Ni00 NDI0LTg4ODctZmIxNzZjNWNmMGI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGEyMzQ3YTAtYTM4Ni00NDI0LTg4 ODctZmIxNzZjNWNmMGI1LzRhMjM0N2EwLWEzODYtNDQyNC04ODg3LWZiMTc2YzVj ZjBiNS5jcmwwHwYDVR0jBBgwFoAUuMRj9lLGaxQjn2qJJGnzlk952P0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80YTIzNDdhMC1hMzg2LTQ0MjQtODg4Ny1mYjE3 NmM1Y2YwYjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqKU6B/DdHI1mFpWnYf76K suo8lajHM/7m31uHu+ETu8Y08hoJq6NGemWAAr4FB0b3JAd8/DfgvDGg/JzaHTnx R4GHrl83R90yRumqhozJo2AKHdtQtvGZqTeArSC0qiDLvzGpznTmMgYFagevXSmG ht6ewEIEjuO9KKC4TcrG/Wvnng2FmYXLEGeFCXuVg8rV9Bf5Cu0Dzqrjjq+8VCRS ibgrJQu/hL0JahvjMUF5+2uatIxPx4mR8+qUGtMTe1oIMxiwtpljSGNL9FGr1pBt NZ5K0h8Q4/sW6OcYL8/lY3Q6ByIBJHowKTCB57+q10iCq1sBaSvsaUhjoxshK1Vs -----END CERTIFICATE-----Generated at Tue Nov 3 08:24:49 2026 by rpki-client