$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft File: c43d9850-d596-4753-8190-8f123f903f5a.mft (raw, json) Hash identifier: pNTRNyLUpY8CMR6fsPGKP7mJ+FIyhW6OzOCy2mYQZ/A= Subject key identifier: A5:0D:8F:84:2F:5E:3B:CA:9C:A4:41:D2:8A:AD:0E:25:7C:CE:CD:1D Authority key identifier: EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F Certificate issuer: /CN=c43d9850-d596-4753-8190-8f123f903f5a Certificate serial: 010D0C9F4328584F646F4DC28473C22FB81B6300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft Manifest number: 010D0C9F4328584B7A377BED36F79EE9AE8D70F0 Signing time: Sun 04 Oct 2026 17:00:25 +0000 Manifest this update: Sun 04 Oct 2026 17:00:25 +0000 Manifest next update: Tue 06 Oct 2026 17:00:00 +0000 Files and hashes: 1: 93b01601-df72-3eaf-a64a-71145f132bfa.roa (hash: 8S4Vm24l47QCnIX72bdAd6k1huaDg+wa+FC6SXWiZ1k=) 2: c43d9850-d596-4753-8190-8f123f903f5a.crl (hash: 4rsiZrlmnEQx2qyPIAMBy/enJr4q1sjIwhXUhCGctHg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:64:6f:4d:c2:84:73:c2:2f:b8:1b:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43d9850-d596-4753-8190-8f123f903f5a Validity Not Before: Oct 4 17:00:25 2026 GMT Not After : Oct 6 17:00:00 2026 GMT Subject: CN=84ef8a4a-d4fc-4738-8bc7-31dc50c87229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e9:8e:a9:3c:e8:8d:e8:b6:72:c1:d0:16:44: b3:6a:84:d0:1d:2e:80:cc:a5:39:1b:d0:75:7a:06: 9d:6f:f2:a6:95:12:71:2b:5c:36:13:e1:b2:8d:47: 75:0f:f3:bf:bc:db:7f:12:c6:db:23:c9:81:45:63: 61:22:28:27:2e:0a:1e:68:4c:12:c8:00:70:11:f7: 9f:f3:4a:cb:6f:2a:e0:5f:e8:9d:e4:dc:34:83:2e: 39:96:21:97:93:59:95:d9:aa:a4:41:bd:a1:c7:29: 9f:e3:8e:c0:f8:29:80:36:cb:34:fb:97:08:f5:98: bd:c2:5d:50:be:c9:ac:b1:6d:25:17:64:37:6d:a7: 28:4a:7d:14:b0:70:e2:9e:d6:9b:e2:68:37:69:cf: fa:04:51:51:92:ba:cf:ab:d4:b5:69:e0:46:f3:c4: da:ce:3e:37:cb:40:94:30:d6:0f:a2:d3:de:e6:72: 82:6d:9a:24:1f:b8:a5:16:08:7b:de:9d:40:30:89: f2:36:37:ae:5f:eb:de:01:44:bc:79:5c:26:03:cc: 22:9d:2b:bd:76:a5:a7:2d:1f:11:3f:6c:37:f9:b9: 3c:42:d7:d7:70:c3:74:0b:16:84:68:8f:bf:79:a3: aa:e9:a1:62:c9:94:a1:5c:f4:14:31:de:b9:e3:56: d5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0D:8F:84:2F:5E:3B:CA:9C:A4:41:D2:8A:AD:0E:25:7C:CE:CD:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl X509v3 Authority Key Identifier: keyid:EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:39:f4:e4:91:28:c2:e5:d9:c3:27:3d:2c:57:0d:ea:9a:36: 99:c6:d3:86:74:21:7e:27:6d:d2:cd:52:1d:06:04:f4:a7:e3: b8:04:2f:22:5a:ad:8a:d8:a1:46:c1:36:0c:07:c2:96:f1:43: 30:7a:59:f5:52:b3:1f:c9:b8:b3:b7:d8:6a:ec:44:13:45:9f: f4:1a:0a:2e:f3:10:7b:5e:93:d7:8c:4e:8b:24:4e:84:f9:67: ff:b6:30:47:d8:5a:ff:52:55:15:89:14:c7:86:3b:14:c9:d9: 94:0a:f9:b0:43:bf:fa:4b:04:23:ab:a5:0b:e2:35:1d:d5:13: 28:e6:fb:07:99:d6:03:a5:e3:7d:3a:03:bd:69:ca:27:fc:df: 05:92:f2:f9:0c:82:45:24:c4:bd:b7:15:e6:db:db:ea:06:52: 5b:cf:a6:e5:0a:ec:8e:69:e8:c2:ea:5d:67:31:b4:93:17:6a: e9:f1:ee:eb:40:5e:49:6a:0e:e0:2e:40:0f:a8:f7:ed:56:73: 3a:2e:c2:5a:10:cb:12:6e:8e:d8:be:0a:f3:1b:c0:f3:9f:cd: 17:da:e7:04:f3:40:ee:2b:5b:1e:47:cc:49:bc:57:b9:1a:3c: 2f:d5:66:b1:ad:6c:46:c0:9d:53:91:b1:61:0c:82:c3:26:db: 39:cd:ba:5f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9kb03ChHPCL7gbYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzZDk4NTAtZDU5Ni00NzUzLTgxOTAtOGYxMjNmOTAz ZjVhMB4XDTI2MTAwNDE3MDAyNVoXDTI2MTAwNjE3MDAwMFowLzEtMCsGA1UEAxMk ODRlZjhhNGEtZDRmYy00NzM4LThiYzctMzFkYzUwYzg3MjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+mOqTzojei2csHQFkSzaoTQHS6AzKU5G9B1 egadb/KmlRJxK1w2E+GyjUd1D/O/vNt/EsbbI8mBRWNhIignLgoeaEwSyABwEfef 80rLbyrgX+id5Nw0gy45liGXk1mV2aqkQb2hxymf447A+CmANss0+5cI9Zi9wl1Q vsmssW0lF2Q3bacoSn0UsHDintab4mg3ac/6BFFRkrrPq9S1aeBG88Tazj43y0CU MNYPotPe5nKCbZokH7ilFgh73p1AMInyNjeuX+veAUS8eVwmA8winSu9dqWnLR8R P2w3+bk8QtfXcMN0CxaEaI+/eaOq6aFiyZShXPQUMd6541bVmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKUNj4QvXjvKnKRB0oqtDiV8zs0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNk OTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEyM2Y5MDNmNWEvYzQzZDk4NTAtZDU5Ni00 NzUzLTgxOTAtOGYxMjNmOTAzZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzQzZDk4NTAtZDU5Ni00NzUzLTgx OTAtOGYxMjNmOTAzZjVhL2M0M2Q5ODUwLWQ1OTYtNDc1My04MTkwLThmMTIzZjkw M2Y1YS5jcmwwHwYDVR0jBBgwFoAU7pVBU5XXCqXb8FoWSdyzUlfYWg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNkOTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEy M2Y5MDNmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGOfTkkSjC5dnDJz0sVw3q mjaZxtOGdCF+J23SzVIdBgT0p+O4BC8iWq2K2KFGwTYMB8KW8UMweln1UrMfybiz t9hq7EQTRZ/0Ggou8xB7XpPXjE6LJE6E+Wf/tjBH2Fr/UlUViRTHhjsUydmUCvmw Q7/6SwQjq6UL4jUd1RMo5vsHmdYDpeN9OgO9acon/N8FkvL5DIJFJMS9txXm29vq BlJbz6blCuyOaejC6l1nMbSTF2rp8e7rQF5Jag7gLkAPqPftVnM6LsJaEMsSbo7Y vgrzG8Dzn80X2ucE80DuK1seR8xJvFe5Gjwv1WaxrWxGwJ1TkbFhDILDJts5zbpf -----END CERTIFICATE-----Generated at Sun Oct 4 20:31:06 2026 by rpki-client