$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft File: 838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft (raw, json) Hash identifier: 2W7ST0HUwGGsUk4u0Wy06LJt8TPd5LIuRtYja876GXk= Subject key identifier: 70:8E:C6:D2:24:C2:1C:09:58:04:85:3B:EC:12:0D:98:DF:20:FB:37 Authority key identifier: DE:F8:1F:76:5A:25:D9:66:4A:7A:48:74:92:7E:15:29:92:58:68:E4 Certificate issuer: /CN=838c2b1f-f58f-4eda-b953-35c6e8e0a1d3 Certificate serial: 010D0C9F4328584F67B11D184B1043EE7BCAB880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft Manifest number: 010D0C9F4328584D92BADCE892FDF17C6A5FCEAC Signing time: Mon 05 Oct 2026 21:00:24 +0000 Manifest this update: Mon 05 Oct 2026 21:00:24 +0000 Manifest next update: Thu 08 Oct 2026 21:00:00 +0000 Files and hashes: 1: 838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl (hash: RWFjLUj6IdOwEssXSuS+oVvA1ImbB2Y2GR0nl1AobN4=) 2: f594481f-b71f-3694-9566-972e2d639987.roa (hash: Hzp/pubZhuZXQXZ4giSRJ3iMHdArtnCSXW5962mCGw4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:b1:1d:18:4b:10:43:ee:7b:ca:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=838c2b1f-f58f-4eda-b953-35c6e8e0a1d3 Validity Not Before: Oct 5 21:00:24 2026 GMT Not After : Oct 8 21:00:00 2026 GMT Subject: CN=c89daa5e-1905-4d57-a4b6-c6903a8fe4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:11:d9:e9:71:d3:b5:5b:6a:d3:86:4c:cb: 60:53:2e:33:f4:fa:d6:13:02:e0:bf:92:ff:0f:6f: bf:1c:4d:89:ff:ca:b1:2e:f7:d5:e8:fb:d3:20:4a: fb:0a:13:c6:0e:07:ea:69:3a:d1:cd:5f:0e:76:ae: a9:68:d4:18:97:2d:6b:a9:6c:e1:58:b7:f9:0c:f2: b0:45:45:09:2c:5e:fe:f3:72:8e:77:d9:a5:08:e6: fd:e1:af:30:16:2f:4a:6a:57:07:ab:f1:89:2c:50: a1:e9:7b:af:18:8c:7d:a5:69:ad:af:38:90:f4:87: c3:0f:1d:1a:89:39:a5:65:6b:83:a3:14:6e:a1:93: 38:f2:4f:34:bd:88:34:df:ed:f9:f3:6b:dd:b0:9a: 05:22:dd:66:5b:60:91:3d:f2:74:28:16:70:e5:03: 49:dc:c2:8e:c5:41:b5:67:1b:4a:7f:09:65:14:51: d4:c0:c2:aa:cd:32:b9:ed:4b:64:19:44:79:8c:c6: f6:df:9a:9f:34:d4:ef:75:d6:b6:84:1c:94:e5:b2: 7d:97:1d:90:73:87:88:1f:42:f5:10:9c:7f:c0:1f: 11:c8:88:7e:79:59:55:27:9d:f3:ae:d7:40:d7:df: f7:74:9a:de:3e:76:63:11:0e:97:bc:6c:90:45:de: 8d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8E:C6:D2:24:C2:1C:09:58:04:85:3B:EC:12:0D:98:DF:20:FB:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl X509v3 Authority Key Identifier: keyid:DE:F8:1F:76:5A:25:D9:66:4A:7A:48:74:92:7E:15:29:92:58:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:78:79:cf:62:9f:bf:d2:2e:4a:30:7e:5f:2a:33:6d:8c:c0: 47:69:e9:0e:a6:c2:50:1e:90:54:86:ed:5e:b0:0d:b4:02:fa: b6:cd:aa:4b:68:9b:30:5d:13:35:46:44:13:d8:32:a9:94:96: 76:e9:75:b4:f4:ef:75:8c:e0:0e:3d:71:59:c0:13:c6:d1:4a: d9:eb:95:e8:79:e6:9a:d5:ea:db:bc:bb:ab:7a:3c:44:f5:56: 9d:ea:bb:ca:cb:93:c8:64:ce:70:87:a4:b4:dc:2f:2d:9f:93: 1a:8b:1c:86:4f:88:6b:92:ed:75:97:e3:8b:8c:48:0d:40:4a: 41:03:b9:d7:7e:e0:63:c6:3b:63:3f:c2:8e:d0:6d:1f:d7:57: 6c:10:0d:dd:62:ce:4b:a9:0e:2e:9e:e2:4e:6c:23:82:1b:8f: c3:d0:7d:56:63:1d:d4:20:fc:3a:ba:b7:21:eb:e7:3b:ad:1c: 2b:df:0b:df:4e:5d:47:e3:6e:fd:3f:b8:cc:9b:f8:48:3b:bf: 39:dc:50:6a:55:f3:5f:3f:61:92:3f:9a:3f:1f:62:45:f2:32: 9a:d5:82:72:c4:6f:d7:8a:1b:88:e4:69:05:1a:90:eb:b7:52: fb:e2:5a:10:66:e5:4f:bf:0b:ea:bb:64:88:da:9b:fb:bf:38: 96:b2:f1:b2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9nsR0YSxBD7nvKuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM4YzJiMWYtZjU4Zi00ZWRhLWI5NTMtMzVjNmU4ZTBh MWQzMB4XDTI2MTAwNTIxMDAyNFoXDTI2MTAwODIxMDAwMFowLzEtMCsGA1UEAxMk Yzg5ZGFhNWUtMTkwNS00ZDU3LWE0YjYtYzY5MDNhOGZlNGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkMR2elx07VbatOGTMtgUy4z9PrWEwLgv5L/ D2+/HE2J/8qxLvfV6PvTIEr7ChPGDgfqaTrRzV8Odq6paNQYly1rqWzhWLf5DPKw RUUJLF7+83KOd9mlCOb94a8wFi9KalcHq/GJLFCh6XuvGIx9pWmtrziQ9IfDDx0a iTmlZWuDoxRuoZM48k80vYg03+3582vdsJoFIt1mW2CRPfJ0KBZw5QNJ3MKOxUG1 ZxtKfwllFFHUwMKqzTK57UtkGUR5jMb235qfNNTvdda2hByU5bJ9lx2Qc4eIH0L1 EJx/wB8RyIh+eVlVJ53zrtdA19/3dJrePnZjEQ6XvGyQRd6N+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHCOxtIkwhwJWASFO+wSDZjfIPs3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Mzhj MmIxZi1mNThmLTRlZGEtYjk1My0zNWM2ZThlMGExZDMvODM4YzJiMWYtZjU4Zi00 ZWRhLWI5NTMtMzVjNmU4ZTBhMWQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODM4YzJiMWYtZjU4Zi00ZWRhLWI5 NTMtMzVjNmU4ZTBhMWQzLzgzOGMyYjFmLWY1OGYtNGVkYS1iOTUzLTM1YzZlOGUw YTFkMy5jcmwwHwYDVR0jBBgwFoAU3vgfdlol2WZKekh0kn4VKZJYaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84MzhjMmIxZi1mNThmLTRlZGEtYjk1My0zNWM2 ZThlMGExZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSeHnPYp+/0i5KMH5fKjNt jMBHaekOpsJQHpBUhu1esA20Avq2zapLaJswXRM1RkQT2DKplJZ26XW09O91jOAO PXFZwBPG0UrZ65Xoeeaa1erbvLurejxE9Vad6rvKy5PIZM5wh6S03C8tn5MaixyG T4hrku11l+OLjEgNQEpBA7nXfuBjxjtjP8KO0G0f11dsEA3dYs5LqQ4unuJObCOC G4/D0H1WYx3UIPw6urch6+c7rRwr3wvfTl1H4279P7jMm/hIO7853FBqVfNfP2GS P5o/H2JF8jKa1YJyxG/XihuI5GkFGpDrt1L74loQZuVPvwvqu2SI2pv7vziWsvGy -----END CERTIFICATE-----Generated at Tue Oct 6 01:48:51 2026 by rpki-client