$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.mft File: a4cfaa95-c33a-49a6-b4ad-44b93425df6e.mft (raw, json) Hash identifier: ToaWGDJwQyuLDbO7oK9vH/A3kuL1KLw4NZjOCPSX3KU= Subject key identifier: F5:59:98:EF:CB:72:40:3A:76:55:42:2C:52:6B:DA:82:CB:7B:44:0A Authority key identifier: 40:D7:23:63:AC:57:1F:B4:63:EB:F7:B9:62:DB:57:72:5D:57:A3:99 Certificate issuer: /CN=a4cfaa95-c33a-49a6-b4ad-44b93425df6e Certificate serial: 010D0C9F4328584F45D794CF0B5938F468B31F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.mft Manifest number: 010D0C9F4328584E4243CF7BDC1A6EA9F26CE360 Signing time: Wed 23 Sep 2026 18:00:22 +0000 Manifest this update: Wed 23 Sep 2026 18:00:22 +0000 Manifest next update: Fri 25 Sep 2026 18:00:00 +0000 Files and hashes: 1: a4cfaa95-c33a-49a6-b4ad-44b93425df6e.crl (hash: 0mVV/GkcVxn0Oawb/dRHJBfE3umIR1wice0Ke8H0u2M=) 2: c73fd9f5-a2d4-3eb7-bebe-002d6774e454.roa (hash: QOzYlxEeqoR8gvKZCSVYLfH1AMfWMb9g61E2EEsTPcQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:d7:94:cf:0b:59:38:f4:68:b3:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4cfaa95-c33a-49a6-b4ad-44b93425df6e Validity Not Before: Sep 23 18:00:22 2026 GMT Not After : Sep 25 18:00:00 2026 GMT Subject: CN=5368c5f2-ce22-4cf7-8635-5823dc142ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f2:ef:d8:60:02:5f:7b:51:72:9b:00:69:50: bd:dc:1c:61:3a:7a:93:84:9a:16:6a:0b:5e:f2:a4: f6:13:2f:57:b3:c9:5b:fa:58:22:a8:b5:11:b1:b2: 20:8e:3d:f3:1a:5c:84:04:99:bc:fe:3a:2a:95:9e: 12:93:1c:8d:f1:23:1b:97:45:e1:97:50:ba:6a:eb: 67:57:f6:31:42:31:1b:a3:a2:e7:b9:80:a5:c2:55: 24:bf:b3:4d:8c:c1:33:24:53:99:31:8a:23:e7:07: 1a:e6:46:87:bf:2c:2c:f7:51:97:2c:f2:ca:7e:f6: 07:10:8e:84:69:ae:9d:f1:b4:2d:cd:70:fe:2d:43: 30:cd:ef:35:31:78:e1:59:03:9f:c1:25:50:b0:ea: 85:41:7b:68:3f:8a:1b:ee:2a:89:6f:4e:a5:bb:cc: 72:33:be:61:ad:f3:47:d9:14:7c:da:0d:a5:ec:77: f6:08:7f:84:fc:a8:e2:15:a9:21:eb:ba:5e:7c:82: 9a:17:20:b3:85:6c:b5:7c:ac:45:99:de:93:d2:46: d3:a7:22:af:7d:5e:7c:5f:c6:29:55:47:50:37:fe: 6a:d7:28:e4:11:59:de:69:c4:f5:e1:55:f2:97:1c: e9:ba:49:be:77:ec:74:c5:7c:16:b3:11:08:f1:23: 84:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:59:98:EF:CB:72:40:3A:76:55:42:2C:52:6B:DA:82:CB:7B:44:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.crl X509v3 Authority Key Identifier: keyid:40:D7:23:63:AC:57:1F:B4:63:EB:F7:B9:62:DB:57:72:5D:57:A3:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c4:dc:9f:e5:1b:cd:91:52:3f:b1:ec:e0:da:28:aa:fe:b5: 63:56:5c:52:d5:b0:98:ed:d2:cc:64:e3:cd:63:42:6f:16:52: b2:e2:70:d3:21:b0:ad:5f:14:48:81:85:7d:10:8b:6f:1f:21: 28:8f:78:16:1f:e0:b4:b5:d8:69:3f:c5:07:d5:f1:8a:78:6b: ab:1f:2e:34:65:f7:fb:04:4d:bd:f2:0f:60:e3:9f:4f:fe:d5: 63:da:25:fa:6d:05:b3:c3:d0:c7:25:dc:65:34:ac:17:01:ab: 55:79:b6:22:48:0e:ae:2c:b3:37:b8:9a:7d:c6:12:9a:04:8e: cc:9b:71:81:2f:a0:20:22:07:4d:0e:38:ef:c6:5b:c3:d6:26: fa:d4:2c:9e:64:61:47:bf:86:9b:90:e3:d2:18:f0:ca:0f:79: a6:57:25:c8:4e:17:ee:1b:78:ce:0b:9e:52:70:78:2f:42:aa: b8:92:e5:2f:70:dd:f7:d9:a6:08:1e:10:ed:e6:97:08:d0:25: be:64:0d:ec:d2:b3:2c:c9:69:54:2c:f3:9f:43:33:54:72:fb: b5:33:b8:15:32:66:c2:1b:ff:35:a3:70:9d:2e:43:e3:2e:3a: 3f:ff:9c:d5:1d:7e:a5:df:b9:8a:17:eb:28:0c:26:22:d3:f8: d1:9e:6b:10 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9F15TPC1k49GizH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRjZmFhOTUtYzMzYS00OWE2LWI0YWQtNDRiOTM0MjVk ZjZlMB4XDTI2MDkyMzE4MDAyMloXDTI2MDkyNTE4MDAwMFowLzEtMCsGA1UEAxMk NTM2OGM1ZjItY2UyMi00Y2Y3LTg2MzUtNTgyM2RjMTQyYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvLv2GACX3tRcpsAaVC93BxhOnqThJoWagte 8qT2Ey9Xs8lb+lgiqLURsbIgjj3zGlyEBJm8/joqlZ4SkxyN8SMbl0Xhl1C6autn V/YxQjEbo6LnuYClwlUkv7NNjMEzJFOZMYoj5wca5kaHvyws91GXLPLKfvYHEI6E aa6d8bQtzXD+LUMwze81MXjhWQOfwSVQsOqFQXtoP4ob7iqJb06lu8xyM75hrfNH 2RR82g2l7Hf2CH+E/KjiFakh67pefIKaFyCzhWy1fKxFmd6T0kbTpyKvfV58X8Yp VUdQN/5q1yjkEVneacT14VXylxzpukm+d+x0xXwWsxEI8SOEDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPVZmO/LckA6dlVCLFJr2oLLe0QKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hNGNm YWE5NS1jMzNhLTQ5YTYtYjRhZC00NGI5MzQyNWRmNmUvYTRjZmFhOTUtYzMzYS00 OWE2LWI0YWQtNDRiOTM0MjVkZjZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYTRjZmFhOTUtYzMzYS00OWE2LWI0 YWQtNDRiOTM0MjVkZjZlL2E0Y2ZhYTk1LWMzM2EtNDlhNi1iNGFkLTQ0YjkzNDI1 ZGY2ZS5jcmwwHwYDVR0jBBgwFoAUQNcjY6xXH7Rj6/e5YttXcl1Xo5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hNGNmYWE5NS1jMzNhLTQ5YTYtYjRhZC00NGI5 MzQyNWRmNmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtxNyf5RvNkVI/sezg2iiq /rVjVlxS1bCY7dLMZOPNY0JvFlKy4nDTIbCtXxRIgYV9EItvHyEoj3gWH+C0tdhp P8UH1fGKeGurHy40Zff7BE298g9g459P/tVj2iX6bQWzw9DHJdxlNKwXAatVebYi SA6uLLM3uJp9xhKaBI7Mm3GBL6AgIgdNDjjvxlvD1ib61CyeZGFHv4abkOPSGPDK D3mmVyXIThfuG3jOC55ScHgvQqq4kuUvcN332aYIHhDt5pcI0CW+ZA3s0rMsyWlU LPOfQzNUcvu1M7gVMmbCG/81o3CdLkPjLjo//5zVHX6l37mKF+soDCYi0/jRnmsQ -----END CERTIFICATE-----Generated at Thu Sep 24 09:21:16 2026 by rpki-client