$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/bff279fd-d394-4080-81b8-6c481e38a07f.mft File: bff279fd-d394-4080-81b8-6c481e38a07f.mft (raw, json) Hash identifier: tFKGgtzwV33DYFsB84MH57pNIadsp6oMaHLZ92X5xtg= Subject key identifier: B8:96:AC:EA:17:4A:29:08:E7:CC:97:16:21:F1:AE:A5:EE:BB:4A:EA Authority key identifier: 9B:C6:26:41:7A:37:C8:87:AD:20:34:85:31:1A:20:9C:09:B8:9F:72 Certificate issuer: /CN=bff279fd-d394-4080-81b8-6c481e38a07f Certificate serial: 010D0C9F4328584F7B776CBE5F52E6A22BA71C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/bff279fd-d394-4080-81b8-6c481e38a07f.mft Manifest number: 010D0C9F4328584DFA39FC343DF03D1D9DDFEF8D Signing time: Mon 12 Oct 2026 23:00:23 +0000 Manifest this update: Mon 12 Oct 2026 23:00:23 +0000 Manifest next update: Thu 15 Oct 2026 23:00:00 +0000 Files and hashes: 1: 4582e0f2-2e29-381f-9a84-205b3c6396bc.roa (hash: BrXy0wo/sxzaO/SujBLaURKmnQjWNvxNwo1bfciddfk=) 2: bff279fd-d394-4080-81b8-6c481e38a07f.crl (hash: V7TOio2vPn6PDLpSvKIHYU6gnZrCsClVL9bjyRZhEEs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/bff279fd-d394-4080-81b8-6c481e38a07f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/bff279fd-d394-4080-81b8-6c481e38a07f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:77:6c:be:5f:52:e6:a2:2b:a7:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bff279fd-d394-4080-81b8-6c481e38a07f Validity Not Before: Oct 12 23:00:23 2026 GMT Not After : Oct 15 23:00:00 2026 GMT Subject: CN=394a18e3-920f-4b26-b29b-6f20c62930cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:e1:75:99:70:eb:dd:10:d1:ed:5d:d9:8b: ec:62:77:87:b3:f2:8d:ba:36:af:9a:04:57:51:96: d9:88:32:fd:d4:e7:aa:bd:1c:93:9f:34:dc:6f:25: f4:11:5c:8d:d5:f0:6f:02:c0:c8:f1:39:d2:42:12: cd:3c:1c:91:ae:3b:e0:e0:fb:0d:80:9a:ab:88:22: 77:46:a6:ae:ca:52:ab:4f:55:4e:3b:16:2a:08:74: 4a:a0:5f:df:d2:98:c0:a0:5c:3c:18:6e:30:6b:25: a4:d1:85:b9:e3:dc:b1:c5:ce:aa:24:9f:92:65:38: bb:f6:07:5e:21:be:dc:16:39:98:66:61:cc:cf:4e: 9f:c7:8f:5e:9f:2a:a8:19:b7:c9:c5:d1:3e:62:4c: fc:c9:c1:81:55:77:55:cc:22:02:c4:63:64:0c:5b: 5a:8c:66:8b:25:7f:72:31:43:92:49:99:5d:52:96: 1f:6f:e6:61:37:4c:3e:e2:3d:67:0d:c0:a1:0b:77: 17:19:ba:0a:7f:17:1e:1f:34:41:3a:2d:0d:f8:d3: 42:29:12:f0:4e:4b:cd:3a:24:22:25:2a:6a:37:cb: 56:63:71:14:2e:e5:84:62:80:b9:a9:21:0a:cd:ee: 8f:78:95:1d:6c:2f:38:21:dd:1b:7e:67:40:63:fc: ed:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:96:AC:EA:17:4A:29:08:E7:CC:97:16:21:F1:AE:A5:EE:BB:4A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/bff279fd-d394-4080-81b8-6c481e38a07f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/bff279fd-d394-4080-81b8-6c481e38a07f.crl X509v3 Authority Key Identifier: keyid:9B:C6:26:41:7A:37:C8:87:AD:20:34:85:31:1A:20:9C:09:B8:9F:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3b:6e:d0:4a:34:7a:19:38:a4:6c:c6:63:09:21:91:00:d2: b3:73:91:d2:09:76:66:aa:da:7f:9e:d5:b0:39:6d:78:b8:09: 87:ba:99:a6:1a:fb:74:a9:d8:30:49:bd:55:09:d5:d3:52:ff: dd:52:38:1c:a9:a9:49:62:16:8c:d3:27:2d:66:c8:cc:01:0d: 52:ec:29:d5:9a:4f:da:88:9c:b6:8f:f5:6d:ff:15:d1:3e:0d: 9a:c5:c8:16:09:ca:44:6a:c3:ab:22:b9:b9:ba:0e:c3:de:fc: 9b:21:61:82:59:a1:09:76:1f:19:e2:98:96:c6:bf:b5:97:2d: e6:f5:83:2c:d8:80:00:79:fb:65:75:70:f3:58:14:62:0b:c0: 95:c0:95:9c:a3:c2:61:45:1c:10:83:04:cd:b0:76:24:00:60: 56:a3:e3:35:c6:58:fb:58:ce:34:56:b3:47:98:cc:23:99:17: a9:54:61:55:7b:15:55:b4:bf:9b:85:2e:b7:ea:df:85:66:88: 7d:b7:82:ae:c9:40:2f:e4:d2:ca:60:b1:94:94:f5:0f:06:43: c7:4a:4a:fa:5f:4c:3f:fe:8e:36:5c:bb:12:dc:14:ba:c8:ec: ee:58:0c:a8:15:31:0b:78:0a:73:f5:80:38:71:ce:c9:c0:82: 13:6c:58:76 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE97d2y+X1LmoiunHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZmMjc5ZmQtZDM5NC00MDgwLTgxYjgtNmM0ODFlMzhh MDdmMB4XDTI2MTAxMjIzMDAyM1oXDTI2MTAxNTIzMDAwMFowLzEtMCsGA1UEAxMk Mzk0YTE4ZTMtOTIwZi00YjI2LWIyOWItNmYyMGM2MjkzMGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsjhdZlw690Q0e1d2YvsYneHs/KNujavmgRX UZbZiDL91OeqvRyTnzTcbyX0EVyN1fBvAsDI8TnSQhLNPByRrjvg4PsNgJqriCJ3 RqauylKrT1VOOxYqCHRKoF/f0pjAoFw8GG4wayWk0YW549yxxc6qJJ+SZTi79gde Ib7cFjmYZmHMz06fx49enyqoGbfJxdE+Ykz8ycGBVXdVzCICxGNkDFtajGaLJX9y MUOSSZldUpYfb+ZhN0w+4j1nDcChC3cXGboKfxceHzRBOi0N+NNCKRLwTkvNOiQi JSpqN8tWY3EULuWEYoC5qSEKze6PeJUdbC84Id0bfmdAY/ztQQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLiWrOoXSikI58yXFiHxrqXuu0rqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iZmYy NzlmZC1kMzk0LTQwODAtODFiOC02YzQ4MWUzOGEwN2YvYmZmMjc5ZmQtZDM5NC00 MDgwLTgxYjgtNmM0ODFlMzhhMDdmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYmZmMjc5ZmQtZDM5NC00MDgwLTgx YjgtNmM0ODFlMzhhMDdmL2JmZjI3OWZkLWQzOTQtNDA4MC04MWI4LTZjNDgxZTM4 YTA3Zi5jcmwwHwYDVR0jBBgwFoAUm8YmQXo3yIetIDSFMRognAm4n3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iZmYyNzlmZC1kMzk0LTQwODAtODFiOC02YzQ4 MWUzOGEwN2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3O27QSjR6GTikbMZjCSGR ANKzc5HSCXZmqtp/ntWwOW14uAmHupmmGvt0qdgwSb1VCdXTUv/dUjgcqalJYhaM 0yctZsjMAQ1S7CnVmk/aiJy2j/Vt/xXRPg2axcgWCcpEasOrIrm5ug7D3vybIWGC WaEJdh8Z4piWxr+1ly3m9YMs2IAAeftldXDzWBRiC8CVwJWco8JhRRwQgwTNsHYk AGBWo+M1xlj7WM40VrNHmMwjmRepVGFVexVVtL+bhS636t+FZoh9t4KuyUAv5NLK YLGUlPUPBkPHSkr6X0w//o42XLsS3BS6yOzuWAyoFTELeApz9YA4cc7JwIITbFh2 -----END CERTIFICATE-----Generated at Tue Oct 13 19:19:57 2026 by rpki-client