$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: 34OII8GOFygY4eMUVaKQ12em5bsyGU/ENgKFyMp1i1c= Subject key identifier: 63:52:58:C5:30:23:D1:4B:B4:ED:0C:91:5D:06:7E:BA:73:7B:7C:FD Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584F60B65FE70682C2BB8040A080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF0225F9 Signing time: Sat 03 Oct 2026 09:00:25 +0000 Manifest this update: Sat 03 Oct 2026 09:00:25 +0000 Manifest next update: Tue 06 Oct 2026 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: z0gQUqJXm7Z+QaSf0oMGOz+SIBl94bxLf4CZOMTGclQ=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: Z5uerYwmOCpaeBcvqUZbhFZIwkSHV0rpKND6iYvWh6A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:60:b6:5f:e7:06:82:c2:bb:80:40:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Oct 3 09:00:25 2026 GMT Not After : Oct 6 09:00:00 2026 GMT Subject: CN=c94c08f2-b40c-46bb-9b50-b757bbc798db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:78:b8:99:0a:24:06:64:8d:81:f3:ba:50: e7:36:76:b8:90:6b:06:2c:ae:66:94:76:2e:25:46: 5b:73:1a:a4:61:37:10:a9:d6:63:4d:87:2a:ed:98: 5a:ec:a1:dc:97:1a:48:37:6f:35:60:35:17:43:1a: 98:2a:1c:42:2d:27:ae:13:85:c4:cc:2c:3a:45:61: 2b:39:60:67:f0:8d:00:11:b4:58:d9:88:f5:19:a2: 7a:66:5b:1b:5c:8a:2f:90:6f:53:29:14:dd:fc:c3: 5a:1b:49:ea:81:f9:b1:a2:14:c8:08:bc:f5:12:df: 9f:12:73:e7:4b:2e:d8:6d:44:5e:89:e3:4d:a3:08: 73:78:79:e4:13:ee:a6:92:ba:2f:48:f5:3f:05:25: b7:a4:c1:16:88:06:a3:b8:99:4e:34:a4:c9:48:2a: e6:1f:6a:39:48:19:0d:00:38:59:9b:90:44:7b:da: 5d:35:7e:3d:ca:de:c1:19:62:ef:21:85:1b:52:f1: 7c:34:be:d1:ba:aa:c4:c7:c2:b3:dc:50:e0:48:ed: cc:d9:e5:48:3e:0b:64:a0:02:78:da:d8:e9:d2:06: c5:bd:a8:19:eb:3c:07:50:5d:d9:9a:4f:38:e6:36: f1:8e:54:65:a0:77:11:a7:18:41:a5:3a:40:63:ab: f1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:52:58:C5:30:23:D1:4B:B4:ED:0C:91:5D:06:7E:BA:73:7B:7C:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:4a:65:df:99:98:1b:9d:21:e0:02:12:ad:4c:48:be:f5:4b: 4c:16:df:a6:90:9a:d9:e7:6b:fd:f6:a5:37:2e:c9:b5:23:fa: e0:b5:d9:0c:2a:e2:52:e0:53:12:48:a0:bf:6a:24:e1:46:a4: 2b:f5:fe:5c:56:4a:d2:28:cd:60:17:95:d6:bf:f1:5e:0b:9c: 06:62:7c:dd:9e:62:13:e4:56:10:39:d9:fc:70:0b:58:a6:c1: bb:a2:d0:fb:7d:3c:c8:23:c2:04:09:26:80:c3:48:a7:a8:8e: 96:02:ce:42:95:44:5d:6a:2b:38:d7:c6:8e:d8:69:f6:19:d4: 54:10:1e:a2:1e:2d:e6:44:1f:7b:18:e3:2c:55:8d:d1:2b:a6: be:70:ce:f3:12:71:fc:d0:02:1b:10:1d:8a:dc:c6:b6:d1:ea: a3:29:a7:90:0f:91:14:d7:83:d2:40:59:a4:f0:f0:0f:31:29: 2d:f4:91:ac:72:3e:f7:b7:91:b4:1b:15:a0:c6:ca:7d:42:4e: 7e:76:59:46:36:c1:7b:d0:38:5e:5d:40:10:3c:74:a1:63:23: 64:c1:c0:c9:6d:d3:91:29:20:f9:a4:41:3c:3d:05:3b:da:6c: 6f:51:2f:cb:01:be:dc:65:bc:6c:a0:4b:bf:0f:c8:4d:28:c5: f2:57:66:5b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9gtl/nBoLCu4BAoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI2MTAwMzA5MDAyNVoXDTI2MTAwNjA5MDAwMFowLzEtMCsGA1UEAxMk Yzk0YzA4ZjItYjQwYy00NmJiLTliNTAtYjc1N2JiYzc5OGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWV4uJkKJAZkjYHzulDnNna4kGsGLK5mlHYu JUZbcxqkYTcQqdZjTYcq7Zha7KHclxpIN281YDUXQxqYKhxCLSeuE4XEzCw6RWEr OWBn8I0AEbRY2Yj1GaJ6ZlsbXIovkG9TKRTd/MNaG0nqgfmxohTICLz1Et+fEnPn Sy7YbUReieNNowhzeHnkE+6mkrovSPU/BSW3pMEWiAajuJlONKTJSCrmH2o5SBkN ADhZm5BEe9pdNX49yt7BGWLvIYUbUvF8NL7RuqrEx8Kz3FDgSO3M2eVIPgtkoAJ4 2tjp0gbFvagZ6zwHUF3Zmk845jbxjlRloHcRpxhBpTpAY6vxKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGNSWMUwI9FLtO0MkV0Gfrpze3z9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVSmXfmZgbnSHgAhKtTEi+ 9UtMFt+mkJrZ52v99qU3Lsm1I/rgtdkMKuJS4FMSSKC/aiThRqQr9f5cVkrSKM1g F5XWv/FeC5wGYnzdnmIT5FYQOdn8cAtYpsG7otD7fTzII8IECSaAw0inqI6WAs5C lURdais418aO2Gn2GdRUEB6iHi3mRB97GOMsVY3RK6a+cM7zEnH80AIbEB2K3Ma2 0eqjKaeQD5EU14PSQFmk8PAPMSkt9JGscj73t5G0GxWgxsp9Qk5+dllGNsF70Dhe XUAQPHShYyNkwcDJbdORKSD5pEE8PQU72mxvUS/LAb7cZbxsoEu/D8hNKMXyV2Zb -----END CERTIFICATE-----Generated at Sat Oct 3 15:42:09 2026 by rpki-client