$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft (raw, json) Hash identifier: F8FmTg0wyzEoDCzkGiZJmS+pD9VkIS/NhLV652fu4Mo= Subject key identifier: F0:74:4F:DA:5B:8F:49:A8:89:C8:10:3B:6A:2A:1F:F5:B0:02:9D:AF Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F4328584F53381928051CBE17A85D1A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft Manifest number: 010D0C9F432858467B3AE8B15C5CB25608060DDF Signing time: Mon 28 Sep 2026 13:00:23 +0000 Manifest this update: Mon 28 Sep 2026 13:00:23 +0000 Manifest next update: Wed 30 Sep 2026 13:00:00 +0000 Files and hashes: 1: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl (hash: OicCGyvB2vLXVB97IkjTpsHHzSY9+iasSEWLz+EPmKY=) 2: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (hash: EJKFltUQslbp5iIQ9ofOXr7h7ISw512ZZho1+/CyvZg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:38:19:28:05:1c:be:17:a8:5d:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: Sep 28 13:00:23 2026 GMT Not After : Sep 30 13:00:00 2026 GMT Subject: CN=94d0931e-7a92-42bd-9bab-0d82a9cfa7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:60:a6:46:5f:e0:40:9e:9d:75:35:3e:8c: 52:4a:fd:e9:e9:0b:ca:06:b7:fd:78:bb:3c:7c:be: 63:bf:fa:a8:d3:51:bb:ef:05:94:30:77:86:4e:57: c6:6d:dc:96:74:a4:be:22:3f:32:ed:9c:5f:2e:83: 85:a6:91:2c:40:ea:86:c6:09:a2:76:1d:7d:f7:ac: 5e:2d:31:b1:c4:78:a5:bb:ad:17:4e:d4:35:f2:9f: fe:47:da:23:81:c4:87:3b:e1:c3:e7:62:46:69:62: 68:87:0a:0b:c5:6e:5c:ec:74:b0:c7:77:73:27:82: 43:6d:65:79:17:dd:6f:b4:74:b2:bc:96:e3:e1:58: 4c:5e:0f:09:84:80:00:d1:53:f2:ea:5c:c5:c5:cb: 15:01:d8:e6:61:15:f4:75:3b:ad:63:34:c7:81:72: ea:f7:40:2d:08:83:07:88:1e:b0:b1:b7:c3:c9:41: 6b:f0:56:3a:99:2d:31:cf:17:13:65:d9:1d:d0:56: 7d:80:58:40:cb:26:49:5b:d8:e4:90:64:b4:62:d6: f6:96:be:d0:48:0a:d8:fa:a2:31:b3:d2:49:a4:a4: cb:64:77:25:cc:29:29:3b:e6:29:d0:9a:e0:41:7a: 01:dd:24:0a:2e:cc:ca:75:ae:77:94:1f:7d:d1:6c: c4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:74:4F:DA:5B:8F:49:A8:89:C8:10:3B:6A:2A:1F:F5:B0:02:9D:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:72:78:67:48:2b:be:1b:dc:70:bb:fd:cf:a6:a4:a2:24:7b: 8f:ca:92:83:18:6c:e3:b1:07:93:4b:d4:c7:6f:76:ce:09:18: be:8b:8d:dc:46:a0:dd:1b:3c:42:ce:dc:53:af:6c:0d:e8:74: a3:c6:79:cb:bb:24:7c:3d:2f:92:36:38:ea:e5:e6:75:cc:ca: b1:2f:e4:70:90:47:f2:f3:01:72:fe:be:04:4f:51:61:c1:9b: 55:75:c3:ba:20:db:20:af:45:28:7f:b5:e5:c6:e2:14:98:02: 17:08:1b:80:5e:69:f5:f6:7e:03:30:6a:6a:1d:20:ad:79:cd: ff:8d:f7:85:4f:5b:0a:6b:c8:71:52:c4:b1:24:fd:b8:55:d9: aa:25:18:3a:e2:f2:6c:38:94:38:85:b8:ac:1f:c3:5f:04:cc: 5b:97:4f:b7:cc:8f:a4:ba:1b:47:e6:46:46:f5:55:b4:f9:c6: 23:e4:41:84:03:1d:79:60:ac:01:aa:d5:b0:77:f4:a8:35:c4: 29:49:6e:b5:a2:59:89:bb:3d:b0:55:a6:17:c7:37:84:2f:f9: fe:2b:ea:6d:6e:34:bf:c4:fe:b1:43:69:c2:f5:9d:a5:e8:9c: 11:fe:5c:f0:5d:49:64:4b:0e:2d:13:bb:3b:93:a7:d8:55:0d: 1e:d9:72:d3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9TOBkoBRy+F6hdGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI2MDkyODEzMDAyM1oXDTI2MDkzMDEzMDAwMFowLzEtMCsGA1UEAxMk OTRkMDkzMWUtN2E5Mi00MmJkLTliYWItMGQ4MmE5Y2ZhN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXBgpkZf4ECenXU1PoxSSv3p6QvKBrf9eLs8 fL5jv/qo01G77wWUMHeGTlfGbdyWdKS+Ij8y7ZxfLoOFppEsQOqGxgmidh1996xe LTGxxHilu60XTtQ18p/+R9ojgcSHO+HD52JGaWJohwoLxW5c7HSwx3dzJ4JDbWV5 F91vtHSyvJbj4VhMXg8JhIAA0VPy6lzFxcsVAdjmYRX0dTutYzTHgXLq90AtCIMH iB6wsbfDyUFr8FY6mS0xzxcTZdkd0FZ9gFhAyyZJW9jkkGS0Ytb2lr7QSArY+qIx s9JJpKTLZHclzCkpO+Yp0JrgQXoB3SQKLszKda53lB990WzEHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPB0T9pbj0moicgQO2oqH/WwAp2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvNGM4NWU0MmQtMjE3MS00 ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMcnhnSCu+G9xwu/3PpqSi JHuPypKDGGzjsQeTS9THb3bOCRi+i43cRqDdGzxCztxTr2wN6HSjxnnLuyR8PS+S Njjq5eZ1zMqxL+RwkEfy8wFy/r4ET1FhwZtVdcO6INsgr0Uof7XlxuIUmAIXCBuA Xmn19n4DMGpqHSCtec3/jfeFT1sKa8hxUsSxJP24VdmqJRg64vJsOJQ4hbisH8Nf BMxbl0+3zI+kuhtH5kZG9VW0+cYj5EGEAx15YKwBqtWwd/SoNcQpSW61olmJuz2w VaYXxzeEL/n+K+ptbjS/xP6xQ2nC9Z2l6JwR/lzwXUlkSw4tE7s7k6fYVQ0e2XLT -----END CERTIFICATE-----Generated at Tue Sep 29 15:18:07 2026 by rpki-client