$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: SUbDQle62E83KsndI3UGwl9lAyKrBsll6jF+6kT4rqU= Subject key identifier: 13:1A:69:A0:59:2C:F7:DF:D8:01:A8:6B:7E:D3:70:DD:39:FC:12:74 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584F5AE5719DFAAEE9F9642ACAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A34F7 Signing time: Thu 01 Oct 2026 07:00:23 +0000 Manifest this update: Thu 01 Oct 2026 07:00:23 +0000 Manifest next update: Sun 04 Oct 2026 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: PIX4CDs37PloIOoy0GD/odtEJ7ZR5mY1qkxX9AmDY1I=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: 0xEMyiPRvFrFCXTBEDvcgI/44DycrCHBzGwCqsU5OSs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:e5:71:9d:fa:ae:e9:f9:64:2a:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Oct 1 07:00:23 2026 GMT Not After : Oct 4 07:00:00 2026 GMT Subject: CN=bb93e815-1cc1-4307-8d30-8c1658edb264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:a8:7d:a5:b5:9a:f3:0c:2d:f4:80:8b:c6: 16:bf:de:bd:75:b0:46:f3:80:09:96:f4:f2:4a:23: 57:90:53:07:ed:8d:a1:de:3f:be:a2:d1:35:57:cb: 0d:9f:7a:d8:52:6f:01:e8:0d:a6:60:6b:16:51:6a: 86:d6:94:35:5a:77:26:84:a1:d3:5e:0e:86:00:2c: a6:32:28:59:72:f2:35:d2:1e:78:2a:65:2c:f0:27: 80:7f:dc:38:b2:d9:e4:8e:14:d8:ef:66:22:b9:87: 72:29:25:5a:8f:2e:04:29:ee:e6:00:3e:22:08:39: ee:eb:59:1b:e5:25:9b:95:93:72:36:bf:72:85:66: 8e:19:69:79:b2:b9:20:8c:d4:70:2e:39:73:cc:45: 45:c3:93:82:98:3d:00:24:b5:18:77:fa:8e:a3:3c: b8:10:ac:98:36:02:36:78:3c:e4:ac:00:0a:87:1a: 9a:67:8c:c0:ce:d9:ac:8f:7e:13:b6:b6:eb:6e:b2: 0d:6b:e2:19:aa:cb:c5:5f:88:b4:8a:5f:df:6e:4b: 1e:c7:13:f9:dc:0a:99:13:d8:4f:cc:de:1b:da:bc: 08:46:52:61:d7:54:b4:91:e6:52:d7:9f:6e:01:1c: f0:9f:02:db:64:5e:8b:39:ca:95:2f:67:72:d7:e3: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1A:69:A0:59:2C:F7:DF:D8:01:A8:6B:7E:D3:70:DD:39:FC:12:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:10:97:2b:32:01:f3:58:86:f9:27:05:fb:e2:66:b5:30:53: 58:1c:92:79:97:f4:4a:80:66:b7:fe:d0:b6:ef:43:e8:b9:55: 8a:48:cb:76:e8:cf:d4:87:0c:c4:56:f8:10:22:be:4f:b9:1c: ad:92:5d:5d:6c:d1:0d:68:20:ce:f2:27:7b:26:ec:c2:25:e8: 45:d5:47:69:b8:22:f9:60:d0:44:b5:a3:80:2f:42:22:4e:c3: 0a:af:c9:b3:ad:bd:88:e3:ad:6d:98:ad:a6:6e:73:ca:f1:83: f4:8e:45:18:4e:79:e7:6c:66:90:e2:86:d5:4d:99:29:48:21: de:d5:de:41:6f:1c:43:05:40:75:00:20:5a:71:1e:32:b6:4a: 88:c4:b3:e0:e2:43:33:12:13:09:2a:49:6f:a8:77:8a:ed:7e: 85:49:53:d0:b9:43:12:42:b7:7d:65:0e:b6:5f:92:5c:03:88: df:8d:8a:09:a9:82:1d:94:69:15:20:21:70:6f:45:20:81:5e: 6e:62:a7:34:9b:eb:3c:13:b5:f3:3d:05:7c:dd:66:20:79:99: 75:8b:f0:f3:24:ec:47:a8:94:2d:5c:4c:ad:c3:ff:f7:b2:c6: 96:31:1b:98:0a:9d:a1:7b:d5:78:32:5d:28:2a:b4:66:4b:e4: 22:90:6d:ad -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9a5XGd+q7p+WQqysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI2MTAwMTA3MDAyM1oXDTI2MTAwNDA3MDAwMFowLzEtMCsGA1UEAxMk YmI5M2U4MTUtMWNjMS00MzA3LThkMzAtOGMxNjU4ZWRiMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAuofaW1mvMMLfSAi8YWv969dbBG84AJlvTy SiNXkFMH7Y2h3j++otE1V8sNn3rYUm8B6A2mYGsWUWqG1pQ1WncmhKHTXg6GACym MihZcvI10h54KmUs8CeAf9w4stnkjhTY72YiuYdyKSVajy4EKe7mAD4iCDnu61kb 5SWblZNyNr9yhWaOGWl5srkgjNRwLjlzzEVFw5OCmD0AJLUYd/qOozy4EKyYNgI2 eDzkrAAKhxqaZ4zAztmsj34TtrbrbrINa+IZqsvFX4i0il/fbksexxP53AqZE9hP zN4b2rwIRlJh11S0keZS159uARzwnwLbZF6LOcqVL2dy1+M7gQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBMaaaBZLPff2AGoa37TcN05/BJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKEJcrMgHzWIb5JwX74ma1 MFNYHJJ5l/RKgGa3/tC270PouVWKSMt26M/UhwzEVvgQIr5PuRytkl1dbNENaCDO 8id7JuzCJehF1UdpuCL5YNBEtaOAL0IiTsMKr8mzrb2I461tmK2mbnPK8YP0jkUY TnnnbGaQ4obVTZkpSCHe1d5BbxxDBUB1ACBacR4ytkqIxLPg4kMzEhMJKklvqHeK 7X6FSVPQuUMSQrd9ZQ62X5JcA4jfjYoJqYIdlGkVICFwb0UggV5uYqc0m+s8E7Xz PQV83WYgeZl1i/DzJOxHqJQtXEytw//3ssaWMRuYCp2he9V4Ml0oKrRmS+QikG2t -----END CERTIFICATE-----Generated at Thu Oct 1 13:26:51 2026 by rpki-client