$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft File: d84f9350-fc3d-4239-80bf-db10d2462a4f.mft (raw, json) Hash identifier: R9waiFHEdBAvh8in+Cq25qnOVueX8j6Cx9UHqMAgSf8= Subject key identifier: B2:C5:CE:63:67:A6:01:67:41:6B:1C:FA:C9:37:B7:F6:8D:86:95:8A Authority key identifier: 67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B Certificate issuer: /CN=d84f9350-fc3d-4239-80bf-db10d2462a4f Certificate serial: 010D0C9F4328584F8E1405A3FB6D86D13852E690 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft Manifest number: 010D0C9F4328584073A85AA2BCC5FAD2E02AA20A Signing time: Mon 19 Oct 2026 15:00:24 +0000 Manifest this update: Mon 19 Oct 2026 15:00:24 +0000 Manifest next update: Thu 22 Oct 2026 15:00:00 +0000 Files and hashes: 1: 791de0f2-89d2-3bf0-8407-e85b17cab367.roa (hash: ug8rMk3YimI/d1HAVhy4AtGuJhxZru7KxnEprGV3Tzg=) 2: d84f9350-fc3d-4239-80bf-db10d2462a4f.crl (hash: ZPGToYBePuPzxnf9zqs7yltfAlEocUwWgDwzS66a3Ks=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8e:14:05:a3:fb:6d:86:d1:38:52:e6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d84f9350-fc3d-4239-80bf-db10d2462a4f Validity Not Before: Oct 19 15:00:24 2026 GMT Not After : Oct 22 15:00:00 2026 GMT Subject: CN=372f3034-40b3-4ab6-895c-821b608b7153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b9:99:13:f5:be:60:9b:0c:70:dc:5f:33:a5: 8e:a0:7b:a5:d2:23:03:92:68:8d:e3:37:2a:5f:ee: eb:4b:7e:33:d1:6d:ef:d6:bd:af:7b:9e:43:3f:82: 4f:27:35:5c:0d:e2:75:98:71:ae:31:be:ab:ec:98: 24:14:71:09:87:1b:c7:38:8b:83:5b:9b:62:79:5b: 74:9b:bc:db:e0:8b:de:33:ca:6f:95:00:9d:e6:87: 7b:79:85:68:f1:56:1a:3e:7b:48:44:f0:0d:3d:28: fe:e3:a6:c9:96:3c:59:cc:ec:6f:8a:6a:88:2c:a5: c4:07:3e:a2:56:e6:b0:dc:e8:2b:5f:ff:9e:98:f7: bd:1c:e4:7f:0b:1f:5a:ec:dc:c5:d3:8a:ce:9a:10: c2:58:47:02:93:79:b9:cc:56:45:4a:7a:a0:db:de: b0:66:de:e5:da:f6:e4:eb:6e:28:d4:76:e4:fc:aa: 75:b4:bc:48:06:29:bd:6f:3a:21:4f:ee:d1:57:e9: 05:28:18:54:a7:bf:64:b4:0c:7a:18:4e:a4:58:92: 42:b4:e9:d7:66:c3:f7:f9:e2:04:79:f7:79:4f:cf: e5:89:37:6c:e0:29:f0:14:81:e5:96:96:59:f8:d5: 30:8b:d9:62:27:43:5f:ac:08:ea:bb:ed:c5:ac:52: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C5:CE:63:67:A6:01:67:41:6B:1C:FA:C9:37:B7:F6:8D:86:95:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl X509v3 Authority Key Identifier: keyid:67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c7:b5:03:5a:94:79:c4:a8:a0:99:b2:ce:6b:59:9c:44:08: 97:54:86:1d:bb:6c:97:ff:67:2f:2e:b5:99:04:ca:ce:2b:34: 0c:52:a6:a4:01:41:31:f4:a4:fc:35:6e:0e:ef:69:8a:89:62: cc:3c:7a:90:07:d0:d5:36:d4:34:1f:ea:40:5c:ef:06:bd:a1: 70:89:97:3b:85:5e:24:be:a1:c3:74:98:5a:26:25:9b:78:6b: dc:69:6b:2d:bc:a5:bb:07:6c:15:d1:f3:66:b3:dd:f1:6d:8c: 22:d7:b6:da:22:45:4a:16:1c:dd:a0:ba:06:fb:ee:32:e5:e5: b1:cf:f8:2d:55:c7:c1:d7:1d:20:07:6e:c8:65:1d:61:6c:d8: 54:08:7c:f5:f1:6d:e3:8f:a0:10:1a:a1:df:7c:99:a5:2d:c1: f1:fd:0a:fc:c8:e6:c3:7c:b3:e9:e8:60:8a:70:93:10:e0:ff: 3b:c3:dc:c0:ad:af:4e:89:eb:57:25:61:d9:4f:87:f4:57:38: e4:49:84:ec:60:37:74:ab:41:05:41:df:b3:31:43:80:57:64: 0c:be:2f:98:06:f9:ef:ce:f6:0f:42:6b:cc:ee:f2:dd:08:ac: 5d:de:83:a8:dc:f5:68:b4:67:ac:16:51:09:17:ee:9c:74:f0: 7c:f6:83:5b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+OFAWj+22G0ThS5pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg0ZjkzNTAtZmMzZC00MjM5LTgwYmYtZGIxMGQyNDYy YTRmMB4XDTI2MTAxOTE1MDAyNFoXDTI2MTAyMjE1MDAwMFowLzEtMCsGA1UEAxMk MzcyZjMwMzQtNDBiMy00YWI2LTg5NWMtODIxYjYwOGI3MTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrmZE/W+YJsMcNxfM6WOoHul0iMDkmiN4zcq X+7rS34z0W3v1r2ve55DP4JPJzVcDeJ1mHGuMb6r7JgkFHEJhxvHOIuDW5tieVt0 m7zb4IveM8pvlQCd5od7eYVo8VYaPntIRPANPSj+46bJljxZzOxvimqILKXEBz6i Vuaw3OgrX/+emPe9HOR/Cx9a7NzF04rOmhDCWEcCk3m5zFZFSnqg296wZt7l2vbk 624o1Hbk/Kp1tLxIBim9bzohT+7RV+kFKBhUp79ktAx6GE6kWJJCtOnXZsP3+eIE efd5T8/liTds4CnwFIHllpZZ+NUwi9liJ0NfrAjqu+3FrFKU6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLLFzmNnpgFnQWsc+sk3t/aNhpWKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kODRm OTM1MC1mYzNkLTQyMzktODBiZi1kYjEwZDI0NjJhNGYvZDg0ZjkzNTAtZmMzZC00 MjM5LTgwYmYtZGIxMGQyNDYyYTRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDg0ZjkzNTAtZmMzZC00MjM5LTgw YmYtZGIxMGQyNDYyYTRmL2Q4NGY5MzUwLWZjM2QtNDIzOS04MGJmLWRiMTBkMjQ2 MmE0Zi5jcmwwHwYDVR0jBBgwFoAUZxr5I5VUwfZBlQs+fBHfIlookIswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kODRmOTM1MC1mYzNkLTQyMzktODBiZi1kYjEw ZDI0NjJhNGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0x7UDWpR5xKigmbLOa1mc RAiXVIYdu2yX/2cvLrWZBMrOKzQMUqakAUEx9KT8NW4O72mKiWLMPHqQB9DVNtQ0 H+pAXO8GvaFwiZc7hV4kvqHDdJhaJiWbeGvcaWstvKW7B2wV0fNms93xbYwi17ba IkVKFhzdoLoG++4y5eWxz/gtVcfB1x0gB27IZR1hbNhUCHz18W3jj6AQGqHffJml LcHx/Qr8yObDfLPp6GCKcJMQ4P87w9zAra9OietXJWHZT4f0VzjkSYTsYDd0q0EF Qd+zMUOAV2QMvi+YBvnvzvYPQmvM7vLdCKxd3oOo3PVotGesFlEJF+6cdPB89oNb -----END CERTIFICATE-----Generated at Tue Oct 20 07:48:35 2026 by rpki-client