$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.mft File: aa7171b0-4847-462e-b732-1c7ed6b3b0b1.mft (raw, json) Hash identifier: a+KFqk4k2aDB26KSb7Zyp5vd+oz6NN/SfGX83oKKoTI= Subject key identifier: EF:81:B1:26:C4:69:FC:36:2A:5D:99:BA:0D:98:4C:E3:7E:F8:82:3F Authority key identifier: F9:0C:DB:DA:38:8A:15:51:9D:4E:27:95:05:A6:CB:01:1D:75:A2:9F Certificate issuer: /CN=aa7171b0-4847-462e-b732-1c7ed6b3b0b1 Certificate serial: 010D0C9F4328584F69E6E925C3CFF9F828489A60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.mft Manifest number: 010D0C9F4328584BE9CA121A81BB04FEA13D0AC9 Signing time: Tue 06 Oct 2026 16:00:25 +0000 Manifest this update: Tue 06 Oct 2026 16:00:25 +0000 Manifest next update: Thu 08 Oct 2026 16:00:00 +0000 Files and hashes: 1: aa7171b0-4847-462e-b732-1c7ed6b3b0b1.crl (hash: kgJLdi2ZHaP5dd9dtHMJCMJvGP2sO/VkeCBXrpyACB0=) 2: f9e6c530-846a-3e06-812c-206bcca4499e.roa (hash: 7A/knoua5C0ZD3+nn66AHkiLc4u9rT1LvTxyBU/0lls=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:e6:e9:25:c3:cf:f9:f8:28:48:9a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7171b0-4847-462e-b732-1c7ed6b3b0b1 Validity Not Before: Oct 6 16:00:25 2026 GMT Not After : Oct 8 16:00:00 2026 GMT Subject: CN=a33d073e-e50f-4457-8d92-bd5c6dc50b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:de:e9:a8:8a:83:66:0a:0d:7d:ba:74:7d: 7d:8f:11:f5:72:80:38:58:04:66:01:65:b2:5a:2e: 40:14:23:f2:2e:42:3c:01:4d:e4:d4:32:8c:7c:6b: e4:53:fd:2b:e8:47:88:6b:71:de:39:01:c6:47:d7: e5:8e:e8:da:bc:3a:a9:dd:f2:2d:dc:67:7d:10:f8: e1:ca:c9:74:53:5d:d1:a3:5b:e0:6e:30:97:ab:09: 73:a0:61:99:2c:f9:45:3c:e3:89:b6:23:5a:68:4f: fc:a3:1f:ee:16:a7:ff:fa:f7:e3:78:bc:e9:91:1e: 9b:e1:a8:38:4b:ca:08:e7:5b:9e:67:7b:7e:1c:ab: 6a:39:d1:9d:72:30:4f:65:2b:ac:d0:ec:80:29:5f: b1:4e:8e:a7:b5:a1:59:60:d5:c0:0f:14:da:46:ec: 1d:bd:d9:43:b2:f2:04:9e:8e:2a:09:5c:df:c5:04: 1d:54:0c:a1:a8:10:ae:88:03:9a:83:45:b1:79:29: 17:d4:c6:83:3f:5c:7e:d8:63:1c:b5:6a:52:70:5e: d1:32:28:b4:54:0e:2f:0f:96:e2:f2:99:c0:42:39: 76:40:9e:bf:53:75:4c:97:d4:6f:0b:ba:d5:58:b1: 2b:a2:d8:d5:c1:f1:c1:15:8c:15:32:e9:c9:06:32: 77:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:81:B1:26:C4:69:FC:36:2A:5D:99:BA:0D:98:4C:E3:7E:F8:82:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.crl X509v3 Authority Key Identifier: keyid:F9:0C:DB:DA:38:8A:15:51:9D:4E:27:95:05:A6:CB:01:1D:75:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:de:a9:30:af:62:f3:8c:c4:55:20:3a:b1:35:92:8e:db:5c: 18:36:d0:3d:07:ea:48:f3:fe:6b:ae:e0:7a:2b:4c:03:ff:bb: 19:10:7a:31:17:2f:4b:c7:f6:bf:06:81:ec:d2:90:8b:68:f6: c8:e3:b5:d5:1f:5b:26:d8:92:50:02:c2:63:28:c8:47:99:e5: c5:dc:d3:05:bf:16:ad:14:d6:69:58:d7:e9:c6:82:4d:e7:b1: f1:db:27:24:5f:70:71:43:b0:70:f1:12:9d:56:82:4b:eb:96: e3:9b:06:6a:4f:5e:80:3e:e0:ae:e1:ed:73:de:8e:c0:cd:70: 3c:a3:7a:cf:53:c8:b1:46:de:7e:58:3e:78:09:18:16:4a:6c: db:6a:2c:af:69:7d:d0:2c:dd:ca:16:e1:ff:07:dc:c2:c0:4a: e9:9a:a1:6f:78:7f:dc:18:4f:df:3c:fb:8a:98:e0:21:f9:a0: c1:35:41:5d:8d:6e:6d:8d:9e:ef:53:98:b2:44:51:9f:63:61: aa:e4:62:e0:a8:df:f4:98:13:94:74:98:e6:9c:77:d2:61:03: f6:a5:da:21:85:07:a7:ce:1f:f1:db:89:23:c6:51:6c:29:c1: 4e:3f:06:29:ff:d3:17:f9:c5:77:9d:e4:3f:4b:08:59:26:d9: cb:4e:19:30 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9p5uklw8/5+ChImmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE3MTcxYjAtNDg0Ny00NjJlLWI3MzItMWM3ZWQ2YjNi MGIxMB4XDTI2MTAwNjE2MDAyNVoXDTI2MTAwODE2MDAwMFowLzEtMCsGA1UEAxMk YTMzZDA3M2UtZTUwZi00NDU3LThkOTItYmQ1YzZkYzUwYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAHe6aiKg2YKDX26dH19jxH1coA4WARmAWWy Wi5AFCPyLkI8AU3k1DKMfGvkU/0r6EeIa3HeOQHGR9fljujavDqp3fIt3Gd9EPjh ysl0U13Ro1vgbjCXqwlzoGGZLPlFPOOJtiNaaE/8ox/uFqf/+vfjeLzpkR6b4ag4 S8oI51ueZ3t+HKtqOdGdcjBPZSus0OyAKV+xTo6ntaFZYNXADxTaRuwdvdlDsvIE no4qCVzfxQQdVAyhqBCuiAOag0WxeSkX1MaDP1x+2GMctWpScF7RMii0VA4vD5bi 8pnAQjl2QJ6/U3VMl9RvC7rVWLErotjVwfHBFYwVMunJBjJ3jQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO+BsSbEafw2Kl2Zug2YTON++II/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hYTcx NzFiMC00ODQ3LTQ2MmUtYjczMi0xYzdlZDZiM2IwYjEvYWE3MTcxYjAtNDg0Ny00 NjJlLWI3MzItMWM3ZWQ2YjNiMGIxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWE3MTcxYjAtNDg0Ny00NjJlLWI3 MzItMWM3ZWQ2YjNiMGIxL2FhNzE3MWIwLTQ4NDctNDYyZS1iNzMyLTFjN2VkNmIz YjBiMS5jcmwwHwYDVR0jBBgwFoAU+Qzb2jiKFVGdTieVBabLAR11op8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hYTcxNzFiMC00ODQ3LTQ2MmUtYjczMi0xYzdl ZDZiM2IwYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBS3qkwr2LzjMRVIDqxNZKO 21wYNtA9B+pI8/5rruB6K0wD/7sZEHoxFy9Lx/a/BoHs0pCLaPbI47XVH1sm2JJQ AsJjKMhHmeXF3NMFvxatFNZpWNfpxoJN57Hx2yckX3BxQ7Bw8RKdVoJL65bjmwZq T16APuCu4e1z3o7AzXA8o3rPU8ixRt5+WD54CRgWSmzbaiyvaX3QLN3KFuH/B9zC wErpmqFveH/cGE/fPPuKmOAh+aDBNUFdjW5tjZ7vU5iyRFGfY2Gq5GLgqN/0mBOU dJjmnHfSYQP2pdohhQenzh/x24kjxlFsKcFOPwYp/9MX+cV3neQ/SwhZJtnLThkw -----END CERTIFICATE-----Generated at Tue Oct 6 20:12:19 2026 by rpki-client