$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft File: 1af0a650-f612-4b2a-9af3-b8090917fefd.mft (raw, json) Hash identifier: K8rYiqKSptm1wBdbSwGZSpJ+Steuy3tFwV0KuTPmP4I= Subject key identifier: 22:03:08:7D:52:B3:32:96:BC:43:99:CD:42:B0:1B:D2:4B:CE:41:CE Authority key identifier: 0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D Certificate issuer: /CN=1af0a650-f612-4b2a-9af3-b8090917fefd Certificate serial: 010D0C9F4328584F4DDE40699D74B24E4A12A220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft Manifest number: 010D0C9F4328584BE67F5BDBA8BBD49634FD1A41 Signing time: Sat 26 Sep 2026 15:00:23 +0000 Manifest this update: Sat 26 Sep 2026 15:00:23 +0000 Manifest next update: Tue 29 Sep 2026 15:00:00 +0000 Files and hashes: 1: 1af0a650-f612-4b2a-9af3-b8090917fefd.crl (hash: Zow7/+XCB+iY1Qp6DGm5D1KXQ5tX9l9Ug+fu0WmKDBM=) 2: c9a357e8-5b34-3488-aff9-64850d85d2ab.roa (hash: dnR580swcZLsxOiXAL+6QWYrILf9dfhxuocqSI4qgKM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:de:40:69:9d:74:b2:4e:4a:12:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1af0a650-f612-4b2a-9af3-b8090917fefd Validity Not Before: Sep 26 15:00:23 2026 GMT Not After : Sep 29 15:00:00 2026 GMT Subject: CN=172393c3-ad1f-406a-b7de-c09e396c8a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b8:b6:83:29:ff:80:91:8d:8a:d7:1a:1f:c9: b0:b1:dd:42:fd:32:2f:35:4a:e3:a7:da:78:50:89: 0d:99:52:fb:2b:b1:2d:18:5c:82:47:f2:28:f0:84: f4:f9:14:ee:1b:5a:fc:1c:90:1f:e3:c2:c9:61:28: c2:77:3b:c6:f3:f0:a8:cd:8f:f8:66:ea:43:61:05: fd:c0:61:f2:9a:0d:70:73:8c:2d:05:93:88:c3:06: e4:75:17:dc:2c:7a:dd:37:17:f0:2c:fe:ee:c3:80: fb:c0:01:a5:89:23:da:f4:d4:01:91:78:14:54:12: 90:37:d2:72:49:30:1b:e0:d3:22:fd:cf:b8:70:3f: f4:85:8c:84:ef:36:a0:83:76:d8:bc:f8:be:bd:36: ae:76:de:e9:f4:3c:d4:f1:a2:1c:86:c4:11:1b:0d: 3f:da:a6:8c:eb:82:b6:82:3f:a2:e1:8e:25:b6:e0: e6:d3:11:14:2e:49:a6:10:de:db:e5:9b:20:2c:24: 93:d4:52:59:79:3b:ac:5e:b1:b6:20:ff:7b:1b:12: cd:2f:d0:ca:7c:6b:f0:fc:f5:68:f2:1a:c2:77:d7: c8:94:30:53:11:9a:27:e8:25:be:38:02:a8:b8:76: 08:87:f4:d4:8f:29:90:90:e5:e6:82:04:55:45:16: 0f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:03:08:7D:52:B3:32:96:BC:43:99:CD:42:B0:1B:D2:4B:CE:41:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl X509v3 Authority Key Identifier: keyid:0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:96:30:f1:07:1f:46:f2:35:28:8c:55:43:3a:67:65:83:2a: dd:bc:bf:65:6e:74:1d:51:d9:3f:a3:09:bb:f5:0d:d9:63:70: 22:bb:32:54:95:a9:8a:47:95:94:35:99:e7:19:04:08:d2:52: e6:98:b0:71:39:79:58:57:42:c1:c9:18:4c:a3:15:44:58:a5: 6f:86:7e:aa:9a:46:19:bd:58:18:60:d3:56:1d:62:ea:d9:0e: 92:97:bc:a8:a4:29:d8:8f:91:52:c9:c7:c4:47:9f:8b:7e:cd: d6:65:45:b7:13:c3:da:a1:30:04:16:3c:4b:7d:ac:6b:23:56: 92:4e:f3:89:64:ad:65:6e:01:45:5b:98:5d:dd:c0:8d:3f:ac: f1:88:af:09:e1:8a:57:69:50:85:b3:ca:23:0d:cc:6f:cc:a2: fb:c9:24:78:79:26:a2:96:36:b2:a3:a8:7e:2f:7f:3f:73:a4: 97:b0:9b:c9:2d:ea:60:88:0d:44:bb:1e:ec:56:09:6e:28:5b: da:6f:2f:5b:58:75:93:58:a9:18:bd:98:d6:87:35:23:28:2c: e6:5b:5d:ab:5d:94:df:a3:8f:83:fa:da:ab:bf:23:f8:2b:23: c6:43:d0:61:23:e8:19:fc:68:10:50:e7:f9:2d:4a:30:55:26: 0e:25:10:9d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9N3kBpnXSyTkoSoiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFmMGE2NTAtZjYxMi00YjJhLTlhZjMtYjgwOTA5MTdm ZWZkMB4XDTI2MDkyNjE1MDAyM1oXDTI2MDkyOTE1MDAwMFowLzEtMCsGA1UEAxMk MTcyMzkzYzMtYWQxZi00MDZhLWI3ZGUtYzA5ZTM5NmM4YTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbi2gyn/gJGNitcaH8mwsd1C/TIvNUrjp9p4 UIkNmVL7K7EtGFyCR/Io8IT0+RTuG1r8HJAf48LJYSjCdzvG8/CozY/4ZupDYQX9 wGHymg1wc4wtBZOIwwbkdRfcLHrdNxfwLP7uw4D7wAGliSPa9NQBkXgUVBKQN9Jy STAb4NMi/c+4cD/0hYyE7zagg3bYvPi+vTaudt7p9DzU8aIchsQRGw0/2qaM64K2 gj+i4Y4ltuDm0xEULkmmEN7b5ZsgLCST1FJZeTusXrG2IP97GxLNL9DKfGvw/PVo 8hrCd9fIlDBTEZon6CW+OAKouHYIh/TUjymQkOXmggRVRRYPZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCIDCH1SszKWvEOZzUKwG9JLzkHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYw YTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5MDkxN2ZlZmQvMWFmMGE2NTAtZjYxMi00 YjJhLTlhZjMtYjgwOTA5MTdmZWZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWFmMGE2NTAtZjYxMi00YjJhLTlh ZjMtYjgwOTA5MTdmZWZkLzFhZjBhNjUwLWY2MTItNGIyYS05YWYzLWI4MDkwOTE3 ZmVmZC5jcmwwHwYDVR0jBBgwFoAUDWTi2ayqXnf8z1b/B9EFaOXwJJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYwYTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5 MDkxN2ZlZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7ljDxBx9G8jUojFVDOmdl gyrdvL9lbnQdUdk/owm79Q3ZY3AiuzJUlamKR5WUNZnnGQQI0lLmmLBxOXlYV0LB yRhMoxVEWKVvhn6qmkYZvVgYYNNWHWLq2Q6Sl7yopCnYj5FSycfER5+Lfs3WZUW3 E8PaoTAEFjxLfaxrI1aSTvOJZK1lbgFFW5hd3cCNP6zxiK8J4YpXaVCFs8ojDcxv zKL7ySR4eSailjayo6h+L38/c6SXsJvJLepgiA1Eux7sVgluKFvaby9bWHWTWKkY vZjWhzUjKCzmW12rXZTfo4+D+tqrvyP4KyPGQ9BhI+gZ/GgQUOf5LUowVSYOJRCd -----END CERTIFICATE-----Generated at Sat Sep 26 22:18:08 2026 by rpki-client