$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft File: 20ffd753-1cb0-470b-9810-1f98670d442f.mft (raw, json) Hash identifier: 6V0IWQEi5vDTbRYHY4Z9Ca/EXU24jrjG17RpK1AZFGo= Subject key identifier: CC:8D:18:69:7F:D6:61:16:18:B8:53:11:43:85:AE:D3:28:34:9B:17 Authority key identifier: F6:17:85:03:40:3C:0D:22:37:3B:02:15:DF:8F:9A:50:F8:9B:86:80 Certificate issuer: /CN=20ffd753-1cb0-470b-9810-1f98670d442f Certificate serial: 010D0C9F4328584F499083FF7DD87EC4201F9120 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft Manifest number: 010D0C9F4328584C7C197954A173191D3E24104A Signing time: Fri 25 Sep 2026 02:00:25 +0000 Manifest this update: Fri 25 Sep 2026 02:00:25 +0000 Manifest next update: Sun 27 Sep 2026 02:00:00 +0000 Files and hashes: 1: 1c7c3735-449a-3ae7-9b82-d38b21a81f00.roa (hash: 1WSOqKC4aJvbyZ7K6ugoEh737sobtEc3eAFW6KFKdhk=) 2: 20ffd753-1cb0-470b-9810-1f98670d442f.crl (hash: 3p42/DZAtY66p4NP/GYFJK3jTErpQioTcNXdApkW2Qk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:90:83:ff:7d:d8:7e:c4:20:1f:91:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ffd753-1cb0-470b-9810-1f98670d442f Validity Not Before: Sep 25 02:00:25 2026 GMT Not After : Sep 27 02:00:00 2026 GMT Subject: CN=ceaa9ca1-5c7a-4234-bfdf-5529f017f199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ce:9e:1b:db:e2:f4:84:bf:a2:56:ae:68:98: e4:49:a5:c8:8f:43:b1:ee:c2:46:63:af:54:c8:63: d4:51:e7:3b:b3:5e:ad:ce:ef:f7:cf:21:ee:2e:f0: a1:af:11:90:0c:e0:5d:a2:9f:f8:a1:a3:63:f8:aa: a5:47:ec:cb:0e:03:2b:c9:b7:0f:9c:06:56:b7:3a: 97:ab:ee:95:bd:47:d9:35:a1:e7:23:e1:ee:d9:86: 43:03:d4:e9:45:51:7f:78:9f:54:31:ae:2e:89:7d: c1:e6:78:de:e6:f7:fc:e6:cd:60:56:7b:1f:05:17: f7:95:88:97:c1:7e:74:68:6e:ab:1a:af:fd:9a:61: cf:60:fe:67:75:ef:46:69:92:fc:d3:2d:b8:c6:6f: 42:c2:6a:b4:70:88:26:a2:35:81:d8:f3:d1:70:67: 61:f8:0e:dd:af:f2:18:39:9b:3f:9f:0b:f1:a5:07: a9:63:0a:00:20:1b:1f:1b:74:13:ba:7d:a1:b9:98: 5f:42:f2:2b:d3:a8:e1:50:7f:ea:c2:3b:1b:ac:98: 76:8c:9b:2a:5f:ac:ce:df:52:d5:13:98:da:1b:1c: e6:12:76:cf:63:4a:41:e6:1a:07:c9:60:00:99:71: 72:ce:ff:2a:fc:c2:4f:cc:6c:05:b8:b5:1d:7d:0b: 5f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8D:18:69:7F:D6:61:16:18:B8:53:11:43:85:AE:D3:28:34:9B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.crl X509v3 Authority Key Identifier: keyid:F6:17:85:03:40:3C:0D:22:37:3B:02:15:DF:8F:9A:50:F8:9B:86:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:5d:72:d2:ca:c7:99:15:a9:b1:1d:c0:49:dd:f6:08:ba:32: 65:50:49:be:4f:af:74:23:e4:9c:3e:a2:96:c0:c1:1a:b0:d9: 40:4e:91:e1:a7:a4:f2:4a:0a:c3:a7:56:0b:f8:9b:24:24:88: 94:1b:40:0f:51:6a:2b:e0:34:d4:cc:a5:da:01:aa:af:49:53: 03:4c:f9:51:62:a6:ec:c5:65:85:c7:b1:43:48:e4:25:b2:fb: db:5b:ca:d7:91:75:3d:4e:11:c6:6b:da:ba:60:cc:3f:d1:5c: 20:4a:87:c4:14:22:a0:d1:99:1a:25:73:d0:3f:20:38:7f:58: 54:04:26:83:ec:a6:f0:f3:f1:c9:cd:10:08:03:ec:ba:f7:20: 24:79:66:14:50:0c:59:2c:3f:89:fe:13:2b:0d:9d:a6:b7:cd: 65:9f:18:03:7d:cf:35:3d:4a:d1:71:8c:69:d2:d9:b8:02:cb: ff:70:0d:ee:a7:6f:c1:85:3d:68:e9:a6:e4:f5:82:2d:43:69: a2:e7:2d:09:28:13:42:18:63:56:f5:77:07:b0:aa:57:a9:3a: 4c:0b:ad:b0:03:4d:e8:ee:1f:b4:9e:f1:69:dc:47:f6:7b:dc: f8:33:77:ff:0f:fc:f8:fa:e4:e2:bb:bf:5c:ab:cb:11:19:7c: df:9e:e9:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9JkIP/fdh+xCAfkSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBmZmQ3NTMtMWNiMC00NzBiLTk4MTAtMWY5ODY3MGQ0 NDJmMB4XDTI2MDkyNTAyMDAyNVoXDTI2MDkyNzAyMDAwMFowLzEtMCsGA1UEAxMk Y2VhYTljYTEtNWM3YS00MjM0LWJmZGYtNTUyOWYwMTdmMTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM6eG9vi9IS/olauaJjkSaXIj0Ox7sJGY69U yGPUUec7s16tzu/3zyHuLvChrxGQDOBdop/4oaNj+KqlR+zLDgMrybcPnAZWtzqX q+6VvUfZNaHnI+Hu2YZDA9TpRVF/eJ9UMa4uiX3B5nje5vf85s1gVnsfBRf3lYiX wX50aG6rGq/9mmHPYP5nde9GaZL80y24xm9Cwmq0cIgmojWB2PPRcGdh+A7dr/IY OZs/nwvxpQepYwoAIBsfG3QTun2huZhfQvIr06jhUH/qwjsbrJh2jJsqX6zO31LV E5jaGxzmEnbPY0pB5hoHyWAAmXFyzv8q/MJPzGwFuLUdfQtfaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMyNGGl/1mEWGLhTEUOFrtMoNJsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yMGZm ZDc1My0xY2IwLTQ3MGItOTgxMC0xZjk4NjcwZDQ0MmYvMjBmZmQ3NTMtMWNiMC00 NzBiLTk4MTAtMWY5ODY3MGQ0NDJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjBmZmQ3NTMtMWNiMC00NzBiLTk4 MTAtMWY5ODY3MGQ0NDJmLzIwZmZkNzUzLTFjYjAtNDcwYi05ODEwLTFmOTg2NzBk NDQyZi5jcmwwHwYDVR0jBBgwFoAU9heFA0A8DSI3OwIV34+aUPibhoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yMGZmZDc1My0xY2IwLTQ3MGItOTgxMC0xZjk4 NjcwZDQ0MmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPXXLSyseZFamxHcBJ3fYI ujJlUEm+T690I+ScPqKWwMEasNlATpHhp6TySgrDp1YL+JskJIiUG0APUWor4DTU zKXaAaqvSVMDTPlRYqbsxWWFx7FDSOQlsvvbW8rXkXU9ThHGa9q6YMw/0VwgSofE FCKg0ZkaJXPQPyA4f1hUBCaD7Kbw8/HJzRAIA+y69yAkeWYUUAxZLD+J/hMrDZ2m t81lnxgDfc81PUrRcYxp0tm4Asv/cA3up2/BhT1o6abk9YItQ2mi5y0JKBNCGGNW 9XcHsKpXqTpMC62wA03o7h+0nvFp3Ef2e9z4M3f/D/z4+uTiu79cq8sRGXzfnum5 -----END CERTIFICATE-----Generated at Fri Sep 25 23:54:41 2026 by rpki-client