$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft File: 4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft (raw, json) Hash identifier: Z0qjr1bL+YMm589H2qAWiSuxvGuu8DoovKkfX8zj7RY= Subject key identifier: AE:2B:95:EC:30:6B:EF:01:57:85:E5:98:27:B2:BF:60:79:1B:CB:80 Authority key identifier: 2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 Certificate issuer: /CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Certificate serial: 010D0C9F4328584FD938E4949FFE573D9D84D500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft Manifest number: 010D0C9F4328584BC7EC849A397DD986C431697E Signing time: Sun 15 Nov 2026 13:00:23 +0000 Manifest this update: Sun 15 Nov 2026 13:00:23 +0000 Manifest next update: Tue 17 Nov 2026 13:00:00 +0000 Files and hashes: 1: 4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl (hash: vf3c31j07S4F1SU9jYUy4cXrOC5w4U8VXU0YAfWME18=) 2: d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa (hash: le4q7bfIyiP9+Yx4lbUzybVNelZqEF/QuxpnFtF9bYk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d9:38:e4:94:9f:fe:57:3d:9d:84:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Validity Not Before: Nov 15 13:00:23 2026 GMT Not After : Nov 17 13:00:00 2026 GMT Subject: CN=ba548c5e-b18e-4c36-b842-495cc43e4a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:14:74:89:8a:11:d6:b6:82:c1:6a:00:06:a6: 0a:c7:73:fe:1f:4c:d6:ca:b2:c2:57:27:8b:d8:80: 53:bb:c8:39:64:78:bc:4d:b4:eb:fb:c7:ca:f6:a3: eb:c4:a9:ef:df:6c:e5:5f:45:b6:cb:45:a8:9f:98: ad:f2:59:53:61:00:62:09:64:19:0d:45:71:c3:9e: 7f:b8:9f:d8:df:1e:14:5c:1a:f7:1e:27:de:01:e7: e6:90:26:bc:12:39:c5:65:97:f2:24:81:2b:61:0e: 13:03:aa:50:26:41:af:50:bd:b8:bc:e1:b4:f3:56: 8a:ce:b4:75:be:b6:87:60:bd:c8:40:4e:84:8e:83: e2:b1:8a:4a:f7:cb:e7:82:d3:a5:58:19:4c:c8:fb: 87:03:60:18:d4:f7:52:4b:16:25:09:40:a5:d7:be: 2c:7d:37:c2:b9:aa:e6:6c:41:75:3a:86:be:fd:99: de:2b:f9:41:a5:79:80:b2:60:27:32:8f:4d:af:9e: 24:f2:89:b4:d6:1c:07:a2:3e:55:19:de:74:4f:52: 51:ab:f1:e7:d2:d2:a2:83:4b:e2:f2:ff:a6:ea:5e: 10:a4:7a:b0:c1:30:23:b5:71:d5:6c:fd:0a:c8:4e: e9:35:8f:96:d1:7d:9c:c9:93:cd:af:dd:fb:ab:07: bd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2B:95:EC:30:6B:EF:01:57:85:E5:98:27:B2:BF:60:79:1B:CB:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl X509v3 Authority Key Identifier: keyid:2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:03:05:fd:ac:d8:5a:60:b3:09:a0:67:23:fe:09:cb:49:c8: 6b:17:cf:5e:51:ef:84:48:77:b5:25:9d:41:72:ac:27:e0:51: 33:1b:58:23:07:1c:61:48:5a:40:ad:1f:a7:55:48:ef:17:65: 7e:62:48:45:fd:97:c1:6b:db:b5:9b:85:3b:25:d8:72:2f:c8: 8c:c6:bc:08:c9:d9:06:bb:e7:03:b6:30:09:4d:9f:9f:96:85: 69:3a:5b:97:0d:65:88:ae:6e:17:a4:70:de:18:1d:bb:90:f8: a5:98:4b:48:7d:9a:53:8b:18:a4:e6:38:76:b3:d6:9a:89:5c: d1:0e:3d:4f:d8:71:3e:ba:c3:04:4d:f3:51:44:09:55:37:77: ae:9d:94:ba:8c:15:85:f1:bb:dd:b5:a2:70:2c:aa:f9:49:0a: c3:b2:90:a9:6a:9d:47:78:d3:8c:82:bd:2d:07:a4:2f:58:14: 29:b0:cd:9a:ae:36:fb:94:28:8c:e3:93:70:d1:0a:8d:80:be: e0:3c:27:db:df:03:0a:90:aa:90:36:3e:33:ae:5c:81:63:b9: 86:23:39:cf:2e:b5:ba:36:aa:fb:0f:5e:00:b2:1a:de:f6:f3: 87:40:48:ad:6d:06:e3:33:c5:00:25:bf:2d:f5:65:0c:25:87: c3:d9:0a:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/ZOOSUn/5XPZ2E1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRjZGYxZjQtNWU2MC00MzhkLTg5MzQtMGNhMjFkMGI0 NWFmMB4XDTI2MTExNTEzMDAyM1oXDTI2MTExNzEzMDAwMFowLzEtMCsGA1UEAxMk YmE1NDhjNWUtYjE4ZS00YzM2LWI4NDItNDk1Y2M0M2U0YThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhR0iYoR1raCwWoABqYKx3P+H0zWyrLCVyeL 2IBTu8g5ZHi8TbTr+8fK9qPrxKnv32zlX0W2y0Won5it8llTYQBiCWQZDUVxw55/ uJ/Y3x4UXBr3HifeAefmkCa8EjnFZZfyJIErYQ4TA6pQJkGvUL24vOG081aKzrR1 vraHYL3IQE6EjoPisYpK98vngtOlWBlMyPuHA2AY1PdSSxYlCUCl174sfTfCuarm bEF1Ooa+/ZneK/lBpXmAsmAnMo9Nr54k8om01hwHoj5VGd50T1JRq/Hn0tKig0vi 8v+m6l4QpHqwwTAjtXHVbP0KyE7pNY+W0X2cyZPNr937qwe9BQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK4rlewwa+8BV4XlmCeyv2B5G8uAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNk ZjFmNC01ZTYwLTQzOGQtODkzNC0wY2EyMWQwYjQ1YWYvNGRjZGYxZjQtNWU2MC00 MzhkLTg5MzQtMGNhMjFkMGI0NWFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGRjZGYxZjQtNWU2MC00MzhkLTg5 MzQtMGNhMjFkMGI0NWFmLzRkY2RmMWY0LTVlNjAtNDM4ZC04OTM0LTBjYTIxZDBi NDVhZi5jcmwwHwYDVR0jBBgwFoAUKtcrN6YK8Qr5CP1mtfg4wMSxYWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNkZjFmNC01ZTYwLTQzOGQtODkzNC0wY2Ey MWQwYjQ1YWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADAwX9rNhaYLMJoGcj/gnL SchrF89eUe+ESHe1JZ1Bcqwn4FEzG1gjBxxhSFpArR+nVUjvF2V+YkhF/ZfBa9u1 m4U7JdhyL8iMxrwIydkGu+cDtjAJTZ+floVpOluXDWWIrm4XpHDeGB27kPilmEtI fZpTixik5jh2s9aaiVzRDj1P2HE+usMETfNRRAlVN3eunZS6jBWF8bvdtaJwLKr5 SQrDspCpap1HeNOMgr0tB6QvWBQpsM2arjb7lCiM45Nw0QqNgL7gPCfb3wMKkKqQ Nj4zrlyBY7mGIznPLrW6Nqr7D14Ashre9vOHQEitbQbjM8UAJb8t9WUMJYfD2Qqo -----END CERTIFICATE-----Generated at Sun Nov 15 17:38:09 2026 by rpki-client