$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft File: de111c10-2de5-41fa-a9e4-1e49a0479199.mft (raw, json) Hash identifier: onvzdwL5anYQt2+iuiybtOqbBODSd0KHHUSXe8HI8Zc= Subject key identifier: 66:A3:D8:8C:B0:91:C9:2C:50:B8:6F:F7:10:BE:36:F5:27:C8:95:50 Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF Certificate issuer: /CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Certificate serial: 010D0C9F4328584F53EABFD6A8923FD53BD28F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft Manifest number: 010D0C9F43285840C7A133CC5EFAFBE0119B7818 Signing time: Mon 28 Sep 2026 19:00:24 +0000 Manifest this update: Mon 28 Sep 2026 19:00:24 +0000 Manifest next update: Thu 01 Oct 2026 19:00:00 +0000 Files and hashes: 1: de111c10-2de5-41fa-a9e4-1e49a0479199.crl (hash: pxQi5aKpa+eOLvim34HY4n0WIbXUEkzjG0dYRz8PPtE=) 2: f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (hash: tAv3IUacDFkGvrHAgqtK6b+8uxDgQ5wTys925iZN9VM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:ea:bf:d6:a8:92:3f:d5:3b:d2:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Validity Not Before: Sep 28 19:00:24 2026 GMT Not After : Oct 1 19:00:00 2026 GMT Subject: CN=79ee52a3-8065-40a6-a091-71766733ee7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b5:82:55:02:47:0a:d7:8d:59:c7:c9:f4:71: 04:31:ca:b9:a0:fb:a6:da:91:48:4e:fd:6a:1a:c9: 22:61:9f:ed:ec:87:be:39:bc:77:03:a7:e8:37:ef: 4d:ed:70:dd:8f:4c:b1:17:f5:e3:21:cb:d9:f0:f8: bb:11:8d:86:c8:c0:8d:88:da:06:c6:35:a8:4c:30: a9:51:52:d6:76:64:d6:cc:73:75:c5:96:e0:ac:0b: c3:fd:ad:53:26:f5:e6:c2:e0:b8:fa:3a:a4:a9:55: 8d:2d:a0:78:68:d6:bf:99:d2:5c:9c:5a:50:c0:3b: 3e:69:de:67:a4:75:78:27:8c:8e:12:65:3b:b8:4d: 77:55:53:b6:66:13:34:f0:99:0e:ad:37:1f:f9:61: 53:47:d0:60:9f:04:42:ed:70:38:57:0a:3c:0f:bd: 6b:81:25:c5:70:7c:f2:bf:61:cd:b9:41:46:9e:83: 44:99:d5:a6:62:c0:c2:a7:1a:c2:f0:6d:b2:21:bb: bb:8a:3b:39:70:97:a1:f2:2e:2c:5e:a3:51:27:9f: 09:38:c1:70:0f:84:88:9f:de:69:38:41:48:0f:db: bb:da:11:15:bf:c6:29:b5:6a:ed:df:fb:67:cc:52: 70:78:27:e5:4f:29:ac:06:7b:78:1c:78:22:f7:cf: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A3:D8:8C:B0:91:C9:2C:50:B8:6F:F7:10:BE:36:F5:27:C8:95:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl X509v3 Authority Key Identifier: keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:0e:4a:08:34:e4:ce:a4:db:e9:41:f3:da:19:a4:09:de:8a: 05:02:b4:8d:77:e8:ae:a6:21:f1:3c:92:8a:75:f5:5a:e3:a0: 27:29:4d:eb:e7:59:f2:bd:45:41:bb:c1:12:37:c8:4c:0a:d0: 64:9b:91:08:b3:dd:50:29:27:56:d6:ac:7d:8a:4d:7b:8d:17: 27:56:4a:64:79:d7:ae:9d:83:8d:08:39:96:88:2b:d7:0c:df: ff:d4:b0:27:e3:00:55:29:93:f0:4c:73:cc:c1:e8:98:96:a3: 96:06:f8:91:e9:44:d9:84:fb:c9:78:ff:2e:dc:ac:de:34:b9: 68:62:6c:2b:10:42:46:c8:df:64:2e:25:b3:1f:a0:a7:b1:52: e3:6f:48:c0:1e:2d:72:c1:0d:e8:d0:34:12:79:2d:1f:cd:46: 2e:1b:8f:f8:2b:c8:3c:c8:0e:75:db:fe:89:6a:06:6b:38:f4: b5:d2:bf:a4:1e:e8:df:00:49:bc:e8:d7:99:34:03:be:23:cd: a1:61:30:10:e5:8f:15:a5:b0:cc:ba:22:9d:1e:50:f5:57:e8: 91:07:ff:b2:b0:7d:12:1f:4a:2e:16:ed:11:89:28:07:c4:fc: 5a:89:ce:58:36:21:cc:32:3e:7e:cf:66:1c:e1:87:39:23:69: cd:cb:22:ac -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9T6r/WqJI/1TvSjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxMTFjMTAtMmRlNS00MWZhLWE5ZTQtMWU0OWEwNDc5 MTk5MB4XDTI2MDkyODE5MDAyNFoXDTI2MTAwMTE5MDAwMFowLzEtMCsGA1UEAxMk NzllZTUyYTMtODA2NS00MGE2LWEwOTEtNzE3NjY3MzNlZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbWCVQJHCteNWcfJ9HEEMcq5oPum2pFITv1q GskiYZ/t7Ie+Obx3A6foN+9N7XDdj0yxF/XjIcvZ8Pi7EY2GyMCNiNoGxjWoTDCp UVLWdmTWzHN1xZbgrAvD/a1TJvXmwuC4+jqkqVWNLaB4aNa/mdJcnFpQwDs+ad5n pHV4J4yOEmU7uE13VVO2ZhM08JkOrTcf+WFTR9BgnwRC7XA4Vwo8D71rgSXFcHzy v2HNuUFGnoNEmdWmYsDCpxrC8G2yIbu7ijs5cJeh8i4sXqNRJ58JOMFwD4SIn95p OEFID9u72hEVv8YptWrt3/tnzFJweCflTymsBnt4HHgi989YKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGaj2IywkcksULhv9xC+NvUnyJVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTEx MWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5YTA0NzkxOTkvZGUxMTFjMTAtMmRlNS00 MWZhLWE5ZTQtMWU0OWEwNDc5MTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGUxMTFjMTAtMmRlNS00MWZhLWE5 ZTQtMWU0OWEwNDc5MTk5L2RlMTExYzEwLTJkZTUtNDFmYS1hOWU0LTFlNDlhMDQ3 OTE5OS5jcmwwHwYDVR0jBBgwFoAUI3+yI40QWbbIrz84S5R6fMqSab8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTExMWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5 YTA0NzkxOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8DkoINOTOpNvpQfPaGaQJ 3ooFArSNd+iupiHxPJKKdfVa46AnKU3r51nyvUVBu8ESN8hMCtBkm5EIs91QKSdW 1qx9ik17jRcnVkpkedeunYONCDmWiCvXDN//1LAn4wBVKZPwTHPMweiYlqOWBviR 6UTZhPvJeP8u3KzeNLloYmwrEEJGyN9kLiWzH6CnsVLjb0jAHi1ywQ3o0DQSeS0f zUYuG4/4K8g8yA512/6JagZrOPS10r+kHujfAEm86NeZNAO+I82hYTAQ5Y8VpbDM uiKdHlD1V+iRB/+ysH0SH0ouFu0RiSgHxPxaic5YNiHMMj5+z2Yc4Yc5I2nNyyKs -----END CERTIFICATE-----Generated at Tue Sep 29 04:56:52 2026 by rpki-client