$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.mft File: 1a061c41-5c98-4c71-a150-7a7d7a2550e2.mft (raw, json) Hash identifier: XqB+n9qRaBkscWR3CN6ZH2bu/B0tlDXgP2QWog7SOyM= Subject key identifier: D9:EB:1F:F0:FB:FE:16:69:36:85:BE:2C:31:F2:CA:07:F3:E1:93:52 Authority key identifier: EE:99:26:64:1B:51:28:7D:44:A7:B0:65:7D:9B:44:8E:05:7C:CB:F2 Certificate issuer: /CN=1a061c41-5c98-4c71-a150-7a7d7a2550e2 Certificate serial: 010D0C9F4328584F7511A9CE07F46B5D3DB15580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.mft Manifest number: 010D0C9F4328584E2346D317F441157289F19BC1 Signing time: Sat 10 Oct 2026 16:00:25 +0000 Manifest this update: Sat 10 Oct 2026 16:00:25 +0000 Manifest next update: Mon 12 Oct 2026 16:00:00 +0000 Files and hashes: 1: 1a061c41-5c98-4c71-a150-7a7d7a2550e2.crl (hash: oTSC81Dhw8Qjdc7QcgDCBrsKJdL/ByoGmD6ZqTYlpWs=) 2: af6dbd6a-8ead-37ca-97dc-034257a38308.roa (hash: e/R67TINrwUfQyMdZ0Xge8NkL12MgUENnfM779B+4FE=) 3: b37ecac9-1ff0-3f38-b3b8-87f1179f199c.roa (hash: 8aPwsZZb8ZZnT63r/vA1EvKNmsQ/rBE+a8dNzZUB9vE=) 4: e312ad16-66e8-3f98-b454-cf1692672f25.roa (hash: 2v2CtPusexk0KwmPSgSXukYnxW32g8ceHLfq1tHxfSA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:75:11:a9:ce:07:f4:6b:5d:3d:b1:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a061c41-5c98-4c71-a150-7a7d7a2550e2 Validity Not Before: Oct 10 16:00:25 2026 GMT Not After : Oct 12 16:00:00 2026 GMT Subject: CN=0a46ca6f-8039-4fe2-ba9a-b128f31e3c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:d5:25:3c:d1:e0:a3:1b:0f:73:43:a7:15: 41:df:da:27:0f:82:5d:ab:57:14:01:ae:f8:b8:81: c9:63:1b:0d:7d:57:0b:3b:78:28:e9:e6:24:7d:3d: ad:94:2b:fb:99:08:3b:d4:00:be:20:4f:af:f1:57: 46:0c:90:5b:9a:8d:45:21:c9:82:cb:c5:e9:63:4b: e7:97:66:20:e2:ba:20:84:7c:24:b3:3d:90:d4:aa: 2e:20:7f:d5:93:79:e5:1d:06:2f:ab:53:22:25:6c: d4:2c:9b:a3:23:e9:75:bf:28:4b:e5:c9:4c:f4:18: c5:89:a1:4f:d0:19:2b:20:c9:bc:77:a9:54:45:60: 47:e5:54:a0:28:75:85:72:a5:56:1d:a2:88:2b:6a: d0:8f:42:7c:11:b3:b0:a3:61:50:2c:14:2b:13:02: 80:8b:2d:09:02:1d:72:c5:b9:77:96:0a:bd:0a:ba: 4e:43:23:74:30:f6:13:17:8d:22:6f:6f:d9:0d:97: 22:ea:50:30:58:0e:2e:36:6f:15:a7:af:71:6b:09: 6f:80:25:1c:71:33:83:4f:6f:a8:dd:ea:64:6a:56: 06:60:9f:ee:c6:52:f4:25:3e:09:0a:90:53:a1:da: bc:b2:b5:85:e9:d3:3b:bc:20:3c:37:f8:74:89:41: 99:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EB:1F:F0:FB:FE:16:69:36:85:BE:2C:31:F2:CA:07:F3:E1:93:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2/1a061c41-5c98-4c71-a150-7a7d7a2550e2.crl X509v3 Authority Key Identifier: keyid:EE:99:26:64:1B:51:28:7D:44:A7:B0:65:7D:9B:44:8E:05:7C:CB:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1a061c41-5c98-4c71-a150-7a7d7a2550e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:47:6d:c1:81:ad:98:dc:0e:c6:c1:c1:e1:96:44:7f:6f:9c: 14:16:22:3c:fa:b4:c0:f7:46:9c:a9:cb:37:97:8f:28:ee:c4: 6b:ca:62:11:d1:0a:7f:b3:73:21:81:81:52:87:d2:10:b5:f2: 1b:d0:ba:0a:3a:af:8e:cc:40:6d:dd:4e:e2:1c:fe:e7:95:a7: af:c4:cb:cc:90:71:44:8a:c9:ef:ef:4a:9c:b4:45:ad:6b:0d: ee:f4:53:fe:b3:35:03:75:d3:d4:cd:c3:4d:0d:49:62:8e:85: 57:89:66:a5:ef:cf:13:34:bc:d3:7c:f3:dd:ca:05:d8:4e:df: e4:d0:29:4d:39:6f:0e:2e:cc:eb:54:fe:9a:0c:e4:9c:30:e5: 8e:f3:eb:b7:46:b4:42:d8:30:f0:1c:dc:95:ef:59:37:1f:4b: 8e:fa:ad:18:58:bf:2f:b9:b6:53:ac:d6:2d:3d:37:28:49:fc: b8:4e:c8:e0:5b:c0:9a:d4:4f:ac:e6:71:46:6e:02:7a:05:98: b6:76:19:9e:5c:a6:1e:d5:ad:01:b2:01:40:8a:18:76:97:45: 15:32:4f:c4:9e:bb:0d:64:68:cd:d4:f2:dc:b8:3f:7c:b1:36: d9:a9:8f:8b:53:45:a6:31:3d:15:eb:4a:f1:45:29:84:e0:55: b3:16:dc:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE91EanOB/RrXT2xVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWEwNjFjNDEtNWM5OC00YzcxLWExNTAtN2E3ZDdhMjU1 MGUyMB4XDTI2MTAxMDE2MDAyNVoXDTI2MTAxMjE2MDAwMFowLzEtMCsGA1UEAxMk MGE0NmNhNmYtODAzOS00ZmUyLWJhOWEtYjEyOGYzMWUzYzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXrVJTzR4KMbD3NDpxVB39onD4Jdq1cUAa74 uIHJYxsNfVcLO3go6eYkfT2tlCv7mQg71AC+IE+v8VdGDJBbmo1FIcmCy8XpY0vn l2Yg4roghHwksz2Q1KouIH/Vk3nlHQYvq1MiJWzULJujI+l1vyhL5clM9BjFiaFP 0BkrIMm8d6lURWBH5VSgKHWFcqVWHaKIK2rQj0J8EbOwo2FQLBQrEwKAiy0JAh1y xbl3lgq9CrpOQyN0MPYTF40ib2/ZDZci6lAwWA4uNm8Vp69xawlvgCUccTODT2+o 3epkalYGYJ/uxlL0JT4JCpBTodq8srWF6dM7vCA8N/h0iUGZ3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNnrH/D7/hZpNoW+LDHyygfz4ZNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xYTA2 MWM0MS01Yzk4LTRjNzEtYTE1MC03YTdkN2EyNTUwZTIvMWEwNjFjNDEtNWM5OC00 YzcxLWExNTAtN2E3ZDdhMjU1MGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWEwNjFjNDEtNWM5OC00YzcxLWEx NTAtN2E3ZDdhMjU1MGUyLzFhMDYxYzQxLTVjOTgtNGM3MS1hMTUwLTdhN2Q3YTI1 NTBlMi5jcmwwHwYDVR0jBBgwFoAU7pkmZBtRKH1Ep7BlfZtEjgV8y/IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xYTA2MWM0MS01Yzk4LTRjNzEtYTE1MC03YTdk N2EyNTUwZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPR23Bga2Y3A7GwcHhlkR/ b5wUFiI8+rTA90acqcs3l48o7sRrymIR0Qp/s3MhgYFSh9IQtfIb0LoKOq+OzEBt 3U7iHP7nlaevxMvMkHFEisnv70qctEWtaw3u9FP+szUDddPUzcNNDUlijoVXiWal 788TNLzTfPPdygXYTt/k0ClNOW8OLszrVP6aDOScMOWO8+u3RrRC2DDwHNyV71k3 H0uO+q0YWL8vubZTrNYtPTcoSfy4TsjgW8Ca1E+s5nFGbgJ6BZi2dhmeXKYe1a0B sgFAihh2l0UVMk/EnrsNZGjN1PLcuD98sTbZqY+LU0WmMT0V60rxRSmE4FWzFtyX -----END CERTIFICATE-----Generated at Sun Oct 11 07:14:03 2026 by rpki-client