$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft File: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft (raw, json) Hash identifier: 4wCe7FCLnUK3Cwf2FjwbR1cRW7j+XRvGd65oEnrD4n8= Subject key identifier: DE:85:82:FC:80:50:01:ED:85:9C:EC:B8:82:36:28:B9:23:8D:78:BA Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584F45D78F549A9AEC6BA4C4C7C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft Manifest number: 010D0C9F43285848565C3129D3EC730D3401FA65 Signing time: Wed 23 Sep 2026 18:00:22 +0000 Manifest this update: Wed 23 Sep 2026 18:00:22 +0000 Manifest next update: Sat 26 Sep 2026 18:00:00 +0000 Files and hashes: 1: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl (hash: 9v0E2UyPcGYkoqE6mExDVuhCGOmj/n5hHdkyh7MBodI=) 2: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (hash: bDvGZaIaoewoZKqOOn9jMk9Yk/BVtCbXdE0IWmYsZZ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:d7:8f:54:9a:9a:ec:6b:a4:c4:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Sep 23 18:00:22 2026 GMT Not After : Sep 26 18:00:00 2026 GMT Subject: CN=404dcb7b-df65-43a9-86d9-5c92894d928a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:f1:3f:f2:14:7f:39:55:de:47:15:1c:b6: bd:ad:6a:57:60:fc:8d:d1:52:d9:b9:77:59:cc:e3: c5:67:19:ed:8b:d3:63:00:0e:42:c3:96:c7:2e:5f: 13:2e:6b:8a:92:ed:13:2a:eb:57:a8:3c:7d:1b:a3: 41:d6:c6:ed:8e:49:2a:82:5a:12:13:0a:8f:29:fa: 95:09:ca:62:d4:d9:6e:3f:da:8d:50:8c:bd:91:48: c3:22:d2:0d:be:18:42:ba:32:84:83:2d:c8:60:fd: ec:ec:02:34:9a:ec:67:18:db:d0:c3:c2:83:5e:46: 74:fd:a8:e6:5b:cf:56:55:cb:76:39:0e:3f:59:ec: c5:8f:0b:91:d2:5e:14:b4:b9:c0:b0:b1:aa:a5:b2: 79:1b:b7:ba:71:40:2a:da:a7:62:4b:cd:2c:bd:90: 19:34:fb:3f:b5:37:b2:1b:a4:07:5c:ab:3f:c5:54: d1:b5:7f:a9:61:0f:55:cb:45:40:0c:8c:ea:e1:ce: b6:6a:45:81:6d:09:ea:d0:38:d1:88:6f:ae:ed:d6: 60:11:e8:af:66:fe:68:82:05:08:d9:b1:13:7e:3e: 2f:ca:47:dd:6e:da:16:d3:b4:ae:98:c6:1f:f0:72: 93:73:5f:ca:9b:cf:a8:8d:89:43:ac:ee:32:34:cf: c5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:85:82:FC:80:50:01:ED:85:9C:EC:B8:82:36:28:B9:23:8D:78:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e1:40:0c:7f:b2:f4:8f:df:d1:69:53:d9:88:95:2e:48:08: d9:b1:52:0f:6e:6c:f4:10:10:72:a7:bf:9e:7a:b4:d7:20:96: bd:e2:7d:3a:50:e4:8f:53:35:35:ac:a0:12:0f:41:fe:56:2b: 04:5e:4a:65:84:d0:d6:58:64:9e:b6:9d:aa:b5:03:18:14:90: 8e:c4:b6:df:5d:b5:8d:46:09:9a:03:69:cd:ec:48:21:b2:d6: bd:bb:98:71:a0:fe:2f:64:af:0b:2b:8a:0f:ab:83:02:9c:96: f9:61:76:75:cd:a9:44:a8:0d:a8:48:ef:93:82:92:40:8c:61: fc:87:42:51:08:9d:54:e2:49:1e:3e:05:2f:d4:68:1e:5a:5c: 96:23:9f:ee:b0:80:e5:50:54:d0:d0:ac:55:b5:ea:f0:f0:40: 82:1b:e6:ee:5f:2b:4b:f3:16:16:0a:45:70:93:ae:b0:21:b0: d0:2f:c5:40:8d:96:d2:9b:d4:a2:c4:c2:e4:dd:53:45:94:11: 72:e7:1a:a2:1f:91:d7:52:f2:05:37:0c:fb:aa:f6:1b:67:bf: 14:0a:27:ec:98:d2:31:f0:70:14:99:28:a0:04:80:49:26:ca: 22:3e:25:50:6b:64:73:fc:06:38:fb:91:52:bb:92:dd:1b:3b: 46:cc:dd:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9F149Umprsa6TEx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI2MDkyMzE4MDAyMloXDTI2MDkyNjE4MDAwMFowLzEtMCsGA1UEAxMk NDA0ZGNiN2ItZGY2NS00M2E5LTg2ZDktNWM5Mjg5NGQ5MjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM7xP/IUfzlV3kcVHLa9rWpXYPyN0VLZuXdZ zOPFZxnti9NjAA5Cw5bHLl8TLmuKku0TKutXqDx9G6NB1sbtjkkqgloSEwqPKfqV Ccpi1NluP9qNUIy9kUjDItINvhhCujKEgy3IYP3s7AI0muxnGNvQw8KDXkZ0/ajm W89WVct2OQ4/WezFjwuR0l4UtLnAsLGqpbJ5G7e6cUAq2qdiS80svZAZNPs/tTey G6QHXKs/xVTRtX+pYQ9Vy0VADIzq4c62akWBbQnq0DjRiG+u7dZgEeivZv5oggUI 2bETfj4vykfdbtoW07SumMYf8HKTc1/Km8+ojYlDrO4yNM/FnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN6FgvyAUAHthZzsuII2KLkjjXi6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvMjUzOTdjMzMtODRkMS00 YTk1LTlkNGMtNDIxYzdkOTVkMGY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB04UAMf7L0j9/RaVPZiJUu SAjZsVIPbmz0EBByp7+eerTXIJa94n06UOSPUzU1rKASD0H+VisEXkplhNDWWGSe tp2qtQMYFJCOxLbfXbWNRgmaA2nN7Eghsta9u5hxoP4vZK8LK4oPq4MCnJb5YXZ1 zalEqA2oSO+TgpJAjGH8h0JRCJ1U4kkePgUv1GgeWlyWI5/usIDlUFTQ0KxVterw 8ECCG+buXytL8xYWCkVwk66wIbDQL8VAjZbSm9SixMLk3VNFlBFy5xqiH5HXUvIF Nwz7qvYbZ78UCifsmNIx8HAUmSigBIBJJsoiPiVQa2Rz/AY4+5FSu5LdGztGzN18 -----END CERTIFICATE-----Generated at Thu Sep 24 17:42:45 2026 by rpki-client