$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/85a507ae-7969-4a54-b25c-2e757bf0990a.mft File: 85a507ae-7969-4a54-b25c-2e757bf0990a.mft (raw, json) Hash identifier: onfD8AkfZSS98L2mUtUtigXBrla8H2LH67r2g2DLn4k= Subject key identifier: BE:60:86:31:7B:85:9E:02:13:BE:B7:13:59:45:5E:4D:CA:C8:BC:31 Authority key identifier: 5A:D2:D1:17:21:36:34:82:99:87:5F:5E:CA:F9:31:C1:E5:F8:CA:C4 Certificate issuer: /CN=85a507ae-7969-4a54-b25c-2e757bf0990a Certificate serial: 010D0C9F4328584F42D150A6ACEEED43BB210380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/85a507ae-7969-4a54-b25c-2e757bf0990a.mft Manifest number: 010D0C9F4328584D41331A32F7175252039C4B40 Signing time: Tue 22 Sep 2026 16:00:24 +0000 Manifest this update: Tue 22 Sep 2026 16:00:24 +0000 Manifest next update: Fri 25 Sep 2026 16:00:00 +0000 Files and hashes: 1: 25314a5a-e882-3694-8921-dec33b2e8cf5.roa (hash: fdYmaTgCuE+2YXhY2OFdvDIkbXM128VNU2cvfSFIjFM=) 2: 85a507ae-7969-4a54-b25c-2e757bf0990a.crl (hash: EwjGg5li2OlKzmCfVRXenMkf+gHuKWoosVl9ANFRp24=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/85a507ae-7969-4a54-b25c-2e757bf0990a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/85a507ae-7969-4a54-b25c-2e757bf0990a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:d1:50:a6:ac:ee:ed:43:bb:21:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85a507ae-7969-4a54-b25c-2e757bf0990a Validity Not Before: Sep 22 16:00:24 2026 GMT Not After : Sep 25 16:00:00 2026 GMT Subject: CN=3f294a87-c428-4892-b3f7-c9764d7a09c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:aa:d7:6f:2f:7b:ce:9f:81:b8:61:d3:78:16: ad:cb:e9:7b:42:89:5a:8c:59:3f:49:2a:ea:87:83: 0e:9e:0a:a0:77:12:39:af:5b:2c:c0:c2:b9:52:f1: 8b:ea:c8:26:3d:40:53:65:77:43:6a:1e:76:9f:30: 1e:ea:2f:ad:5c:ee:d3:03:6f:0e:56:44:d0:ed:0f: 1d:87:22:26:09:f8:a1:02:17:62:bd:82:4f:b9:85: d3:74:97:32:c4:c5:8b:b4:4e:58:19:e6:ec:57:c9: 7f:17:9f:da:aa:03:b5:be:6f:73:0b:e6:e9:d4:11: cd:12:b7:09:03:de:4b:55:4b:1c:e9:ab:9a:28:5e: df:09:c3:2c:df:27:52:92:04:34:14:68:e4:55:e1: 82:91:58:da:a5:2c:0f:a4:92:1c:7d:52:9b:ba:aa: 23:e0:70:14:b8:13:07:33:1a:6d:f4:c6:f1:5c:f9: b7:b0:80:a7:c4:e0:dd:0e:1d:f8:c6:3b:18:83:a6: fa:2d:30:1d:bc:e8:2a:67:e9:a1:6d:17:d7:17:fb: f0:db:e7:8b:b1:b1:7b:70:95:b1:03:61:a5:d4:2c: fa:27:8e:96:12:3e:07:18:2e:38:1d:b4:5a:8d:2c: 93:c1:b4:cd:2e:4b:ae:be:d6:a5:2e:0a:3a:20:cd: f6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:60:86:31:7B:85:9E:02:13:BE:B7:13:59:45:5E:4D:CA:C8:BC:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/85a507ae-7969-4a54-b25c-2e757bf0990a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/85a507ae-7969-4a54-b25c-2e757bf0990a.crl X509v3 Authority Key Identifier: keyid:5A:D2:D1:17:21:36:34:82:99:87:5F:5E:CA:F9:31:C1:E5:F8:CA:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4f:0e:b7:92:1a:d6:fa:62:a6:d2:6c:b0:75:45:77:e7:c8: 81:40:af:19:75:5a:88:f8:a6:c8:f9:37:62:f7:9a:ae:60:cc: b1:b9:88:7a:cd:a2:dd:46:99:15:d5:a9:8f:ce:d9:f7:3b:f5: f1:4e:3a:c7:1d:2d:f3:80:71:57:b8:73:36:2c:e4:e5:74:db: cd:98:63:8f:3a:87:ca:a2:fe:b3:68:4e:5b:3a:09:2c:4c:1c: 1f:c3:63:ff:33:36:2f:83:34:45:ea:d7:70:cd:58:bc:78:c1: 07:22:5c:be:9c:2d:27:2d:fd:92:3d:91:33:f9:3d:b8:66:35: dc:e9:93:ef:30:1c:fc:2b:89:ce:e7:4f:b6:6e:df:d9:2b:ca: b4:b2:89:33:6e:c3:1d:45:51:1d:be:1b:a3:61:22:f0:8d:4b: 9a:28:4c:a6:7c:8f:2a:fa:97:e7:d1:9c:b9:3d:b9:08:4a:55: 31:b5:79:41:ac:0c:4e:28:09:94:e9:b9:5b:36:88:10:71:8f: d0:c7:a2:b2:75:8d:58:77:62:d1:78:8b:d2:db:ab:5e:d7:c6: c3:b5:22:3d:ab:b7:2c:98:e2:20:69:b9:b1:24:de:e6:33:c8: eb:0d:99:3c:86:5d:c1:62:5c:b1:dd:54:f7:95:05:4b:f2:8c: 01:9d:00:f9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9C0VCmrO7tQ7shA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVhNTA3YWUtNzk2OS00YTU0LWIyNWMtMmU3NTdiZjA5 OTBhMB4XDTI2MDkyMjE2MDAyNFoXDTI2MDkyNTE2MDAwMFowLzEtMCsGA1UEAxMk M2YyOTRhODctYzQyOC00ODkyLWIzZjctYzk3NjRkN2EwOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKrXby97zp+BuGHTeBaty+l7QolajFk/SSrq h4MOngqgdxI5r1sswMK5UvGL6sgmPUBTZXdDah52nzAe6i+tXO7TA28OVkTQ7Q8d hyImCfihAhdivYJPuYXTdJcyxMWLtE5YGebsV8l/F5/aqgO1vm9zC+bp1BHNErcJ A95LVUsc6auaKF7fCcMs3ydSkgQ0FGjkVeGCkVjapSwPpJIcfVKbuqoj4HAUuBMH Mxpt9MbxXPm3sICnxODdDh34xjsYg6b6LTAdvOgqZ+mhbRfXF/vw2+eLsbF7cJWx A2Gl1Cz6J46WEj4HGC44HbRajSyTwbTNLkuuvtalLgo6IM324QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL5ghjF7hZ4CE763E1lFXk3KyLwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84NWE1 MDdhZS03OTY5LTRhNTQtYjI1Yy0yZTc1N2JmMDk5MGEvODVhNTA3YWUtNzk2OS00 YTU0LWIyNWMtMmU3NTdiZjA5OTBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvODVhNTA3YWUtNzk2OS00YTU0LWIy NWMtMmU3NTdiZjA5OTBhLzg1YTUwN2FlLTc5NjktNGE1NC1iMjVjLTJlNzU3YmYw OTkwYS5jcmwwHwYDVR0jBBgwFoAUWtLRFyE2NIKZh19eyvkxweX4ysQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84NWE1MDdhZS03OTY5LTRhNTQtYjI1Yy0yZTc1 N2JmMDk5MGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHTw63khrW+mKm0mywdUV3 58iBQK8ZdVqI+KbI+Tdi95quYMyxuYh6zaLdRpkV1amPztn3O/XxTjrHHS3zgHFX uHM2LOTldNvNmGOPOofKov6zaE5bOgksTBwfw2P/MzYvgzRF6tdwzVi8eMEHIly+ nC0nLf2SPZEz+T24ZjXc6ZPvMBz8K4nO50+2bt/ZK8q0sokzbsMdRVEdvhujYSLw jUuaKEymfI8q+pfn0Zy5PbkISlUxtXlBrAxOKAmU6blbNogQcY/Qx6KydY1Yd2LR eIvS26te18bDtSI9q7csmOIgabmxJN7mM8jrDZk8hl3BYlyx3VT3lQVL8owBnQD5 -----END CERTIFICATE-----Generated at Wed Sep 23 15:19:48 2026 by rpki-client