$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.mft File: 09716e22-4f48-41d8-87e0-e9b48691fcc5.mft (raw, json) Hash identifier: dKkheQcC9gE23esIk/A8E55RydRuCuHd8bHIXAiTEFc= Subject key identifier: 62:A4:45:A4:B3:7B:66:3F:6F:4F:44:72:6D:F1:71:35:96:8C:7F:E6 Authority key identifier: 74:A1:57:D1:3F:3C:74:FF:09:76:AE:A3:4C:78:AA:A9:75:63:04:60 Certificate issuer: /CN=09716e22-4f48-41d8-87e0-e9b48691fcc5 Certificate serial: 010D0C9F4328584F4FBABE42B37F511ACB780F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.mft Manifest number: 010D0C9F4328584073A844991873C60A26AF6B9A Signing time: Sun 27 Sep 2026 07:00:23 +0000 Manifest this update: Sun 27 Sep 2026 07:00:23 +0000 Manifest next update: Wed 30 Sep 2026 07:00:00 +0000 Files and hashes: 1: 09716e22-4f48-41d8-87e0-e9b48691fcc5.crl (hash: /DksKQIeEalosKh9PviWqVg87l64ArPjDpy6kbRENxI=) 2: 6e3018e5-a486-34f5-abce-f0836a28d661.roa (hash: 5Tks9x8grP7HkAKngkk7C6NY/eN3CIqEHEOvxj/b9RY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:ba:be:42:b3:7f:51:1a:cb:78:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09716e22-4f48-41d8-87e0-e9b48691fcc5 Validity Not Before: Sep 27 07:00:23 2026 GMT Not After : Sep 30 07:00:00 2026 GMT Subject: CN=9806aeb4-ec5f-4f42-84e2-4f647ebfd9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:7c:2b:bb:ba:3d:21:d4:ce:6b:26:e5:16: ec:00:fb:12:5d:bf:ab:7e:b1:d5:82:e1:3a:6a:60: 66:74:3a:e8:45:ea:64:46:1a:4d:ea:70:e3:98:f3: 26:19:c4:84:60:78:c1:fd:a5:74:1f:dc:13:d5:4c: 43:39:db:9b:63:dd:bf:d8:e5:af:d1:fd:cf:2c:a5: 84:94:1e:d5:09:3b:f4:16:83:40:7d:a5:35:cd:97: 49:f0:2e:46:c4:12:95:c9:65:97:1f:6a:57:f7:d9: 51:37:19:a2:94:46:97:71:8e:03:48:f9:0c:20:6c: f3:33:c2:f1:a3:fb:20:3d:d5:7c:97:d1:fe:4b:e0: 22:78:28:03:2a:cd:d2:4a:69:2b:dd:01:7f:73:85: 4d:2a:fa:75:97:67:d5:cd:5f:70:6c:17:3a:26:69: 44:ff:e6:9c:5d:97:e6:f5:f2:a0:88:76:ef:9b:17: 13:d8:b3:aa:a6:c9:d1:0a:1f:d6:15:5f:ee:8a:e7: 4e:af:d8:db:ae:9f:1a:c1:60:14:5a:a0:46:7b:70: bd:0f:7f:77:75:51:fd:d2:7c:5e:2a:fa:02:81:0b: 5e:07:eb:d3:34:33:20:31:b5:b6:94:69:8d:e9:95: 12:a5:00:46:21:e9:53:0e:ab:06:75:83:be:e3:00: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A4:45:A4:B3:7B:66:3F:6F:4F:44:72:6D:F1:71:35:96:8C:7F:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.crl X509v3 Authority Key Identifier: keyid:74:A1:57:D1:3F:3C:74:FF:09:76:AE:A3:4C:78:AA:A9:75:63:04:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:5f:b2:e0:12:84:c8:5c:34:f8:4f:31:d0:3d:dc:a2:93:ea: f5:53:54:dd:ce:d3:f3:7e:4c:e3:54:57:d0:3d:69:09:7f:df: 46:64:a2:74:1e:62:79:b1:3b:a3:ac:4e:4a:8c:fb:ea:75:fb: 13:20:7a:98:f4:dd:d5:66:e2:4b:f1:51:1e:f7:f8:84:4f:f3: e4:f0:05:f8:3e:59:25:bf:a5:d7:37:1f:db:c1:c7:b9:04:6c: f0:8a:03:13:0d:7e:29:fe:f0:46:34:76:1a:59:06:dc:bc:7d: 1f:aa:1b:ad:1d:98:bb:2c:dd:cb:eb:b2:8a:41:0c:c1:11:c9: c6:5b:26:d0:88:83:8f:30:f0:5b:38:b1:9c:40:e9:30:11:c3: 43:3e:a8:4a:9b:d6:80:da:3c:8f:52:a6:13:96:cb:e5:61:45: 1b:ae:65:6a:39:95:4f:0e:94:4f:4c:fc:06:98:f2:39:ba:71: 9d:5f:34:f6:4d:42:4a:71:9e:5a:81:55:3d:37:7e:02:f6:7f: 80:20:e2:8f:4e:c3:3f:a8:f7:79:20:79:c6:1e:72:de:45:8c: f5:35:89:96:fe:1d:8e:d5:c6:99:a9:08:c7:88:92:16:49:23: 6c:d7:42:68:d7:27:1c:f0:30:49:26:2b:38:f9:22:17:9e:a0: 51:70:ec:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Pur5Cs39RGst4D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk3MTZlMjItNGY0OC00MWQ4LTg3ZTAtZTliNDg2OTFm Y2M1MB4XDTI2MDkyNzA3MDAyM1oXDTI2MDkzMDA3MDAwMFowLzEtMCsGA1UEAxMk OTgwNmFlYjQtZWM1Zi00ZjQyLTg0ZTItNGY2NDdlYmZkOWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/J8K7u6PSHUzmsm5RbsAPsSXb+rfrHVguE6 amBmdDroRepkRhpN6nDjmPMmGcSEYHjB/aV0H9wT1UxDOdubY92/2OWv0f3PLKWE lB7VCTv0FoNAfaU1zZdJ8C5GxBKVyWWXH2pX99lRNxmilEaXcY4DSPkMIGzzM8Lx o/sgPdV8l9H+S+AieCgDKs3SSmkr3QF/c4VNKvp1l2fVzV9wbBc6JmlE/+acXZfm 9fKgiHbvmxcT2LOqpsnRCh/WFV/uiudOr9jbrp8awWAUWqBGe3C9D393dVH90nxe KvoCgQteB+vTNDMgMbW2lGmN6ZUSpQBGIelTDqsGdYO+4wBo5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGKkRaSze2Y/b09Ecm3xcTWWjH/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOTcx NmUyMi00ZjQ4LTQxZDgtODdlMC1lOWI0ODY5MWZjYzUvMDk3MTZlMjItNGY0OC00 MWQ4LTg3ZTAtZTliNDg2OTFmY2M1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDk3MTZlMjItNGY0OC00MWQ4LTg3 ZTAtZTliNDg2OTFmY2M1LzA5NzE2ZTIyLTRmNDgtNDFkOC04N2UwLWU5YjQ4Njkx ZmNjNS5jcmwwHwYDVR0jBBgwFoAUdKFX0T88dP8Jdq6jTHiqqXVjBGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOTcxNmUyMi00ZjQ4LTQxZDgtODdlMC1lOWI0 ODY5MWZjYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4X7LgEoTIXDT4TzHQPdyi k+r1U1TdztPzfkzjVFfQPWkJf99GZKJ0HmJ5sTujrE5KjPvqdfsTIHqY9N3VZuJL 8VEe9/iET/Pk8AX4Plklv6XXNx/bwce5BGzwigMTDX4p/vBGNHYaWQbcvH0fqhut HZi7LN3L67KKQQzBEcnGWybQiIOPMPBbOLGcQOkwEcNDPqhKm9aA2jyPUqYTlsvl YUUbrmVqOZVPDpRPTPwGmPI5unGdXzT2TUJKcZ5agVU9N34C9n+AIOKPTsM/qPd5 IHnGHnLeRYz1NYmW/h2O1caZqQjHiJIWSSNs10Jo1ycc8DBJJis4+SIXnqBRcOyR -----END CERTIFICATE-----Generated at Sun Sep 27 21:41:01 2026 by rpki-client