$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.mft File: 2a604bed-acbd-4708-aa13-73f700eaabf6.mft (raw, json) Hash identifier: vXtHezZc+UyGiDCtVg/oSNc/VNWN/F1yhS3AjAmgsRM= Subject key identifier: 7E:BD:98:67:A9:4C:47:B6:EC:72:4A:50:35:6E:0C:E7:6F:F8:36:57 Authority key identifier: 6C:57:E2:66:32:44:4A:B5:CE:A5:FA:DF:68:97:DC:BB:59:81:95:63 Certificate issuer: /CN=2a604bed-acbd-4708-aa13-73f700eaabf6 Certificate serial: 010D0C9F4328584F4B13A1F9E7D33F2D38D3F0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.mft Manifest number: 010D0C9F4328584073A857F838F4DBE70B52BFC3 Signing time: Fri 25 Sep 2026 15:00:24 +0000 Manifest this update: Fri 25 Sep 2026 15:00:24 +0000 Manifest next update: Mon 28 Sep 2026 15:00:00 +0000 Files and hashes: 1: 2a604bed-acbd-4708-aa13-73f700eaabf6.crl (hash: nOMpwgZaNvraFccLuus2/lAEfpJVY34NhqbMVgyrU7Q=) 2: 9441ac5d-8038-3804-a070-de79dbd3c348.roa (hash: YQpSPyLiq2822SOLvQ4+nW6aOfHfb3TzHxR6Z1ed0Gc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:13:a1:f9:e7:d3:3f:2d:38:d3:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a604bed-acbd-4708-aa13-73f700eaabf6 Validity Not Before: Sep 25 15:00:24 2026 GMT Not After : Sep 28 15:00:00 2026 GMT Subject: CN=1b28dc7a-4f92-4783-8cc1-a3f58d4165df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4b:75:9f:1b:14:6e:4d:37:25:2e:bc:02:e8: 6d:5b:f8:30:7e:bd:0c:d0:f4:43:c1:8f:35:b9:0e: 0e:c8:b1:8c:57:e9:c7:19:ad:94:e3:84:f5:7d:84: 5f:73:a4:61:aa:81:ef:6b:a7:2b:2f:5d:f8:32:69: 18:34:92:93:45:e6:0a:ab:a9:45:59:80:95:64:a7: 88:7b:33:0c:d0:42:41:4e:94:e6:a4:8d:81:d1:50: b5:35:3a:76:bc:a0:d9:7f:36:f0:b2:be:e6:f1:9a: c5:16:b4:a5:49:c4:f3:ca:e2:bb:4e:89:bc:4e:2f: 2f:8c:a7:e9:1b:e5:82:f6:57:69:64:f8:fb:dc:8a: 84:20:3d:25:d6:11:14:84:9c:c4:0f:0b:f5:e4:55: c3:c5:9a:dd:46:e0:a8:dc:e3:89:a8:50:74:0c:86: f0:ae:6b:cf:87:64:84:a1:58:02:24:e4:2d:71:c9: 4a:a5:ea:ce:07:85:72:d7:55:f1:6a:ab:23:09:0f: 5e:f2:96:07:26:33:21:41:ab:20:00:15:c4:49:d8: 8c:85:d8:7d:d7:1b:04:c4:66:5c:79:a0:03:8e:be: 12:4c:3b:bb:4c:19:f4:08:48:71:b5:15:a1:b6:ae: ad:93:aa:3a:35:5a:12:85:a5:23:05:6a:11:ac:05: 37:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BD:98:67:A9:4C:47:B6:EC:72:4A:50:35:6E:0C:E7:6F:F8:36:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.crl X509v3 Authority Key Identifier: keyid:6C:57:E2:66:32:44:4A:B5:CE:A5:FA:DF:68:97:DC:BB:59:81:95:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d7:0e:3c:5c:24:03:cc:cf:be:92:18:4a:ae:90:1e:c0:7a: 2b:46:27:68:2f:b7:c2:32:63:7d:83:0e:dc:99:c0:52:af:20: 78:fc:c4:ee:34:22:a1:f9:a7:be:60:b9:11:13:dc:c7:1b:57: b4:24:ca:19:0a:65:9d:e2:89:7b:9b:6d:95:01:b1:9c:45:80: 56:34:60:b5:b5:24:51:4e:3a:0f:d6:60:9f:da:ee:88:c8:8d: a0:4a:0c:05:55:2a:40:60:65:c7:9b:c1:49:cd:65:43:e5:41: 2d:dd:34:7a:0f:b5:86:3f:18:dd:92:11:f8:cb:7e:02:bb:98: b8:dc:49:0c:4c:2b:3d:ef:dd:d8:7e:3c:71:67:c2:f7:9f:47: aa:04:3c:f8:99:75:fa:98:8c:b2:b2:50:aa:ea:bd:66:b8:c1: 5d:27:d9:c3:4b:30:4b:01:9b:80:12:f4:9c:44:a1:a9:39:c8: f8:2d:79:3e:1e:fc:31:f9:6f:b4:f8:82:b5:66:27:08:f7:34: 45:02:59:98:c5:7c:cd:9a:c0:3e:2a:dc:0f:33:59:a3:5d:d7: 30:b9:76:8b:25:21:f6:49:a2:47:dd:9a:c0:b6:00:3e:00:04: 9a:fc:f4:fe:40:b0:45:14:a6:e3:8f:9d:7b:46:d2:05:bd:45: b8:fd:cf:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9LE6H559M/LTjT8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE2MDRiZWQtYWNiZC00NzA4LWFhMTMtNzNmNzAwZWFh YmY2MB4XDTI2MDkyNTE1MDAyNFoXDTI2MDkyODE1MDAwMFowLzEtMCsGA1UEAxMk MWIyOGRjN2EtNGY5Mi00NzgzLThjYzEtYTNmNThkNDE2NWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikt1nxsUbk03JS68AuhtW/gwfr0M0PRDwY81 uQ4OyLGMV+nHGa2U44T1fYRfc6RhqoHva6crL134MmkYNJKTReYKq6lFWYCVZKeI ezMM0EJBTpTmpI2B0VC1NTp2vKDZfzbwsr7m8ZrFFrSlScTzyuK7Tom8Ti8vjKfp G+WC9ldpZPj73IqEID0l1hEUhJzEDwv15FXDxZrdRuCo3OOJqFB0DIbwrmvPh2SE oVgCJOQtcclKperOB4Vy11XxaqsjCQ9e8pYHJjMhQasgABXESdiMhdh91xsExGZc eaADjr4STDu7TBn0CEhxtRWhtq6tk6o6NVoShaUjBWoRrAU3fQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH69mGepTEe27HJKUDVuDOdv+DZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTYw NGJlZC1hY2JkLTQ3MDgtYWExMy03M2Y3MDBlYWFiZjYvMmE2MDRiZWQtYWNiZC00 NzA4LWFhMTMtNzNmNzAwZWFhYmY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE2MDRiZWQtYWNiZC00NzA4LWFh MTMtNzNmNzAwZWFhYmY2LzJhNjA0YmVkLWFjYmQtNDcwOC1hYTEzLTczZjcwMGVh YWJmNi5jcmwwHwYDVR0jBBgwFoAUbFfiZjJESrXOpfrfaJfcu1mBlWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTYwNGJlZC1hY2JkLTQ3MDgtYWExMy03M2Y3 MDBlYWFiZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCT1w48XCQDzM++khhKrpAe wHorRidoL7fCMmN9gw7cmcBSryB4/MTuNCKh+ae+YLkRE9zHG1e0JMoZCmWd4ol7 m22VAbGcRYBWNGC1tSRRTjoP1mCf2u6IyI2gSgwFVSpAYGXHm8FJzWVD5UEt3TR6 D7WGPxjdkhH4y34Cu5i43EkMTCs9793YfjxxZ8L3n0eqBDz4mXX6mIyyslCq6r1m uMFdJ9nDSzBLAZuAEvScRKGpOcj4LXk+Hvwx+W+0+IK1ZicI9zRFAlmYxXzNmsA+ KtwPM1mjXdcwuXaLJSH2SaJH3ZrAtgA+AASa/PT+QLBFFKbjj517RtIFvUW4/c/L -----END CERTIFICATE-----Generated at Sat Sep 26 06:58:19 2026 by rpki-client