$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft File: 252aff2f-9807-45d4-ba31-1a3198784cae.mft (raw, json) Hash identifier: GPF6ccp6OedmonVPlgiWSX/qMgkYm/cIz31MjfwyEZ4= Subject key identifier: 65:70:BA:BB:EB:7D:3B:67:07:7D:93:C9:DB:50:4B:56:E1:86:DB:D3 Authority key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Certificate issuer: /CN=252aff2f-9807-45d4-ba31-1a3198784cae Certificate serial: 010D0C9F4328584F4B3161ECB9E40DEBEDD17200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft Manifest number: 010D0C9F4328584AAE4DC59D07CE7A5E6AC03032 Signing time: Fri 25 Sep 2026 16:00:24 +0000 Manifest this update: Fri 25 Sep 2026 16:00:24 +0000 Manifest next update: Sun 27 Sep 2026 16:00:00 +0000 Files and hashes: 1: 252aff2f-9807-45d4-ba31-1a3198784cae.crl (hash: Wnb7ISXHUsmoNkvpWOq15ERjqO4YEPgsXTnhtsx1ilM=) 2: 3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa (hash: 9eW2gYvf7hO1+Ae+eXt/ySeVilRPM6BdltXwQtPNlCs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:31:61:ec:b9:e4:0d:eb:ed:d1:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252aff2f-9807-45d4-ba31-1a3198784cae Validity Not Before: Sep 25 16:00:24 2026 GMT Not After : Sep 27 16:00:00 2026 GMT Subject: CN=f90ee611-8a4f-4b49-97cf-84946d5daa21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b3:c7:89:f9:0e:5a:ed:62:49:87:82:6d:65: ef:04:2b:73:a8:87:37:12:6e:3a:77:72:98:47:b1: 69:16:d7:be:16:e7:9a:56:51:7e:f1:7c:7e:ee:99: 2c:e5:7e:6a:6a:0e:e4:00:55:06:00:51:3e:a7:9b: b1:45:4c:1b:9f:f1:39:76:95:42:11:18:48:0e:ea: 48:a4:3d:06:aa:1e:c7:17:06:47:94:00:a7:fe:c4: 5a:62:12:a7:18:cc:fb:25:67:31:38:de:11:5b:e0: c6:a9:21:7f:79:d4:9b:d9:4c:da:99:d6:2d:79:f2: c8:22:ae:0c:a4:37:1b:fe:eb:48:05:af:ad:97:95: 2d:b5:1e:10:35:9c:1f:36:ff:dd:2c:d1:11:ff:a2: 21:02:74:1e:b2:71:07:1a:fc:3c:cd:3f:e8:65:b3: d9:66:7d:a7:cd:9c:d9:44:7b:83:f6:55:09:f3:ef: a3:34:99:59:18:00:b6:3b:9b:15:6b:7e:12:b0:e7: 4b:53:9f:d2:f9:f1:7d:69:c3:a4:89:73:fd:5d:9a: 82:12:29:83:31:2f:88:39:a0:c4:96:5e:46:ca:06: d3:a1:47:d3:a3:f9:eb:f7:e8:67:ba:78:c6:4b:03: 2b:8a:19:86:7e:b9:9c:09:71:ae:d5:28:59:10:d4: 01:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:70:BA:BB:EB:7D:3B:67:07:7D:93:C9:DB:50:4B:56:E1:86:DB:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl X509v3 Authority Key Identifier: keyid:65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:c9:5d:00:b4:b2:87:09:e6:2e:25:cb:f9:6b:ff:d3:e2:c8: b6:ce:5f:f3:57:d7:97:2c:49:c3:75:d8:11:be:b9:ba:b3:92: 8c:1e:94:36:df:e3:e5:4b:56:b7:d1:60:65:0f:c9:37:70:1f: 1d:e6:49:89:a2:a3:cc:c2:58:18:a0:7a:05:02:3a:f1:48:d3: 65:d7:8c:c6:2b:9f:12:ed:b3:5a:3a:1e:28:dd:fb:b3:4a:3b: 09:4a:a5:cc:a7:f3:7b:ad:ea:83:5e:6e:21:d8:70:f6:af:4a: 0a:66:3a:05:87:8e:52:ca:bb:cf:ec:55:bc:bc:c4:5d:9a:d3: a4:fd:12:10:4c:97:44:48:d6:7e:02:dc:ed:41:c8:d1:50:33: 40:29:a1:37:1c:68:45:a8:ed:c3:8b:b5:91:98:bd:31:7b:ed: 69:0f:38:81:a6:90:05:1d:4d:0e:2a:39:a7:01:8b:5a:a1:16: 4d:4f:20:a9:4b:57:59:30:89:35:a2:c2:d3:7f:92:99:6e:f3: cd:e8:3e:bb:0a:e5:58:0d:9d:1b:93:eb:9e:27:49:4e:a8:59: 21:83:c0:b2:9c:b5:63:41:9d:98:25:8c:96:e1:73:32:a3:a9: a1:4b:ea:53:bc:23:ca:07:b2:85:08:7f:f4:b5:35:b7:da:74: 65:74:fc:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9LMWHsueQN6+3RcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0 Y2FlMB4XDTI2MDkyNTE2MDAyNFoXDTI2MDkyNzE2MDAwMFowLzEtMCsGA1UEAxMk ZjkwZWU2MTEtOGE0Zi00YjQ5LTk3Y2YtODQ5NDZkNWRhYTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibPHifkOWu1iSYeCbWXvBCtzqIc3Em46d3KY R7FpFte+FueaVlF+8Xx+7pks5X5qag7kAFUGAFE+p5uxRUwbn/E5dpVCERhIDupI pD0Gqh7HFwZHlACn/sRaYhKnGMz7JWcxON4RW+DGqSF/edSb2UzamdYtefLIIq4M pDcb/utIBa+tl5UttR4QNZwfNv/dLNER/6IhAnQesnEHGvw8zT/oZbPZZn2nzZzZ RHuD9lUJ8++jNJlZGAC2O5sVa34SsOdLU5/S+fF9acOkiXP9XZqCEimDMS+IOaDE ll5GygbToUfTo/nr9+hnunjGSwMrihmGfrmcCXGu1ShZENQBMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGVwurvrfTtnB32TydtQS1bhhtvTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJh ZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMjUyYWZmMmYtOTgwNy00 NWQ0LWJhMzEtMWEzMTk4Nzg0Y2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjUyYWZmMmYtOTgwNy00NWQ0LWJh MzEtMWEzMTk4Nzg0Y2FlLzI1MmFmZjJmLTk4MDctNDVkNC1iYTMxLTFhMzE5ODc4 NGNhZS5jcmwwHwYDVR0jBBgwFoAUZSE6O0Ut8zOSXdcWgwwxMHr4mMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMx OTg3ODRjYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyyV0AtLKHCeYuJcv5a//T 4si2zl/zV9eXLEnDddgRvrm6s5KMHpQ23+PlS1a30WBlD8k3cB8d5kmJoqPMwlgY oHoFAjrxSNNl14zGK58S7bNaOh4o3fuzSjsJSqXMp/N7reqDXm4h2HD2r0oKZjoF h45SyrvP7FW8vMRdmtOk/RIQTJdESNZ+AtztQcjRUDNAKaE3HGhFqO3Di7WRmL0x e+1pDziBppAFHU0OKjmnAYtaoRZNTyCpS1dZMIk1osLTf5KZbvPN6D67CuVYDZ0b k+ueJ0lOqFkhg8CynLVjQZ2YJYyW4XMyo6mhS+pTvCPKB7KFCH/0tTW32nRldPxw -----END CERTIFICATE-----Generated at Sat Sep 26 17:11:57 2026 by rpki-client