$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.mft File: a11e93e6-ff05-4cb5-ad52-34caa087b7b3.mft (raw, json) Hash identifier: nlPNo5ZH/qm6nUR39ZC1wGozzqUMDn/FW7RhVXNvK08= Subject key identifier: 89:BF:14:42:F8:87:91:F9:85:E6:A7:33:EF:26:15:F6:5C:8A:6B:AA Authority key identifier: 08:09:C9:3C:04:70:4F:15:96:45:EE:2F:5D:45:5B:62:14:2C:15:8D Certificate issuer: /CN=a11e93e6-ff05-4cb5-ad52-34caa087b7b3 Certificate serial: 010D0C9F4328584F49CBFED3E3D8E3DDAB32CC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.mft Manifest number: 010D0C9F4328584A8E39E825199DF5134A73AFBC Signing time: Fri 25 Sep 2026 04:00:23 +0000 Manifest this update: Fri 25 Sep 2026 04:00:23 +0000 Manifest next update: Mon 28 Sep 2026 04:00:00 +0000 Files and hashes: 1: 86edd263-fed6-3415-a24f-5e67b707402e.roa (hash: 2ItzDFmUoys4Zy9AYIJLWHx0NhjGe7/om7Acu597boU=) 2: a11e93e6-ff05-4cb5-ad52-34caa087b7b3.crl (hash: BcpvUYYsIkhiwuIioh7zKp27peH3r6r3rYNpxt2Y2OY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:cb:fe:d3:e3:d8:e3:dd:ab:32:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a11e93e6-ff05-4cb5-ad52-34caa087b7b3 Validity Not Before: Sep 25 04:00:23 2026 GMT Not After : Sep 28 04:00:00 2026 GMT Subject: CN=c267423a-b085-4dab-a363-168225f68a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c7:f3:ad:aa:a0:2b:49:44:11:0d:d6:8c:76: 30:d0:e6:6f:2f:18:1c:b3:02:0c:c5:39:24:ce:5a: f8:74:0e:54:cd:c4:9e:6a:f1:22:95:e4:01:62:57: 6d:a3:41:58:e4:10:fa:9f:6c:94:1f:47:b4:58:0c: 05:3f:57:92:68:71:7d:a8:05:f4:8e:28:1f:81:a0: 1d:c8:da:ed:f6:59:c0:fe:5b:8a:50:d5:4c:68:c8: 50:61:4a:9a:2e:e5:27:65:7b:0b:e8:9d:22:b7:0e: 97:eb:8a:6f:27:ac:a1:a5:bc:9d:df:d5:6c:6a:27: fe:5a:25:e5:ed:eb:00:48:70:43:c0:70:75:24:cc: c6:a5:89:fc:b4:48:87:ec:1f:7d:3c:c2:b4:ca:28: 21:40:48:c3:d5:ab:4a:18:b4:c9:7a:6b:0e:c5:9f: 0f:25:c1:ec:de:60:94:66:c0:4b:47:16:df:b0:ae: 93:a2:30:c6:23:12:01:ac:97:e3:b7:e0:0e:f9:c2: db:5c:10:c6:8d:b7:96:df:1b:8c:0a:c6:9a:c8:71: 2f:86:0f:bd:4c:8d:58:0b:40:f8:b0:35:21:ef:4c: a4:4d:e1:5e:aa:36:c8:11:3d:81:34:39:9f:16:9a: 91:ca:cb:9e:d4:bd:4c:08:32:b0:50:88:bd:05:7d: 65:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BF:14:42:F8:87:91:F9:85:E6:A7:33:EF:26:15:F6:5C:8A:6B:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.crl X509v3 Authority Key Identifier: keyid:08:09:C9:3C:04:70:4F:15:96:45:EE:2F:5D:45:5B:62:14:2C:15:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:7f:99:af:b9:8e:74:3b:e7:c8:46:5b:80:54:9d:38:87:99: 35:22:77:09:8f:97:18:a1:a4:c8:aa:e8:29:c6:c3:1c:3d:82: f8:73:56:c3:bd:4b:c9:c6:19:4c:32:24:28:d5:4e:1e:a7:e4: e8:2e:64:58:47:09:27:03:10:44:bf:c4:05:fd:7b:2d:58:ac: 92:7f:3b:93:bf:36:d4:07:e3:17:8f:6d:bb:bc:dd:42:a9:2b: c1:fa:11:2e:6c:d1:82:a3:37:87:4c:dd:33:64:19:e1:fa:8c: f9:11:45:a9:b6:dc:2f:d1:ba:aa:67:3f:73:fa:72:32:ed:66: 7c:85:b3:50:20:57:16:82:7c:68:51:e5:24:44:93:ff:21:70: 0c:98:53:44:ae:79:0c:46:67:3c:94:0b:f6:ed:fd:e4:1c:9b: f3:dd:73:3a:dd:6a:3f:5c:8b:5e:bf:53:3e:ec:f8:7c:12:33: dd:cc:f9:dd:1d:e9:57:dc:9e:39:19:f9:68:6b:78:46:4b:bd: 9c:0c:3f:90:52:4f:38:61:14:82:78:02:5a:1f:4f:fc:f2:c5: c1:7f:01:9f:99:f9:81:d3:a2:25:cf:05:67:bb:dd:7a:91:27: 6c:06:ba:04:57:ee:0a:7a:ac:c4:0e:b3:d5:4e:d7:5e:3a:8a: 83:f2:80:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Jy/7T49jj3asyzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTExZTkzZTYtZmYwNS00Y2I1LWFkNTItMzRjYWEwODdi N2IzMB4XDTI2MDkyNTA0MDAyM1oXDTI2MDkyODA0MDAwMFowLzEtMCsGA1UEAxMk YzI2NzQyM2EtYjA4NS00ZGFiLWEzNjMtMTY4MjI1ZjY4YTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsfzraqgK0lEEQ3WjHYw0OZvLxgcswIMxTkk zlr4dA5UzcSeavEileQBYldto0FY5BD6n2yUH0e0WAwFP1eSaHF9qAX0jigfgaAd yNrt9lnA/luKUNVMaMhQYUqaLuUnZXsL6J0itw6X64pvJ6yhpbyd39Vsaif+WiXl 7esASHBDwHB1JMzGpYn8tEiH7B99PMK0yighQEjD1atKGLTJemsOxZ8PJcHs3mCU ZsBLRxbfsK6TojDGIxIBrJfjt+AO+cLbXBDGjbeW3xuMCsaayHEvhg+9TI1YC0D4 sDUh70ykTeFeqjbIET2BNDmfFpqRysue1L1MCDKwUIi9BX1lJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIm/FEL4h5H5heanM+8mFfZcimuqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMTFl OTNlNi1mZjA1LTRjYjUtYWQ1Mi0zNGNhYTA4N2I3YjMvYTExZTkzZTYtZmYwNS00 Y2I1LWFkNTItMzRjYWEwODdiN2IzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTExZTkzZTYtZmYwNS00Y2I1LWFk NTItMzRjYWEwODdiN2IzL2ExMWU5M2U2LWZmMDUtNGNiNS1hZDUyLTM0Y2FhMDg3 YjdiMy5jcmwwHwYDVR0jBBgwFoAUCAnJPARwTxWWRe4vXUVbYhQsFY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMTFlOTNlNi1mZjA1LTRjYjUtYWQ1Mi0zNGNh YTA4N2I3YjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzf5mvuY50O+fIRluAVJ04 h5k1IncJj5cYoaTIqugpxsMcPYL4c1bDvUvJxhlMMiQo1U4ep+ToLmRYRwknAxBE v8QF/XstWKySfzuTvzbUB+MXj227vN1CqSvB+hEubNGCozeHTN0zZBnh+oz5EUWp ttwv0bqqZz9z+nIy7WZ8hbNQIFcWgnxoUeUkRJP/IXAMmFNErnkMRmc8lAv27f3k HJvz3XM63Wo/XItev1M+7Ph8EjPdzPndHelX3J45Gfloa3hGS72cDD+QUk84YRSC eAJaH0/88sXBfwGfmfmB06IlzwVnu916kSdsBroEV+4KeqzEDrPVTtdeOoqD8oCm -----END CERTIFICATE-----Generated at Fri Sep 25 13:10:18 2026 by rpki-client