$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1.mft File: a72dcdff-e7ee-463b-a8f8-7820a8e69ef1.mft (raw, json) Hash identifier: dOWyKOL1rITZVz7yQ8BGvr/ABCMng1rAJnLp0eZgo9w= Subject key identifier: B0:73:7B:04:46:7E:25:8D:15:66:A4:46:53:11:89:84:D3:E7:CC:26 Authority key identifier: 16:D4:4B:1D:01:53:1D:FD:D0:F6:75:CF:FF:63:71:34:9D:93:7C:D3 Certificate issuer: /CN=a72dcdff-e7ee-463b-a8f8-7820a8e69ef1 Certificate serial: 010D0C9F4328584FC8D22B0B666281301A5A8E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1.mft Manifest number: 010D0C9F4328584F910C5BDB78016B672D7646A5 Signing time: Mon 09 Nov 2026 16:00:23 +0000 Manifest this update: Mon 09 Nov 2026 16:00:23 +0000 Manifest next update: Thu 12 Nov 2026 16:00:00 +0000 Files and hashes: 1: a72dcdff-e7ee-463b-a8f8-7820a8e69ef1.crl (hash: gtPVDWcvnElF6fkYIv62is52NibCgbM6L5WQE3OIHUQ=) 2: ad4f3054-b72a-3b7e-977f-ae973c3b9798.roa (hash: kCUIy1kZMuuZ7BKpVPEOFdQ7q3EnNcMRQzPkPsmdPyk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c8:d2:2b:0b:66:62:81:30:1a:5a:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a72dcdff-e7ee-463b-a8f8-7820a8e69ef1 Validity Not Before: Nov 9 16:00:23 2026 GMT Not After : Nov 12 16:00:00 2026 GMT Subject: CN=befc390a-18b6-46b1-82e0-48fe4981bcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:89:2c:18:a8:7f:25:39:f2:58:36:a8:a6:28: c1:3d:a0:60:17:e3:b4:6a:b6:3c:a7:63:06:c6:2e: 30:eb:44:33:1b:7c:e7:c2:24:84:e6:d2:8a:c5:8f: d3:c7:04:fd:68:75:40:84:f2:ea:ed:80:56:4b:74: 2b:f2:33:46:38:0e:b2:06:b8:31:d9:a3:77:47:e0: 02:ea:61:43:bb:4a:0d:0a:c8:66:e3:c5:7a:ad:11: fa:7a:77:59:6e:24:5d:b0:30:2f:68:19:6a:8a:12: de:ac:0e:b7:da:27:80:c3:8a:00:37:26:3a:33:f2: 33:dd:59:8d:5f:b8:29:50:f7:1d:5f:37:53:7b:2d: cd:89:ec:50:cf:00:b9:59:89:b7:ae:4f:8b:81:a7: 89:cf:36:c3:b7:16:6c:20:cd:13:0d:19:2b:91:72: 01:0c:ba:50:6c:ba:21:5d:f1:4d:1a:ed:c3:f0:cb: d5:e0:28:0a:a6:72:75:81:5e:d3:a4:c9:b8:11:ee: d3:cc:4c:96:f0:b9:cb:81:33:79:b1:52:5a:82:1f: 2c:64:dd:78:b4:8b:fc:e6:0f:29:3b:39:b5:ce:02: 6a:bc:45:da:8d:02:50:93:06:f7:61:28:7a:8e:20: 30:d8:42:b1:2e:c6:24:d2:63:dd:25:e8:9a:66:31: 15:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:73:7B:04:46:7E:25:8D:15:66:A4:46:53:11:89:84:D3:E7:CC:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1.crl X509v3 Authority Key Identifier: keyid:16:D4:4B:1D:01:53:1D:FD:D0:F6:75:CF:FF:63:71:34:9D:93:7C:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a72dcdff-e7ee-463b-a8f8-7820a8e69ef1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:26:e2:d5:79:cd:ef:82:af:83:4d:ab:0d:a3:84:2a:87:da: 09:c1:90:19:e0:fd:e0:82:cf:7b:00:56:b1:7f:89:c6:74:fe: 79:8b:46:ae:1c:b9:52:89:d8:88:1f:cc:42:85:dc:a3:da:f5: 24:44:b6:4f:c1:4c:33:c0:a4:de:fe:72:49:da:10:f3:7b:02: 98:72:54:30:d3:6a:85:b4:5c:5a:bb:37:a6:c0:80:c9:d5:60: cf:fa:81:24:32:fe:c3:86:db:17:fb:71:5b:d0:1f:23:3a:30: de:ad:d9:8e:64:35:a9:50:56:12:59:04:c2:4a:10:bd:75:48: d9:a3:18:1f:fb:b5:40:57:12:f7:ec:a9:9d:88:20:5e:30:35: 5b:fa:01:07:ac:41:09:10:3e:c0:c2:d9:8f:64:7f:88:36:b3: 39:14:4e:0a:58:13:68:f1:6e:82:e7:0b:c3:f4:4c:4b:5b:2a: 99:53:66:b2:e1:a6:90:98:b5:6c:70:cc:01:a8:97:7a:cd:90: 0f:6a:60:b5:26:e6:36:5e:3a:51:62:d6:8e:30:05:2f:ea:29: 1e:d2:62:56:be:99:fa:db:8b:6a:bc:ac:06:ca:41:86:09:23: fe:52:45:c0:f9:09:df:f8:2c:d1:63:03:fa:94:6e:83:d6:53: 26:90:bd:54 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/I0isLZmKBMBpajgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcyZGNkZmYtZTdlZS00NjNiLWE4ZjgtNzgyMGE4ZTY5 ZWYxMB4XDTI2MTEwOTE2MDAyM1oXDTI2MTExMjE2MDAwMFowLzEtMCsGA1UEAxMk YmVmYzM5MGEtMThiNi00NmIxLTgyZTAtNDhmZTQ5ODFiY2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloksGKh/JTnyWDaopijBPaBgF+O0arY8p2MG xi4w60QzG3znwiSE5tKKxY/TxwT9aHVAhPLq7YBWS3Qr8jNGOA6yBrgx2aN3R+AC 6mFDu0oNCshm48V6rRH6endZbiRdsDAvaBlqihLerA632ieAw4oANyY6M/Iz3VmN X7gpUPcdXzdTey3NiexQzwC5WYm3rk+LgaeJzzbDtxZsIM0TDRkrkXIBDLpQbLoh XfFNGu3D8MvV4CgKpnJ1gV7TpMm4Ee7TzEyW8LnLgTN5sVJagh8sZN14tIv85g8p Ozm1zgJqvEXajQJQkwb3YSh6jiAw2EKxLsYk0mPdJeiaZjEVLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLBzewRGfiWNFWakRlMRiYTT58wmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9hNzJk Y2RmZi1lN2VlLTQ2M2ItYThmOC03ODIwYThlNjllZjEvYTcyZGNkZmYtZTdlZS00 NjNiLWE4ZjgtNzgyMGE4ZTY5ZWYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYTcyZGNkZmYtZTdlZS00NjNiLWE4 ZjgtNzgyMGE4ZTY5ZWYxL2E3MmRjZGZmLWU3ZWUtNDYzYi1hOGY4LTc4MjBhOGU2 OWVmMS5jcmwwHwYDVR0jBBgwFoAUFtRLHQFTHf3Q9nXP/2NxNJ2TfNMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9hNzJkY2RmZi1lN2VlLTQ2M2ItYThmOC03ODIw YThlNjllZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgJuLVec3vgq+DTasNo4Qq h9oJwZAZ4P3ggs97AFaxf4nGdP55i0auHLlSidiIH8xChdyj2vUkRLZPwUwzwKTe /nJJ2hDzewKYclQw02qFtFxauzemwIDJ1WDP+oEkMv7DhtsX+3Fb0B8jOjDerdmO ZDWpUFYSWQTCShC9dUjZoxgf+7VAVxL37KmdiCBeMDVb+gEHrEEJED7AwtmPZH+I NrM5FE4KWBNo8W6C5wvD9ExLWyqZU2ay4aaQmLVscMwBqJd6zZAPamC1JuY2XjpR YtaOMAUv6ike0mJWvpn624tqvKwGykGGCSP+UkXA+Qnf+CzRYwP6lG6D1lMmkL1U -----END CERTIFICATE-----Generated at Tue Nov 10 17:13:11 2026 by rpki-client