$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/f70f0f89-991a-443d-8967-db60c9e20dcf.mft File: f70f0f89-991a-443d-8967-db60c9e20dcf.mft (raw, json) Hash identifier: 0lNytjmHEXP1hfpwUMONNYG7CxjQmkT03dOlcOrd874= Subject key identifier: 48:0E:76:FF:4F:45:C5:03:AE:E9:83:7A:9D:4B:69:B1:7A:DF:35:03 Authority key identifier: FA:37:86:18:99:0E:B4:ED:05:F6:C0:10:36:26:7D:A2:40:3D:0E:96 Certificate issuer: /CN=f70f0f89-991a-443d-8967-db60c9e20dcf Certificate serial: 010D0C9F4328584F4B8AAC09D4000E6842320980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/f70f0f89-991a-443d-8967-db60c9e20dcf.mft Manifest number: 010D0C9F4328584E6F16726741683EF50CCF6051 Signing time: Fri 25 Sep 2026 19:00:23 +0000 Manifest this update: Fri 25 Sep 2026 19:00:23 +0000 Manifest next update: Sun 27 Sep 2026 19:00:00 +0000 Files and hashes: 1: f70f0f89-991a-443d-8967-db60c9e20dcf.crl (hash: 1P6R5BdF16cv9gtikBE7WQiV2yVTFcOL5zmp2qxY55I=) 2: fd9032ca-d665-3c37-8230-07acded087fa.roa (hash: R9kDIJwRNiUQ1lWaIHIgDnQPHuQO1TuxIIikLN3mSPQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/f70f0f89-991a-443d-8967-db60c9e20dcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/f70f0f89-991a-443d-8967-db60c9e20dcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:8a:ac:09:d4:00:0e:68:42:32:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f70f0f89-991a-443d-8967-db60c9e20dcf Validity Not Before: Sep 25 19:00:23 2026 GMT Not After : Sep 27 19:00:00 2026 GMT Subject: CN=b5203a85-afa1-40b6-ba45-c5fd6cc349cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2a:c5:fa:6c:42:27:f6:9b:46:fe:73:86:d7: d0:50:dc:65:95:b7:eb:20:67:c8:e5:87:bb:41:99: ec:98:2b:19:96:d7:05:70:78:02:29:a9:fa:cb:3d: 62:94:d3:82:03:47:d4:d2:24:75:bc:fd:47:10:8e: 81:7e:4a:fc:b2:a6:57:d7:d2:76:d0:3b:49:41:71: 47:38:37:1c:be:89:2f:fa:e6:5f:da:b5:71:81:a4: 30:cc:b1:a6:bf:e8:64:81:5b:63:2e:39:be:6f:18: ed:19:81:41:f4:24:d4:09:fb:3e:4f:50:3c:d0:59: 11:d5:1b:7d:86:06:f5:dd:25:e9:58:ee:4d:9e:3c: 2f:dd:84:28:98:7f:84:4f:39:12:d2:02:03:39:e2: fb:e5:e1:82:7f:76:e4:18:de:c8:36:5b:cc:be:7a: 77:39:a5:d1:ef:5e:8a:3b:c9:6b:b0:7b:30:95:76: 24:67:f2:cf:38:dd:01:22:da:93:96:37:fb:33:37: ae:63:d4:b9:1c:6f:ce:6d:1e:12:d7:bf:60:52:94: 92:79:e6:e7:6d:23:ae:37:d5:42:d4:47:44:f0:c3: 83:ea:58:43:4c:b4:cb:9e:4a:fb:cd:29:3b:87:dd: 71:21:d0:4d:17:67:80:9e:87:4d:e6:74:7a:99:17: e8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0E:76:FF:4F:45:C5:03:AE:E9:83:7A:9D:4B:69:B1:7A:DF:35:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/f70f0f89-991a-443d-8967-db60c9e20dcf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/f70f0f89-991a-443d-8967-db60c9e20dcf.crl X509v3 Authority Key Identifier: keyid:FA:37:86:18:99:0E:B4:ED:05:F6:C0:10:36:26:7D:A2:40:3D:0E:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:48:03:95:2e:86:d7:09:54:d0:39:73:34:1f:b2:f1:bf:3d: f1:21:58:87:09:ae:7d:5c:2f:2c:ab:57:76:05:28:ea:1a:e0: a0:cd:35:65:ef:07:de:7f:fa:2c:9d:3b:b6:6b:4b:db:b5:93: 77:8d:26:7a:61:bf:87:1e:3d:42:6b:3b:b5:f6:6f:15:50:f2: e6:15:18:08:3a:ab:d0:c3:3f:fa:07:45:21:06:c0:4e:d3:47: 2a:76:e4:56:b0:33:73:8b:cc:76:b8:5a:f7:bf:5a:e0:97:c0: 1b:60:c0:26:03:d9:83:c3:86:ca:64:98:9f:a5:cf:70:7a:e1: 88:83:60:c3:3c:3a:21:19:dc:36:a6:1e:9d:e1:39:12:b6:df: ab:8f:e9:6f:22:ac:01:84:c5:b3:e5:d5:8f:f8:81:3d:80:32: f1:ff:db:18:84:12:14:22:f1:28:e8:f9:3a:b1:b6:d3:2d:7a: 56:8a:0b:88:f5:61:77:8b:21:77:df:69:d8:38:9a:f7:e6:5d: da:76:de:b9:d9:44:b3:af:0e:3f:3c:15:3b:90:f8:60:00:68: db:4f:05:3d:65:ab:33:ea:01:74:7f:91:07:62:fd:56:d4:31: cb:8d:14:3d:06:e6:c3:48:7a:af:48:88:8e:71:42:0c:5d:18: 53:c7:27:fa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9LiqwJ1AAOaEIyCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcwZjBmODktOTkxYS00NDNkLTg5NjctZGI2MGM5ZTIw ZGNmMB4XDTI2MDkyNTE5MDAyM1oXDTI2MDkyNzE5MDAwMFowLzEtMCsGA1UEAxMk YjUyMDNhODUtYWZhMS00MGI2LWJhNDUtYzVmZDZjYzM0OWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSrF+mxCJ/abRv5zhtfQUNxllbfrIGfI5Ye7 QZnsmCsZltcFcHgCKan6yz1ilNOCA0fU0iR1vP1HEI6Bfkr8sqZX19J20DtJQXFH ODccvokv+uZf2rVxgaQwzLGmv+hkgVtjLjm+bxjtGYFB9CTUCfs+T1A80FkR1Rt9 hgb13SXpWO5Nnjwv3YQomH+ETzkS0gIDOeL75eGCf3bkGN7INlvMvnp3OaXR716K O8lrsHswlXYkZ/LPON0BItqTljf7MzeuY9S5HG/ObR4S179gUpSSeebnbSOuN9VC 1EdE8MOD6lhDTLTLnkr7zSk7h91xIdBNF2eAnodN5nR6mRfoaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEgOdv9PRcUDrumDep1LabF63zUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNzBm MGY4OS05OTFhLTQ0M2QtODk2Ny1kYjYwYzllMjBkY2YvZjcwZjBmODktOTkxYS00 NDNkLTg5NjctZGI2MGM5ZTIwZGNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjcwZjBmODktOTkxYS00NDNkLTg5 NjctZGI2MGM5ZTIwZGNmL2Y3MGYwZjg5LTk5MWEtNDQzZC04OTY3LWRiNjBjOWUy MGRjZi5jcmwwHwYDVR0jBBgwFoAU+jeGGJkOtO0F9sAQNiZ9okA9DpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNzBmMGY4OS05OTFhLTQ0M2QtODk2Ny1kYjYw YzllMjBkY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCnSAOVLobXCVTQOXM0H7Lx vz3xIViHCa59XC8sq1d2BSjqGuCgzTVl7wfef/osnTu2a0vbtZN3jSZ6Yb+HHj1C azu19m8VUPLmFRgIOqvQwz/6B0UhBsBO00cqduRWsDNzi8x2uFr3v1rgl8AbYMAm A9mDw4bKZJifpc9weuGIg2DDPDohGdw2ph6d4TkStt+rj+lvIqwBhMWz5dWP+IE9 gDLx/9sYhBIUIvEo6Pk6sbbTLXpWiguI9WF3iyF332nYOJr35l3adt652USzrw4/ PBU7kPhgAGjbTwU9Zasz6gF0f5EHYv1W1DHLjRQ9BubDSHqvSIiOcUIMXRhTxyf6 -----END CERTIFICATE-----Generated at Sat Sep 26 13:07:20 2026 by rpki-client