$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.mft File: 25b98849-0471-48f0-9db6-e4f6b59aa178.mft (raw, json) Hash identifier: wwu3hLfoJxkt0LmGDXIpzDWhq0x6IArxLhwe6TlJKyM= Subject key identifier: A5:24:3A:9E:1C:34:C4:25:81:59:7D:26:21:8D:F6:F6:81:FF:17:11 Authority key identifier: B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C Certificate issuer: /CN=25b98849-0471-48f0-9db6-e4f6b59aa178 Certificate serial: 010D0C9F4328584F3B061EC12320CD09AE22ABC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.mft Manifest number: 010D0C9F432858452791A931064DC953475D8C48 Signing time: Sat 19 Sep 2026 21:00:22 +0000 Manifest this update: Sat 19 Sep 2026 21:00:22 +0000 Manifest next update: Tue 22 Sep 2026 21:00:00 +0000 Files and hashes: 1: 25b98849-0471-48f0-9db6-e4f6b59aa178.crl (hash: qO8fB1qT0OQASiHPjSkOBkeMI8Brh/hXuOGqv8vLyw8=) 2: e8f13100-d644-3a83-b082-19ac1aaf66a9.roa (hash: +JDaHEKRPzz8M9/2/4bkjxC7/hqJprabyqtkCw1MCPk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:06:1e:c1:23:20:cd:09:ae:22:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b98849-0471-48f0-9db6-e4f6b59aa178 Validity Not Before: Sep 19 21:00:22 2026 GMT Not After : Sep 22 21:00:00 2026 GMT Subject: CN=16958e93-4160-4ba5-b9c3-a8ea6a0ea2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9c:2f:db:88:4b:b3:23:5b:b6:48:e4:5e:9c: cd:a7:c1:0d:13:ad:04:d2:02:6c:39:79:0d:c4:ee: f6:7e:be:c8:b7:f1:a8:d9:03:3c:be:57:e4:bb:65: 95:91:62:62:20:28:d9:bb:c2:c7:84:67:55:0f:8f: e4:0b:f6:13:1f:d1:fb:b6:26:7f:10:3b:82:5f:52: 73:cf:53:cb:66:a9:7e:d0:ce:e7:8b:89:e1:0f:1a: 8d:90:c3:7c:b9:fe:0b:8b:d9:a0:08:13:5b:f7:54: 19:34:9a:f7:97:3c:3c:5b:07:e2:af:ad:1d:09:26: 27:65:62:90:f2:21:92:db:e7:9d:71:cf:cb:d6:aa: 0d:f8:66:ff:b9:09:7a:37:8c:4c:a8:e3:bd:69:af: 44:6d:97:06:9c:b6:3e:26:6a:19:bc:f7:ea:ff:61: 5a:67:34:3e:8a:21:c3:2a:a2:ed:a5:be:f9:ff:d2: 0b:b4:e5:67:ef:1a:10:49:bf:c6:cd:af:f4:57:79: 3c:7a:5f:03:17:57:fb:55:e6:e5:11:d7:0c:21:53: f6:23:e0:34:cd:dd:0c:b7:00:62:b3:af:44:5f:c6: 2e:36:70:06:31:43:1c:26:b5:eb:cc:1f:eb:bd:0e: b9:36:0e:18:02:ab:7a:9e:fb:36:85:1b:82:29:c1: c6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:24:3A:9E:1C:34:C4:25:81:59:7D:26:21:8D:F6:F6:81:FF:17:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl X509v3 Authority Key Identifier: keyid:B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:de:90:be:5a:36:c9:fd:2a:c9:fe:56:4b:ae:36:6f:31:c2: 14:78:4a:d1:18:4a:56:35:ab:96:75:cf:7a:64:2d:ed:c5:8c: ef:03:98:4c:89:f8:7c:7a:ea:50:39:ff:15:99:5e:5f:2e:51: 43:ac:11:da:51:5a:88:e7:3a:7d:37:7e:f0:e0:77:b1:42:be: 6a:f1:1d:2a:16:17:ec:9e:3b:3a:c3:47:d8:b1:4c:aa:7c:4e: f2:81:77:c0:c2:14:a7:e0:95:38:71:b4:77:50:51:d6:93:08: ec:20:c6:d5:92:f1:6b:e2:9c:64:f3:46:ed:28:d0:df:12:87: a4:c5:b7:e3:39:62:2d:b2:e3:3b:e8:ae:d8:62:76:07:a6:fe: 91:bf:12:d6:09:40:fa:5e:c6:d7:4e:85:11:a6:da:0c:bd:51: 31:6a:0c:42:b4:91:ff:38:50:0c:d4:68:a8:f9:d3:08:52:eb: d6:62:cc:79:b8:93:a8:68:1a:10:33:02:b8:87:57:96:bd:d1: b9:8a:91:05:78:06:79:17:d7:df:c6:03:3e:91:1f:f5:20:b6: b6:43:b5:4a:af:d6:d2:f7:3b:cd:c1:d4:31:99:54:d9:75:2c: 48:42:cd:00:1b:20:b0:6b:db:1c:cc:47:01:15:3c:89:6c:df: 5e:62:14:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE87Bh7BIyDNCa4iq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjViOTg4NDktMDQ3MS00OGYwLTlkYjYtZTRmNmI1OWFh MTc4MB4XDTI2MDkxOTIxMDAyMloXDTI2MDkyMjIxMDAwMFowLzEtMCsGA1UEAxMk MTY5NThlOTMtNDE2MC00YmE1LWI5YzMtYThlYTZhMGVhMmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5wv24hLsyNbtkjkXpzNp8ENE60E0gJsOXkN xO72fr7It/Go2QM8vlfku2WVkWJiICjZu8LHhGdVD4/kC/YTH9H7tiZ/EDuCX1Jz z1PLZql+0M7ni4nhDxqNkMN8uf4Li9mgCBNb91QZNJr3lzw8Wwfir60dCSYnZWKQ 8iGS2+edcc/L1qoN+Gb/uQl6N4xMqOO9aa9EbZcGnLY+JmoZvPfq/2FaZzQ+iiHD KqLtpb75/9ILtOVn7xoQSb/Gza/0V3k8el8DF1f7VeblEdcMIVP2I+A0zd0MtwBi s69EX8YuNnAGMUMcJrXrzB/rvQ65Ng4YAqt6nvs2hRuCKcHG9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKUkOp4cNMQlgVl9JiGN9vaB/xcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNWI5 ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2YjU5YWExNzgvMjViOTg4NDktMDQ3MS00 OGYwLTlkYjYtZTRmNmI1OWFhMTc4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjViOTg4NDktMDQ3MS00OGYwLTlk YjYtZTRmNmI1OWFhMTc4LzI1Yjk4ODQ5LTA0NzEtNDhmMC05ZGI2LWU0ZjZiNTlh YTE3OC5jcmwwHwYDVR0jBBgwFoAUuVoZEj/jAA8cFH9jh4DbyoMaZVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNWI5ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2 YjU5YWExNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCU3pC+WjbJ/SrJ/lZLrjZv McIUeErRGEpWNauWdc96ZC3txYzvA5hMifh8eupQOf8VmV5fLlFDrBHaUVqI5zp9 N37w4HexQr5q8R0qFhfsnjs6w0fYsUyqfE7ygXfAwhSn4JU4cbR3UFHWkwjsIMbV kvFr4pxk80btKNDfEoekxbfjOWItsuM76K7YYnYHpv6RvxLWCUD6XsbXToURptoM vVExagxCtJH/OFAM1Gio+dMIUuvWYsx5uJOoaBoQMwK4h1eWvdG5ipEFeAZ5F9ff xgM+kR/1ILa2Q7VKr9bS9zvNwdQxmVTZdSxIQs0AGyCwa9sczEcBFTyJbN9eYhSI -----END CERTIFICATE-----Generated at Sun Sep 20 13:48:45 2026 by rpki-client