$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/04c04f07-088c-4aa8-8ea2-3e691397960e.mft File: 04c04f07-088c-4aa8-8ea2-3e691397960e.mft (raw, json) Hash identifier: XZFH8Upc5i6ncj9ElpZiVUcDhjStkpjdnou44E/nZMw= Subject key identifier: 06:E0:CF:21:29:3C:24:09:C3:A5:EE:E7:A0:07:34:81:55:CB:F3:4A Authority key identifier: 6F:73:AE:AB:86:C7:4D:95:5A:75:3E:33:A2:07:3F:AA:0C:CB:82:DD Certificate issuer: /CN=04c04f07-088c-4aa8-8ea2-3e691397960e Certificate serial: 010D0C9F4328584F4366365FDDF61F03EB246750 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/04c04f07-088c-4aa8-8ea2-3e691397960e.mft Manifest number: 010D0C9F4328584D5AD944221F0BB4002D408E33 Signing time: Tue 22 Sep 2026 21:00:25 +0000 Manifest this update: Tue 22 Sep 2026 21:00:25 +0000 Manifest next update: Thu 24 Sep 2026 21:00:00 +0000 Files and hashes: 1: 04c04f07-088c-4aa8-8ea2-3e691397960e.crl (hash: bJXzphzxGpoIQXjCDqTJ0R0gbcYhRiPI+VEotOKGQjk=) 2: 9e230ce3-f135-30bd-afae-e5573bdd8ce6.roa (hash: KbWjMdCF9UBK4ZhdXSnk4vzsKnlvq3n4nMkXVJ3PIKI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/04c04f07-088c-4aa8-8ea2-3e691397960e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/04c04f07-088c-4aa8-8ea2-3e691397960e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:66:36:5f:dd:f6:1f:03:eb:24:67:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c04f07-088c-4aa8-8ea2-3e691397960e Validity Not Before: Sep 22 21:00:25 2026 GMT Not After : Sep 24 21:00:00 2026 GMT Subject: CN=5d3b83ce-ffda-4e65-927b-a161a8ef4749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:41:c5:3c:74:4b:ee:be:5d:48:28:fd:76: c6:b9:5b:26:64:3a:ee:c5:06:6b:e3:34:7d:e4:31: b6:e2:78:d5:84:15:f7:7f:a5:79:02:87:06:52:03: da:21:0e:c8:76:85:c3:40:b8:97:30:5a:0e:da:30: 3c:92:2c:3b:f3:93:09:91:f0:d8:61:3b:b1:cf:61: 8f:c2:4c:61:58:1d:b7:5a:6e:75:e4:93:c3:d6:f6: 95:de:6b:22:2e:1d:c9:82:98:c7:ac:15:13:68:58: 1b:de:ce:d9:7b:a8:98:ce:57:b7:b5:81:a9:46:72: 98:c9:9e:5b:03:e2:6e:9a:5b:60:a5:95:c3:a4:08: 58:b6:22:37:e2:20:c4:c0:bc:10:88:2f:6a:43:fe: 26:3c:36:57:37:2e:0a:4e:32:9e:5b:4b:eb:66:0e: 6e:66:78:24:bd:46:41:df:3b:75:8f:c0:20:6e:42: b7:f9:c8:c5:2c:c2:45:40:c9:d4:68:1e:8f:b8:16: 68:c5:1a:e5:34:5b:3a:61:12:14:95:c9:5f:83:90: 41:0e:9d:61:65:27:55:46:dd:68:ae:11:b6:de:50: f5:f2:e9:81:27:86:2d:47:2f:8c:07:aa:4b:3e:00: ba:8a:22:46:e9:96:7a:6f:40:a6:c0:35:27:52:7f: ac:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E0:CF:21:29:3C:24:09:C3:A5:EE:E7:A0:07:34:81:55:CB:F3:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/04c04f07-088c-4aa8-8ea2-3e691397960e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/04c04f07-088c-4aa8-8ea2-3e691397960e.crl X509v3 Authority Key Identifier: keyid:6F:73:AE:AB:86:C7:4D:95:5A:75:3E:33:A2:07:3F:AA:0C:CB:82:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:31:64:50:ce:b4:ae:6d:e6:1d:3d:e4:c2:31:0b:ec:23:3d: e0:43:a8:6a:fb:89:4e:5f:41:1f:fd:55:c8:38:7a:ae:16:e9: 94:28:eb:c0:20:c0:2b:ab:d7:75:36:63:f1:90:97:96:03:b0: 1d:22:c2:f3:ee:85:10:55:ef:1f:d8:95:a0:d4:fa:06:e6:58: 4e:58:53:d4:88:85:a4:11:50:a5:d9:93:0a:3a:c7:4b:2e:33: d2:8b:cd:d4:32:08:7d:26:6b:df:02:61:6c:e1:0d:76:63:56: 2a:6d:f7:03:e6:70:57:55:73:2b:13:af:3b:57:a3:ff:9a:5b: 45:b9:2b:a0:ab:73:b5:00:b6:03:07:ff:31:1c:fa:73:a3:b8: b0:32:af:8c:3f:97:5e:ab:f7:72:c9:30:9f:f9:f4:49:86:7e: 7b:62:f3:dc:c5:24:68:95:d5:98:20:2d:8d:ac:97:2e:1b:cf: 35:60:a2:33:e1:38:64:90:c7:75:b6:a6:32:e5:1d:eb:af:6b: 4a:a0:14:e6:8a:30:bb:d1:ab:77:52:cb:43:6e:c3:8b:30:1f: 7e:01:3d:0c:ca:73:55:db:64:c0:33:19:de:e9:43:49:76:68: 5d:51:26:c5:0b:e3:e6:ab:4b:3a:c9:0e:24:10:ac:6d:10:79: 8e:1d:8b:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9DZjZf3fYfA+skZ1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMDRmMDctMDg4Yy00YWE4LThlYTItM2U2OTEzOTc5 NjBlMB4XDTI2MDkyMjIxMDAyNVoXDTI2MDkyNDIxMDAwMFowLzEtMCsGA1UEAxMk NWQzYjgzY2UtZmZkYS00ZTY1LTkyN2ItYTE2MWE4ZWY0NzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3JBxTx0S+6+XUgo/XbGuVsmZDruxQZr4zR9 5DG24njVhBX3f6V5AocGUgPaIQ7IdoXDQLiXMFoO2jA8kiw785MJkfDYYTuxz2GP wkxhWB23Wm515JPD1vaV3msiLh3JgpjHrBUTaFgb3s7Ze6iYzle3tYGpRnKYyZ5b A+JumltgpZXDpAhYtiI34iDEwLwQiC9qQ/4mPDZXNy4KTjKeW0vrZg5uZngkvUZB 3zt1j8AgbkK3+cjFLMJFQMnUaB6PuBZoxRrlNFs6YRIUlclfg5BBDp1hZSdVRt1o rhG23lD18umBJ4YtRy+MB6pLPgC6iiJG6ZZ6b0CmwDUnUn+sRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAbgzyEpPCQJw6Xu56AHNIFVy/NKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNGMw NGYwNy0wODhjLTRhYTgtOGVhMi0zZTY5MTM5Nzk2MGUvMDRjMDRmMDctMDg4Yy00 YWE4LThlYTItM2U2OTEzOTc5NjBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDRjMDRmMDctMDg4Yy00YWE4LThl YTItM2U2OTEzOTc5NjBlLzA0YzA0ZjA3LTA4OGMtNGFhOC04ZWEyLTNlNjkxMzk3 OTYwZS5jcmwwHwYDVR0jBBgwFoAUb3Ouq4bHTZVadT4zogc/qgzLgt0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNGMwNGYwNy0wODhjLTRhYTgtOGVhMi0zZTY5 MTM5Nzk2MGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtMWRQzrSubeYdPeTCMQvs Iz3gQ6hq+4lOX0Ef/VXIOHquFumUKOvAIMArq9d1NmPxkJeWA7AdIsLz7oUQVe8f 2JWg1PoG5lhOWFPUiIWkEVCl2ZMKOsdLLjPSi83UMgh9JmvfAmFs4Q12Y1YqbfcD 5nBXVXMrE687V6P/mltFuSugq3O1ALYDB/8xHPpzo7iwMq+MP5deq/dyyTCf+fRJ hn57YvPcxSRoldWYIC2NrJcuG881YKIz4ThkkMd1tqYy5R3rr2tKoBTmijC70at3 UstDbsOLMB9+AT0MynNV22TAMxne6UNJdmhdUSbFC+Pmq0s6yQ4kEKxtEHmOHYst -----END CERTIFICATE-----Generated at Wed Sep 23 12:04:04 2026 by rpki-client