$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft (raw, json) Hash identifier: EWrxPFDXxrzKFxdqlqwxrb3vbFfEYP/JpZ0X/or2tag= Subject key identifier: 1F:E5:5E:A2:94:E0:D5:1B:8E:EF:64:61:9F:C6:DE:A1:15:75:43:B4 Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F4328584F4542AEBF13CCA24C9F8F7540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft Manifest number: 010D0C9F432858467B3AE8B15C5CB25608060DDA Signing time: Wed 23 Sep 2026 13:00:24 +0000 Manifest this update: Wed 23 Sep 2026 13:00:24 +0000 Manifest next update: Sat 26 Sep 2026 13:00:00 +0000 Files and hashes: 1: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl (hash: atElMmVnbzxYyWlj/E/ujG41vz7t4IeESgI2PPkCSvM=) 2: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (hash: EJKFltUQslbp5iIQ9ofOXr7h7ISw512ZZho1+/CyvZg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:ae:bf:13:cc:a2:4c:9f:8f:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: Sep 23 13:00:24 2026 GMT Not After : Sep 26 13:00:00 2026 GMT Subject: CN=c8c465bf-c9cf-469c-8f9d-c657636321d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5c:d8:a5:f4:0b:de:b8:28:1e:6e:07:c3:1c: 1d:c5:26:d3:4f:96:fd:af:4e:37:37:3e:ed:e8:b7: 54:2b:8f:76:4f:7f:d9:3c:50:88:a0:cf:cd:06:e4: 18:d1:24:15:1c:e9:c9:ab:a0:29:ec:0c:b4:09:9b: 1c:e7:e9:d0:c3:f0:00:87:0d:77:8b:96:a5:70:f8: 33:5f:74:ef:4d:69:63:af:00:ee:b6:e5:02:00:d7: 88:35:a0:16:ce:12:36:89:41:0d:dd:f4:6e:05:c6: 4a:d7:1d:3d:7a:b3:b1:a9:3c:ae:ea:e1:42:6d:1b: f9:ee:6a:25:81:9f:bf:4d:bd:f0:f9:39:9a:2b:78: 4c:31:58:21:c7:bf:50:84:15:a1:9f:9d:31:ad:72: 98:69:79:22:c4:b9:be:aa:33:c8:68:00:aa:d7:2b: a4:93:b8:c8:b2:cb:12:09:d6:c4:69:b6:57:67:2b: 34:b2:0a:6a:b1:6a:a0:8a:54:9b:07:fe:3f:a6:9e: f5:0f:08:0d:d2:33:8d:52:51:0c:02:ab:90:a7:28: 18:d2:3c:cb:de:e4:81:3e:fb:c5:18:1d:50:ed:1b: 39:e7:09:5c:64:e5:86:b7:f7:7f:db:07:d2:cd:c1: 77:b6:6e:0a:a9:6e:37:7c:e7:dd:12:8d:16:3c:2a: b9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E5:5E:A2:94:E0:D5:1B:8E:EF:64:61:9F:C6:DE:A1:15:75:43:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:21:a3:ee:a9:f1:33:34:80:b1:e8:12:a0:8e:54:6b:bd:fe: 08:1d:de:b7:c6:88:fd:26:de:f5:ff:14:37:a6:6f:a6:9b:9a: f9:52:58:bd:b1:d2:ff:27:83:23:96:3d:90:5e:68:9b:55:07: db:56:6f:bd:da:6f:dc:cb:2c:dc:79:89:2c:65:83:97:5c:95: a6:fe:b1:3c:5d:4c:8f:1e:28:cb:f1:1c:8d:eb:f9:a5:9a:e5: 71:2d:9f:27:d8:ac:ae:b7:98:ee:aa:b8:84:71:1b:e4:ba:c2: ac:4c:be:13:fb:f4:0d:3f:9e:7a:7f:6b:22:9c:22:4b:49:93: 08:ec:21:0b:0e:a9:63:c1:60:91:bf:c0:96:9b:ee:0e:5d:b8: 39:26:82:29:98:02:1a:c6:b0:a4:87:d7:0b:d5:af:58:cb:4f: 22:92:6a:2b:f8:50:d8:91:35:80:db:06:64:5d:db:76:e4:63: af:6a:38:7e:b8:dd:48:49:24:61:f5:f0:af:9a:3f:b9:00:26: 74:7d:f1:b8:74:36:66:11:19:40:9c:27:5e:c4:69:58:6e:c0: 45:ef:b6:87:78:1a:31:97:14:77:2b:71:18:f8:8d:59:18:80: e9:52:59:01:de:d6:9f:dc:32:4d:f3:07:1c:ea:27:fd:28:4e: a5:a3:32:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9FQq6/E8yiTJ+PdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI2MDkyMzEzMDAyNFoXDTI2MDkyNjEzMDAwMFowLzEtMCsGA1UEAxMk YzhjNDY1YmYtYzljZi00NjljLThmOWQtYzY1NzYzNjMyMWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFzYpfQL3rgoHm4HwxwdxSbTT5b9r043Nz7t 6LdUK492T3/ZPFCIoM/NBuQY0SQVHOnJq6Ap7Ay0CZsc5+nQw/AAhw13i5alcPgz X3TvTWljrwDutuUCANeINaAWzhI2iUEN3fRuBcZK1x09erOxqTyu6uFCbRv57mol gZ+/Tb3w+TmaK3hMMVghx79QhBWhn50xrXKYaXkixLm+qjPIaACq1yukk7jIsssS CdbEabZXZys0sgpqsWqgilSbB/4/pp71DwgN0jONUlEMAquQpygY0jzL3uSBPvvF GB1Q7Rs55wlcZOWGt/d/2wfSzcF3tm4KqW43fOfdEo0WPCq5EQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB/lXqKU4NUbju9kYZ/G3qEVdUO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvNGM4NWU0MmQtMjE3MS00 ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvIaPuqfEzNICx6BKgjlRr vf4IHd63xoj9Jt71/xQ3pm+mm5r5Uli9sdL/J4Mjlj2QXmibVQfbVm+92m/cyyzc eYksZYOXXJWm/rE8XUyPHijL8RyN6/mlmuVxLZ8n2Kyut5juqriEcRvkusKsTL4T +/QNP556f2sinCJLSZMI7CELDqljwWCRv8CWm+4OXbg5JoIpmAIaxrCkh9cL1a9Y y08ikmor+FDYkTWA2wZkXdt25GOvajh+uN1ISSRh9fCvmj+5ACZ0ffG4dDZmERlA nCdexGlYbsBF77aHeBoxlxR3K3EY+I1ZGIDpUlkB3taf3DJN8wcc6if9KE6lozIO -----END CERTIFICATE-----Generated at Thu Sep 24 04:33:13 2026 by rpki-client