$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.mft File: c5256e48-88f9-413d-a1bf-e14eaab2e51b.mft (raw, json) Hash identifier: QfRCzfWkoBiy+vtV3+NbvYtzUrkdd7qpGig9PBuYQbM= Subject key identifier: 2D:39:63:4C:D6:1D:C5:1C:75:D7:A8:93:FC:97:AE:26:CE:74:EA:30 Authority key identifier: B9:88:57:D7:0A:19:65:04:8C:ED:4B:19:B2:24:E5:62:E2:77:8B:64 Certificate issuer: /CN=c5256e48-88f9-413d-a1bf-e14eaab2e51b Certificate serial: 010D0C9F4328584F3DD0D45DA029D93ED3D77B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.mft Manifest number: 010D0C9F4328584073A825EBB32607DFA2D9AEED Signing time: Sun 20 Sep 2026 21:00:23 +0000 Manifest this update: Sun 20 Sep 2026 21:00:23 +0000 Manifest next update: Wed 23 Sep 2026 21:00:00 +0000 Files and hashes: 1: 76fd694a-9b12-33c3-95f0-cf5fb6e77a89.roa (hash: gNMkjVy7v18zlYWLOFEgZPiTJdSbAxbS98MrrDBAOsw=) 2: c5256e48-88f9-413d-a1bf-e14eaab2e51b.crl (hash: uEvdm0Gn7xHxl2Gtsycac/7t/Csx/trnPTKcIVuCR8I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3d:d0:d4:5d:a0:29:d9:3e:d3:d7:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5256e48-88f9-413d-a1bf-e14eaab2e51b Validity Not Before: Sep 20 21:00:23 2026 GMT Not After : Sep 23 21:00:00 2026 GMT Subject: CN=b0de5d59-06d9-4169-9bf2-a0ff56b03d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:ec:90:12:f1:7b:a5:13:a6:c0:5f:cc:9d: 06:cc:0c:ed:63:68:f1:3a:a1:46:2d:be:74:7a:26: 32:3c:5f:10:fd:ad:2d:fa:08:23:08:87:7a:9e:52: 5f:f5:1f:1b:b0:6a:31:7b:58:4a:85:5c:e7:08:24: 1e:a8:9c:70:98:4b:09:d9:19:c5:46:8f:ee:1f:ee: fc:1d:e8:3f:0e:6f:4e:74:12:4d:e4:28:32:19:98: b5:79:d0:c0:88:b1:ed:af:bf:c5:1a:18:b7:b2:c7: 3c:38:9f:3a:81:1e:c1:a1:c0:eb:65:97:41:51:a7: 45:fe:25:e2:95:97:89:db:0f:4b:d5:a7:3b:dd:a1: 7a:6d:a5:08:28:d7:7e:f7:6e:35:57:27:87:18:54: f7:33:68:a4:0b:08:ea:73:c4:9c:0a:3e:1a:f5:0b: c3:d3:83:a7:be:5a:0f:54:aa:85:fe:d5:c0:b6:8c: a2:74:13:3c:bf:40:1a:0f:e9:0d:41:f7:5d:3a:3c: 2c:0e:ab:04:03:1d:35:fb:fe:8e:dc:00:a2:5c:a4: 22:d7:e4:30:b5:64:03:8b:aa:ba:20:9f:8e:40:3f: 1c:b4:c2:94:2c:bb:4e:04:bc:49:73:1f:29:20:7f: 8a:f9:09:e5:00:83:20:4e:b3:c8:95:0e:cc:3b:5b: 53:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:39:63:4C:D6:1D:C5:1C:75:D7:A8:93:FC:97:AE:26:CE:74:EA:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.crl X509v3 Authority Key Identifier: keyid:B9:88:57:D7:0A:19:65:04:8C:ED:4B:19:B2:24:E5:62:E2:77:8B:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cc:ce:77:ee:d0:5c:0d:26:2c:8f:e3:07:1d:a9:51:f3:33: 14:30:b9:cf:e6:90:42:2c:3a:81:e8:cd:8c:db:6d:96:f0:c9: b0:f1:48:3e:34:a2:21:e3:47:b8:1d:79:3a:85:52:f3:67:46: 44:9e:8b:98:2a:e2:2d:bc:69:0b:3d:af:32:45:19:00:fc:fc: ad:46:6f:48:8d:88:95:e4:ac:db:8e:f8:74:fb:ca:77:b8:d9: 78:18:80:56:db:c5:b3:02:c0:cc:77:ee:28:0f:8b:3d:d9:26: d8:18:17:1d:cd:76:9b:1a:a0:73:bc:24:56:06:9c:a4:12:ff: 05:cd:9e:ee:c9:74:13:28:23:ad:39:35:a2:34:9a:77:a7:16: 0b:3b:fe:8f:73:75:d8:22:11:16:0f:13:54:a3:89:a2:bd:04: 59:27:a0:d4:11:64:d2:32:67:90:20:ed:cb:10:13:69:c3:74: bf:59:80:3a:af:82:d7:a3:dd:22:6a:a4:74:e0:80:28:54:66: a5:cd:e5:3f:b8:85:b7:fa:df:66:c3:9c:95:af:bf:f1:de:64: 22:fc:62:ce:01:70:0f:7a:8c:1c:42:97:88:d6:5a:c6:05:11: ea:a0:ff:e5:9c:09:93:49:e8:a4:9d:d1:11:6d:c0:c9:40:2e: 1c:bb:af:9e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE890NRdoCnZPtPXewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUyNTZlNDgtODhmOS00MTNkLWExYmYtZTE0ZWFhYjJl NTFiMB4XDTI2MDkyMDIxMDAyM1oXDTI2MDkyMzIxMDAwMFowLzEtMCsGA1UEAxMk YjBkZTVkNTktMDZkOS00MTY5LTliZjItYTBmZjU2YjAzZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAXskBLxe6UTpsBfzJ0GzAztY2jxOqFGLb50 eiYyPF8Q/a0t+ggjCId6nlJf9R8bsGoxe1hKhVznCCQeqJxwmEsJ2RnFRo/uH+78 Heg/Dm9OdBJN5CgyGZi1edDAiLHtr7/FGhi3ssc8OJ86gR7BocDrZZdBUadF/iXi lZeJ2w9L1ac73aF6baUIKNd+9241VyeHGFT3M2ikCwjqc8ScCj4a9QvD04OnvloP VKqF/tXAtoyidBM8v0AaD+kNQfddOjwsDqsEAx01+/6O3ACiXKQi1+QwtWQDi6q6 IJ+OQD8ctMKULLtOBLxJcx8pIH+K+QnlAIMgTrPIlQ7MO1tT2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC05Y0zWHcUcddeok/yXribOdOowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNTI1 NmU0OC04OGY5LTQxM2QtYTFiZi1lMTRlYWFiMmU1MWIvYzUyNTZlNDgtODhmOS00 MTNkLWExYmYtZTE0ZWFhYjJlNTFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzUyNTZlNDgtODhmOS00MTNkLWEx YmYtZTE0ZWFhYjJlNTFiL2M1MjU2ZTQ4LTg4ZjktNDEzZC1hMWJmLWUxNGVhYWIy ZTUxYi5jcmwwHwYDVR0jBBgwFoAUuYhX1woZZQSM7UsZsiTlYuJ3i2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNTI1NmU0OC04OGY5LTQxM2QtYTFiZi1lMTRl YWFiMmU1MWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFzM537tBcDSYsj+MHHalR 8zMUMLnP5pBCLDqB6M2M222W8Mmw8Ug+NKIh40e4HXk6hVLzZ0ZEnouYKuItvGkL Pa8yRRkA/PytRm9IjYiV5Kzbjvh0+8p3uNl4GIBW28WzAsDMd+4oD4s92SbYGBcd zXabGqBzvCRWBpykEv8FzZ7uyXQTKCOtOTWiNJp3pxYLO/6Pc3XYIhEWDxNUo4mi vQRZJ6DUEWTSMmeQIO3LEBNpw3S/WYA6r4LXo90iaqR04IAoVGalzeU/uIW3+t9m w5yVr7/x3mQi/GLOAXAPeowcQpeI1lrGBRHqoP/lnAmTSeikndERbcDJQC4cu6+e -----END CERTIFICATE-----Generated at Mon Sep 21 19:12:53 2026 by rpki-client