$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft File: 4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft (raw, json) Hash identifier: mP5CjgA9g0M+/q2lt+5wb+yKJs/joce+Jhu45sNwSVY= Subject key identifier: 23:92:C9:B3:1E:8C:F2:F3:0B:5D:D2:FC:31:41:A9:4B:CE:B9:8F:B4 Authority key identifier: 2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 Certificate issuer: /CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Certificate serial: 010D0C9F4328584F3FAD463AF03B5C44CDF46680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft Manifest number: 010D0C9F4328584BC7EC849A397DD986C4316945 Signing time: Mon 21 Sep 2026 13:00:23 +0000 Manifest this update: Mon 21 Sep 2026 13:00:23 +0000 Manifest next update: Thu 24 Sep 2026 13:00:00 +0000 Files and hashes: 1: 4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl (hash: IodmxprkLI+M5Ua2OvshVYlLnbE86rnHaQfZ5bZL95o=) 2: d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa (hash: n6fJ7C1wt8PAcCqemGsEwKCrRDI0AR/2CVpUqMop4Nk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:46:3a:f0:3b:5c:44:cd:f4:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Validity Not Before: Sep 21 13:00:23 2026 GMT Not After : Sep 24 13:00:00 2026 GMT Subject: CN=b174c4fc-698b-4b35-bb2b-ee41c9bdcda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:32:97:7f:f9:b9:0b:e0:fe:9f:80:be:77:06: 7f:5d:1b:ea:f0:5a:85:e6:d2:86:4e:a9:16:7f:7b: a8:86:ae:8f:5b:4e:11:80:2a:1b:42:c7:89:a3:26: 7e:c5:b4:85:13:ca:a4:90:fc:6f:b1:44:a1:d0:51: 63:a7:b9:f3:1d:25:58:1d:49:f9:2a:a4:dd:e1:ad: e2:39:bc:85:41:ba:6d:e2:ef:9a:69:96:e6:29:28: 63:d1:04:17:80:3c:e2:e4:ea:1e:a2:05:86:de:86: c0:8f:14:d1:6c:a6:75:ac:19:97:4c:cb:fe:04:15: 07:1b:9e:8d:61:99:ba:62:b0:17:4b:fd:53:57:28: fd:9b:49:95:6c:05:ce:23:f3:e3:22:17:f1:3f:5f: c7:33:f3:b8:59:22:96:50:a5:8f:0b:b6:06:21:80: 62:d4:ca:15:9b:a4:21:32:26:ee:5b:b0:c2:c4:33: a5:88:f7:c4:2c:e1:fc:60:77:d8:18:14:c2:71:1a: 42:07:d2:aa:1e:b9:17:5e:7b:13:c1:62:75:0c:3e: 1b:34:00:c7:80:cf:44:94:db:ba:3b:58:b6:00:ec: 7b:fe:37:08:51:27:94:79:50:17:e7:90:12:91:bf: 61:26:61:df:f1:8e:5f:4e:15:2d:87:a9:63:fd:c8: ce:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:92:C9:B3:1E:8C:F2:F3:0B:5D:D2:FC:31:41:A9:4B:CE:B9:8F:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl X509v3 Authority Key Identifier: keyid:2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:20:7b:17:2f:cb:98:4a:c0:43:98:33:db:b8:86:8b:44:e2: a3:1a:e3:f5:26:fc:88:a7:d1:a5:2f:6c:a7:63:ca:6e:5f:65: 60:25:f1:c2:9f:db:93:04:d8:3f:ce:8d:1f:63:11:e5:24:15: cb:fb:35:f2:69:11:75:91:fd:97:0b:19:8b:03:f3:85:dc:88: 3c:2d:46:89:05:d1:0d:37:4b:bd:34:eb:73:35:f9:19:3d:a1: 30:f2:db:28:d5:14:e1:cc:4e:19:a6:ad:36:40:d4:5b:75:73: a5:e1:d8:10:16:3c:85:61:33:78:f4:55:52:76:25:ea:cf:bc: c4:85:2b:bd:e7:b7:ae:c9:cd:0d:6d:51:b1:2b:0b:8e:62:be: 09:ab:8e:2c:ce:69:f6:6f:97:c7:6a:77:dc:a2:b5:65:a2:0e: c4:d5:07:33:cb:7d:7c:2a:c3:58:63:5d:6a:39:83:12:97:42: 91:45:15:c8:5b:a7:8d:af:fe:34:70:5f:8f:af:8a:76:91:9f: 8d:0d:62:a3:16:61:08:56:61:0e:11:b3:33:be:b3:5d:df:b3: 60:36:89:d3:2f:a9:51:1c:90:77:33:3e:9a:49:20:fa:10:72: 9a:7b:27:c8:5d:77:eb:1c:96:e7:30:82:36:c8:e5:56:b9:68: 94:d3:1e:23 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8/rUY68DtcRM30ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRjZGYxZjQtNWU2MC00MzhkLTg5MzQtMGNhMjFkMGI0 NWFmMB4XDTI2MDkyMTEzMDAyM1oXDTI2MDkyNDEzMDAwMFowLzEtMCsGA1UEAxMk YjE3NGM0ZmMtNjk4Yi00YjM1LWJiMmItZWU0MWM5YmRjZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTKXf/m5C+D+n4C+dwZ/XRvq8FqF5tKGTqkW f3uohq6PW04RgCobQseJoyZ+xbSFE8qkkPxvsUSh0FFjp7nzHSVYHUn5KqTd4a3i ObyFQbpt4u+aaZbmKShj0QQXgDzi5OoeogWG3obAjxTRbKZ1rBmXTMv+BBUHG56N YZm6YrAXS/1TVyj9m0mVbAXOI/PjIhfxP1/HM/O4WSKWUKWPC7YGIYBi1MoVm6Qh MibuW7DCxDOliPfELOH8YHfYGBTCcRpCB9KqHrkXXnsTwWJ1DD4bNADHgM9ElNu6 O1i2AOx7/jcIUSeUeVAX55ASkb9hJmHf8Y5fThUth6lj/cjOLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCOSybMejPLzC13S/DFBqUvOuY+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNk ZjFmNC01ZTYwLTQzOGQtODkzNC0wY2EyMWQwYjQ1YWYvNGRjZGYxZjQtNWU2MC00 MzhkLTg5MzQtMGNhMjFkMGI0NWFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGRjZGYxZjQtNWU2MC00MzhkLTg5 MzQtMGNhMjFkMGI0NWFmLzRkY2RmMWY0LTVlNjAtNDM4ZC04OTM0LTBjYTIxZDBi NDVhZi5jcmwwHwYDVR0jBBgwFoAUKtcrN6YK8Qr5CP1mtfg4wMSxYWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNkZjFmNC01ZTYwLTQzOGQtODkzNC0wY2Ey MWQwYjQ1YWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVIHsXL8uYSsBDmDPbuIaL ROKjGuP1JvyIp9GlL2ynY8puX2VgJfHCn9uTBNg/zo0fYxHlJBXL+zXyaRF1kf2X CxmLA/OF3Ig8LUaJBdENN0u9NOtzNfkZPaEw8tso1RThzE4Zpq02QNRbdXOl4dgQ FjyFYTN49FVSdiXqz7zEhSu957euyc0NbVGxKwuOYr4Jq44szmn2b5fHanfcorVl og7E1Qczy318KsNYY11qOYMSl0KRRRXIW6eNr/40cF+Pr4p2kZ+NDWKjFmEIVmEO EbMzvrNd37NgNonTL6lRHJB3Mz6aSSD6EHKaeyfIXXfrHJbnMII2yOVWuWiU0x4j -----END CERTIFICATE-----Generated at Tue Sep 22 15:03:14 2026 by rpki-client