$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.mft File: a4bf9628-af4d-4afa-ae79-ac51e8655d32.mft (raw, json) Hash identifier: tznaOaR5WlH661S1V2BZxAGBRa/Z63Ia6YwdpGQ0SHo= Subject key identifier: C9:1A:71:F3:B2:0C:29:E2:28:19:7D:FC:A2:BC:53:BC:64:9A:3F:7C Authority key identifier: 9A:7A:27:DE:EA:74:07:A6:4B:92:F9:BF:8F:35:A2:E8:71:65:A4:C2 Certificate issuer: /CN=a4bf9628-af4d-4afa-ae79-ac51e8655d32 Certificate serial: 010D0C9F4328584FD75C7C6F871770E9DF4A4658 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.mft Manifest number: 010D0C9F4328584C142274DBAD88B659957DB6E1 Signing time: Sat 14 Nov 2026 21:00:26 +0000 Manifest this update: Sat 14 Nov 2026 21:00:26 +0000 Manifest next update: Mon 16 Nov 2026 21:00:00 +0000 Files and hashes: 1: a4bf9628-af4d-4afa-ae79-ac51e8655d32.crl (hash: FtKGtchIhqf2PSmRrFAYea/jll8e9n2dv/uASNbltFc=) 2: de847a06-de42-39bb-b42d-d6634e0c9a95.roa (hash: niGsWTdvI1wnAtqK/1ab8mbp43RYdP+6E4VWaWZTkYE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d7:5c:7c:6f:87:17:70:e9:df:4a:46:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bf9628-af4d-4afa-ae79-ac51e8655d32 Validity Not Before: Nov 14 21:00:26 2026 GMT Not After : Nov 16 21:00:00 2026 GMT Subject: CN=137d3d55-8e4b-4121-834c-1288a66ea307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:70:77:42:47:39:98:6d:e7:f1:f2:05:96:7a: 0d:71:81:05:32:42:e7:e7:46:86:3a:a8:9f:ae:18: e0:23:bb:98:cd:75:f3:25:7d:63:e0:0a:57:74:53: 3b:76:cc:ce:14:a2:7f:b8:7d:ef:1f:e0:94:e8:ad: 66:3d:30:9e:0f:ee:44:f3:08:fd:68:37:53:3d:dd: 66:f6:4c:be:8e:ac:06:1a:e7:3b:81:4e:1b:7a:1c: 9e:fd:51:06:5d:df:7b:40:a8:9a:a5:c3:ac:b7:1b: 20:57:43:71:b2:53:ad:7e:7a:64:2e:14:8c:a2:1c: 47:16:78:f5:42:6f:b7:2c:45:26:bd:5c:7d:8d:52: 94:74:00:30:30:dd:49:40:a0:6a:5a:40:da:50:51: ca:6e:bc:2d:0d:e7:50:95:0f:65:ed:56:39:bc:2e: 95:e8:05:b7:7d:cf:d9:b4:44:49:7d:f1:9b:bb:db: cc:47:af:49:38:e8:67:30:0a:01:c4:8b:2d:8e:6e: a8:1c:fe:f2:4f:ee:6b:28:37:80:60:af:b9:92:99: cd:c0:1f:74:01:a4:ed:0e:f7:13:9e:90:71:1a:50: ee:54:3b:f0:26:15:dc:7d:9a:09:40:bb:01:e6:17: 07:64:97:51:b3:c1:5e:87:31:9a:51:a6:0a:47:07: 25:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1A:71:F3:B2:0C:29:E2:28:19:7D:FC:A2:BC:53:BC:64:9A:3F:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.crl X509v3 Authority Key Identifier: keyid:9A:7A:27:DE:EA:74:07:A6:4B:92:F9:BF:8F:35:A2:E8:71:65:A4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:90:3a:e6:0a:b9:c8:7d:23:0a:97:6f:6d:34:78:f1:6d:79: f1:f4:b4:85:cb:9b:26:bd:e1:26:6c:9a:2b:5b:1d:a9:43:2f: 9b:54:f7:80:50:04:76:a4:a9:e5:20:01:8f:25:2d:22:51:71: f6:13:14:d5:52:43:86:6c:31:67:20:e9:98:28:53:8d:28:2c: fd:d5:bb:9d:4f:f7:ca:f5:28:07:48:1b:de:5e:f2:95:91:48: b5:b1:5b:88:e3:bb:ce:35:e2:4f:ad:80:94:8c:94:f4:94:f8: c5:b5:6b:e8:90:67:dd:a1:ab:2e:b3:ce:e6:69:41:85:13:f2: bb:5e:bc:61:d9:67:b1:82:b1:12:22:01:e7:40:70:a6:d6:89: 1e:b2:7c:fb:21:df:91:56:12:21:b2:7f:71:08:5d:5c:0a:bb: 29:d9:fa:d3:7f:ad:ab:cd:74:12:e5:64:48:7a:90:14:81:77: db:ff:23:8a:bf:90:1f:ec:4d:c2:f2:8e:aa:a1:b1:04:9c:42: e2:82:2d:9a:c0:0e:26:e9:3f:05:6a:2a:bb:9c:03:9f:54:40: 4e:e4:5b:d8:54:d4:f5:b3:1c:8c:dd:67:f2:c5:52:ca:22:d1: 1f:f9:d3:3e:fe:1d:d5:43:ca:71:1d:5b:77:e6:8d:06:25:5f: 9f:13:a6:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/XXHxvhxdw6d9KRlgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRiZjk2MjgtYWY0ZC00YWZhLWFlNzktYWM1MWU4NjU1 ZDMyMB4XDTI2MTExNDIxMDAyNloXDTI2MTExNjIxMDAwMFowLzEtMCsGA1UEAxMk MTM3ZDNkNTUtOGU0Yi00MTIxLTgzNGMtMTI4OGE2NmVhMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinB3Qkc5mG3n8fIFlnoNcYEFMkLn50aGOqif rhjgI7uYzXXzJX1j4ApXdFM7dszOFKJ/uH3vH+CU6K1mPTCeD+5E8wj9aDdTPd1m 9ky+jqwGGuc7gU4behye/VEGXd97QKiapcOstxsgV0NxslOtfnpkLhSMohxHFnj1 Qm+3LEUmvVx9jVKUdAAwMN1JQKBqWkDaUFHKbrwtDedQlQ9l7VY5vC6V6AW3fc/Z tERJffGbu9vMR69JOOhnMAoBxIstjm6oHP7yT+5rKDeAYK+5kpnNwB90AaTtDvcT npBxGlDuVDvwJhXcfZoJQLsB5hcHZJdRs8FehzGaUaYKRwclKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMkacfOyDCniKBl9/KK8U7xkmj98MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGJm OTYyOC1hZjRkLTRhZmEtYWU3OS1hYzUxZTg2NTVkMzIvYTRiZjk2MjgtYWY0ZC00 YWZhLWFlNzktYWM1MWU4NjU1ZDMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTRiZjk2MjgtYWY0ZC00YWZhLWFl NzktYWM1MWU4NjU1ZDMyL2E0YmY5NjI4LWFmNGQtNGFmYS1hZTc5LWFjNTFlODY1 NWQzMi5jcmwwHwYDVR0jBBgwFoAUmnon3up0B6ZLkvm/jzWi6HFlpMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGJmOTYyOC1hZjRkLTRhZmEtYWU3OS1hYzUx ZTg2NTVkMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIkDrmCrnIfSMKl29tNHjx bXnx9LSFy5smveEmbJorWx2pQy+bVPeAUAR2pKnlIAGPJS0iUXH2ExTVUkOGbDFn IOmYKFONKCz91budT/fK9SgHSBveXvKVkUi1sVuI47vONeJPrYCUjJT0lPjFtWvo kGfdoasus87maUGFE/K7Xrxh2WexgrESIgHnQHCm1okesnz7Id+RVhIhsn9xCF1c Crsp2frTf62rzXQS5WRIepAUgXfb/yOKv5Af7E3C8o6qobEEnELigi2awA4m6T8F aiq7nAOfVEBO5FvYVNT1sxyM3WfyxVLKItEf+dM+/h3VQ8pxHVt35o0GJV+fE6aW -----END CERTIFICATE-----Generated at Sun Nov 15 13:08:22 2026 by rpki-client