$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.mft File: 85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.mft (raw, json) Hash identifier: 2H5JWQxYrAu0J1fPe9fTT40P2y1xEQjYy+V/E7xP09w= Subject key identifier: 87:93:45:4B:42:66:12:F0:01:E2:7D:52:10:C3:79:BF:F5:67:E2:5A Authority key identifier: 60:5F:56:E1:A0:0D:78:93:15:89:04:48:61:73:EB:08:F7:02:3E:89 Certificate issuer: /CN=85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0 Certificate serial: 010D0C9F4328584F3FE8DFB0496D3E9E6CE96780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.mft Manifest number: 010D0C9F432858414A7D06492D7B608AFF8DBA17 Signing time: Mon 21 Sep 2026 15:00:25 +0000 Manifest this update: Mon 21 Sep 2026 15:00:25 +0000 Manifest next update: Thu 24 Sep 2026 15:00:00 +0000 Files and hashes: 1: 85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.crl (hash: vQ+SNLYzzT65KtNIBBw73870ONXCt0r/o64UsxVqD1w=) 2: d15da3a2-08ce-3992-8b01-fd2369adaa65.roa (hash: tICE0faqER0kAuEAbSovm3b/+JnRN0TXS61IWg72VAo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:e8:df:b0:49:6d:3e:9e:6c:e9:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0 Validity Not Before: Sep 21 15:00:25 2026 GMT Not After : Sep 24 15:00:00 2026 GMT Subject: CN=b0f01064-0ee6-4678-ad82-4931268d684e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:39:d3:b4:38:35:51:f6:36:d6:ef:8d:c0: 1f:71:6a:64:46:da:78:39:ae:5e:5f:20:8c:33:7c: ca:15:43:8e:7c:e0:b6:f3:cc:d8:bb:15:5a:cf:f0: e8:03:c4:fb:60:81:0d:f9:04:95:ec:a6:96:62:72: 54:ec:53:43:00:1e:c4:98:8b:59:1d:37:20:7f:86: 5a:fb:e5:f8:86:d2:4b:94:f9:4a:6a:4b:80:54:28: 72:0d:13:70:26:e4:62:65:3a:23:7d:9d:60:a4:db: 00:3c:5e:f1:b9:99:a6:5f:bc:13:02:7e:0e:56:a9: 51:e7:49:42:ef:1b:fa:91:af:09:46:bb:a3:6b:52: 93:e6:d3:2d:64:75:28:43:23:9a:bd:bf:60:14:bb: e3:bc:8e:a4:55:57:a7:17:56:88:38:57:16:22:67: 43:88:4e:2f:32:ec:22:71:35:ed:0c:c8:7a:06:21: 3b:f3:0b:8a:13:ac:42:f3:34:bd:12:36:db:ca:79: 6c:1e:c5:c4:17:c7:ee:1b:c3:ac:5c:79:c8:2b:71: 49:d9:be:8b:54:02:3c:5b:88:af:69:80:c5:1d:86: 91:2a:3c:fc:15:6b:00:8c:97:73:62:2b:70:36:6d: ab:d2:a0:a0:0a:79:55:4f:d5:e7:e1:c4:c0:a9:1a: 6f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:93:45:4B:42:66:12:F0:01:E2:7D:52:10:C3:79:BF:F5:67:E2:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.crl X509v3 Authority Key Identifier: keyid:60:5F:56:E1:A0:0D:78:93:15:89:04:48:61:73:EB:08:F7:02:3E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:68:47:c2:a9:0a:a0:dd:44:98:74:a9:64:68:61:8b:00:36: 2b:2b:82:d6:49:38:5c:fd:f0:ad:bc:37:0c:b0:b1:f8:74:93: 60:21:a1:34:b6:7d:66:b9:81:19:0a:c7:89:a0:13:c5:6c:c6: 44:e2:51:67:a6:2d:02:5c:3d:0c:b9:0c:84:71:9c:7d:c3:2b: d8:81:cd:67:44:d3:ca:75:91:cc:26:d3:82:70:94:18:6b:47: e5:ba:9e:66:ff:9a:c5:9f:c5:98:34:5b:f9:34:df:78:1f:95: 04:6b:a9:41:cf:3d:c9:20:06:08:8e:0a:f0:53:0e:10:77:10: 00:03:08:22:f2:8d:ec:92:1e:42:da:c3:06:6c:9a:f0:4d:7d: 11:0b:85:6a:7a:d9:ef:d1:93:79:60:55:a1:10:71:e0:ca:2d: fb:e4:7c:21:cf:34:a5:e8:12:89:4d:47:50:8c:ac:eb:6b:66: cb:33:90:04:8c:30:b8:95:13:a2:5a:fc:a2:2e:d7:36:b6:28: c2:e5:03:6f:98:92:d8:e9:36:92:64:15:95:5a:4f:cc:4f:91: cd:88:c3:a1:bb:10:65:1b:fa:33:a3:f5:96:7a:e8:82:6d:ba: 1f:88:c6:8b:06:39:25:8f:e6:b5:96:b9:69:ce:46:56:69:cc: 47:04:f5:8e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8/6N+wSW0+nmzpZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMmM0NjAtOWI0Yi00NTdiLWJiMmMtYTJiMDBmN2Ew ZGQwMB4XDTI2MDkyMTE1MDAyNVoXDTI2MDkyNDE1MDAwMFowLzEtMCsGA1UEAxMk YjBmMDEwNjQtMGVlNi00Njc4LWFkODItNDkzMTI2OGQ2ODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLA507Q4NVH2NtbvjcAfcWpkRtp4Oa5eXyCM M3zKFUOOfOC288zYuxVaz/DoA8T7YIEN+QSV7KaWYnJU7FNDAB7EmItZHTcgf4Za ++X4htJLlPlKakuAVChyDRNwJuRiZTojfZ1gpNsAPF7xuZmmX7wTAn4OVqlR50lC 7xv6ka8JRruja1KT5tMtZHUoQyOavb9gFLvjvI6kVVenF1aIOFcWImdDiE4vMuwi cTXtDMh6BiE78wuKE6xC8zS9EjbbynlsHsXEF8fuG8OsXHnIK3FJ2b6LVAI8W4iv aYDFHYaRKjz8FWsAjJdzYitwNm2r0qCgCnlVT9Xn4cTAqRpvBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIeTRUtCZhLwAeJ9UhDDeb/1Z+JaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NWUy YzQ2MC05YjRiLTQ1N2ItYmIyYy1hMmIwMGY3YTBkZDAvODVlMmM0NjAtOWI0Yi00 NTdiLWJiMmMtYTJiMDBmN2EwZGQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODVlMmM0NjAtOWI0Yi00NTdiLWJi MmMtYTJiMDBmN2EwZGQwLzg1ZTJjNDYwLTliNGItNDU3Yi1iYjJjLWEyYjAwZjdh MGRkMC5jcmwwHwYDVR0jBBgwFoAUYF9W4aANeJMViQRIYXPrCPcCPokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NWUyYzQ2MC05YjRiLTQ1N2ItYmIyYy1hMmIw MGY3YTBkZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8aEfCqQqg3USYdKlkaGGL ADYrK4LWSThc/fCtvDcMsLH4dJNgIaE0tn1muYEZCseJoBPFbMZE4lFnpi0CXD0M uQyEcZx9wyvYgc1nRNPKdZHMJtOCcJQYa0flup5m/5rFn8WYNFv5NN94H5UEa6lB zz3JIAYIjgrwUw4QdxAAAwgi8o3skh5C2sMGbJrwTX0RC4Vqetnv0ZN5YFWhEHHg yi375HwhzzSl6BKJTUdQjKzra2bLM5AEjDC4lROiWvyiLtc2tijC5QNvmJLY6TaS ZBWVWk/MT5HNiMOhuxBlG/ozo/WWeuiCbbofiMaLBjklj+a1lrlpzkZWacxHBPWO -----END CERTIFICATE-----Generated at Mon Sep 21 19:48:12 2026 by rpki-client