$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.mft File: 22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.mft (raw, json) Hash identifier: SAzy1DPgF8l1AQUqwJwks57lrO0Jm0PdtehgL+f5W6k= Subject key identifier: 20:F9:B4:72:5E:0D:55:40:11:EC:F5:74:50:96:6E:85:CD:44:C8:42 Authority key identifier: 20:B2:83:BF:40:27:09:EB:3B:DA:12:2E:D0:BE:9E:E8:7A:6C:5B:4F Certificate issuer: /CN=22d9aa3d-d04f-4144-9ccf-9c76068e7cfa Certificate serial: 010D0C9F4328584FB8C4B2829D572AAF4165E680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.mft Manifest number: 010D0C9F4328584FAAE4208B16B3228B44A8CB66 Signing time: Tue 03 Nov 2026 22:00:23 +0000 Manifest this update: Tue 03 Nov 2026 22:00:23 +0000 Manifest next update: Thu 05 Nov 2026 22:00:00 +0000 Files and hashes: 1: 22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.crl (hash: 65/yX4irCgp9qD+jen5ZO+mMFkUGNzyqQMDVJqdmgVA=) 2: bf53fb28-10fb-3cc3-95b0-8285e8e7bf5d.roa (hash: t4PKP9ismJWh9PG56/MGPMCb5B72BxMw5sfuMNOKFYQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b8:c4:b2:82:9d:57:2a:af:41:65:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d9aa3d-d04f-4144-9ccf-9c76068e7cfa Validity Not Before: Nov 3 22:00:23 2026 GMT Not After : Nov 5 22:00:00 2026 GMT Subject: CN=ed1459d3-8c34-4366-ad57-c08b7acb25d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c8:6a:39:45:87:83:bd:62:c3:51:53:ed:58: 62:48:25:91:36:97:87:33:41:8f:78:07:63:72:44: e6:dc:62:17:61:ba:ff:30:af:15:68:3c:4b:45:ff: 4d:d3:83:9c:06:9e:c6:d9:ca:b4:6f:95:e3:27:55: eb:e3:bf:a4:1d:9d:b4:ab:4c:55:6b:2f:c4:d3:f7: 89:ed:f6:e5:c3:e5:3c:cb:ad:97:f8:93:46:1a:ee: 4b:02:1d:b7:03:6e:47:96:7c:f5:b6:4e:25:0f:e3: b3:9a:98:1f:4a:b8:38:ad:7a:70:07:cd:dc:31:e2: 88:2d:67:07:22:4c:1e:18:a1:39:66:02:b0:9b:68: fb:cb:b2:78:4c:63:2b:8f:ba:b0:d0:f6:70:1b:38: 4a:67:2a:11:50:f6:e1:47:5e:37:bf:31:c3:d0:af: da:f9:77:3d:52:c5:0d:36:b6:5a:4e:d4:0c:14:29: d5:23:06:f7:00:9d:ae:54:19:ce:cc:4f:9d:20:49: 94:3a:32:b2:67:63:57:49:9e:24:2f:e9:8b:b4:42: 36:af:96:eb:c5:57:6d:39:8a:c1:08:ba:e0:41:98: dd:6d:da:21:cc:82:53:51:1b:6e:97:f1:05:5d:8d: 31:9c:b0:13:23:50:d5:3d:dc:e7:76:b5:70:73:ea: 25:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F9:B4:72:5E:0D:55:40:11:EC:F5:74:50:96:6E:85:CD:44:C8:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.crl X509v3 Authority Key Identifier: keyid:20:B2:83:BF:40:27:09:EB:3B:DA:12:2E:D0:BE:9E:E8:7A:6C:5B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:3d:aa:70:cd:74:c4:69:ad:2d:a4:95:e1:31:54:6c:c7:18: ff:4a:49:56:bd:db:02:75:04:9f:e6:c9:c8:53:e3:fb:5d:83: 3f:85:2c:ca:8a:16:f8:a9:d8:32:4e:09:9d:84:b0:d5:2d:a5: de:8d:2b:32:ec:c7:a8:b5:ac:7d:97:4f:8a:9c:2b:f9:ba:61: 91:b9:26:ea:52:3c:95:c6:f7:42:d4:67:3e:e0:a4:04:77:8e: 74:be:da:30:f7:78:1e:90:db:0d:d1:ec:1c:5c:72:7b:61:54: 04:e1:a5:3d:9d:13:dc:cd:f2:7f:38:25:96:f1:32:56:cb:55: 0f:a8:45:4d:2c:a6:ef:19:a0:0f:cb:56:6d:a4:27:bc:e0:4f: 71:35:79:a8:07:4d:5a:0a:a7:0d:35:17:a6:89:e3:63:ea:e1: a4:01:44:30:ee:2f:00:64:99:e4:3f:7e:36:ff:c3:e5:41:df: ec:5d:2c:77:f7:bd:83:94:46:14:54:42:aa:79:52:37:64:6f: 65:70:da:77:c6:7f:b9:f5:f0:b0:b1:4a:aa:d0:a0:42:74:ee: a8:f3:4f:74:58:82:69:e7:5a:c1:9d:49:13:6d:5b:cf:e1:33: ca:6b:ce:d5:60:5e:07:5f:b5:16:84:e0:c1:a3:ab:01:10:92: a0:e7:5c:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+4xLKCnVcqr0Fl5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkOWFhM2QtZDA0Zi00MTQ0LTljY2YtOWM3NjA2OGU3 Y2ZhMB4XDTI2MTEwMzIyMDAyM1oXDTI2MTEwNTIyMDAwMFowLzEtMCsGA1UEAxMk ZWQxNDU5ZDMtOGMzNC00MzY2LWFkNTctYzA4YjdhY2IyNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgshqOUWHg71iw1FT7VhiSCWRNpeHM0GPeAdj ckTm3GIXYbr/MK8VaDxLRf9N04OcBp7G2cq0b5XjJ1Xr47+kHZ20q0xVay/E0/eJ 7fblw+U8y62X+JNGGu5LAh23A25Hlnz1tk4lD+OzmpgfSrg4rXpwB83cMeKILWcH IkweGKE5ZgKwm2j7y7J4TGMrj7qw0PZwGzhKZyoRUPbhR143vzHD0K/a+Xc9UsUN NrZaTtQMFCnVIwb3AJ2uVBnOzE+dIEmUOjKyZ2NXSZ4kL+mLtEI2r5brxVdtOYrB CLrgQZjdbdohzIJTURtul/EFXY0xnLATI1DVPdzndrVwc+olMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCD5tHJeDVVAEez1dFCWboXNRMhCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8yMmQ5 YWEzZC1kMDRmLTQxNDQtOWNjZi05Yzc2MDY4ZTdjZmEvMjJkOWFhM2QtZDA0Zi00 MTQ0LTljY2YtOWM3NjA2OGU3Y2ZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzc1MjZhMC1m ZTRlLTQ3NDEtYjM5Yi0zMjMzNTNhMWViZjIvMjJkOWFhM2QtZDA0Zi00MTQ0LTlj Y2YtOWM3NjA2OGU3Y2ZhLzIyZDlhYTNkLWQwNGYtNDE0NC05Y2NmLTljNzYwNjhl N2NmYS5jcmwwHwYDVR0jBBgwFoAUILKDv0AnCes72hIu0L6e6HpsW08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0 MS1iMzliLTMyMzM1M2ExZWJmMi8yMmQ5YWEzZC1kMDRmLTQxNDQtOWNjZi05Yzc2 MDY4ZTdjZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4PapwzXTEaa0tpJXhMVRs xxj/SklWvdsCdQSf5snIU+P7XYM/hSzKihb4qdgyTgmdhLDVLaXejSsy7Meotax9 l0+KnCv5umGRuSbqUjyVxvdC1Gc+4KQEd450vtow93gekNsN0ewcXHJ7YVQE4aU9 nRPczfJ/OCWW8TJWy1UPqEVNLKbvGaAPy1ZtpCe84E9xNXmoB01aCqcNNRemieNj 6uGkAUQw7i8AZJnkP342/8PlQd/sXSx3972DlEYUVEKqeVI3ZG9lcNp3xn+59fCw sUqq0KBCdO6o8090WIJp51rBnUkTbVvP4TPKa87VYF4HX7UWhODBo6sBEJKg51wX -----END CERTIFICATE-----Generated at Wed Nov 4 23:10:56 2026 by rpki-client