$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft File: a295a695-e91a-4c5a-8a31-a920a42ea44d.mft (raw, json) Hash identifier: hkoTDD6BM9dXavnU6bybN8oS2ekhQXtBmuay2KVbBFU= Subject key identifier: B7:31:4E:8B:4C:F7:C3:73:EC:03:20:1A:27:B9:E0:67:46:4F:B2:01 Authority key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Certificate issuer: /CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Certificate serial: 010D0C9F4328584F4C3D5BB8606E1C24F81EA480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft Manifest number: 010D0C9F43285849ABC8124D60A5EBB8636DE225 Signing time: Sat 26 Sep 2026 01:00:22 +0000 Manifest this update: Sat 26 Sep 2026 01:00:22 +0000 Manifest next update: Tue 29 Sep 2026 01:00:00 +0000 Files and hashes: 1: 8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa (hash: 92FQMjbjvpjYrGhwABwHNOhBZ606SIYc8Y3QmRzttP0=) 2: a295a695-e91a-4c5a-8a31-a920a42ea44d.crl (hash: gNd7kTef0twLH04URNSNtT+gy0nAifEvZaSkCneVxfw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5b:b8:60:6e:1c:24:f8:1e:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Validity Not Before: Sep 26 01:00:22 2026 GMT Not After : Sep 29 01:00:00 2026 GMT Subject: CN=73466bb8-30ce-48ce-8ddc-bbf447ce53d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:62:47:78:3e:a3:69:ad:17:15:3f:05:a4:c4: 9e:83:30:d7:9f:d5:02:7b:7d:7e:10:e8:01:29:38: 1b:ae:82:50:05:22:f9:04:40:56:7f:12:34:1f:4f: 46:3a:3f:93:e4:f2:ab:6e:b7:7b:b9:04:af:1b:7b: da:3a:5a:2e:9e:1e:c2:04:81:ee:68:86:b6:af:03: 0c:61:10:af:61:0e:34:cd:69:68:c0:41:cd:88:36: e6:c7:96:69:a5:9f:88:2e:c5:17:fa:fd:8d:1e:f7: 90:0d:57:e5:28:70:0f:ee:d5:12:80:00:6d:02:45: 64:9e:32:73:26:ba:f5:b3:f8:19:5f:63:fc:35:b5: 82:81:4c:42:65:45:92:3e:b6:f8:42:20:f4:18:2c: 44:53:ed:c5:58:8f:07:fa:4d:fc:48:cb:a4:73:45: 58:92:a6:9c:8e:eb:4b:21:af:38:d2:78:58:b9:f8: 38:57:dd:67:ce:fc:dd:a3:92:de:a2:54:bb:d9:c6: 50:ca:d9:09:79:c9:fa:47:63:b0:43:27:be:fb:50: e0:c1:db:26:8f:58:50:9d:09:82:a7:10:57:d9:9b: a0:ca:76:33:c0:4b:d0:2f:21:8c:42:7b:47:8c:f0: ed:20:e5:a9:bf:59:5a:b4:e6:93:41:bb:87:19:0b: 0a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:31:4E:8B:4C:F7:C3:73:EC:03:20:1A:27:B9:E0:67:46:4F:B2:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl X509v3 Authority Key Identifier: keyid:C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f3:99:26:6d:da:b3:b1:31:4e:d1:a6:f6:39:69:ac:1c:c9: 18:6b:d3:fa:91:c5:3b:03:f0:9c:2c:4f:1c:67:95:bd:dd:58: ec:fb:76:a5:04:4e:3e:be:2f:95:e5:ea:ce:4c:07:a5:af:88: ee:71:0c:c7:42:79:93:00:c1:32:d7:41:41:4b:78:46:68:03: ea:8d:e8:d3:cd:ba:04:81:ce:69:e7:62:2c:82:59:81:48:02: f7:ac:c5:17:71:f0:b8:4a:0d:5c:10:a0:67:d1:3c:56:23:20: e4:a1:1e:a3:67:1d:ee:3f:81:1a:83:38:a3:27:0f:c1:ef:14: 05:05:5f:23:47:d8:8a:48:7e:c1:f9:6b:ef:60:cb:9e:89:d1: 52:d1:31:1b:52:b8:b4:b3:b5:e2:df:77:b8:88:55:2e:f8:8d: 29:e8:f9:55:fe:c0:4d:ce:38:6c:90:7b:ce:3a:e1:37:b0:38: ed:1b:06:65:c5:e1:65:59:cb:15:61:29:3f:8d:13:f6:05:67: 67:69:34:51:36:97:f0:41:d3:0d:78:a1:37:d8:7a:80:34:c5: 77:f9:31:62:df:74:d1:10:e7:4a:da:0f:ee:0a:0f:bb:0d:0e: 73:df:c9:6e:ce:36:55:74:33:ac:6e:2d:d8:58:8a:77:5f:12: b7:98:f3:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9MPVu4YG4cJPgepIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVh NDRkMB4XDTI2MDkyNjAxMDAyMloXDTI2MDkyOTAxMDAwMFowLzEtMCsGA1UEAxMk NzM0NjZiYjgtMzBjZS00OGNlLThkZGMtYmJmNDQ3Y2U1M2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGJHeD6jaa0XFT8FpMSegzDXn9UCe31+EOgB KTgbroJQBSL5BEBWfxI0H09GOj+T5PKrbrd7uQSvG3vaOlounh7CBIHuaIa2rwMM YRCvYQ40zWlowEHNiDbmx5ZppZ+ILsUX+v2NHveQDVflKHAP7tUSgABtAkVknjJz Jrr1s/gZX2P8NbWCgUxCZUWSPrb4QiD0GCxEU+3FWI8H+k38SMukc0VYkqacjutL Ia840nhYufg4V91nzvzdo5LeolS72cZQytkJecn6R2OwQye++1Dgwdsmj1hQnQmC pxBX2ZugynYzwEvQLyGMQntHjPDtIOWpv1latOaTQbuHGQsK9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLcxTotM98Nz7AMgGie54GdGT7IBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1 YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvYTI5NWE2OTUtZTkxYS00 YzVhLThhMzEtYTkyMGE0MmVhNDRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI5NWE2OTUtZTkxYS00YzVhLThh MzEtYTkyMGE0MmVhNDRkL2EyOTVhNjk1LWU5MWEtNGM1YS04YTMxLWE5MjBhNDJl YTQ0ZC5jcmwwHwYDVR0jBBgwFoAUxrdjkJ2ZQm4W9Z6SLSD1iDDBqmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIw YTQyZWE0NGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBE85kmbdqzsTFO0ab2OWms HMkYa9P6kcU7A/CcLE8cZ5W93Vjs+3alBE4+vi+V5erOTAelr4jucQzHQnmTAMEy 10FBS3hGaAPqjejTzboEgc5p52IsglmBSAL3rMUXcfC4Sg1cEKBn0TxWIyDkoR6j Zx3uP4EagzijJw/B7xQFBV8jR9iKSH7B+WvvYMueidFS0TEbUri0s7Xi33e4iFUu +I0p6PlV/sBNzjhskHvOOuE3sDjtGwZlxeFlWcsVYSk/jRP2BWdnaTRRNpfwQdMN eKE32HqANMV3+TFi33TREOdK2g/uCg+7DQ5z38luzjZVdDOsbi3YWIp3XxK3mPO1 -----END CERTIFICATE-----Generated at Sat Sep 26 09:28:56 2026 by rpki-client