$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft File: a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft (raw, json) Hash identifier: QSTJcjXykWl2BUOgskA9CB9sDtQzZCG1gilNDwFAtFY= Subject key identifier: F0:6D:3C:E0:92:F2:4F:50:B5:29:12:C4:CD:5F:98:A9:9E:B3:BA:66 Authority key identifier: D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE Certificate issuer: /CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8 Certificate serial: 010D0C9F4328584F3FAD48C79D2351C9431B2F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft Manifest number: 010D0C9F4328584A1A12077C4B595F510F327DA3 Signing time: Mon 21 Sep 2026 13:00:23 +0000 Manifest this update: Mon 21 Sep 2026 13:00:23 +0000 Manifest next update: Thu 24 Sep 2026 13:00:00 +0000 Files and hashes: 1: a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl (hash: fl4X16yxeOBUDo71EH0ZpzVv9icNf7JayvbXVythI/Q=) 2: c5f99082-735a-3bc4-848d-adbcd08fa635.roa (hash: OQN++INcvjkve8PAbtmV0RP0cKSvhU9JhdDV9MhdH2M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:48:c7:9d:23:51:c9:43:1b:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8 Validity Not Before: Sep 21 13:00:23 2026 GMT Not After : Sep 24 13:00:00 2026 GMT Subject: CN=bfc070bb-6db4-4126-bfa1-565f6bf87ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ef:70:3f:6c:3c:35:37:e0:93:4b:96:bb:5c: 88:6b:08:71:a5:c6:c7:40:b8:95:a9:43:93:58:8d: a3:8d:ab:54:fb:ae:eb:af:03:e9:02:63:1c:36:05: ac:07:74:6e:01:71:53:85:4b:28:52:e2:4a:89:9a: f5:43:61:f5:15:56:40:13:05:8c:21:f7:17:0b:6f: 78:9b:7b:5c:8e:f8:d0:7f:74:1f:6d:b7:31:aa:e9: 1f:d2:2f:fa:6a:c2:63:28:cb:62:5e:da:db:26:12: 99:3e:20:98:70:10:48:5e:c1:5f:45:8a:98:c2:3e: 9e:31:e2:cc:10:4d:e9:32:45:77:06:4f:93:28:83: b6:d9:98:e3:5c:14:d7:52:42:d6:c4:1d:3f:ad:9e: 9e:8b:4a:df:13:0f:41:33:e8:09:0a:26:e9:42:8a: 1e:92:4f:e8:44:4e:1a:c7:32:94:9c:b6:96:6b:79: f2:45:67:25:a9:fe:ba:66:5c:96:b3:96:19:1d:23: 86:c5:5e:31:dd:d1:ec:37:bc:11:08:bd:63:1f:1b: 01:c1:eb:36:f4:31:c1:3d:ce:51:bc:42:7e:28:6d: 57:4f:8d:1f:a4:93:76:29:42:87:92:e2:ce:cd:01: 1c:13:ea:78:5c:bc:2d:45:be:b9:79:c5:d2:53:6a: 02:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6D:3C:E0:92:F2:4F:50:B5:29:12:C4:CD:5F:98:A9:9E:B3:BA:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl X509v3 Authority Key Identifier: keyid:D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ab:43:61:a1:b6:c3:05:9f:88:7e:69:2b:9d:68:75:c8:5c: e2:90:0b:65:36:08:2f:dc:4b:47:d7:57:44:4f:b2:bb:f0:cf: d5:f5:11:26:a2:ea:9c:2d:ae:aa:c2:12:96:83:b6:83:40:f7: 69:35:7b:89:80:23:4b:b5:99:21:99:df:04:f5:29:3f:88:29: 32:d6:74:74:7b:1a:0b:8b:12:22:05:6a:69:46:7b:23:0d:7e: 61:b0:a9:69:78:cb:a5:7f:67:8f:4c:c2:17:30:d1:ed:f8:12: fb:76:85:3a:d4:77:88:85:b6:e2:78:81:dc:90:7b:4a:1b:a9: 16:c0:fe:64:a4:c1:a1:e6:c5:34:d6:16:7e:92:2a:d0:8a:1b: 97:58:61:8a:b2:1a:6d:11:60:15:b2:8d:00:8e:3a:24:06:47: e7:56:46:9d:1d:44:b1:7e:cd:da:92:fe:0a:63:4d:f9:cb:d2: 9d:b5:0e:59:96:4b:bf:3b:55:16:cb:d6:6e:ce:48:3b:78:c1: 0f:ef:a2:53:ce:1d:6e:45:34:b7:fc:23:d3:5e:80:ad:77:98: 5c:60:51:20:a5:92:80:25:30:41:55:33:bf:99:0e:cb:e0:69: ec:b3:ae:73:db:8f:96:57:54:b4:a3:c4:19:5e:08:61:0c:f2: a6:85:34:c8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8/rUjHnSNRyUMbLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRmMmYxYTctMDdlNS00MmY4LWIxYWEtMWUyZTk1YTY1 ZmY4MB4XDTI2MDkyMTEzMDAyM1oXDTI2MDkyNDEzMDAwMFowLzEtMCsGA1UEAxMk YmZjMDcwYmItNmRiNC00MTI2LWJmYTEtNTY1ZjZiZjg3ZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO9wP2w8NTfgk0uWu1yIawhxpcbHQLiVqUOT WI2jjatU+67rrwPpAmMcNgWsB3RuAXFThUsoUuJKiZr1Q2H1FVZAEwWMIfcXC294 m3tcjvjQf3Qfbbcxqukf0i/6asJjKMtiXtrbJhKZPiCYcBBIXsFfRYqYwj6eMeLM EE3pMkV3Bk+TKIO22ZjjXBTXUkLWxB0/rZ6ei0rfEw9BM+gJCibpQooekk/oRE4a xzKUnLaWa3nyRWclqf66ZlyWs5YZHSOGxV4x3dHsN7wRCL1jHxsBwes29DHBPc5R vEJ+KG1XT40fpJN2KUKHkuLOzQEcE+p4XLwtRb65ecXSU2oCHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPBtPOCS8k9QtSkSxM1fmKmes7pmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNGYy ZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJlOTVhNjVmZjgvYTRmMmYxYTctMDdlNS00 MmY4LWIxYWEtMWUyZTk1YTY1ZmY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTRmMmYxYTctMDdlNS00MmY4LWIx YWEtMWUyZTk1YTY1ZmY4L2E0ZjJmMWE3LTA3ZTUtNDJmOC1iMWFhLTFlMmU5NWE2 NWZmOC5jcmwwHwYDVR0jBBgwFoAU1qWC4Tn6LXUH223MkamWkgxxO64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNGYyZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJl OTVhNjVmZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtq0NhobbDBZ+IfmkrnWh1 yFzikAtlNggv3EtH11dET7K78M/V9REmouqcLa6qwhKWg7aDQPdpNXuJgCNLtZkh md8E9Sk/iCky1nR0exoLixIiBWppRnsjDX5hsKlpeMulf2ePTMIXMNHt+BL7doU6 1HeIhbbieIHckHtKG6kWwP5kpMGh5sU01hZ+kirQihuXWGGKshptEWAVso0Ajjok BkfnVkadHUSxfs3akv4KY035y9KdtQ5Zlku/O1UWy9Zuzkg7eMEP76JTzh1uRTS3 /CPTXoCtd5hcYFEgpZKAJTBBVTO/mQ7L4Gnss65z24+WV1S0o8QZXghhDPKmhTTI -----END CERTIFICATE-----Generated at Tue Sep 22 11:46:25 2026 by rpki-client