$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft File: a987c446-5fc2-44b0-9a41-65296d90d0c2.mft (raw, json) Hash identifier: CFSPGC7KsBt9XNTcciH0qWOke0JYHbtySKofkHR6tQE= Subject key identifier: 5E:02:D2:6F:DA:19:F4:9C:36:30:A3:57:26:A1:28:D6:A5:7D:48:26 Authority key identifier: C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 Certificate issuer: /CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Certificate serial: 010D0C9F4328584F6239891527FF4F53C8326480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft Manifest number: 010D0C9F432858496598AC39FE13BB942B9EE0F3 Signing time: Sat 03 Oct 2026 22:00:25 +0000 Manifest this update: Sat 03 Oct 2026 22:00:25 +0000 Manifest next update: Mon 05 Oct 2026 22:00:00 +0000 Files and hashes: 1: a9736c2d-b353-3032-be0f-62272540e0ac.roa (hash: XubtZKOFH7Vpyer0sOAUcVsjIJAfN0R+0CV7AblmwlI=) 2: a987c446-5fc2-44b0-9a41-65296d90d0c2.crl (hash: U3bG7d/2zqrLVTyaPeSL+NcyLGt2ldSK4f7aAlNQq9g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:39:89:15:27:ff:4f:53:c8:32:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Validity Not Before: Oct 3 22:00:25 2026 GMT Not After : Oct 5 22:00:00 2026 GMT Subject: CN=1f2556bd-1420-4067-b51c-aa8e60cdf779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e5:98:28:40:d1:38:0f:89:5f:2d:9a:be:26: 3b:98:70:33:7b:2f:d7:0b:c7:27:9e:49:cc:c3:d0: 5a:3a:1e:d3:39:32:72:81:32:1e:f9:bf:10:9e:00: 08:78:ca:ca:c7:09:5c:aa:52:ee:72:f8:3d:a4:13: e4:f5:29:fb:1c:eb:2e:ec:0a:8d:bd:d6:f5:8a:96: 8f:0d:e1:b3:34:aa:70:85:05:a5:ee:a7:8f:56:cd: 88:ff:85:0d:9e:de:f1:62:25:8d:14:32:af:b2:c8: 2a:da:db:88:37:89:49:77:04:c3:be:f5:88:74:b1: f3:7f:d8:1f:a1:db:d6:a9:b3:6d:c0:22:b6:03:c4: cc:be:e1:5f:fb:56:a0:9a:d2:f1:3f:a9:45:62:f7: a8:cb:36:cc:64:2a:ce:9b:0b:ec:0e:0c:df:5d:e6: ff:f4:33:3b:a6:39:10:b1:50:2f:d6:42:68:17:ab: 17:b2:84:4a:a9:48:47:1c:cc:a1:40:61:c2:f0:a6: 36:23:ec:e2:eb:16:d7:ec:b5:2c:fe:34:e4:21:2d: 86:51:b8:d8:a9:d0:ac:19:1e:5d:a9:93:8e:dd:45: f9:16:18:47:14:14:97:b6:86:ce:50:57:bb:06:bb: cd:67:dd:fd:e0:ee:a5:80:48:bf:6e:ed:62:57:fc: 44:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:02:D2:6F:DA:19:F4:9C:36:30:A3:57:26:A1:28:D6:A5:7D:48:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl X509v3 Authority Key Identifier: keyid:C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:3a:9e:e3:eb:c5:d7:64:5a:e0:58:95:c9:1b:47:98:0e:94: ec:63:88:ec:cc:69:f1:d4:79:a0:c8:f2:1a:7d:f8:ec:4b:3f: db:bd:7f:84:56:61:84:c4:38:cf:54:a4:e6:48:a6:2d:bc:f6: 1a:76:2e:18:4d:08:66:d6:85:f7:58:de:79:e5:57:34:43:3d: 2b:cc:7e:90:e2:83:cf:d2:7c:ac:f4:ae:bc:e8:34:89:c3:f8: f1:4b:8d:08:d6:56:5e:b5:b3:b7:66:d1:b3:e4:df:ab:94:8f: b8:a9:c1:a7:62:d9:4b:32:80:31:c8:3b:18:94:2f:fa:71:1e: 66:5a:3c:5d:07:bf:01:63:3d:93:d6:dc:9d:2b:ac:73:eb:0e: 9c:1f:ef:64:ea:e2:ed:9d:cc:6e:79:98:71:80:c2:9d:f1:06: 6d:0c:4a:80:21:5a:8a:14:97:f0:1b:78:ee:76:36:82:b2:03: 0d:e9:50:5b:ae:40:1a:cc:a8:f2:c9:a0:83:76:ba:8e:39:05: 7a:43:98:81:e2:b1:6f:db:22:e1:b3:c5:0e:94:41:df:7d:88: 08:40:e8:84:54:68:6b:ec:82:c3:68:99:f4:ab:0d:9b:c9:47: c5:9a:6f:11:e8:bf:0e:42:23:fa:a5:55:0d:fb:51:bb:f9:c2: b4:76:0a:cf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9iOYkVJ/9PU8gyZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk4N2M0NDYtNWZjMi00NGIwLTlhNDEtNjUyOTZkOTBk MGMyMB4XDTI2MTAwMzIyMDAyNVoXDTI2MTAwNTIyMDAwMFowLzEtMCsGA1UEAxMk MWYyNTU2YmQtMTQyMC00MDY3LWI1MWMtYWE4ZTYwY2RmNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuWYKEDROA+JXy2aviY7mHAzey/XC8cnnknM w9BaOh7TOTJygTIe+b8QngAIeMrKxwlcqlLucvg9pBPk9Sn7HOsu7AqNvdb1ipaP DeGzNKpwhQWl7qePVs2I/4UNnt7xYiWNFDKvssgq2tuIN4lJdwTDvvWIdLHzf9gf odvWqbNtwCK2A8TMvuFf+1agmtLxP6lFYveoyzbMZCrOmwvsDgzfXeb/9DM7pjkQ sVAv1kJoF6sXsoRKqUhHHMyhQGHC8KY2I+zi6xbX7LUs/jTkIS2GUbjYqdCsGR5d qZOO3UX5FhhHFBSXtobOUFe7BrvNZ9394O6lgEi/bu1iV/xErwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF4C0m/aGfScNjCjVyahKNalfUgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3 YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5NmQ5MGQwYzIvYTk4N2M0NDYtNWZjMi00 NGIwLTlhNDEtNjUyOTZkOTBkMGMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTk4N2M0NDYtNWZjMi00NGIwLTlh NDEtNjUyOTZkOTBkMGMyL2E5ODdjNDQ2LTVmYzItNDRiMC05YTQxLTY1Mjk2ZDkw ZDBjMi5jcmwwHwYDVR0jBBgwFoAUxJHHXynaUqrFsgOR3kSUROTsNNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5 NmQ5MGQwYzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkOp7j68XXZFrgWJXJG0eY DpTsY4jszGnx1HmgyPIaffjsSz/bvX+EVmGExDjPVKTmSKYtvPYadi4YTQhm1oX3 WN555Vc0Qz0rzH6Q4oPP0nys9K686DSJw/jxS40I1lZetbO3ZtGz5N+rlI+4qcGn YtlLMoAxyDsYlC/6cR5mWjxdB78BYz2T1tydK6xz6w6cH+9k6uLtncxueZhxgMKd 8QZtDEqAIVqKFJfwG3judjaCsgMN6VBbrkAazKjyyaCDdrqOOQV6Q5iB4rFv2yLh s8UOlEHffYgIQOiEVGhr7ILDaJn0qw2byUfFmm8R6L8OQiP6pVUN+1G7+cK0dgrP -----END CERTIFICATE-----Generated at Sun Oct 4 09:51:03 2026 by rpki-client