$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft File: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft (raw, json) Hash identifier: srJO/LrrAzCBGmqtbwrMRqqWq1Xyay86InP+WbREtf8= Subject key identifier: 60:95:62:17:A2:03:BE:4D:E1:A5:82:9B:71:E4:B3:6C:02:BD:0D:29 Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584F40423DF408706D1E819AAD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft Manifest number: 010D0C9F43285848565C3129D3EC730D3401FA63 Signing time: Mon 21 Sep 2026 18:00:25 +0000 Manifest this update: Mon 21 Sep 2026 18:00:25 +0000 Manifest next update: Thu 24 Sep 2026 18:00:00 +0000 Files and hashes: 1: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl (hash: tnM9IZsY+uoH5D8h79yBAA6vwOwDQjt1tMaD6LnpuO0=) 2: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (hash: bDvGZaIaoewoZKqOOn9jMk9Yk/BVtCbXdE0IWmYsZZ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:42:3d:f4:08:70:6d:1e:81:9a:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Sep 21 18:00:25 2026 GMT Not After : Sep 24 18:00:00 2026 GMT Subject: CN=56561a88-00ed-490d-affa-45ba089a5dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:28:ab:ae:c2:c5:d0:6b:09:8a:6c:b8:29:ce: 2d:80:20:05:ab:28:73:ea:d3:5d:01:a9:97:13:e2: 13:be:88:a6:b0:a9:31:3b:10:47:cf:aa:63:79:26: 06:b6:90:07:84:96:1d:56:dc:a1:b7:67:fb:7e:f3: a5:34:0d:af:4c:f5:52:39:c5:cf:78:f0:55:0a:cd: d2:d7:d8:e7:e0:1a:ad:a0:94:bd:e2:8f:12:ab:80: 13:e9:72:ca:23:b0:25:af:f1:c4:ef:8b:98:34:bd: 60:b3:fe:28:e9:8a:8b:51:14:fe:a4:9c:e3:d0:5f: ed:9a:86:81:80:58:ad:db:a9:50:88:ed:f3:cc:b5: 0a:60:95:94:ab:dc:cc:29:4d:f9:1b:2f:48:d1:59: 60:b6:5e:f9:26:23:03:2a:1c:bc:c1:79:7e:54:0e: 43:e6:3e:87:b1:de:6d:a8:be:f2:7a:7d:36:3b:e8: 50:d3:30:41:85:b3:d3:7d:93:bd:3b:bb:dd:bc:2f: aa:4c:5b:42:6f:06:47:fc:56:75:0c:04:cf:9b:57: af:f7:a3:b5:7f:7b:f3:c4:33:f6:9e:2c:f8:11:64: 1e:61:de:56:69:57:31:35:96:47:1e:54:5f:cd:1e: 8e:3b:d2:8e:92:74:26:02:ab:90:b5:96:3b:c7:94: aa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:95:62:17:A2:03:BE:4D:E1:A5:82:9B:71:E4:B3:6C:02:BD:0D:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:04:77:8c:62:54:35:c5:a1:22:e7:85:ff:4d:e1:e5:ac:4d: 2f:1d:b9:d5:a5:bb:e0:79:a4:45:5c:a9:93:70:9a:b3:e8:ce: bb:5d:14:51:e3:89:53:ee:a7:82:0a:9c:dd:57:5d:5d:61:a9: 3c:bf:0e:a6:2e:e7:90:35:0d:31:fb:20:6b:6d:14:fa:34:64: d1:d3:c1:79:e5:2b:53:0c:67:07:f6:eb:26:bc:ca:42:09:2a: 32:b4:4d:a4:bf:28:85:91:93:eb:3b:3f:b4:b0:84:16:b0:92: ae:38:b1:ac:2d:3e:05:9b:eb:16:b9:1d:c1:15:91:23:77:d5: c6:42:a6:94:90:04:af:ca:ae:be:b9:ad:05:24:fd:88:de:83: b3:92:0c:1b:39:cc:25:f4:f0:54:45:7d:f4:87:25:dd:ad:c1: 1c:75:e4:aa:63:0d:dc:57:da:da:c0:c8:75:5e:ff:6c:0d:75: c2:a8:09:5a:f3:9d:ae:33:69:8e:d5:c4:87:ac:81:9a:89:15: 61:d3:f2:8b:71:6f:21:e6:2d:b0:17:cc:07:3b:88:ee:7d:01: c6:37:44:83:8a:23:76:c8:e6:ef:4c:75:ee:ab:da:65:91:31: 64:28:33:31:2b:e7:20:a9:23:20:18:df:af:c5:17:c3:ee:99: 90:66:a6:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9AQj30CHBtHoGarYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI2MDkyMTE4MDAyNVoXDTI2MDkyNDE4MDAwMFowLzEtMCsGA1UEAxMk NTY1NjFhODgtMDBlZC00OTBkLWFmZmEtNDViYTA4OWE1ZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCirrsLF0GsJimy4Kc4tgCAFqyhz6tNdAamX E+ITvoimsKkxOxBHz6pjeSYGtpAHhJYdVtyht2f7fvOlNA2vTPVSOcXPePBVCs3S 19jn4BqtoJS94o8Sq4AT6XLKI7Alr/HE74uYNL1gs/4o6YqLURT+pJzj0F/tmoaB gFit26lQiO3zzLUKYJWUq9zMKU35Gy9I0Vlgtl75JiMDKhy8wXl+VA5D5j6Hsd5t qL7yen02O+hQ0zBBhbPTfZO9O7vdvC+qTFtCbwZH/FZ1DATPm1ev96O1f3vzxDP2 niz4EWQeYd5WaVcxNZZHHlRfzR6OO9KOknQmAquQtZY7x5Sq3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGCVYheiA75N4aWCm3Hks2wCvQ0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvMjUzOTdjMzMtODRkMS00 YTk1LTlkNGMtNDIxYzdkOTVkMGY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFBHeMYlQ1xaEi54X/TeHl rE0vHbnVpbvgeaRFXKmTcJqz6M67XRRR44lT7qeCCpzdV11dYak8vw6mLueQNQ0x +yBrbRT6NGTR08F55StTDGcH9usmvMpCCSoytE2kvyiFkZPrOz+0sIQWsJKuOLGs LT4Fm+sWuR3BFZEjd9XGQqaUkASvyq6+ua0FJP2I3oOzkgwbOcwl9PBURX30hyXd rcEcdeSqYw3cV9rawMh1Xv9sDXXCqAla852uM2mO1cSHrIGaiRVh0/KLcW8h5i2w F8wHO4jufQHGN0SDiiN2yObvTHXuq9plkTFkKDMxK+cgqSMgGN+vxRfD7pmQZqZ6 -----END CERTIFICATE-----Generated at Tue Sep 22 12:17:37 2026 by rpki-client