$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484/395a3b5b-c1cd-4dd2-b405-46454e121484.mft File: 395a3b5b-c1cd-4dd2-b405-46454e121484.mft (raw, json) Hash identifier: ZYF/K7zo4EDb7ZbMYjcNupf/NaQVkknj9oXwPeXsLuY= Subject key identifier: BA:0D:78:77:E4:26:1D:56:2D:45:97:33:5C:65:FD:AF:04:F7:82:67 Authority key identifier: C2:68:00:45:2B:16:33:80:0B:46:AF:CE:32:CF:97:D7:BC:6E:5D:89 Certificate issuer: /CN=395a3b5b-c1cd-4dd2-b405-46454e121484 Certificate serial: 010D0C9F4328584F4A60E8DEFFFBB2EF798530C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484/395a3b5b-c1cd-4dd2-b405-46454e121484.mft Manifest number: 010D0C9F4328584C9BB43F6013DF6FEA163E0CFC Signing time: Fri 25 Sep 2026 09:00:23 +0000 Manifest this update: Fri 25 Sep 2026 09:00:23 +0000 Manifest next update: Mon 28 Sep 2026 09:00:00 +0000 Files and hashes: 1: 395a3b5b-c1cd-4dd2-b405-46454e121484.crl (hash: CUEssz+LcBJZmhFJZGgtoYklDHrq5VvWktNMdiyomwg=) 2: e5a067ba-79c7-3c6f-8cf3-5bbba4faf814.roa (hash: /JD87mQgHalGcCVK2XFt+RfuCfeE7WIaGl0ik1dLxtw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484/395a3b5b-c1cd-4dd2-b405-46454e121484.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484/395a3b5b-c1cd-4dd2-b405-46454e121484.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:60:e8:de:ff:fb:b2:ef:79:85:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=395a3b5b-c1cd-4dd2-b405-46454e121484 Validity Not Before: Sep 25 09:00:23 2026 GMT Not After : Sep 28 09:00:00 2026 GMT Subject: CN=10d7d50e-7fc5-49a5-957c-fe32aa9eb8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:29:38:fa:ca:6c:2d:29:3a:b5:5d:7f:55:59: bc:80:60:e7:8e:e6:28:58:99:85:53:98:28:5a:a3: 5c:3e:2a:c0:cb:c2:18:e1:8b:eb:bb:06:2e:bb:73: 9e:47:5e:16:3c:1f:35:e3:22:de:85:af:7f:21:8e: f7:fa:fb:20:e5:55:50:7b:73:1f:4b:15:86:7f:83: 67:a5:52:d9:2c:f3:10:30:3f:ac:a6:9c:b0:f6:3d: a4:6b:70:b9:ab:de:d9:16:42:2a:e0:f4:41:18:d6: df:2c:62:a2:e8:24:66:9e:ee:5c:bf:ef:24:6d:4f: bf:5c:ad:00:d5:2f:9d:03:bc:52:90:38:d0:7a:c2: 0f:57:71:17:8e:1b:a9:2c:8a:3f:e0:c6:d9:ba:d1: 0a:1d:f1:26:ee:80:4e:25:bc:03:3b:02:fa:45:30: aa:46:90:eb:07:00:0d:e9:a2:8a:05:53:40:06:0b: 13:a2:54:7a:98:2e:de:6f:c2:d0:74:7c:99:05:09: 74:75:f4:98:23:c8:88:90:a4:78:0c:04:27:0b:d6: 47:f1:d0:b2:8f:c4:d5:38:9a:21:5c:31:7e:0f:38: 4e:e7:f6:48:60:6f:b5:40:7e:df:fc:81:bb:ee:e9: 59:45:4a:54:0f:e1:10:6a:f5:48:1a:0e:2f:e5:e2: c3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0D:78:77:E4:26:1D:56:2D:45:97:33:5C:65:FD:AF:04:F7:82:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484/395a3b5b-c1cd-4dd2-b405-46454e121484.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484/395a3b5b-c1cd-4dd2-b405-46454e121484.crl X509v3 Authority Key Identifier: keyid:C2:68:00:45:2B:16:33:80:0B:46:AF:CE:32:CF:97:D7:BC:6E:5D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fd:2a:58:6f:74:26:af:fc:48:53:53:12:bd:e2:f0:44:b2: 57:15:17:41:8c:e4:f1:22:43:a6:0d:5b:4b:0c:8e:3a:8d:89: 08:05:40:fb:20:49:b7:b0:d7:af:7c:3e:38:15:1e:b6:43:b9: 1a:9f:cc:e1:5e:d6:27:bf:90:b4:5f:73:57:bf:e2:20:1f:c6: b3:d5:fb:7c:9f:e3:32:1e:15:8b:4a:67:5c:09:e4:fd:c4:3e: 18:6a:4b:db:c0:3e:58:f4:07:02:2a:a0:a0:09:2a:6d:ea:43: 7e:7d:cd:99:86:ea:48:d6:18:41:2d:34:f1:e5:55:7f:eb:2f: 58:50:55:c7:40:71:df:77:76:9a:e5:43:e5:a5:f9:a5:a1:e1: 8c:f0:fb:7e:8c:9f:b4:4a:25:65:1d:eb:ac:8d:c3:15:0c:9e: c6:12:dc:a3:d0:f6:43:17:5b:72:95:6b:a7:2c:88:08:0a:d7: 65:2f:e6:93:69:1a:ef:07:a3:75:b6:26:dd:e6:5d:8a:5f:7a: 92:c1:70:8d:88:5d:3f:cb:7e:91:46:f4:eb:ba:ef:55:d8:6e: 0c:e7:c7:91:99:14:c0:b0:c6:8c:8d:da:b1:c0:64:89:bc:67: 93:4b:32:1f:ea:12:df:f6:70:75:f7:09:34:af:92:ba:9d:2c: fc:91:44:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9KYOje//uy73mFMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk1YTNiNWItYzFjZC00ZGQyLWI0MDUtNDY0NTRlMTIx NDg0MB4XDTI2MDkyNTA5MDAyM1oXDTI2MDkyODA5MDAwMFowLzEtMCsGA1UEAxMk MTBkN2Q1MGUtN2ZjNS00OWE1LTk1N2MtZmUzMmFhOWViOGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzik4+spsLSk6tV1/VVm8gGDnjuYoWJmFU5go WqNcPirAy8IY4YvruwYuu3OeR14WPB814yLeha9/IY73+vsg5VVQe3MfSxWGf4Nn pVLZLPMQMD+sppyw9j2ka3C5q97ZFkIq4PRBGNbfLGKi6CRmnu5cv+8kbU+/XK0A 1S+dA7xSkDjQesIPV3EXjhupLIo/4MbZutEKHfEm7oBOJbwDOwL6RTCqRpDrBwAN 6aKKBVNABgsTolR6mC7eb8LQdHyZBQl0dfSYI8iIkKR4DAQnC9ZH8dCyj8TVOJoh XDF+DzhO5/ZIYG+1QH7f/IG77ulZRUpUD+EQavVIGg4v5eLDQQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLoNeHfkJh1WLUWXM1xl/a8E94JnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zOTVh M2I1Yi1jMWNkLTRkZDItYjQwNS00NjQ1NGUxMjE0ODQvMzk1YTNiNWItYzFjZC00 ZGQyLWI0MDUtNDY0NTRlMTIxNDg0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMzk1YTNiNWItYzFjZC00ZGQyLWI0 MDUtNDY0NTRlMTIxNDg0LzM5NWEzYjViLWMxY2QtNGRkMi1iNDA1LTQ2NDU0ZTEy MTQ4NC5jcmwwHwYDVR0jBBgwFoAUwmgARSsWM4ALRq/OMs+X17xuXYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zOTVhM2I1Yi1jMWNkLTRkZDItYjQwNS00NjQ1 NGUxMjE0ODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCF/SpYb3Qmr/xIU1MSveLw RLJXFRdBjOTxIkOmDVtLDI46jYkIBUD7IEm3sNevfD44FR62Q7kan8zhXtYnv5C0 X3NXv+IgH8az1ft8n+MyHhWLSmdcCeT9xD4YakvbwD5Y9AcCKqCgCSpt6kN+fc2Z hupI1hhBLTTx5VV/6y9YUFXHQHHfd3aa5UPlpfmloeGM8Pt+jJ+0SiVlHeusjcMV DJ7GEtyj0PZDF1tylWunLIgICtdlL+aTaRrvB6N1tibd5l2KX3qSwXCNiF0/y36R RvTruu9V2G4M58eRmRTAsMaMjdqxwGSJvGeTSzIf6hLf9nB19wk0r5K6nSz8kUSm -----END CERTIFICATE-----Generated at Fri Sep 25 22:53:17 2026 by rpki-client