$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft File: 25a4f200-c007-4476-b7c6-b306830b991d.mft (raw, json) Hash identifier: u1p4xmRbVqSarZ4bHSTU/lcBmUnWakrI+esa7ya59Gc= Subject key identifier: 7C:6D:EE:FB:99:33:FC:BC:54:7E:6C:7F:85:5B:3A:99:99:36:99:93 Authority key identifier: A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC Certificate issuer: /CN=25a4f200-c007-4476-b7c6-b306830b991d Certificate serial: 010D0C9F4328584F405FFC4D8D165A4857D58100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft Manifest number: 010D0C9F4328584AE956642DBB94A1019AE0B3D7 Signing time: Mon 21 Sep 2026 19:00:24 +0000 Manifest this update: Mon 21 Sep 2026 19:00:24 +0000 Manifest next update: Thu 24 Sep 2026 19:00:00 +0000 Files and hashes: 1: 087748f0-1dfe-3009-a1dc-390079e6b5d8.roa (hash: 6/Fmu+99eA8AYBlWmmdGZJmZteROmm0C1LmtFWe/HJk=) 2: 25a4f200-c007-4476-b7c6-b306830b991d.crl (hash: vdfOT0vlE2ROdd6hCwf7LUoOcOhVqES0FOQT5B2ZalQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:5f:fc:4d:8d:16:5a:48:57:d5:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a4f200-c007-4476-b7c6-b306830b991d Validity Not Before: Sep 21 19:00:24 2026 GMT Not After : Sep 24 19:00:00 2026 GMT Subject: CN=5aab5c47-6656-4a2c-aa2a-5bd0a469693e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1b:a6:be:fc:8c:d5:33:83:33:5d:91:a2:7a: c9:74:bd:f6:be:3b:a8:95:dc:a5:ee:2a:06:15:58: 3d:86:29:59:97:64:9e:df:ef:36:ba:84:b5:40:6f: 22:98:e7:c4:86:a4:63:f5:8d:ac:3f:62:3f:93:44: 41:60:81:06:f3:49:4b:2f:fe:bf:58:87:8f:4d:5d: 75:48:98:81:79:6e:48:e9:a5:cb:4a:8a:1f:86:12: bd:ca:db:82:04:54:b5:b6:42:a3:a9:ed:76:7d:93: c0:ce:8c:4f:e1:f0:f1:14:70:7a:84:1d:c0:1a:76: 01:64:08:b6:50:26:a0:bf:8c:13:08:3b:86:dc:98: 03:c4:01:e3:e6:7f:9e:e0:59:93:f5:db:a6:d0:5f: 75:f4:fb:e9:dd:7b:38:99:a8:b7:1c:4d:49:f6:9b: 81:77:54:5b:f3:ea:44:35:ef:96:4f:1b:5b:71:07: f5:28:fa:4e:33:19:f8:7b:6e:e5:c7:a3:55:37:aa: 80:6e:1a:ae:91:b3:71:6b:02:55:b7:ab:10:cb:20: 9b:ca:08:60:6b:4a:31:b1:41:63:56:1a:97:ca:52: 40:62:d8:33:df:33:0e:3f:ec:cd:9e:46:94:03:9f: 1c:06:b3:07:ca:c9:81:42:f1:17:5d:13:9c:d6:2d: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6D:EE:FB:99:33:FC:BC:54:7E:6C:7F:85:5B:3A:99:99:36:99:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.crl X509v3 Authority Key Identifier: keyid:A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7b:7d:4a:dd:3d:8b:a5:f5:9f:1f:91:0c:ed:a1:50:53:89: 52:93:c1:0a:66:83:56:f1:2e:ef:97:b1:5c:d0:9c:d6:0c:fd: 4f:ee:31:97:31:4e:f0:b2:fe:f6:53:8f:47:10:5d:c8:3d:ca: 0d:e1:43:a1:8e:82:4b:7c:4d:70:15:fa:f4:bc:34:ab:b5:d7: 5e:7f:48:e1:aa:8b:26:f2:6b:5e:ad:08:30:4d:37:15:9a:ed: 9c:a0:1f:0c:35:6b:8c:cc:6c:d6:ab:68:10:a4:54:01:65:2f: 2a:c7:fd:45:27:2e:93:ce:35:49:aa:5a:9f:34:73:ad:5b:f8: 11:da:ac:ab:95:48:eb:29:49:dd:c8:25:fd:42:d9:9f:21:ab: ce:94:bc:be:6f:7c:54:8f:07:13:3c:ec:34:95:21:25:cb:be: b1:8b:2d:83:bd:88:49:d1:8e:70:25:01:56:6d:7a:e2:67:cf: 29:b9:98:07:5a:24:6e:50:4a:de:40:33:b5:2d:c1:36:86:97: b0:3d:de:4f:bb:96:16:8d:d2:d7:df:3d:b7:dc:fd:70:94:2c: b4:20:c2:63:ef:b8:b8:7b:00:34:c5:98:3c:c5:08:90:b1:1d: ff:e2:f9:c7:56:3c:32:21:1f:21:59:82:8b:5a:37:93:83:b7: f8:ee:ae:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9AX/xNjRZaSFfVgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVhNGYyMDAtYzAwNy00NDc2LWI3YzYtYjMwNjgzMGI5 OTFkMB4XDTI2MDkyMTE5MDAyNFoXDTI2MDkyNDE5MDAwMFowLzEtMCsGA1UEAxMk NWFhYjVjNDctNjY1Ni00YTJjLWFhMmEtNWJkMGE0Njk2OTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBumvvyM1TODM12RonrJdL32vjuoldyl7ioG FVg9hilZl2Se3+82uoS1QG8imOfEhqRj9Y2sP2I/k0RBYIEG80lLL/6/WIePTV11 SJiBeW5I6aXLSoofhhK9ytuCBFS1tkKjqe12fZPAzoxP4fDxFHB6hB3AGnYBZAi2 UCagv4wTCDuG3JgDxAHj5n+e4FmT9dum0F919Pvp3Xs4mai3HE1J9puBd1Rb8+pE Ne+WTxtbcQf1KPpOMxn4e27lx6NVN6qAbhqukbNxawJVt6sQyyCbyghga0oxsUFj VhqXylJAYtgz3zMOP+zNnkaUA58cBrMHysmBQvEXXROc1i1g+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHxt7vuZM/y8VH5sf4VbOpmZNpmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNWE0 ZjIwMC1jMDA3LTQ0NzYtYjdjNi1iMzA2ODMwYjk5MWQvMjVhNGYyMDAtYzAwNy00 NDc2LWI3YzYtYjMwNjgzMGI5OTFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjVhNGYyMDAtYzAwNy00NDc2LWI3 YzYtYjMwNjgzMGI5OTFkLzI1YTRmMjAwLWMwMDctNDQ3Ni1iN2M2LWIzMDY4MzBi OTkxZC5jcmwwHwYDVR0jBBgwFoAUoNkEWJPZ16jooHqyA7QWitgXIuwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNWE0ZjIwMC1jMDA3LTQ0NzYtYjdjNi1iMzA2 ODMwYjk5MWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZe31K3T2LpfWfH5EM7aFQ U4lSk8EKZoNW8S7vl7Fc0JzWDP1P7jGXMU7wsv72U49HEF3IPcoN4UOhjoJLfE1w Ffr0vDSrtddef0jhqosm8mterQgwTTcVmu2coB8MNWuMzGzWq2gQpFQBZS8qx/1F Jy6TzjVJqlqfNHOtW/gR2qyrlUjrKUndyCX9QtmfIavOlLy+b3xUjwcTPOw0lSEl y76xiy2DvYhJ0Y5wJQFWbXriZ88puZgHWiRuUEreQDO1LcE2hpewPd5Pu5YWjdLX 3z233P1wlCy0IMJj77i4ewA0xZg8xQiQsR3/4vnHVjwyIR8hWYKLWjeTg7f47q7K -----END CERTIFICATE-----Generated at Tue Sep 22 09:30:09 2026 by rpki-client