$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft File: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft (raw, json) Hash identifier: jWC3Ak/r9IFla83bxLGiCr8gMqXnXk81a+HYnB0PQNo= Subject key identifier: 47:11:71:40:6D:62:C8:33:89:33:5D:D8:98:04:5B:44:8B:7E:D2:D3 Authority key identifier: 66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 Certificate issuer: /CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Certificate serial: 010D0C9F4328584F742364B7B713E85A0AB20180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft Manifest number: 010D0C9F4328584073A84707688B06971843D950 Signing time: Sat 10 Oct 2026 08:00:23 +0000 Manifest this update: Sat 10 Oct 2026 08:00:23 +0000 Manifest next update: Mon 12 Oct 2026 08:00:00 +0000 Files and hashes: 1: 210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa (hash: A7MJ05tgVDdGgHYjdSEG0kPNxLTQxjnURoLOS3IH18w=) 2: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl (hash: 9InaGMQkF+pougyxvv4i4vdZZk0rIHvudqbTciGW5nA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:23:64:b7:b7:13:e8:5a:0a:b2:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Validity Not Before: Oct 10 08:00:23 2026 GMT Not After : Oct 12 08:00:00 2026 GMT Subject: CN=ccb4ffc9-b12f-4023-b3e3-dc829d33bb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:76:bc:08:7e:fa:16:11:43:cb:01:da:d4:ad: 94:63:58:7f:ec:ea:f0:eb:cf:95:a2:7f:09:74:92: 94:88:17:c2:f7:07:e5:70:05:e8:45:99:83:d1:7d: a1:57:78:6d:ae:37:53:c5:75:63:62:78:42:8d:2f: 4c:db:4f:9b:64:1f:2d:47:8f:b2:62:19:a3:4f:1a: 12:86:ab:c1:17:89:65:de:07:5c:a3:80:8c:94:3a: 56:af:c5:8e:99:3f:0a:66:1b:e4:aa:7e:58:07:4f: ec:2d:d1:42:a6:25:cf:d9:a3:95:7c:d4:b7:f4:bb: 8d:66:c6:51:81:bf:f8:5d:50:ff:ff:c3:fa:eb:fe: 84:be:c7:18:fc:6f:20:db:3a:e7:f4:59:1f:c4:ed: 6a:df:0b:9e:42:12:c2:19:58:40:1b:49:e0:3d:43: 68:87:49:51:ea:c6:79:3a:c3:5e:b0:b3:87:8f:0b: 58:e8:2f:a2:b6:a7:f9:2e:b1:99:8c:90:43:b7:5f: 2b:40:84:95:95:e1:af:46:6c:c0:61:65:81:71:6a: ad:42:89:0f:f4:dd:73:fa:3f:5d:b7:1f:52:98:59: 6a:5b:b2:b2:e1:f8:f7:17:ec:9c:ae:4e:7a:59:c2: 8d:5d:c7:e0:a4:19:90:51:ac:dc:19:d3:a4:98:35: 1f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:11:71:40:6D:62:C8:33:89:33:5D:D8:98:04:5B:44:8B:7E:D2:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl X509v3 Authority Key Identifier: keyid:66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:dc:4c:e1:95:18:73:b4:44:d9:72:a0:c5:bd:12:cc:fa:89: cd:6d:94:68:f5:d1:f7:50:fc:2b:d3:ee:e9:54:46:25:04:48: 8e:ad:0f:27:82:8c:eb:b9:a6:12:e8:34:26:d6:e3:72:9d:46: 0a:30:db:8f:89:17:6e:58:d6:ac:b0:99:f8:33:4a:7d:ea:c0: 03:91:f0:07:c4:f4:d0:15:8d:26:d1:46:f7:8c:40:1e:56:c8: c5:38:9e:5f:8f:e2:28:71:43:ac:fb:9e:f6:96:40:bc:1f:e3: ee:8c:68:ac:9d:33:19:e1:01:4b:56:4a:d5:57:23:48:7a:74: 23:b1:df:86:b3:ec:a2:b9:88:14:df:09:cb:2f:ea:bd:7a:93: 9e:53:d3:f5:7e:3d:a0:e3:b5:79:69:2a:27:b1:41:e6:96:80: 32:f8:be:f0:86:33:f9:be:d6:96:f9:05:00:f9:04:62:d8:7e: 1b:0d:3d:21:94:9d:91:34:e6:0e:a4:0a:d3:05:39:8d:3d:80: 75:9e:02:b6:78:66:ac:b7:f5:65:30:62:ab:d7:50:50:af:14: fd:f1:bd:2b:ef:65:92:4c:b2:7f:1c:05:91:b9:e1:d3:02:96: 69:c2:72:90:8a:d9:67:5f:96:a5:ce:46:c5:65:f1:71:09:61: 14:a4:51:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE90I2S3txPoWgqyAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU4ZjJkYmUtMWY0OC00NTA3LThlZjktOTczMmI0Yjgy YmUzMB4XDTI2MTAxMDA4MDAyM1oXDTI2MTAxMjA4MDAwMFowLzEtMCsGA1UEAxMk Y2NiNGZmYzktYjEyZi00MDIzLWIzZTMtZGM4MjlkMzNiYjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ha8CH76FhFDywHa1K2UY1h/7Orw68+Von8J dJKUiBfC9wflcAXoRZmD0X2hV3htrjdTxXVjYnhCjS9M20+bZB8tR4+yYhmjTxoS hqvBF4ll3gdco4CMlDpWr8WOmT8KZhvkqn5YB0/sLdFCpiXP2aOVfNS39LuNZsZR gb/4XVD//8P66/6EvscY/G8g2zrn9FkfxO1q3wueQhLCGVhAG0ngPUNoh0lR6sZ5 OsNesLOHjwtY6C+itqf5LrGZjJBDt18rQISVleGvRmzAYWWBcWqtQokP9N1z+j9d tx9SmFlqW7Ky4fj3F+ycrk56WcKNXcfgpBmQUazcGdOkmDUf1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEcRcUBtYsgziTNd2JgEW0SLftLTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZThm MmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMyYjRiODJiZTMvOGU4ZjJkYmUtMWY0OC00 NTA3LThlZjktOTczMmI0YjgyYmUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGU4ZjJkYmUtMWY0OC00NTA3LThl ZjktOTczMmI0YjgyYmUzLzhlOGYyZGJlLTFmNDgtNDUwNy04ZWY5LTk3MzJiNGI4 MmJlMy5jcmwwHwYDVR0jBBgwFoAUZlSJsbi5hGjZ08UjDPCUkEGjyDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZThmMmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMy YjRiODJiZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+3EzhlRhztETZcqDFvRLM +onNbZRo9dH3UPwr0+7pVEYlBEiOrQ8ngozruaYS6DQm1uNynUYKMNuPiRduWNas sJn4M0p96sADkfAHxPTQFY0m0Ub3jEAeVsjFOJ5fj+IocUOs+572lkC8H+PujGis nTMZ4QFLVkrVVyNIenQjsd+Gs+yiuYgU3wnLL+q9epOeU9P1fj2g47V5aSonsUHm loAy+L7whjP5vtaW+QUA+QRi2H4bDT0hlJ2RNOYOpArTBTmNPYB1ngK2eGast/Vl MGKr11BQrxT98b0r72WSTLJ/HAWRueHTApZpwnKQitlnX5alzkbFZfFxCWEUpFFe -----END CERTIFICATE-----Generated at Sun Oct 11 07:40:23 2026 by rpki-client