$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft File: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft (raw, json) Hash identifier: Ra7CZ5N5Au7fNvOtkZFTttQ21rLCJRdiNVqkKh+W/3E= Subject key identifier: 56:9E:2B:C4:3D:6E:9B:C7:8E:E8:66:35:53:D1:2E:D1:6D:D4:9A:CE Authority key identifier: 47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E Certificate issuer: /CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Certificate serial: 010D0C9F4328584FA3042870BEB633EDB5478080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft Manifest number: 010D0C9F4328584073A8387DE519A5D299924C92 Signing time: Tue 27 Oct 2026 03:00:24 +0000 Manifest this update: Tue 27 Oct 2026 03:00:24 +0000 Manifest next update: Fri 30 Oct 2026 03:00:00 +0000 Files and hashes: 1: ab75e324-5884-3478-bcb0-f1254ed9f0bf.roa (hash: 9HjeJwK8V/4f1X0NzorLemWb7k29xYuvYx+hMuezqOg=) 2: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl (hash: +hs8lrMSWs/XV8Pnglc12nMuIqxjBJyXczyC1+PqdlY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a3:04:28:70:be:b6:33:ed:b5:47:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Validity Not Before: Oct 27 03:00:24 2026 GMT Not After : Oct 30 03:00:00 2026 GMT Subject: CN=5b8e0c97-5ab6-4b2c-974c-f32ae79ef09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e5:85:08:56:f9:21:eb:52:8e:15:15:1c:ea: 2e:e6:84:40:98:b7:31:1d:04:a6:87:ba:20:57:05: 38:37:54:f3:c9:a6:34:b1:e7:0e:73:08:b7:65:aa: fc:99:21:f6:84:3a:40:73:53:7e:fc:50:01:0b:47: 70:2b:23:70:42:72:77:0b:6e:39:8b:5d:7b:84:d5: b3:73:4a:80:e7:06:f6:38:f0:fa:c1:ed:5a:32:3a: 09:cf:74:f2:c4:05:77:6e:93:01:fc:39:a2:9a:7b: fb:e9:2a:d3:a8:5f:54:2f:27:7e:a0:96:f5:cf:54: 84:ed:41:b8:2e:ac:f0:ef:6f:4e:af:af:ca:91:00: 59:d6:70:6e:de:99:b4:b7:c1:f7:5f:2a:72:be:3c: 1b:75:17:5e:a5:bf:ac:28:d7:05:fb:b4:0f:2d:54: fd:2e:c6:55:e1:bb:f1:4c:5a:ca:3b:09:a5:17:ce: 5b:6f:5c:b8:f1:3d:65:87:2f:14:82:9e:7c:49:fa: 56:e1:5a:07:c5:dc:33:86:bc:8b:e6:72:1d:a2:f0: 94:50:05:b5:b6:9e:8e:17:c5:a6:d7:e0:0e:cf:53: a7:ea:b0:7a:f8:b5:c5:cf:1b:63:5b:0c:fa:fa:99: 9a:20:7d:12:2e:f9:de:b0:ce:87:9a:93:55:54:73: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9E:2B:C4:3D:6E:9B:C7:8E:E8:66:35:53:D1:2E:D1:6D:D4:9A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl X509v3 Authority Key Identifier: keyid:47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:48:42:40:81:4e:0c:51:ac:55:ad:ae:41:66:5c:0c:70:34: ea:18:33:23:5e:24:ad:0f:62:fd:b6:12:9b:dd:d0:e2:90:ec: df:50:0a:11:cb:eb:4c:79:9f:f9:c5:a1:eb:ec:90:83:95:cb: 2a:09:01:82:a1:68:54:ab:78:c6:73:42:31:9b:3e:8a:e9:9f: f6:15:ff:80:4f:4a:46:4f:c4:b5:fb:53:fa:65:12:34:83:1c: 21:90:94:12:46:f9:8b:68:ef:f7:52:0a:0c:4d:dc:46:c7:63: dd:cb:8e:59:58:09:8a:12:da:de:c2:09:23:e9:18:93:d2:06: 5a:f2:ee:83:c2:60:b6:74:1f:89:59:5f:4f:8e:09:8b:01:52: 31:ce:30:26:63:ce:92:ab:0b:f0:8a:d0:b1:5d:f7:16:b4:30: 6f:27:5c:33:a3:52:31:35:a8:3b:c3:73:3e:f9:a4:1f:79:35: ff:2d:e9:66:7e:d4:a9:be:90:4f:77:91:49:7a:e0:db:4d:9d: 08:8d:17:9c:a7:9d:20:8f:1c:a5:bd:49:55:f3:b5:ef:c3:ea: 3f:b1:e4:10:40:cd:48:8c:03:75:43:ac:e3:6b:ee:9a:f7:99: 31:bf:6f:fb:8e:aa:cc:fb:65:46:33:9a:45:ae:bb:d7:ed:da: 76:79:1e:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+jBChwvrYz7bVHgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwOWI0MGMtZmUwOS00NmU2LWEzOGMtOWNmZTQ0Y2Nk ZWEyMB4XDTI2MTAyNzAzMDAyNFoXDTI2MTAzMDAzMDAwMFowLzEtMCsGA1UEAxMk NWI4ZTBjOTctNWFiNi00YjJjLTk3NGMtZjMyYWU3OWVmMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOWFCFb5IetSjhUVHOou5oRAmLcxHQSmh7og VwU4N1TzyaY0secOcwi3Zar8mSH2hDpAc1N+/FABC0dwKyNwQnJ3C245i117hNWz c0qA5wb2OPD6we1aMjoJz3TyxAV3bpMB/Dmimnv76SrTqF9ULyd+oJb1z1SE7UG4 Lqzw729Or6/KkQBZ1nBu3pm0t8H3XypyvjwbdRdepb+sKNcF+7QPLVT9LsZV4bvx TFrKOwmlF85bb1y48T1lhy8Ugp58SfpW4VoHxdwzhryL5nIdovCUUAW1tp6OF8Wm 1+AOz1On6rB6+LXFzxtjWwz6+pmaIH0SLvnesM6HmpNVVHMyeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFaeK8Q9bpvHjuhmNVPRLtFt1JrOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5 YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2ZlNDRjY2RlYTIvZDcwOWI0MGMtZmUwOS00 NmU2LWEzOGMtOWNmZTQ0Y2NkZWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwOWI0MGMtZmUwOS00NmU2LWEz OGMtOWNmZTQ0Y2NkZWEyL2Q3MDliNDBjLWZlMDktNDZlNi1hMzhjLTljZmU0NGNj ZGVhMi5jcmwwHwYDVR0jBBgwFoAUR0BTe30b5nKFNPPSqmXpX2eOD44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2Zl NDRjY2RlYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2SEJAgU4MUaxVra5BZlwM cDTqGDMjXiStD2L9thKb3dDikOzfUAoRy+tMeZ/5xaHr7JCDlcsqCQGCoWhUq3jG c0Ixmz6K6Z/2Ff+AT0pGT8S1+1P6ZRI0gxwhkJQSRvmLaO/3UgoMTdxGx2Pdy45Z WAmKEtrewgkj6RiT0gZa8u6DwmC2dB+JWV9PjgmLAVIxzjAmY86SqwvwitCxXfcW tDBvJ1wzo1IxNag7w3M++aQfeTX/LelmftSpvpBPd5FJeuDbTZ0IjRecp50gjxyl vUlV87Xvw+o/seQQQM1IjAN1Q6zja+6a95kxv2/7jqrM+2VGM5pFrrvX7dp2eR7S -----END CERTIFICATE-----Generated at Tue Oct 27 16:49:41 2026 by rpki-client