$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/42cd32e9-d79f-4259-9025-ee33e1446dea/42cd32e9-d79f-4259-9025-ee33e1446dea.mft File: 42cd32e9-d79f-4259-9025-ee33e1446dea.mft (raw, json) Hash identifier: AxY9Y6qP/vINAFFsjpcid+JAegJoBti5mhkGTQYD0Zc= Subject key identifier: FF:DF:0A:F5:85:A1:4E:0A:11:A9:EF:05:0B:48:2B:EF:B4:16:E8:A7 Authority key identifier: 42:B7:33:13:70:F0:C2:D1:C6:E6:C5:30:5C:6B:C0:71:C6:CB:65:81 Certificate issuer: /CN=42cd32e9-d79f-4259-9025-ee33e1446dea Certificate serial: 010D0C9F4328584FB25EEE7A84B064015D44EA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/42cd32e9-d79f-4259-9025-ee33e1446dea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/42cd32e9-d79f-4259-9025-ee33e1446dea/42cd32e9-d79f-4259-9025-ee33e1446dea.mft Manifest number: 010D0C9F4328584F2F33AA8B3249250C5A41B9AF Signing time: Sun 01 Nov 2026 15:00:25 +0000 Manifest this update: Sun 01 Nov 2026 15:00:25 +0000 Manifest next update: Tue 03 Nov 2026 15:00:00 +0000 Files and hashes: 1: 42cd32e9-d79f-4259-9025-ee33e1446dea.crl (hash: dt/MFvQOTtIi22VYASB0ieSAWsTH9gNX9z3PA4x9ANg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/42cd32e9-d79f-4259-9025-ee33e1446dea/42cd32e9-d79f-4259-9025-ee33e1446dea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/42cd32e9-d79f-4259-9025-ee33e1446dea/42cd32e9-d79f-4259-9025-ee33e1446dea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/42cd32e9-d79f-4259-9025-ee33e1446dea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:5e:ee:7a:84:b0:64:01:5d:44:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42cd32e9-d79f-4259-9025-ee33e1446dea Validity Not Before: Nov 1 15:00:25 2026 GMT Not After : Nov 3 15:00:00 2026 GMT Subject: CN=2f5f5aec-bf95-456a-babe-7fe4e2311b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:9d:a0:6a:2a:75:b6:1d:1c:c4:5e:a6:4d: da:65:53:47:ff:12:f1:db:a8:cb:d3:43:ac:c9:a2: a2:68:f3:df:a9:c5:f5:3f:d1:9b:e5:89:49:3d:e1: c3:38:d0:4e:7a:ae:c5:0f:ad:59:11:4d:10:ce:8d: ac:22:50:4f:ca:cd:01:8b:92:aa:08:2a:ce:eb:4b: 6d:28:c4:57:61:e6:47:19:a8:c5:11:70:03:92:e1: 27:31:a7:7d:72:c8:91:15:60:67:17:0f:45:42:3e: ff:83:5b:d4:f3:d2:81:1e:8a:23:d7:7a:d0:ac:4f: aa:89:9e:22:5d:9c:3c:3b:aa:3b:ab:56:da:00:dc: 32:88:9e:92:1b:83:4e:b8:1e:40:f1:b0:da:f1:9e: 66:77:3c:92:5a:07:5c:5f:d6:7d:d1:6c:fe:85:d3: c8:02:a4:0e:cc:f5:35:d2:1b:6f:3a:bd:70:45:b2: a5:9a:4a:d8:42:f2:37:26:71:38:94:0d:24:e9:c6: 56:fc:1e:7f:c9:19:51:38:a3:5f:f8:50:ef:06:97: a2:1b:49:ae:53:ab:61:cf:35:36:f0:7c:b9:4e:26: 54:54:b5:42:0b:d7:19:f2:b1:d2:66:10:19:ba:74: 0d:a3:7f:42:7b:6a:92:bc:fc:fb:41:97:6f:fe:43: 2e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DF:0A:F5:85:A1:4E:0A:11:A9:EF:05:0B:48:2B:EF:B4:16:E8:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/42cd32e9-d79f-4259-9025-ee33e1446dea/42cd32e9-d79f-4259-9025-ee33e1446dea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/42cd32e9-d79f-4259-9025-ee33e1446dea/42cd32e9-d79f-4259-9025-ee33e1446dea.crl X509v3 Authority Key Identifier: keyid:42:B7:33:13:70:F0:C2:D1:C6:E6:C5:30:5C:6B:C0:71:C6:CB:65:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/42cd32e9-d79f-4259-9025-ee33e1446dea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:42:aa:62:51:1c:9f:87:96:32:49:4c:3f:d4:cf:10:a3:bd: 7c:89:9a:db:35:ca:21:92:06:df:86:2a:d7:9f:a4:d5:d9:4b: 9f:74:88:e8:7c:6b:79:15:88:54:8e:44:1d:d7:89:9e:f2:d3: e2:dd:c2:8a:90:7f:85:36:f6:a1:3e:01:c3:96:fb:8d:7e:55: 51:01:b9:2c:76:b8:0e:bc:00:92:1b:3b:fb:f2:8c:4b:8a:89: fb:24:8d:b4:ce:17:72:c7:cf:6e:7f:79:7f:8e:6e:9a:c3:6e: 8a:e7:cb:72:41:bd:4d:06:ff:04:99:0a:d5:a0:91:01:dc:bf: 06:36:39:5b:d9:3c:78:84:44:6b:94:b7:00:19:cf:c6:1f:00: 57:6a:69:55:94:23:68:37:25:9c:24:52:0a:d1:ef:80:3a:6f: 93:ab:18:b6:55:29:f3:92:8c:30:cf:b0:9a:6f:b1:7f:cd:37: f9:86:44:1e:06:81:ef:21:1e:59:a7:00:a4:a5:a2:ca:41:14: b8:b4:3c:24:06:92:39:5b:8f:84:5f:a6:d5:e4:af:51:7b:5a: 57:80:56:ca:dc:06:8e:a9:71:11:d1:b9:c7:0d:f2:db:c4:82: 62:f8:c0:2c:44:fd:43:d7:19:46:90:0d:d1:f9:3d:ac:6a:ab: f5:fc:ed:d3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+yXu56hLBkAV1E6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJjZDMyZTktZDc5Zi00MjU5LTkwMjUtZWUzM2UxNDQ2 ZGVhMB4XDTI2MTEwMTE1MDAyNVoXDTI2MTEwMzE1MDAwMFowLzEtMCsGA1UEAxMk MmY1ZjVhZWMtYmY5NS00NTZhLWJhYmUtN2ZlNGUyMzExYjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMydoGoqdbYdHMRepk3aZVNH/xLx26jL00Os yaKiaPPfqcX1P9Gb5YlJPeHDONBOeq7FD61ZEU0Qzo2sIlBPys0Bi5KqCCrO60tt KMRXYeZHGajFEXADkuEnMad9csiRFWBnFw9FQj7/g1vU89KBHooj13rQrE+qiZ4i XZw8O6o7q1baANwyiJ6SG4NOuB5A8bDa8Z5mdzySWgdcX9Z90Wz+hdPIAqQOzPU1 0htvOr1wRbKlmkrYQvI3JnE4lA0k6cZW/B5/yRlROKNf+FDvBpeiG0muU6thzzU2 8Hy5TiZUVLVCC9cZ8rHSZhAZunQNo39Ce2qSvPz7QZdv/kMuHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP/fCvWFoU4KEanvBQtIK++0FuinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80MmNk MzJlOS1kNzlmLTQyNTktOTAyNS1lZTMzZTE0NDZkZWEvNDJjZDMyZTktZDc5Zi00 MjU5LTkwMjUtZWUzM2UxNDQ2ZGVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNDJjZDMyZTktZDc5Zi00MjU5LTkw MjUtZWUzM2UxNDQ2ZGVhLzQyY2QzMmU5LWQ3OWYtNDI1OS05MDI1LWVlMzNlMTQ0 NmRlYS5jcmwwHwYDVR0jBBgwFoAUQrczE3DwwtHG5sUwXGvAccbLZYEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS80MmNkMzJlOS1kNzlmLTQyNTktOTAyNS1lZTMz ZTE0NDZkZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcQqpiURyfh5YySUw/1M8Q o718iZrbNcohkgbfhirXn6TV2UufdIjofGt5FYhUjkQd14me8tPi3cKKkH+FNvah PgHDlvuNflVRAbksdrgOvACSGzv78oxLion7JI20zhdyx89uf3l/jm6aw26K58ty Qb1NBv8EmQrVoJEB3L8GNjlb2Tx4hERrlLcAGc/GHwBXamlVlCNoNyWcJFIK0e+A Om+Tqxi2VSnzkowwz7Cab7F/zTf5hkQeBoHvIR5ZpwCkpaLKQRS4tDwkBpI5W4+E X6bV5K9Re1pXgFbK3AaOqXER0bnHDfLbxIJi+MAsRP1D1xlGkA3R+T2saqv1/O3T -----END CERTIFICATE-----Generated at Mon Nov 2 11:53:48 2026 by rpki-client