$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.mft File: 8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.mft (raw, json) Hash identifier: 85SWQVZp5JsO8ln4g8bk81nDa5FWGMzeZjoG6Bg9+ng= Subject key identifier: 02:BE:BA:87:DA:2D:FC:86:97:64:1E:0A:FD:DA:19:B0:92:2D:71:72 Authority key identifier: 3B:0F:EC:F5:5E:7B:56:78:89:03:1E:C2:76:12:33:6A:B6:43:D4:2D Certificate issuer: /CN=8d1e98c1-8c5d-4b39-a869-8752e6d77e6b Certificate serial: 010D0C9F4328584FB5A0B44F5765103E5AD58980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.mft Manifest number: 010D0C9F4328584F6FE876E39F94990A0E87641B Signing time: Mon 02 Nov 2026 19:00:23 +0000 Manifest this update: Mon 02 Nov 2026 19:00:23 +0000 Manifest next update: Wed 04 Nov 2026 19:00:00 +0000 Files and hashes: 1: 8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.crl (hash: 2Bm3cgu2FzkZi/c3U+dN+zHQNkrHaARNYO8GYOqs+XQ=) 2: c8e9b9b8-f5ac-3a99-87b6-791b01760ac6.roa (hash: SzJGQ7VuVfeLrC5Gyx8iCgSL1ftUKmLrhSvJh4+dQps=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b5:a0:b4:4f:57:65:10:3e:5a:d5:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1e98c1-8c5d-4b39-a869-8752e6d77e6b Validity Not Before: Nov 2 19:00:23 2026 GMT Not After : Nov 4 19:00:00 2026 GMT Subject: CN=41696bfc-7c87-4922-878f-79a8e809582d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d0:91:c0:e3:74:df:4c:05:30:9d:74:c0:26: 5f:46:b1:5d:e6:9b:3f:ee:9f:6b:e1:54:f5:18:d7: 53:20:9c:87:6e:02:56:a2:23:50:f6:c3:fa:0e:25: 20:da:0d:bf:e6:e3:1b:47:5a:f6:0a:e6:bf:09:59: 28:88:4d:3c:12:c0:d2:30:f3:d7:03:57:cb:12:4e: 95:4c:e5:e6:d4:f6:00:49:38:c3:74:29:e5:96:ec: fe:1e:0b:42:64:1b:e2:9d:8f:d6:1c:1c:2e:cc:aa: 03:90:95:c5:58:18:65:a8:e2:07:f3:ee:9c:a5:a8: cf:56:3e:8d:50:bf:0e:a7:01:af:9c:9c:81:39:09: 20:30:b2:9a:9c:bf:57:5a:19:1e:cd:9a:ee:0f:ce: 41:74:85:11:6f:9a:07:5c:8e:ba:2c:74:39:b7:b9: 6c:66:1b:34:b3:25:51:09:ab:9f:47:21:67:7b:48: fe:39:62:71:3e:f0:0b:36:dc:06:02:2f:06:c1:3c: 36:78:bb:fb:5a:c8:77:09:97:da:09:3b:84:6b:33: 30:4b:2a:14:0e:7d:90:2d:17:e3:3b:85:df:ea:87: 05:e1:a1:51:2f:70:78:ee:75:3c:9e:6b:46:96:cd: 18:6b:50:b8:38:34:d9:29:8b:e0:71:14:80:62:8f: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BE:BA:87:DA:2D:FC:86:97:64:1E:0A:FD:DA:19:B0:92:2D:71:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.crl X509v3 Authority Key Identifier: keyid:3B:0F:EC:F5:5E:7B:56:78:89:03:1E:C2:76:12:33:6A:B6:43:D4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:58:b2:a5:5c:8b:fb:9a:80:71:88:a4:12:7a:d3:a3:f4:37: ff:12:7b:fc:77:e1:2f:c4:17:3a:26:7c:96:dd:23:93:cf:5a: 73:99:c7:2a:75:9a:89:69:b5:d8:87:16:d2:85:fd:c9:94:0d: 5f:2e:a9:c2:32:24:b0:4d:e2:be:31:d4:58:a4:bf:61:45:1b: d7:cf:76:d1:85:a2:de:cd:3e:15:da:aa:4b:48:96:2a:e5:f6: 36:32:03:86:0a:fc:96:b6:ab:d4:20:84:06:4d:99:b2:0b:51: 82:29:01:94:ba:a7:c5:4c:12:58:f8:c4:01:52:0d:ea:77:ea: ba:26:ae:bd:14:1e:ba:3d:b7:5c:b6:42:01:4f:3f:1a:85:9d: 9e:90:4f:81:44:91:ec:85:f4:09:eb:1d:36:1e:fd:f9:e2:ad: ec:2b:dd:7f:b9:bf:be:94:0a:36:a7:08:a4:df:ea:6c:41:d7: cf:6e:cd:57:39:7b:a6:13:f6:68:dd:4f:eb:53:c5:ac:81:aa: 3c:8b:ee:6e:05:e4:e9:1b:b3:09:c1:c0:74:61:26:51:18:c6: b1:03:b8:f9:c7:ca:f9:76:18:14:4f:1f:3a:3b:ae:ad:ed:d3: 8c:b0:fd:17:9b:1c:1b:87:3d:86:a5:44:07:5e:99:11:bd:e6: f1:65:d9:ab -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+1oLRPV2UQPlrViYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQxZTk4YzEtOGM1ZC00YjM5LWE4NjktODc1MmU2ZDc3 ZTZiMB4XDTI2MTEwMjE5MDAyM1oXDTI2MTEwNDE5MDAwMFowLzEtMCsGA1UEAxMk NDE2OTZiZmMtN2M4Ny00OTIyLTg3OGYtNzlhOGU4MDk1ODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9CRwON030wFMJ10wCZfRrFd5ps/7p9r4VT1 GNdTIJyHbgJWoiNQ9sP6DiUg2g2/5uMbR1r2Cua/CVkoiE08EsDSMPPXA1fLEk6V TOXm1PYASTjDdCnlluz+HgtCZBvinY/WHBwuzKoDkJXFWBhlqOIH8+6cpajPVj6N UL8OpwGvnJyBOQkgMLKanL9XWhkezZruD85BdIURb5oHXI66LHQ5t7lsZhs0syVR CaufRyFne0j+OWJxPvALNtwGAi8GwTw2eLv7Wsh3CZfaCTuEazMwSyoUDn2QLRfj O4Xf6ocF4aFRL3B47nU8nmtGls0Ya1C4ODTZKYvgcRSAYo+2zQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAK+uofaLfyGl2QeCv3aGbCSLXFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84ZDFl OThjMS04YzVkLTRiMzktYTg2OS04NzUyZTZkNzdlNmIvOGQxZTk4YzEtOGM1ZC00 YjM5LWE4NjktODc1MmU2ZDc3ZTZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOGQxZTk4YzEtOGM1ZC00YjM5LWE4 NjktODc1MmU2ZDc3ZTZiLzhkMWU5OGMxLThjNWQtNGIzOS1hODY5LTg3NTJlNmQ3 N2U2Yi5jcmwwHwYDVR0jBBgwFoAUOw/s9V57VniJAx7CdhIzarZD1C0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS84ZDFlOThjMS04YzVkLTRiMzktYTg2OS04NzUy ZTZkNzdlNmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKWLKlXIv7moBxiKQSetOj 9Df/Env8d+EvxBc6JnyW3SOTz1pzmccqdZqJabXYhxbShf3JlA1fLqnCMiSwTeK+ MdRYpL9hRRvXz3bRhaLezT4V2qpLSJYq5fY2MgOGCvyWtqvUIIQGTZmyC1GCKQGU uqfFTBJY+MQBUg3qd+q6Jq69FB66PbdctkIBTz8ahZ2ekE+BRJHshfQJ6x02Hv35 4q3sK91/ub++lAo2pwik3+psQdfPbs1XOXumE/Zo3U/rU8Wsgao8i+5uBeTpG7MJ wcB0YSZRGMaxA7j5x8r5dhgUTx86O66t7dOMsP0Xmxwbhz2GpUQHXpkRvebxZdmr -----END CERTIFICATE-----Generated at Tue Nov 3 04:08:15 2026 by rpki-client