$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.mft File: bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.mft (raw, json) Hash identifier: DD9oXA+1JyNLt0D/HpxHaMB4nyvxI2XbXNV7U2wkN94= Subject key identifier: 7D:75:7B:DA:23:0E:DB:39:3A:B6:99:87:10:88:16:2F:52:1D:FD:46 Authority key identifier: 40:01:08:50:32:B9:74:59:61:67:2F:83:02:19:B8:A0:F0:D2:42:E9 Certificate issuer: /CN=bf9f591a-d6f6-4cc2-bc84-cfca996b52ee Certificate serial: 010D0C9F4328584FB889318DED569722C22B6900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.mft Manifest number: 010D0C9F4328584F970EEAC4389EE2788707A7AC Signing time: Tue 03 Nov 2026 20:00:24 +0000 Manifest this update: Tue 03 Nov 2026 20:00:24 +0000 Manifest next update: Fri 06 Nov 2026 20:00:00 +0000 Files and hashes: 1: bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.crl (hash: G/C8Rf2VzKIcHVHD8IR7clMn9OMjG5EsNj6sqMF57rg=) 2: f7f64d8b-a001-3425-9f98-5958bcdcd9c7.roa (hash: fpP8zGhGDlx+EaYxjaIDDP2O3oM8wM5fSBNt0DKyjIE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b8:89:31:8d:ed:56:97:22:c2:2b:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf9f591a-d6f6-4cc2-bc84-cfca996b52ee Validity Not Before: Nov 3 20:00:24 2026 GMT Not After : Nov 6 20:00:00 2026 GMT Subject: CN=9bcb3e91-de98-4c6a-a05f-b17fc91a1672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:f8:88:f2:72:45:11:c0:c0:ee:d2:0a:f6: 3b:59:7c:3c:8e:13:3d:07:ce:68:be:bd:53:e6:c0: 2a:0d:5a:c3:3e:79:c6:d0:c5:76:24:01:c5:f3:5b: c2:76:a0:42:75:0a:2e:a8:f0:27:b6:72:95:b2:07: 3e:9b:9f:3c:20:85:b6:e3:33:07:22:37:7b:de:a2: fe:33:3e:7d:7b:2e:69:a6:d7:71:f4:71:3a:82:a6: 1d:75:26:bf:6b:fc:dc:85:15:20:1b:53:8b:eb:c1: eb:26:5f:ba:03:94:90:b8:08:18:1b:ad:04:5e:e0: 72:21:fa:b3:da:8d:24:fd:34:16:c7:4b:e9:7d:78: c5:8f:cb:6d:ed:1b:65:fc:08:14:b0:eb:c8:40:7b: 29:8d:5b:e9:18:25:57:2b:04:9b:25:88:6a:e4:ae: ef:e8:75:3b:84:99:b8:cb:c6:f6:47:0d:cc:03:51: f6:57:92:8b:c0:b8:19:e1:5f:ef:3c:2a:9d:b7:8e: 5a:00:12:c5:f2:2b:b9:d1:e8:af:b0:02:a2:9d:52: e4:39:f1:2b:50:11:8e:44:c4:38:03:86:3f:d0:de: 4f:9c:5c:e0:54:38:97:31:2b:e1:cd:03:89:a6:ca: cd:12:db:39:bf:56:9a:1e:5c:47:61:75:f7:20:db: ea:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:75:7B:DA:23:0E:DB:39:3A:B6:99:87:10:88:16:2F:52:1D:FD:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.crl X509v3 Authority Key Identifier: keyid:40:01:08:50:32:B9:74:59:61:67:2F:83:02:19:B8:A0:F0:D2:42:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:73:60:95:e3:d4:89:27:09:5d:5b:fe:db:f9:32:f4:d1:79: 5f:cd:c9:3a:78:1b:f5:52:af:68:64:c7:4c:06:75:7e:e6:eb: cb:fb:34:72:42:58:a3:b2:15:58:ca:a3:e9:0b:22:e2:40:cd: d6:2a:fd:b1:93:26:d2:d3:80:85:07:52:fc:7e:4d:c7:46:53: 33:86:9c:99:74:21:14:35:f2:e9:53:6b:10:77:78:e9:2d:cc: 4b:84:73:9f:5d:45:1f:88:d9:fb:30:e3:ee:60:1e:0c:76:ee: c4:8b:04:fe:ce:f0:10:bd:72:91:70:c4:15:dd:fc:42:4e:a7: cb:6a:16:f9:49:e4:99:63:03:7a:74:fa:bb:5f:6d:10:87:3f: 16:99:7f:e9:1d:28:77:a4:62:29:2a:ce:ff:b8:56:a4:0d:d5: 0b:f4:f5:c4:4c:15:92:bf:61:c3:ff:73:d5:f6:a4:1e:c9:c7: 9b:5a:9d:bd:ce:90:5d:69:58:7a:03:a8:35:00:9f:63:db:51: 21:03:1b:54:a2:b1:66:c7:f0:84:3e:b9:5a:9f:48:cd:c6:b8: 83:f7:c3:9b:86:cc:19:5b:93:dc:36:85:2f:32:6c:e8:16:05: ae:52:c9:79:39:c8:28:a8:75:b5:ff:2b:16:f2:6e:1d:d4:64: 15:b5:85:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+4iTGN7VaXIsIraQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY5ZjU5MWEtZDZmNi00Y2MyLWJjODQtY2ZjYTk5NmI1 MmVlMB4XDTI2MTEwMzIwMDAyNFoXDTI2MTEwNjIwMDAwMFowLzEtMCsGA1UEAxMk OWJjYjNlOTEtZGU5OC00YzZhLWEwNWYtYjE3ZmM5MWExNjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx74iPJyRRHAwO7SCvY7WXw8jhM9B85ovr1T 5sAqDVrDPnnG0MV2JAHF81vCdqBCdQouqPAntnKVsgc+m588IIW24zMHIjd73qL+ Mz59ey5pptdx9HE6gqYddSa/a/zchRUgG1OL68HrJl+6A5SQuAgYG60EXuByIfqz 2o0k/TQWx0vpfXjFj8tt7Rtl/AgUsOvIQHspjVvpGCVXKwSbJYhq5K7v6HU7hJm4 y8b2Rw3MA1H2V5KLwLgZ4V/vPCqdt45aABLF8iu50eivsAKinVLkOfErUBGORMQ4 A4Y/0N5PnFzgVDiXMSvhzQOJpsrNEts5v1aaHlxHYXX3INvqtQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH11e9ojDts5OraZhxCIFi9SHf1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iZjlm NTkxYS1kNmY2LTRjYzItYmM4NC1jZmNhOTk2YjUyZWUvYmY5ZjU5MWEtZDZmNi00 Y2MyLWJjODQtY2ZjYTk5NmI1MmVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYmY5ZjU5MWEtZDZmNi00Y2MyLWJj ODQtY2ZjYTk5NmI1MmVlL2JmOWY1OTFhLWQ2ZjYtNGNjMi1iYzg0LWNmY2E5OTZi NTJlZS5jcmwwHwYDVR0jBBgwFoAUQAEIUDK5dFlhZy+DAhm4oPDSQukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iZjlmNTkxYS1kNmY2LTRjYzItYmM4NC1jZmNh OTk2YjUyZWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7c2CV49SJJwldW/7b+TL0 0Xlfzck6eBv1Uq9oZMdMBnV+5uvL+zRyQlijshVYyqPpCyLiQM3WKv2xkybS04CF B1L8fk3HRlMzhpyZdCEUNfLpU2sQd3jpLcxLhHOfXUUfiNn7MOPuYB4Mdu7EiwT+ zvAQvXKRcMQV3fxCTqfLahb5SeSZYwN6dPq7X20Qhz8WmX/pHSh3pGIpKs7/uFak DdUL9PXETBWSv2HD/3PV9qQeycebWp29zpBdaVh6A6g1AJ9j21EhAxtUorFmx/CE Prlan0jNxriD98ObhswZW5PcNoUvMmzoFgWuUsl5OcgoqHW1/ysW8m4d1GQVtYVa -----END CERTIFICATE-----Generated at Tue Nov 3 22:32:49 2026 by rpki-client