$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.mft File: 0ca7346d-fe29-4c44-aeef-2693f005a12d.mft (raw, json) Hash identifier: zi25DdCCU1IM4+OJJwiUlLIKVNHr+mycDjd+gwg9g5Y= Subject key identifier: 35:B5:CE:88:B9:82:97:8A:ED:80:5E:FE:CF:72:74:CA:70:B7:EB:7B Authority key identifier: 41:81:00:FB:EF:F6:A6:ED:EC:6F:04:F6:40:65:7A:B4:9A:B1:BE:C3 Certificate issuer: /CN=0ca7346d-fe29-4c44-aeef-2693f005a12d Certificate serial: 010D0C9F4328584F7D53EF16E42BBCD140BAB980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.mft Manifest number: 010D0C9F4328584E5B158E8A451412CA23AF0C6A Signing time: Tue 13 Oct 2026 15:00:24 +0000 Manifest this update: Tue 13 Oct 2026 15:00:24 +0000 Manifest next update: Fri 16 Oct 2026 15:00:00 +0000 Files and hashes: 1: 0ca7346d-fe29-4c44-aeef-2693f005a12d.crl (hash: 0fWtNgMtEQVr83rc/dRQl28xYigRLtp+4X57PHKhlJI=) 2: 0fa69968-fdce-37b5-a023-28d1f3870b91.roa (hash: ecMtnuMsuNheNB3dGf9oMP/pweJjehlW+4ZTyCCEOJ0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:53:ef:16:e4:2b:bc:d1:40:ba:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ca7346d-fe29-4c44-aeef-2693f005a12d Validity Not Before: Oct 13 15:00:24 2026 GMT Not After : Oct 16 15:00:00 2026 GMT Subject: CN=0ef8f8d0-2a20-486b-80d6-4d870a8fd75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:45:69:80:d9:98:15:c8:5a:46:95:9b:6a:83: 3c:f9:ec:10:02:4a:53:a7:ac:c6:75:48:1a:12:16: e4:ec:16:24:e3:ca:ed:4b:0a:b5:a9:9e:59:ba:3f: a6:d2:0e:10:59:e8:0c:c6:47:c1:64:95:5f:b4:0a: 0c:d0:5f:80:60:f4:bd:fe:12:27:64:0d:3b:8a:e7: 6e:6b:03:54:43:ab:d9:66:82:68:99:aa:f8:e1:de: 57:8c:4f:b4:27:36:dd:a6:a6:0a:9c:b7:03:5a:67: 06:ff:01:74:35:0d:14:87:9b:97:63:88:78:d6:07: 6c:f2:f0:11:aa:78:03:ca:69:9b:84:a6:9e:1b:f4: 6e:86:ef:a4:a6:d6:de:4b:62:82:61:8e:33:1b:db: 74:f0:c7:57:64:d9:00:56:c6:6d:32:a2:21:40:f8: 51:07:85:56:92:27:33:c0:ff:b9:c9:e2:3b:c9:e6: 02:a8:09:23:8d:6d:05:cb:13:7c:87:03:3f:3e:5b: 0d:0a:81:cb:ee:bc:09:96:29:52:82:1d:86:89:40: bf:91:99:6c:f0:fa:2e:d4:d4:6d:2c:40:95:d3:11: 51:de:5a:0b:46:99:76:3e:5d:aa:d7:ef:1d:2e:32: 78:dd:36:c9:f5:6f:bd:13:2c:ee:ab:16:8d:91:e6: 9d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B5:CE:88:B9:82:97:8A:ED:80:5E:FE:CF:72:74:CA:70:B7:EB:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.crl X509v3 Authority Key Identifier: keyid:41:81:00:FB:EF:F6:A6:ED:EC:6F:04:F6:40:65:7A:B4:9A:B1:BE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:22:af:3c:ff:13:06:7f:98:b5:2e:13:14:4a:60:16:16:5f: 8d:3a:18:1e:b7:41:fb:29:ad:84:1e:1c:66:1f:02:56:20:0e: 02:6e:4d:c9:60:64:14:b7:6d:8a:b8:b7:59:70:3b:a5:20:28: 00:c5:9a:d0:08:2a:d4:2f:cc:c3:ea:86:63:82:f7:a4:b7:19: 55:23:35:10:26:92:f6:4f:84:06:e2:68:5a:a4:8b:92:7b:7f: 96:dc:17:60:e3:08:46:d8:fa:2d:5c:93:f4:05:02:99:f7:be: 8c:7b:11:1b:d0:75:49:b1:82:14:b9:b7:2b:76:33:1a:81:36: dd:fe:e9:21:1c:2b:b3:c1:71:53:11:fc:23:5b:ad:5a:eb:8a: fb:7b:6a:7e:53:81:77:e4:9c:ca:65:a6:64:d7:3a:30:2a:92: f6:70:ad:b0:39:25:f1:50:a7:3c:35:22:e2:da:0e:83:30:cc: 89:ed:9e:ff:1d:37:de:b2:66:60:4e:17:24:d1:b0:c2:35:f7: 07:47:b6:1c:98:36:e6:27:a8:6a:43:6d:61:4f:a9:50:bb:71: bf:8c:ee:05:ad:4f:03:3d:13:fe:7d:67:e6:a2:e6:3d:5b:75: d1:84:46:f2:21:a1:c4:b0:fb:2b:fb:db:2f:1d:f5:ed:d4:6d: fc:db:f8:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE99U+8W5Cu80UC6uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNhNzM0NmQtZmUyOS00YzQ0LWFlZWYtMjY5M2YwMDVh MTJkMB4XDTI2MTAxMzE1MDAyNFoXDTI2MTAxNjE1MDAwMFowLzEtMCsGA1UEAxMk MGVmOGY4ZDAtMmEyMC00ODZiLTgwZDYtNGQ4NzBhOGZkNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UVpgNmYFchaRpWbaoM8+ewQAkpTp6zGdUga Ehbk7BYk48rtSwq1qZ5Zuj+m0g4QWegMxkfBZJVftAoM0F+AYPS9/hInZA07iudu awNUQ6vZZoJomar44d5XjE+0JzbdpqYKnLcDWmcG/wF0NQ0Uh5uXY4h41gds8vAR qngDymmbhKaeG/Ruhu+kptbeS2KCYY4zG9t08MdXZNkAVsZtMqIhQPhRB4VWkicz wP+5yeI7yeYCqAkjjW0FyxN8hwM/PlsNCoHL7rwJlilSgh2GiUC/kZls8Pou1NRt LECV0xFR3loLRpl2Pl2q1+8dLjJ43TbJ9W+9EyzuqxaNkeadBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDW1zoi5gpeK7YBe/s9ydMpwt+t7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wY2E3 MzQ2ZC1mZTI5LTRjNDQtYWVlZi0yNjkzZjAwNWExMmQvMGNhNzM0NmQtZmUyOS00 YzQ0LWFlZWYtMjY5M2YwMDVhMTJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMGNhNzM0NmQtZmUyOS00YzQ0LWFl ZWYtMjY5M2YwMDVhMTJkLzBjYTczNDZkLWZlMjktNGM0NC1hZWVmLTI2OTNmMDA1 YTEyZC5jcmwwHwYDVR0jBBgwFoAUQYEA++/2pu3sbwT2QGV6tJqxvsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wY2E3MzQ2ZC1mZTI5LTRjNDQtYWVlZi0yNjkz ZjAwNWExMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjIq88/xMGf5i1LhMUSmAW Fl+NOhget0H7Ka2EHhxmHwJWIA4Cbk3JYGQUt22KuLdZcDulICgAxZrQCCrUL8zD 6oZjgvektxlVIzUQJpL2T4QG4mhapIuSe3+W3Bdg4whG2PotXJP0BQKZ976MexEb 0HVJsYIUubcrdjMagTbd/ukhHCuzwXFTEfwjW61a64r7e2p+U4F35JzKZaZk1zow KpL2cK2wOSXxUKc8NSLi2g6DMMyJ7Z7/HTfesmZgThck0bDCNfcHR7YcmDbmJ6hq Q21hT6lQu3G/jO4FrU8DPRP+fWfmouY9W3XRhEbyIaHEsPsr+9svHfXt1G382/gt -----END CERTIFICATE-----Generated at Wed Oct 14 10:07:35 2026 by rpki-client