$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.mft File: 25f2c50d-b1f3-455f-835f-493fb32a39f9.mft (raw, json) Hash identifier: ffovwqPvRvltrT9OMole6o7nuBHxWIegIMqKx0Z6Jx4= Subject key identifier: CE:08:CB:67:37:22:A0:43:B7:98:40:AC:14:3E:99:16:5E:60:0D:99 Authority key identifier: 03:61:EB:8E:9C:F3:85:80:73:DD:3D:DE:28:0D:BD:72:0E:37:2A:F2 Certificate issuer: /CN=25f2c50d-b1f3-455f-835f-493fb32a39f9 Certificate serial: 010D0C9F4328584FA28D0E01CACB1CC243514130 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.mft Manifest number: 010D0C9F4328584DA677486844849502E66C6A3D Signing time: Mon 26 Oct 2026 23:00:25 +0000 Manifest this update: Mon 26 Oct 2026 23:00:25 +0000 Manifest next update: Thu 29 Oct 2026 23:00:00 +0000 Files and hashes: 1: 25f2c50d-b1f3-455f-835f-493fb32a39f9.crl (hash: g7gV/WqtkL0b9DbfXTAH6O0BLWVIZUE9kdmVr7xiOkc=) 2: e7133667-9d22-3185-a5d2-4d9ee5fc18bc.roa (hash: pYVKRgsZE1eFA3v0DXZterCN04setCjjmH+mKCgGzJ4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:8d:0e:01:ca:cb:1c:c2:43:51:41:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25f2c50d-b1f3-455f-835f-493fb32a39f9 Validity Not Before: Oct 26 23:00:25 2026 GMT Not After : Oct 29 23:00:00 2026 GMT Subject: CN=442dc509-1d7e-40cf-bd47-589119db55be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:53:5f:72:4a:4f:e7:52:bc:0c:ee:b4:17:c2: 4a:a9:f9:1c:37:c4:0d:c4:02:4a:0d:3d:4a:58:07: 75:d1:99:54:e9:9a:fa:5f:29:dc:ce:28:e3:6d:6b: 00:72:26:0c:cf:5e:30:2e:5f:f2:fa:3b:65:a2:3a: c4:b3:12:5f:2a:c0:f8:84:52:22:42:b6:0b:2d:6e: 20:e3:ff:b9:01:39:fa:c6:b7:75:9b:19:a9:1a:23: 81:c0:4b:c4:ea:4d:85:2c:f8:c3:23:28:d9:20:dc: 0a:71:bf:8f:1e:a3:f7:1e:16:ae:56:57:5d:58:63: 66:74:97:6f:17:69:92:7a:1c:6d:f1:15:b3:17:17: 44:c8:f2:7f:8d:95:2a:c2:14:21:f5:76:9b:a6:32: 29:c9:9b:0d:af:32:80:15:c0:26:c5:5e:72:98:a9: d5:13:69:ab:56:e1:d3:85:47:d5:38:be:80:d5:65: 4b:5c:b1:44:14:5c:fa:d6:ab:2b:90:43:7e:99:bf: 1e:b3:58:d0:ed:16:a4:6a:2f:15:83:a0:a7:49:0f: b1:1a:bc:ff:16:81:63:62:bf:8c:06:f2:46:90:be: 7c:c4:06:01:7e:e4:63:10:8c:e0:24:6c:7a:c0:26: 5f:49:17:50:0e:90:94:94:53:b6:11:8a:a6:dc:b7: e6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:08:CB:67:37:22:A0:43:B7:98:40:AC:14:3E:99:16:5E:60:0D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.crl X509v3 Authority Key Identifier: keyid:03:61:EB:8E:9C:F3:85:80:73:DD:3D:DE:28:0D:BD:72:0E:37:2A:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:37:dd:fa:96:af:fe:15:28:12:70:e3:14:ef:1a:d2:40:0d: db:3e:d1:04:04:0c:25:00:ba:d4:3b:72:62:7f:39:51:ac:f7: b7:ee:bb:77:75:6d:15:fb:3c:8c:d0:ed:f8:6c:55:1f:0f:80: 24:bb:b3:ce:a9:01:6b:a5:cc:f4:52:33:5b:5a:4b:21:38:ea: f6:2a:61:d5:08:e0:5c:9e:06:39:c3:f2:43:a3:44:4e:a9:2b: f5:16:cc:29:de:4a:b8:7a:c2:ea:3d:0c:11:50:ed:c3:99:f7: 18:60:41:a6:82:e0:18:39:15:47:f3:fa:1e:3e:da:08:ee:00: a2:6d:8b:15:7b:2f:34:2d:07:8f:d9:69:18:6e:db:f9:8c:b2: 7f:2e:2c:3c:ee:62:e2:0d:86:61:a6:1e:97:8c:a3:a9:a9:0c: 05:b4:60:97:3c:ed:9a:d3:a2:2d:dd:19:dc:bf:68:a2:98:9b: df:ad:08:41:35:39:14:ae:e7:d9:99:8c:f3:3e:cc:8a:e3:05: 7b:49:27:05:fb:01:37:01:72:0e:a7:2c:8f:b3:07:44:07:e4: af:35:40:12:65:19:04:bb:86:a6:19:b1:a2:7a:8c:28:5e:ec: 1c:e3:e3:82:6a:e4:39:5e:13:11:54:a9:45:c3:bf:88:cd:49: 62:41:51:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+ijQ4BysscwkNRQTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVmMmM1MGQtYjFmMy00NTVmLTgzNWYtNDkzZmIzMmEz OWY5MB4XDTI2MTAyNjIzMDAyNVoXDTI2MTAyOTIzMDAwMFowLzEtMCsGA1UEAxMk NDQyZGM1MDktMWQ3ZS00MGNmLWJkNDctNTg5MTE5ZGI1NWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVNfckpP51K8DO60F8JKqfkcN8QNxAJKDT1K WAd10ZlU6Zr6XynczijjbWsAciYMz14wLl/y+jtlojrEsxJfKsD4hFIiQrYLLW4g 4/+5ATn6xrd1mxmpGiOBwEvE6k2FLPjDIyjZINwKcb+PHqP3HhauVlddWGNmdJdv F2mSehxt8RWzFxdEyPJ/jZUqwhQh9XabpjIpyZsNrzKAFcAmxV5ymKnVE2mrVuHT hUfVOL6A1WVLXLFEFFz61qsrkEN+mb8es1jQ7Rakai8Vg6CnSQ+xGrz/FoFjYr+M BvJGkL58xAYBfuRjEIzgJGx6wCZfSRdQDpCUlFO2EYqm3LfmoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM4Iy2c3IqBDt5hArBQ+mRZeYA2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNWYy YzUwZC1iMWYzLTQ1NWYtODM1Zi00OTNmYjMyYTM5ZjkvMjVmMmM1MGQtYjFmMy00 NTVmLTgzNWYtNDkzZmIzMmEzOWY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjVmMmM1MGQtYjFmMy00NTVmLTgz NWYtNDkzZmIzMmEzOWY5LzI1ZjJjNTBkLWIxZjMtNDU1Zi04MzVmLTQ5M2ZiMzJh MzlmOS5jcmwwHwYDVR0jBBgwFoAUA2HrjpzzhYBz3T3eKA29cg43KvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNWYyYzUwZC1iMWYzLTQ1NWYtODM1Zi00OTNm YjMyYTM5ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCtN936lq/+FSgScOMU7xrS QA3bPtEEBAwlALrUO3JifzlRrPe37rt3dW0V+zyM0O34bFUfD4Aku7POqQFrpcz0 UjNbWkshOOr2KmHVCOBcngY5w/JDo0ROqSv1Fswp3kq4esLqPQwRUO3DmfcYYEGm guAYORVH8/oePtoI7gCibYsVey80LQeP2WkYbtv5jLJ/Liw87mLiDYZhph6XjKOp qQwFtGCXPO2a06It3Rncv2iimJvfrQhBNTkUrufZmYzzPsyK4wV7SScF+wE3AXIO pyyPswdEB+SvNUASZRkEu4amGbGieowoXuwc4+OCauQ5XhMRVKlFw7+IzUliQVGk -----END CERTIFICATE-----Generated at Tue Oct 27 12:58:50 2026 by rpki-client