$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.mft File: 523508d8-5364-4972-acf2-2c22cfac7647.mft (raw, json) Hash identifier: GEkpjyssj7ietrh666z3G48NnDf4lM9Di48w2bFEXcY= Subject key identifier: FE:AD:F0:1D:94:AD:1C:90:CA:6E:A8:9F:4C:F4:B9:0E:E0:0A:DD:47 Authority key identifier: 51:3A:99:FC:8D:2F:D8:95:A1:1D:08:B0:CF:2D:AE:E1:71:39:C6:F0 Certificate issuer: /CN=523508d8-5364-4972-acf2-2c22cfac7647 Certificate serial: 010D0C9F4328584FA35D7CA3DF43E03EFBFFFB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.mft Manifest number: 010D0C9F4328584DCB9C8D2C85546446399D18AD Signing time: Tue 27 Oct 2026 06:00:23 +0000 Manifest this update: Tue 27 Oct 2026 06:00:23 +0000 Manifest next update: Thu 29 Oct 2026 06:00:00 +0000 Files and hashes: 1: 4c4981e5-e112-343f-aee7-b9f15d53947c.roa (hash: MS9VioBUZt6VvTaeI+aAZOZPEhdgSW5ugoqLwgfQaB4=) 2: 523508d8-5364-4972-acf2-2c22cfac7647.crl (hash: MbufObHWB08BR4vRamcxrlTbsPv3UCC/134i+NorQng=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a3:5d:7c:a3:df:43:e0:3e:fb:ff:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523508d8-5364-4972-acf2-2c22cfac7647 Validity Not Before: Oct 27 06:00:23 2026 GMT Not After : Oct 29 06:00:00 2026 GMT Subject: CN=bd94437b-1d7c-4cb9-b53f-363e7225cea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c8:16:89:80:69:52:26:3e:24:d6:37:e2:27: 2b:cf:10:03:38:5e:27:ec:24:ab:99:5a:4c:3c:11: 87:5e:89:42:b5:5c:29:63:b1:82:10:10:27:cb:04: 71:75:bc:03:84:42:97:b8:46:d4:e2:30:3f:80:1c: 41:20:4d:87:1e:af:aa:a6:9e:1b:78:4c:37:a8:07: 88:08:2d:a9:e5:04:a3:51:c7:49:12:2e:bc:82:b3: e8:ff:c8:18:47:6d:d4:15:e8:f3:08:37:c7:62:07: c3:1d:4d:b9:12:27:c9:32:25:fa:ea:c3:a0:40:74: bf:56:03:b2:d0:15:9e:12:30:8b:6e:13:fd:44:3d: 13:65:cb:00:18:b8:56:b3:b8:f8:f2:18:c6:94:51: 3b:c1:8c:43:35:a8:17:79:b6:a9:e9:cb:9e:a1:65: aa:59:2c:e1:1b:2c:38:b9:47:c8:37:31:f7:ad:20: a7:29:5a:a0:d4:3e:68:98:69:0a:9d:c9:28:c2:18: e3:96:39:27:42:29:41:84:0a:00:50:5f:54:1b:09: 05:fe:54:95:7a:d4:1a:9e:db:d6:68:c7:7d:13:7d: 3b:9c:16:e1:15:bd:ca:c7:10:62:ab:c2:2f:0b:e7: c9:b1:b2:62:14:44:98:65:12:cb:f4:bd:3b:93:f1: 4e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AD:F0:1D:94:AD:1C:90:CA:6E:A8:9F:4C:F4:B9:0E:E0:0A:DD:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.crl X509v3 Authority Key Identifier: keyid:51:3A:99:FC:8D:2F:D8:95:A1:1D:08:B0:CF:2D:AE:E1:71:39:C6:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:97:29:8e:70:f8:ed:92:b2:55:f1:8d:3c:b7:4e:75:86:3a: 86:46:a2:37:66:f8:f1:e4:af:b0:68:42:b9:c5:00:20:ae:0a: 10:e9:ed:2e:66:d4:e3:f0:ef:1f:5f:b6:ec:93:ab:98:e1:60: 80:48:a8:7c:52:28:59:a4:be:a9:78:ec:50:a2:c1:c5:1f:f7: db:7e:a2:92:84:11:44:dd:7f:9a:66:5e:63:64:29:cf:44:58: 4a:ff:15:84:e4:b9:f9:e5:b7:b0:57:72:05:8c:6c:f5:09:0f: 4d:fd:92:5a:94:a0:bb:09:60:b0:a2:2d:f6:c5:ba:25:d9:fd: af:e6:31:02:bd:a6:b7:35:f5:2a:17:8d:9a:d1:5d:e6:2c:5b: 18:63:8d:fd:0f:15:a9:c0:25:3a:ea:5d:b4:f9:9c:58:6a:1a: d6:76:cb:db:2d:f5:c4:7f:1b:22:4e:b4:88:09:38:8f:b7:c2: 40:8d:2c:14:ba:c8:17:57:10:24:50:9a:0a:d1:2e:14:44:58: a3:d1:48:74:53:d6:a9:6f:49:63:e3:14:41:09:d0:d4:be:1e: d5:7d:50:2a:f5:ce:a8:82:0c:b0:d9:24:fe:99:2b:4a:46:f3: 8b:e1:4c:4f:73:ec:5b:d5:13:01:46:c2:f8:fa:c1:a0:c6:8b: bc:54:35:fa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+jXXyj30PgPvv/+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIzNTA4ZDgtNTM2NC00OTcyLWFjZjItMmMyMmNmYWM3 NjQ3MB4XDTI2MTAyNzA2MDAyM1oXDTI2MTAyOTA2MDAwMFowLzEtMCsGA1UEAxMk YmQ5NDQzN2ItMWQ3Yy00Y2I5LWI1M2YtMzYzZTcyMjVjZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18gWiYBpUiY+JNY34icrzxADOF4n7CSrmVpM PBGHXolCtVwpY7GCEBAnywRxdbwDhEKXuEbU4jA/gBxBIE2HHq+qpp4beEw3qAeI CC2p5QSjUcdJEi68grPo/8gYR23UFejzCDfHYgfDHU25EifJMiX66sOgQHS/VgOy 0BWeEjCLbhP9RD0TZcsAGLhWs7j48hjGlFE7wYxDNagXebap6cueoWWqWSzhGyw4 uUfINzH3rSCnKVqg1D5omGkKnckowhjjljknQilBhAoAUF9UGwkF/lSVetQantvW aMd9E307nBbhFb3KxxBiq8IvC+fJsbJiFESYZRLL9L07k/FOZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP6t8B2UrRyQym6on0z0uQ7gCt1HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81MjM1 MDhkOC01MzY0LTQ5NzItYWNmMi0yYzIyY2ZhYzc2NDcvNTIzNTA4ZDgtNTM2NC00 OTcyLWFjZjItMmMyMmNmYWM3NjQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTIzNTA4ZDgtNTM2NC00OTcyLWFj ZjItMmMyMmNmYWM3NjQ3LzUyMzUwOGQ4LTUzNjQtNDk3Mi1hY2YyLTJjMjJjZmFj NzY0Ny5jcmwwHwYDVR0jBBgwFoAUUTqZ/I0v2JWhHQiwzy2u4XE5xvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81MjM1MDhkOC01MzY0LTQ5NzItYWNmMi0yYzIy Y2ZhYzc2NDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOlymOcPjtkrJV8Y08t051 hjqGRqI3Zvjx5K+waEK5xQAgrgoQ6e0uZtTj8O8fX7bsk6uY4WCASKh8UihZpL6p eOxQosHFH/fbfqKShBFE3X+aZl5jZCnPRFhK/xWE5Ln55bewV3IFjGz1CQ9N/ZJa lKC7CWCwoi32xbol2f2v5jECvaa3NfUqF42a0V3mLFsYY439DxWpwCU66l20+ZxY ahrWdsvbLfXEfxsiTrSICTiPt8JAjSwUusgXVxAkUJoK0S4URFij0Uh0U9apb0lj 4xRBCdDUvh7VfVAq9c6oggyw2ST+mStKRvOL4UxPc+xb1RMBRsL4+sGgxou8VDX6 -----END CERTIFICATE-----Generated at Tue Oct 27 13:06:12 2026 by rpki-client