$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/969db95f-7221-480e-8d12-fd6cfb8ce240.mft File: 969db95f-7221-480e-8d12-fd6cfb8ce240.mft (raw, json) Hash identifier: +kL7iAKnXCw3ACb2KNpp5I7FbSGUfVGnxSKRY7l+WCY= Subject key identifier: 3C:BB:20:D6:AC:12:EB:25:DF:2F:20:09:72:D5:CB:38:48:7B:CA:25 Authority key identifier: 89:F4:FA:36:E2:93:E2:81:02:DE:3B:9C:15:61:29:A9:FC:17:98:4C Certificate issuer: /CN=969db95f-7221-480e-8d12-fd6cfb8ce240 Certificate serial: 010D0C9F4328584F938BA3C5E19AFA26DF156F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/969db95f-7221-480e-8d12-fd6cfb8ce240.mft Manifest number: 010D0C9F4328584E5DAC9F339C43BC31BAC9D172 Signing time: Wed 21 Oct 2026 14:00:24 +0000 Manifest this update: Wed 21 Oct 2026 14:00:24 +0000 Manifest next update: Fri 23 Oct 2026 14:00:00 +0000 Files and hashes: 1: 969db95f-7221-480e-8d12-fd6cfb8ce240.crl (hash: 6MHgYJ8LM1eA+bOHlIW/wxEHoKiVbXLYdJTPzou7Yss=) 2: f705ee9a-95c3-3721-94df-983fdd791a34.roa (hash: rm8SBOi/1YPfMiTlqr6Au5QiGFoXg0Z4WfZL1Zjphqg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/969db95f-7221-480e-8d12-fd6cfb8ce240.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/969db95f-7221-480e-8d12-fd6cfb8ce240.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:93:8b:a3:c5:e1:9a:fa:26:df:15:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969db95f-7221-480e-8d12-fd6cfb8ce240 Validity Not Before: Oct 21 14:00:24 2026 GMT Not After : Oct 23 14:00:00 2026 GMT Subject: CN=872db7f2-73f8-47d0-b21a-7a9b17ecf3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:16:12:b3:8b:d2:f6:f4:51:26:91:06:42: 2d:f9:00:3a:c6:a9:7c:c0:87:f2:97:c0:09:f5:f7: 35:9d:6f:ba:c9:4a:11:ed:d0:b5:78:92:db:73:83: ef:53:8b:18:cf:ad:98:3a:34:2f:ab:58:18:d2:66: b7:9f:d7:1d:e5:91:6e:94:8c:71:66:be:62:25:34: f9:4c:41:2f:24:43:02:e0:8b:00:33:14:2f:c2:1a: d5:2c:f2:4e:c6:32:eb:be:45:52:ea:4b:6e:88:d6: 43:72:0d:9d:aa:53:f8:08:8d:a6:6b:67:3a:9c:a3: d5:00:7f:16:0b:2a:65:4a:18:3a:3b:28:c4:66:cc: 50:a1:c5:ca:cb:68:80:74:ed:16:ec:74:00:66:c7: cb:de:58:56:e0:13:f5:e0:83:3e:b3:e6:8f:a9:2f: 8c:89:8b:9f:bf:e1:5f:1b:e4:15:7d:71:e0:ce:0b: 2e:7e:f4:f3:68:cc:5c:8e:c4:d8:cf:2d:9a:6f:58: a5:98:cc:43:c7:70:bb:ab:19:e1:6b:2c:90:5e:0e: 55:f5:35:6e:ba:b6:da:bd:7d:00:6e:51:89:99:8e: 6a:cd:a5:a9:4e:8c:4b:16:40:9d:f8:02:67:bb:8d: 4c:7a:f9:71:95:c3:65:50:10:77:e0:ec:b2:95:d1: de:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BB:20:D6:AC:12:EB:25:DF:2F:20:09:72:D5:CB:38:48:7B:CA:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/969db95f-7221-480e-8d12-fd6cfb8ce240.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/969db95f-7221-480e-8d12-fd6cfb8ce240.crl X509v3 Authority Key Identifier: keyid:89:F4:FA:36:E2:93:E2:81:02:DE:3B:9C:15:61:29:A9:FC:17:98:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:05:b9:83:19:31:08:be:d8:5b:00:3a:bd:9b:9e:6b:49:ab: 43:c7:55:fc:56:30:7e:cd:c3:10:50:76:4b:a6:0c:b8:fe:a4: 4b:0a:09:5e:34:cb:cc:7d:e7:fe:3d:ff:77:f1:e5:a7:d3:c9: b4:43:a9:b4:cb:11:a0:ea:09:a8:d4:7a:7a:7d:39:91:85:b8: 5a:4c:b8:77:35:5d:20:53:3c:74:2c:3d:6f:92:6b:46:49:6f: 1b:fd:a6:a2:d4:a2:f0:a7:b5:c3:99:40:3d:6f:54:35:ba:81: cd:4c:25:24:be:48:45:91:10:52:31:07:dc:a6:c1:b1:ec:87: c6:48:dd:99:93:53:db:18:18:e9:4f:fb:70:0a:16:74:dc:45: 19:85:05:9f:61:56:b9:38:ad:ef:f4:63:13:be:d6:5b:66:94: 0f:10:7c:7a:7b:92:26:b1:9e:aa:4c:c0:60:3a:a9:dd:ce:78: 41:6c:48:66:47:4a:24:9c:cf:22:b9:bf:8b:af:b9:0c:b5:9f: 6c:12:87:ce:c2:02:32:91:f7:d0:05:7d:a9:30:98:b1:b4:14: 44:8d:90:37:cf:5d:81:cb:39:36:3d:27:bd:23:5d:ab:d0:60: cf:8f:07:e4:6e:ca:9e:de:13:de:62:53:15:9b:ce:dc:9d:38: 50:24:94:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+Ti6PF4Zr6Jt8Vb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY5ZGI5NWYtNzIyMS00ODBlLThkMTItZmQ2Y2ZiOGNl MjQwMB4XDTI2MTAyMTE0MDAyNFoXDTI2MTAyMzE0MDAwMFowLzEtMCsGA1UEAxMk ODcyZGI3ZjItNzNmOC00N2QwLWIyMWEtN2E5YjE3ZWNmM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLwWErOL0vb0USaRBkIt+QA6xql8wIfyl8AJ 9fc1nW+6yUoR7dC1eJLbc4PvU4sYz62YOjQvq1gY0ma3n9cd5ZFulIxxZr5iJTT5 TEEvJEMC4IsAMxQvwhrVLPJOxjLrvkVS6ktuiNZDcg2dqlP4CI2ma2c6nKPVAH8W CyplShg6OyjEZsxQocXKy2iAdO0W7HQAZsfL3lhW4BP14IM+s+aPqS+MiYufv+Ff G+QVfXHgzgsufvTzaMxcjsTYzy2ab1ilmMxDx3C7qxnhayyQXg5V9TVuurbavX0A blGJmY5qzaWpToxLFkCd+AJnu41MevlxlcNlUBB34OyyldHeAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDy7INasEusl3y8gCXLVyzhIe8olMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85Njlk Yjk1Zi03MjIxLTQ4MGUtOGQxMi1mZDZjZmI4Y2UyNDAvOTY5ZGI5NWYtNzIyMS00 ODBlLThkMTItZmQ2Y2ZiOGNlMjQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOTY5ZGI5NWYtNzIyMS00ODBlLThk MTItZmQ2Y2ZiOGNlMjQwLzk2OWRiOTVmLTcyMjEtNDgwZS04ZDEyLWZkNmNmYjhj ZTI0MC5jcmwwHwYDVR0jBBgwFoAUifT6NuKT4oEC3jucFWEpqfwXmEwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85NjlkYjk1Zi03MjIxLTQ4MGUtOGQxMi1mZDZj ZmI4Y2UyNDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgBbmDGTEIvthbADq9m55r SatDx1X8VjB+zcMQUHZLpgy4/qRLCgleNMvMfef+Pf938eWn08m0Q6m0yxGg6gmo 1Hp6fTmRhbhaTLh3NV0gUzx0LD1vkmtGSW8b/aai1KLwp7XDmUA9b1Q1uoHNTCUk vkhFkRBSMQfcpsGx7IfGSN2Zk1PbGBjpT/twChZ03EUZhQWfYVa5OK3v9GMTvtZb ZpQPEHx6e5ImsZ6qTMBgOqndznhBbEhmR0oknM8iub+Lr7kMtZ9sEofOwgIykffQ BX2pMJixtBREjZA3z12Byzk2PSe9I12r0GDPjwfkbsqe3hPeYlMVm87cnThQJJS1 -----END CERTIFICATE-----Generated at Thu Oct 22 12:03:05 2026 by rpki-client