$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c8b74f2-b104-4a14-886d-58872da1fb08/9c8b74f2-b104-4a14-886d-58872da1fb08.mft File: 9c8b74f2-b104-4a14-886d-58872da1fb08.mft (raw, json) Hash identifier: yLjd53uqrvUuDVpE1LwqRqd8WXdR4SxAiDdDs1aqUJM= Subject key identifier: FF:39:1D:38:68:FA:86:2A:C2:CA:B5:95:DE:11:7E:16:60:57:30:F9 Authority key identifier: 3D:BD:FA:E2:48:6C:73:3F:F8:C2:BE:09:A8:98:9C:B3:26:32:1A:43 Certificate issuer: /CN=9c8b74f2-b104-4a14-886d-58872da1fb08 Certificate serial: 010D0C9F4328584FA1F82CE6EF41340F4793B700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c8b74f2-b104-4a14-886d-58872da1fb08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c8b74f2-b104-4a14-886d-58872da1fb08/9c8b74f2-b104-4a14-886d-58872da1fb08.mft Manifest number: 010D0C9F4328584E4D797439E0EA55E15D929E7D Signing time: Mon 26 Oct 2026 18:00:24 +0000 Manifest this update: Mon 26 Oct 2026 18:00:24 +0000 Manifest next update: Thu 29 Oct 2026 18:00:00 +0000 Files and hashes: 1: 9c8b74f2-b104-4a14-886d-58872da1fb08.crl (hash: 4qkKSPH7A/kbudU6p2h1SzVm/j9ILNDNffuyZkDKVzw=) 2: d78bde92-3859-3965-91d6-1e6e626241bb.roa (hash: tTR+heQTjmD9P9p/agVaS1yM8wR4Ob7mrg+j5DXyO5c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c8b74f2-b104-4a14-886d-58872da1fb08/9c8b74f2-b104-4a14-886d-58872da1fb08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c8b74f2-b104-4a14-886d-58872da1fb08/9c8b74f2-b104-4a14-886d-58872da1fb08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c8b74f2-b104-4a14-886d-58872da1fb08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:f8:2c:e6:ef:41:34:0f:47:93:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c8b74f2-b104-4a14-886d-58872da1fb08 Validity Not Before: Oct 26 18:00:24 2026 GMT Not After : Oct 29 18:00:00 2026 GMT Subject: CN=b53e57d0-59d9-46ed-b0b6-0509a755d7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:59:c0:87:d3:8b:12:76:83:e5:7e:1a:1c:47: d5:12:19:27:65:4d:bd:1f:3a:ac:31:3d:ae:ca:5e: 3d:a2:42:c5:5b:8e:e4:bc:0b:08:75:49:7c:1d:2e: 51:f4:f6:88:d5:d7:ca:6b:59:0d:a4:40:d5:8d:06: 59:8d:b3:9f:73:a7:0e:bf:e1:d2:43:4b:83:c1:ee: bd:fb:7d:a5:4b:a1:9b:9f:81:42:48:4d:a8:e9:63: f1:b4:ae:25:78:29:34:ac:bf:51:0b:ec:7b:6f:26: 36:71:7e:11:98:3b:27:c9:2c:5d:f2:54:73:6e:ec: 16:83:51:e0:24:28:99:a7:55:24:e7:6f:0a:e9:6e: de:36:ac:2a:a2:32:1e:75:24:33:c1:b7:50:36:2f: 07:0b:3c:24:26:9e:67:1f:40:be:62:b4:ec:20:fa: cd:3f:9d:e2:0b:2d:64:ff:e9:03:e3:18:d6:05:b8: 81:34:4d:44:39:60:5c:2c:8f:0a:d5:dc:1f:d1:51: 17:8b:8e:b8:7f:01:5f:30:ef:3b:4b:32:4b:9c:17: 10:cd:d7:eb:56:c4:37:95:b3:6f:6a:16:ae:ad:e1: aa:a4:20:bc:30:f6:a6:14:b1:da:6b:44:5c:3a:7e: d9:e0:1f:3d:cb:6d:05:a3:cb:4d:5e:8e:17:b4:a9: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:39:1D:38:68:FA:86:2A:C2:CA:B5:95:DE:11:7E:16:60:57:30:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c8b74f2-b104-4a14-886d-58872da1fb08/9c8b74f2-b104-4a14-886d-58872da1fb08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c8b74f2-b104-4a14-886d-58872da1fb08/9c8b74f2-b104-4a14-886d-58872da1fb08.crl X509v3 Authority Key Identifier: keyid:3D:BD:FA:E2:48:6C:73:3F:F8:C2:BE:09:A8:98:9C:B3:26:32:1A:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c8b74f2-b104-4a14-886d-58872da1fb08.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fd:79:05:0f:e1:19:fc:61:23:1f:dd:45:49:c8:6d:23:cf: a9:f0:5a:c8:ec:27:e8:cc:d9:4e:ed:0a:2f:d1:72:bf:8a:a8: be:7f:15:5d:65:bb:e2:6a:62:0a:78:b4:a8:ac:f6:74:ed:ad: dd:21:c0:05:6e:64:95:2f:34:84:d7:c8:20:57:70:fe:6e:de: 6e:1b:07:79:ea:1a:9a:37:e5:4a:86:75:f3:f8:62:96:4e:20: a7:b4:a2:e0:b6:21:7b:22:6d:50:d2:f0:5e:2e:0c:d0:6b:20: 32:90:6d:4e:87:83:9a:0f:aa:68:89:d5:f0:9c:c7:d8:b0:e8: 8d:f6:08:64:14:5a:bb:10:f7:18:81:da:9f:2d:28:59:c4:51: 28:f3:35:d0:74:ae:08:92:1d:2d:66:48:ea:9d:4d:4c:ca:9e: 0e:00:0c:d3:07:a1:a9:d9:f1:4f:ff:da:9c:1c:e5:c7:b3:3b: f0:16:03:10:d9:15:d4:42:39:40:38:5f:6b:4c:46:2a:38:3d: 37:f8:3c:f9:b7:e6:98:49:79:7e:b1:6b:be:6a:49:fd:4f:4a: df:40:15:b4:d1:ee:49:be:b5:ff:6c:58:ce:4d:fb:b1:b0:f9: 3b:fa:ab:d2:80:90:c6:d3:b6:26:7e:08:95:72:a6:2b:42:c8: f3:2d:aa:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+h+Czm70E0D0eTtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM4Yjc0ZjItYjEwNC00YTE0LTg4NmQtNTg4NzJkYTFm YjA4MB4XDTI2MTAyNjE4MDAyNFoXDTI2MTAyOTE4MDAwMFowLzEtMCsGA1UEAxMk YjUzZTU3ZDAtNTlkOS00NmVkLWIwYjYtMDUwOWE3NTVkN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFnAh9OLEnaD5X4aHEfVEhknZU29HzqsMT2u yl49okLFW47kvAsIdUl8HS5R9PaI1dfKa1kNpEDVjQZZjbOfc6cOv+HSQ0uDwe69 +32lS6Gbn4FCSE2o6WPxtK4leCk0rL9RC+x7byY2cX4RmDsnySxd8lRzbuwWg1Hg JCiZp1Uk528K6W7eNqwqojIedSQzwbdQNi8HCzwkJp5nH0C+YrTsIPrNP53iCy1k /+kD4xjWBbiBNE1EOWBcLI8K1dwf0VEXi464fwFfMO87SzJLnBcQzdfrVsQ3lbNv ahaureGqpCC8MPamFLHaa0RcOn7Z4B89y20Fo8tNXo4XtKmk8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP85HTho+oYqwsq1ld4RfhZgVzD5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85Yzhi NzRmMi1iMTA0LTRhMTQtODg2ZC01ODg3MmRhMWZiMDgvOWM4Yjc0ZjItYjEwNC00 YTE0LTg4NmQtNTg4NzJkYTFmYjA4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWM4Yjc0ZjItYjEwNC00YTE0LTg4 NmQtNTg4NzJkYTFmYjA4LzljOGI3NGYyLWIxMDQtNGExNC04ODZkLTU4ODcyZGEx ZmIwOC5jcmwwHwYDVR0jBBgwFoAUPb364khscz/4wr4JqJicsyYyGkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85YzhiNzRmMi1iMTA0LTRhMTQtODg2ZC01ODg3 MmRhMWZiMDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCF/XkFD+EZ/GEjH91FScht I8+p8FrI7CfozNlO7Qov0XK/iqi+fxVdZbviamIKeLSorPZ07a3dIcAFbmSVLzSE 18ggV3D+bt5uGwd56hqaN+VKhnXz+GKWTiCntKLgtiF7Im1Q0vBeLgzQayAykG1O h4OaD6poidXwnMfYsOiN9ghkFFq7EPcYgdqfLShZxFEo8zXQdK4Ikh0tZkjqnU1M yp4OAAzTB6Gp2fFP/9qcHOXHszvwFgMQ2RXUQjlAOF9rTEYqOD03+Dz5t+aYSXl+ sWu+akn9T0rfQBW00e5JvrX/bFjOTfuxsPk7+qvSgJDG07YmfgiVcqYrQsjzLapL -----END CERTIFICATE-----Generated at Tue Oct 27 12:00:26 2026 by rpki-client