$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft File: 207c40f4-33c4-478b-ae61-d3f51358881b.mft (raw, json) Hash identifier: OQQLZiA2shXhqBPziO2Gfd4FOqvxhjs6AiUBf5Va0Ro= Subject key identifier: 2A:73:FC:01:0F:AD:DC:84:37:FD:C1:1E:DC:F6:4D:49:FD:E3:22:62 Authority key identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Certificate issuer: /CN=207c40f4-33c4-478b-ae61-d3f51358881b Certificate serial: 010D0C9F4328584FB3AB700006BAAC424CA23500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft Manifest number: 010D0C9F4328584073A82D4189108E20C31E2618 Signing time: Mon 02 Nov 2026 02:10:24 +0000 Manifest this update: Mon 02 Nov 2026 02:10:24 +0000 Manifest next update: Wed 04 Nov 2026 22:00:00 +0000 Files and hashes: 1: 207c40f4-33c4-478b-ae61-d3f51358881b.crl (hash: cKwkjeWfB7SGZmbJizgGMJGsoE8iB5nEXs8dAbM85j8=) 2: 3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa (hash: vXkBhUWHmT8ujqYIK5LlcyW825VWlobAJfqUcskWHlE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:ab:70:00:06:ba:ac:42:4c:a2:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207c40f4-33c4-478b-ae61-d3f51358881b Validity Not Before: Nov 2 02:10:24 2026 GMT Not After : Nov 4 22:00:00 2026 GMT Subject: CN=fc2c4498-4c1c-4730-982e-33a97a348ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1b:51:94:8d:0c:67:04:a0:dc:5d:7b:88:e4: 49:21:56:d5:67:61:d3:a3:7d:a4:03:e8:15:23:da: fd:ce:b3:38:2b:24:03:eb:4f:0b:ca:34:92:0f:f1: dc:52:d1:e4:01:5b:cf:af:c4:84:7e:14:9b:23:b3: 78:39:d6:7d:ae:4c:36:57:5b:4a:be:49:07:38:4c: 74:e1:02:17:ab:6f:2e:da:27:d4:e8:7d:4c:b2:e9: 2e:25:82:69:13:c3:d9:18:1c:86:7f:b7:89:d3:61: 53:18:0b:f2:ff:79:cb:32:c5:d6:e2:07:01:63:56: c5:4c:45:28:c9:d7:37:f0:f5:63:a8:a0:e6:8e:c2: 08:d6:d0:7a:44:68:e1:96:31:c1:3b:ec:7d:3e:54: 61:57:44:09:d5:34:17:e6:4b:34:b6:5c:5f:3d:74: 4b:70:63:23:96:db:f2:6e:bd:37:e0:fe:8e:0a:c2: 42:8f:c5:ea:f6:37:78:3f:72:be:7d:c0:41:d6:5e: 57:50:d7:23:6d:ed:1e:45:ba:ac:60:71:66:66:9d: ee:0d:86:30:a3:a6:50:e8:40:ec:e0:2e:fb:3b:bd: 9d:1c:fb:07:5e:65:f5:62:a8:5a:68:80:da:1e:41: 47:aa:8d:68:48:58:ba:d9:87:83:6d:c8:f3:09:4b: 29:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:73:FC:01:0F:AD:DC:84:37:FD:C1:1E:DC:F6:4D:49:FD:E3:22:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl X509v3 Authority Key Identifier: keyid:52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:23:23:ea:2b:93:86:b4:f2:f1:17:95:4c:ed:12:d7:4f:22: ae:8b:a8:10:a9:c0:d6:20:22:81:17:73:e0:56:e8:11:d2:05: 4b:dd:e0:8b:c6:a0:89:3f:3d:ad:21:ab:cd:4a:08:54:30:6c: 87:9b:7a:7b:65:a5:ec:bc:f0:42:73:b2:57:8a:a7:dd:49:a9: 29:69:b7:5a:b7:91:3d:d4:6f:c0:7c:a6:a1:fa:6e:79:66:fa: 4a:e6:fb:ff:25:3a:9a:87:e4:ba:85:bf:97:01:d8:fa:51:4e: 32:0c:77:b9:11:34:48:1f:fc:af:71:1e:0f:7d:f5:12:dc:4d: 85:b2:21:c8:01:66:21:e7:03:73:ea:2a:1f:c5:9a:59:17:12: b0:43:f0:32:9a:df:63:e2:a0:78:fd:7e:2a:10:77:c5:69:e2: fa:15:59:ba:49:60:a4:ab:98:fa:bc:33:07:5d:5a:e9:68:61: 06:8c:34:59:c7:d4:3c:65:50:32:93:d9:c2:f3:59:70:8d:f2: f0:f2:9a:90:14:cf:ec:6c:68:ec:40:4d:b1:84:98:47:d3:7b: 0e:77:a7:dc:59:4b:2b:3e:b6:b5:14:54:26:11:98:9b:89:0c: df:19:57:48:bd:7f:cb:07:55:c9:6e:19:68:da:fa:42:c0:95: 79:86:3a:74 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+zq3AABrqsQkyiNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA3YzQwZjQtMzNjNC00NzhiLWFlNjEtZDNmNTEzNTg4 ODFiMB4XDTI2MTEwMjAyMTAyNFoXDTI2MTEwNDIyMDAwMFowLzEtMCsGA1UEAxMk ZmMyYzQ0OTgtNGMxYy00NzMwLTk4MmUtMzNhOTdhMzQ4ZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxtRlI0MZwSg3F17iORJIVbVZ2HTo32kA+gV I9r9zrM4KyQD608LyjSSD/HcUtHkAVvPr8SEfhSbI7N4OdZ9rkw2V1tKvkkHOEx0 4QIXq28u2ifU6H1MsukuJYJpE8PZGByGf7eJ02FTGAvy/3nLMsXW4gcBY1bFTEUo ydc38PVjqKDmjsII1tB6RGjhljHBO+x9PlRhV0QJ1TQX5ks0tlxfPXRLcGMjltvy br034P6OCsJCj8Xq9jd4P3K+fcBB1l5XUNcjbe0eRbqsYHFmZp3uDYYwo6ZQ6EDs 4C77O72dHPsHXmX1YqhaaIDaHkFHqo1oSFi62YeDbcjzCUspcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCpz/AEPrdyEN/3BHtz2TUn94yJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdj NDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1ODg4MWIvMjA3YzQwZjQtMzNjNC00 NzhiLWFlNjEtZDNmNTEzNTg4ODFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjA3YzQwZjQtMzNjNC00NzhiLWFl NjEtZDNmNTEzNTg4ODFiLzIwN2M0MGY0LTMzYzQtNDc4Yi1hZTYxLWQzZjUxMzU4 ODgxYi5jcmwwHwYDVR0jBBgwFoAUUgLOwO2kMddTSMx22Ig8dhzR7ewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1 MTM1ODg4MWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAIyPqK5OGtPLxF5VM7RLX TyKui6gQqcDWICKBF3PgVugR0gVL3eCLxqCJPz2tIavNSghUMGyHm3p7ZaXsvPBC c7JXiqfdSakpabdat5E91G/AfKah+m55ZvpK5vv/JTqah+S6hb+XAdj6UU4yDHe5 ETRIH/yvcR4PffUS3E2FsiHIAWYh5wNz6iofxZpZFxKwQ/Aymt9j4qB4/X4qEHfF aeL6FVm6SWCkq5j6vDMHXVrpaGEGjDRZx9Q8ZVAyk9nC81lwjfLw8pqQFM/sbGjs QE2xhJhH03sOd6fcWUsrPra1FFQmEZibiQzfGVdIvX/LB1XJbhlo2vpCwJV5hjp0 -----END CERTIFICATE-----Generated at Mon Nov 2 21:13:47 2026 by rpki-client