$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: 4vmSRnVVXzYT+SYIzeSvdDRVqCBXRtzwX2BJAUw/azU= Subject key identifier: 43:B4:78:CB:0D:01:5C:06:56:3B:2D:F1:E6:1B:F6:FA:B9:C3:6B:9E Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584F770BDC74472669CB6F67ED00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF022602 Signing time: Sun 11 Oct 2026 09:00:24 +0000 Manifest this update: Sun 11 Oct 2026 09:00:24 +0000 Manifest next update: Wed 14 Oct 2026 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: vbBjBSHu1olYS/zRBtK+mojoiQ3Uh4WQ+X/zOWUjVCk=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: Z5uerYwmOCpaeBcvqUZbhFZIwkSHV0rpKND6iYvWh6A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:0b:dc:74:47:26:69:cb:6f:67:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Oct 11 09:00:24 2026 GMT Not After : Oct 14 09:00:00 2026 GMT Subject: CN=51bd35b0-6f17-4997-9434-7c6deca11f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bf:d5:23:d9:d6:55:7f:ef:b4:ed:27:cd:49: d5:01:e5:6a:e0:38:b7:ae:b0:16:7f:fd:4b:72:2a: 30:08:8f:f9:90:e0:75:32:e3:57:0f:22:35:08:4d: b4:a8:9b:0e:d4:14:20:16:d4:27:a6:e1:e8:08:c4: 2c:5d:a3:bc:2a:a6:be:9f:b3:13:0f:8a:05:b8:2f: 8e:12:91:54:aa:95:7b:1d:63:7a:3f:06:11:80:0b: fe:05:dc:0e:b1:58:5f:31:95:c9:36:dc:b4:dc:90: 8b:69:50:cc:a8:6f:03:23:25:d6:ee:45:4d:e8:3f: 7b:f0:ac:e9:06:4b:13:b9:c6:78:7b:6a:0b:d3:8c: 38:3d:4a:81:36:81:4e:2f:ed:82:48:e8:3c:28:35: ad:54:e1:9c:49:f4:1b:27:79:6c:f4:32:b1:26:3e: 13:43:38:c5:ec:f3:89:23:45:23:ba:6a:21:f1:e9: 5b:d7:da:97:eb:08:a2:b9:f4:e5:b5:53:a9:aa:0e: 85:7b:27:66:84:76:2e:d6:f2:c0:3f:eb:15:16:3e: 1b:16:c7:f7:23:49:4e:ea:f8:98:14:f0:87:98:db: b7:28:d3:15:7b:ee:fd:72:8e:73:00:d1:66:c3:35: 08:4a:d9:46:b4:00:5f:47:a9:50:13:c3:bc:14:e6: 5e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B4:78:CB:0D:01:5C:06:56:3B:2D:F1:E6:1B:F6:FA:B9:C3:6B:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:75:3d:f7:34:f0:0c:93:37:4a:b6:ea:57:aa:6f:29:63:a6: d4:66:56:fe:2d:af:1d:1b:c9:9c:1b:cd:22:d9:d3:0f:40:26: 27:99:30:ae:8d:4b:eb:12:bd:9a:d1:fa:38:4e:01:81:0f:60: 54:17:db:60:d3:cc:e8:e2:1f:b6:7f:e1:64:fb:17:0c:4a:5b: 34:cc:7c:af:f2:ab:77:44:8c:90:0e:2e:1b:c9:67:24:66:3f: 49:6c:3d:63:3f:ba:ea:cc:9d:46:40:66:35:e0:be:d2:08:b4: 62:63:2f:67:8d:68:aa:30:b8:7a:60:e2:64:65:57:47:68:db: 01:88:a9:ac:70:3d:ea:74:9c:eb:7c:ef:a8:ab:6c:ab:c7:f9: ef:8f:ff:b7:bb:69:dd:19:88:c2:d1:5b:df:07:8a:3b:31:ce: df:cf:39:43:40:22:11:e3:ab:c2:9d:56:ce:94:e6:da:cd:6f: 3c:13:7b:0d:9e:91:eb:48:ba:32:41:47:fe:e5:4a:c6:80:2d: 67:66:50:aa:7f:87:8f:bd:07:cf:d0:c9:8b:61:43:6e:4e:09: a4:16:23:ab:8e:24:6f:f6:93:ab:8c:cb:4a:63:5a:b3:91:f0: fa:0c:fc:ae:14:81:4b:d0:7a:fa:ec:8f:f7:f0:54:72:09:f2: 05:37:4f:27 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE93C9x0RyZpy29n7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI2MTAxMTA5MDAyNFoXDTI2MTAxNDA5MDAwMFowLzEtMCsGA1UEAxMk NTFiZDM1YjAtNmYxNy00OTk3LTk0MzQtN2M2ZGVjYTExZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb/VI9nWVX/vtO0nzUnVAeVq4Di3rrAWf/1L ciowCI/5kOB1MuNXDyI1CE20qJsO1BQgFtQnpuHoCMQsXaO8Kqa+n7MTD4oFuC+O EpFUqpV7HWN6PwYRgAv+BdwOsVhfMZXJNty03JCLaVDMqG8DIyXW7kVN6D978Kzp BksTucZ4e2oL04w4PUqBNoFOL+2CSOg8KDWtVOGcSfQbJ3ls9DKxJj4TQzjF7POJ I0Ujumoh8elb19qX6wiiufTltVOpqg6FeydmhHYu1vLAP+sVFj4bFsf3I0lO6viY FPCHmNu3KNMVe+79co5zANFmwzUIStlGtABfR6lQE8O8FOZeYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEO0eMsNAVwGVjst8eYb9vq5w2ueMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFdT33NPAMkzdKtupXqm8p Y6bUZlb+La8dG8mcG80i2dMPQCYnmTCujUvrEr2a0fo4TgGBD2BUF9tg08zo4h+2 f+Fk+xcMSls0zHyv8qt3RIyQDi4byWckZj9JbD1jP7rqzJ1GQGY14L7SCLRiYy9n jWiqMLh6YOJkZVdHaNsBiKmscD3qdJzrfO+oq2yrx/nvj/+3u2ndGYjC0VvfB4o7 Mc7fzzlDQCIR46vCnVbOlObazW88E3sNnpHrSLoyQUf+5UrGgC1nZlCqf4ePvQfP 0MmLYUNuTgmkFiOrjiRv9pOrjMtKY1qzkfD6DPyuFIFL0Hr67I/38FRyCfIFN08n -----END CERTIFICATE-----Generated at Mon Oct 12 04:29:22 2026 by rpki-client