$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft File: 7405a32c-964c-4b30-a008-0f287767e1c1.mft (raw, json) Hash identifier: DDoB9RCvnxBO6E7HIoB2ZZSR+ZNzaDXQQV3wi8nGwBY= Subject key identifier: CF:91:68:74:1A:43:26:FF:02:0C:02:B7:7F:F2:72:A0:5C:81:74:B0 Authority key identifier: E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58 Certificate issuer: /CN=7405a32c-964c-4b30-a008-0f287767e1c1 Certificate serial: 010D0C9F4328584F7B7779CBE218B0A6BDFFADC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft Manifest number: 010D0C9F4328584073A82713ADABE847F09C5683 Signing time: Mon 12 Oct 2026 23:00:23 +0000 Manifest this update: Mon 12 Oct 2026 23:00:23 +0000 Manifest next update: Thu 15 Oct 2026 23:00:00 +0000 Files and hashes: 1: 5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa (hash: 9PTR1lOek7pW1ig1YOcdV0dD0nx3CtVgTXYo+NCxNwA=) 2: 7405a32c-964c-4b30-a008-0f287767e1c1.crl (hash: fpqC1vdCmvjwBar0JnIOwYPbF8IYvMCfVti4vB9k8ac=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:77:79:cb:e2:18:b0:a6:bd:ff:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7405a32c-964c-4b30-a008-0f287767e1c1 Validity Not Before: Oct 12 23:00:23 2026 GMT Not After : Oct 15 23:00:00 2026 GMT Subject: CN=5e3a27ab-5c8e-4da5-bd22-491b359db84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:70:81:e4:99:82:f9:53:5a:d2:06:84:ec:6c: a3:2b:0d:2b:5f:8c:86:0b:54:03:08:47:ea:cf:50: 90:52:1a:9b:67:d2:9c:5c:20:8d:5c:ab:94:de:f7: 60:0b:00:c5:e9:55:3f:b1:8c:c6:a3:a3:b6:39:7d: 29:7b:a5:83:30:04:c5:7c:18:fe:65:c2:d7:08:33: 67:b3:71:1a:4a:a6:38:de:38:50:d7:e8:41:7c:14: d6:0b:3b:7e:d5:fe:67:b2:ec:74:3a:9d:53:2d:30: 4f:5b:26:41:a3:a6:40:74:e6:bf:a7:fa:2d:fe:2b: a4:78:c2:25:77:3d:7e:db:79:9c:23:ec:11:29:3d: c5:8e:aa:5a:fe:7c:a6:60:56:0e:50:52:87:51:7a: de:6f:46:86:9b:43:d1:5f:55:3e:c1:4d:e7:16:05: 54:ed:c9:d6:7c:ae:f5:50:8c:3e:f0:a7:a9:b3:f5: 99:b5:fc:b9:da:d1:3a:14:36:05:5c:b1:0d:c5:85: 80:f5:bc:dd:1f:48:ae:d4:50:9b:f1:a3:e5:6e:33: a8:74:6a:86:80:dc:df:60:69:77:94:7c:e8:6d:a6: b6:df:f1:d0:2e:9c:ed:e1:02:18:da:74:f1:01:40: de:47:7b:49:bf:a0:05:a1:a0:95:db:3b:6a:11:24: 3e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:91:68:74:1A:43:26:FF:02:0C:02:B7:7F:F2:72:A0:5C:81:74:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.crl X509v3 Authority Key Identifier: keyid:E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f8:bf:3b:55:15:e6:de:5f:53:1b:34:c3:79:b2:0b:4e:1e: 05:ab:19:d0:5c:f9:7c:de:9a:4e:03:26:87:5c:eb:4d:c8:a5: 9b:e8:7a:ab:5d:9b:97:28:2c:21:f1:e7:bf:f6:61:d5:b9:cd: 96:c6:a1:6e:60:0d:09:6e:8b:40:e1:1c:79:a5:f6:c8:45:37: 78:6d:0c:41:76:60:77:68:c3:c8:69:1f:b4:0a:86:f0:5a:51: 89:59:20:ef:16:9b:7c:b5:8f:92:06:38:3c:f7:ce:45:a8:d5: b3:14:7e:3e:5e:f6:ef:7f:98:eb:e7:62:f9:d1:c6:ac:1d:5f: 6c:06:e7:cc:1d:03:11:7e:4e:11:14:80:b7:47:43:c7:f8:8c: 6d:a7:7b:ea:f7:ca:b7:a0:34:e7:49:6a:d0:ee:21:e0:9b:05: 53:ec:8b:fe:e1:b2:6d:6d:20:89:65:95:b9:82:35:96:0e:59: 96:24:b5:2a:c6:d2:4e:0f:48:db:5c:3a:43:93:d0:0f:a1:62: 68:4b:05:9b:de:9a:8c:37:19:ac:62:c9:6c:15:81:12:01:d2: 78:fd:07:65:79:0d:ef:4c:ae:65:09:79:e0:05:0a:68:85:c7: 79:a7:ca:37:17:93:95:36:dc:83:e3:07:00:58:11:ff:c1:5f: 1d:33:9c:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE97d3nL4hiwpr3/rcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQwNWEzMmMtOTY0Yy00YjMwLWEwMDgtMGYyODc3Njdl MWMxMB4XDTI2MTAxMjIzMDAyM1oXDTI2MTAxNTIzMDAwMFowLzEtMCsGA1UEAxMk NWUzYTI3YWItNWM4ZS00ZGE1LWJkMjItNDkxYjM1OWRiODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnCB5JmC+VNa0gaE7GyjKw0rX4yGC1QDCEfq z1CQUhqbZ9KcXCCNXKuU3vdgCwDF6VU/sYzGo6O2OX0pe6WDMATFfBj+ZcLXCDNn s3EaSqY43jhQ1+hBfBTWCzt+1f5nsux0Op1TLTBPWyZBo6ZAdOa/p/ot/iukeMIl dz1+23mcI+wRKT3Fjqpa/nymYFYOUFKHUXreb0aGm0PRX1U+wU3nFgVU7cnWfK71 UIw+8Keps/WZtfy52tE6FDYFXLENxYWA9bzdH0iu1FCb8aPlbjOodGqGgNzfYGl3 lHzobaa23/HQLpzt4QIY2nTxAUDeR3tJv6AFoaCV2ztqESQ+aQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM+RaHQaQyb/AgwCt3/ycqBcgXSwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDA1 YTMyYy05NjRjLTRiMzAtYTAwOC0wZjI4Nzc2N2UxYzEvNzQwNWEzMmMtOTY0Yy00 YjMwLWEwMDgtMGYyODc3NjdlMWMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQwNWEzMmMtOTY0Yy00YjMwLWEw MDgtMGYyODc3NjdlMWMxLzc0MDVhMzJjLTk2NGMtNGIzMC1hMDA4LTBmMjg3NzY3 ZTFjMS5jcmwwHwYDVR0jBBgwFoAU6XN7Fc1m7aMLaGZDcZRSCBP32FgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDA1YTMyYy05NjRjLTRiMzAtYTAwOC0wZjI4 Nzc2N2UxYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1+L87VRXm3l9TGzTDebIL Th4FqxnQXPl83ppOAyaHXOtNyKWb6HqrXZuXKCwh8ee/9mHVuc2WxqFuYA0JbotA 4Rx5pfbIRTd4bQxBdmB3aMPIaR+0CobwWlGJWSDvFpt8tY+SBjg8985FqNWzFH4+ Xvbvf5jr52L50casHV9sBufMHQMRfk4RFIC3R0PH+Ixtp3vq98q3oDTnSWrQ7iHg mwVT7Iv+4bJtbSCJZZW5gjWWDlmWJLUqxtJOD0jbXDpDk9APoWJoSwWb3pqMNxms YslsFYESAdJ4/QdleQ3vTK5lCXngBQpohcd5p8o3F5OVNtyD4wcAWBH/wV8dM5y8 -----END CERTIFICATE-----Generated at Tue Oct 13 20:50:16 2026 by rpki-client