$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.mft File: 8ad994c2-ccdf-4c40-b066-c7595e9a492c.mft (raw, json) Hash identifier: tVnWe8AfV+ic27hfsR/4r03QMCZ71FoUToSMOfcDLZA= Subject key identifier: D1:2A:F5:2E:0B:9F:14:C8:79:E4:9C:20:67:7A:FD:F7:C0:A8:51:A8 Authority key identifier: 8C:38:B7:D8:DF:45:86:B4:17:E6:21:A5:DC:07:6D:D8:57:C6:7C:2D Certificate issuer: /CN=8ad994c2-ccdf-4c40-b066-c7595e9a492c Certificate serial: 010D0C9F4328584FA19EC70EF99AB1AB74493B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.mft Manifest number: 010D0C9F4328584CD174E34526ACDA7B7DF1480C Signing time: Mon 26 Oct 2026 15:00:23 +0000 Manifest this update: Mon 26 Oct 2026 15:00:23 +0000 Manifest next update: Thu 29 Oct 2026 15:00:00 +0000 Files and hashes: 1: 45f5cb58-72a8-3898-abe2-3604045d3bbd.roa (hash: C522XEJLyjp7o+AQFO3q3TWyNgLRcM0sVDXj/SVqr8k=) 2: 8ad994c2-ccdf-4c40-b066-c7595e9a492c.crl (hash: f+vQXSBFLCsKfU8I3emdNTeoK7TAVRRcZq1k3MBmUPw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:9e:c7:0e:f9:9a:b1:ab:74:49:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad994c2-ccdf-4c40-b066-c7595e9a492c Validity Not Before: Oct 26 15:00:23 2026 GMT Not After : Oct 29 15:00:00 2026 GMT Subject: CN=af2aa0a9-b9b3-4059-b8f2-1cf1b4307879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c9:5b:64:e4:a7:ad:73:7f:03:e5:cb:9f:c1: 6f:57:d6:77:18:44:d5:f9:d4:17:09:d2:bd:17:af: 6f:45:c4:51:48:ab:5f:5a:e4:37:8f:17:30:a0:d9: 39:e5:a7:05:8e:67:be:4c:5b:fa:55:cf:c2:6f:ac: df:86:08:6b:85:03:03:86:41:76:50:d6:08:c1:7f: ed:97:2e:14:78:59:01:30:95:de:34:dd:43:e0:cc: 2d:5d:0d:72:ac:91:af:1e:45:df:31:e3:9f:92:79: 70:2c:f4:79:68:c6:f2:bb:28:73:6f:16:bd:89:a8: 51:c8:80:06:2c:55:9f:be:67:2e:40:87:51:a4:e4: 86:0c:2f:0e:58:fb:9a:6c:47:9e:0c:51:86:bf:aa: f5:70:cd:b6:fc:6e:3e:5a:a1:33:f2:66:d9:15:c1: 67:23:90:a1:11:10:b0:61:7a:5f:bd:a2:5f:83:56: 1f:5e:6a:da:e3:a8:a8:c1:a0:53:0b:f9:9d:58:16: 55:79:e6:0e:9d:5e:77:73:46:bc:e2:7e:e4:9e:43: 75:ef:8c:ad:6f:86:4d:f6:8a:8f:3a:0d:d5:a6:02: f8:95:85:f6:78:bb:5e:2c:b8:1d:16:85:a0:25:2b: 12:56:b3:76:6b:92:87:80:8b:ad:13:4d:c7:1a:53: 4c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2A:F5:2E:0B:9F:14:C8:79:E4:9C:20:67:7A:FD:F7:C0:A8:51:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.crl X509v3 Authority Key Identifier: keyid:8C:38:B7:D8:DF:45:86:B4:17:E6:21:A5:DC:07:6D:D8:57:C6:7C:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:12:55:8e:72:69:15:7b:9a:6c:42:4a:0b:2b:37:f5:2a:08: 22:29:dd:53:0a:34:e0:7b:ae:53:cd:89:ca:5b:ef:24:d1:1e: 97:c4:7c:f0:cf:ed:42:a6:a8:b6:c0:82:67:ac:09:7e:ff:c5: df:76:ee:6d:4f:f0:37:7e:c6:e6:c5:5c:fb:3a:b3:10:b2:b3: 99:59:7a:4d:56:70:6f:fe:df:61:7d:65:78:81:08:7c:57:4e: fd:a9:87:00:ee:a5:99:ff:4a:f2:59:8b:f2:b7:87:8b:86:1a: 0d:ab:1b:06:6b:4c:8b:51:48:04:38:ee:c9:32:0a:8c:7d:5a: 36:a4:85:73:9d:be:59:86:4b:73:b1:63:d9:d4:0b:5c:b3:9d: e2:7a:13:ff:3d:ea:f5:4f:8b:ee:a8:1f:00:2d:b1:f8:d0:15: fe:f2:14:22:2e:50:96:f4:b2:d8:97:38:65:b4:e3:ca:0b:1b: f1:c6:52:73:6d:ec:93:8a:bb:40:29:95:e6:12:7a:bc:d8:3a: 1f:39:df:cf:1d:e0:54:df:00:07:94:d8:bd:56:21:93:8e:35: b6:6c:d1:53:b1:68:e5:a3:37:65:47:80:08:b7:56:6e:13:6a: e9:05:00:1f:04:d7:12:70:ec:db:8d:a0:1c:6d:63:d3:9c:0c: 6f:61:03:8a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+hnscO+Zqxq3RJO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOTk0YzItY2NkZi00YzQwLWIwNjYtYzc1OTVlOWE0 OTJjMB4XDTI2MTAyNjE1MDAyM1oXDTI2MTAyOTE1MDAwMFowLzEtMCsGA1UEAxMk YWYyYWEwYTktYjliMy00MDU5LWI4ZjItMWNmMWI0MzA3ODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9slbZOSnrXN/A+XLn8FvV9Z3GETV+dQXCdK9 F69vRcRRSKtfWuQ3jxcwoNk55acFjme+TFv6Vc/Cb6zfhghrhQMDhkF2UNYIwX/t ly4UeFkBMJXeNN1D4MwtXQ1yrJGvHkXfMeOfknlwLPR5aMbyuyhzbxa9iahRyIAG LFWfvmcuQIdRpOSGDC8OWPuabEeeDFGGv6r1cM22/G4+WqEz8mbZFcFnI5ChERCw YXpfvaJfg1YfXmra46iowaBTC/mdWBZVeeYOnV53c0a84n7knkN174ytb4ZN9oqP Og3VpgL4lYX2eLteLLgdFoWgJSsSVrN2a5KHgIutE03HGlNMvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNEq9S4LnxTIeeScIGd6/ffAqFGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWQ5 OTRjMi1jY2RmLTRjNDAtYjA2Ni1jNzU5NWU5YTQ5MmMvOGFkOTk0YzItY2NkZi00 YzQwLWIwNjYtYzc1OTVlOWE0OTJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFkOTk0YzItY2NkZi00YzQwLWIw NjYtYzc1OTVlOWE0OTJjLzhhZDk5NGMyLWNjZGYtNGM0MC1iMDY2LWM3NTk1ZTlh NDkyYy5jcmwwHwYDVR0jBBgwFoAUjDi32N9FhrQX5iGl3Adt2FfGfC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWQ5OTRjMi1jY2RmLTRjNDAtYjA2Ni1jNzU5 NWU5YTQ5MmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjElWOcmkVe5psQkoLKzf1 KggiKd1TCjTge65TzYnKW+8k0R6XxHzwz+1Cpqi2wIJnrAl+/8Xfdu5tT/A3fsbm xVz7OrMQsrOZWXpNVnBv/t9hfWV4gQh8V079qYcA7qWZ/0ryWYvyt4eLhhoNqxsG a0yLUUgEOO7JMgqMfVo2pIVznb5ZhktzsWPZ1Atcs53iehP/Per1T4vuqB8ALbH4 0BX+8hQiLlCW9LLYlzhltOPKCxvxxlJzbeyTirtAKZXmEnq82DofOd/PHeBU3wAH lNi9ViGTjjW2bNFTsWjlozdlR4AIt1ZuE2rpBQAfBNcScOzbjaAcbWPTnAxvYQOK -----END CERTIFICATE-----Generated at Tue Oct 27 15:50:42 2026 by rpki-client