$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft File: a7001425-6965-4c1f-8e35-f578d112295c.mft (raw, json) Hash identifier: q7pVGIFjeKATlAKCcUclQTvreNZeUTV/aT9kVj8HKxU= Subject key identifier: 5A:A2:4D:1D:E2:62:29:E7:4E:CE:59:31:D4:EE:29:C5:A9:A5:34:6D Authority key identifier: F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB Certificate issuer: /CN=a7001425-6965-4c1f-8e35-f578d112295c Certificate serial: 010D0C9F4328584FB476E8F99834A633E8D4EA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft Manifest number: 010D0C9F4328584073A84BBBF8F6F9BE621552D1 Signing time: Mon 02 Nov 2026 09:00:24 +0000 Manifest this update: Mon 02 Nov 2026 09:00:24 +0000 Manifest next update: Thu 05 Nov 2026 09:00:00 +0000 Files and hashes: 1: 33a3b984-a77f-3d78-88ae-30ae68813e02.roa (hash: Qxag5vthUEGbxCX39/XxiI6aowOs8ytvV0qKcFFvazM=) 2: a7001425-6965-4c1f-8e35-f578d112295c.crl (hash: qEZn1fLkRykLi6AhMI0398ZbgB5nv2xIplva4vRO2o8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b4:76:e8:f9:98:34:a6:33:e8:d4:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7001425-6965-4c1f-8e35-f578d112295c Validity Not Before: Nov 2 09:00:24 2026 GMT Not After : Nov 5 09:00:00 2026 GMT Subject: CN=2a247c7f-4fe5-4f32-a980-6b29271d880c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b3:bc:32:99:ac:ec:a0:13:03:67:9a:43:4e: 46:fe:40:e3:fe:12:19:a8:81:b5:ed:61:18:59:fe: f4:5c:0c:a2:79:d2:cd:c0:d7:ab:34:dd:3d:52:cd: 9a:58:d5:6d:00:e2:1e:c5:d3:1a:30:ea:74:e0:74: e9:04:bb:57:4c:3f:02:75:82:d4:45:c0:c8:9f:e0: b4:6e:10:04:ef:c0:23:79:a0:b4:86:9f:be:a5:6b: 16:a9:76:4c:7f:f4:39:33:f5:69:58:30:e4:25:3d: f1:5b:01:55:9a:87:a4:3a:35:37:88:3a:ee:cb:3a: f2:ec:c7:9c:eb:79:f1:78:dc:9c:f7:91:d4:2e:06: e5:db:40:06:5c:fa:e8:c5:42:63:1d:c3:5a:4d:30: 52:c7:dd:9a:10:c8:c2:2e:15:ab:1d:a2:de:80:25: c2:33:b8:3b:b9:ac:f7:cb:31:b3:95:4d:72:14:f3: 33:9e:58:0c:04:33:df:e7:3f:ec:f0:5c:20:f0:b5: f0:d0:10:ed:ef:e3:96:39:66:78:09:0f:4c:bd:96: 75:18:11:16:48:64:f3:98:2e:e6:42:c6:4f:a8:2c: 0e:9e:61:c7:fa:41:f5:4a:19:b0:e4:25:29:f9:9d: e8:3c:85:fb:ff:e4:af:2f:99:a4:ea:28:5d:a7:c8: 73:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A2:4D:1D:E2:62:29:E7:4E:CE:59:31:D4:EE:29:C5:A9:A5:34:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl X509v3 Authority Key Identifier: keyid:F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ff:fc:0b:67:5e:98:b0:d6:98:7f:50:a8:89:d6:4a:70:9d: 89:0e:09:45:9d:9a:d3:f7:dc:b8:c9:81:62:cd:0f:b9:60:1c: ce:30:93:1b:3c:4d:2a:d2:26:0e:9e:78:d9:a7:76:be:aa:65: f4:fd:f9:ef:12:94:c2:02:4e:16:1b:61:67:92:49:21:f6:dc: 96:6f:ce:7e:16:2a:ef:09:b1:14:d1:ce:9d:dd:af:d6:bc:2c: 72:35:ea:38:a6:76:68:72:94:9b:0b:d7:28:e9:2a:33:09:06: d3:f9:bc:0a:f6:78:36:0a:c3:1f:53:9a:d5:40:79:da:cb:0b: f1:a4:22:06:86:4a:c5:6c:9e:3a:dd:21:e3:22:ab:a0:6f:62: 17:0e:e3:a8:07:5d:fb:c5:8d:a2:2b:c4:d2:f2:55:be:86:06: 67:bc:52:43:fe:d5:25:42:fe:ea:93:4f:3b:b6:a8:7e:64:b9: b7:24:54:a1:81:00:64:76:86:be:9a:d3:0c:0c:47:14:45:a5: f3:c4:cc:37:73:ba:64:97:c0:f5:e4:07:e4:d0:3c:ea:05:55: da:54:b0:ad:60:1d:1c:a7:35:e9:49:55:98:b9:2d:22:7e:f7: 55:ac:8d:e7:ee:1c:f5:5d:c4:c1:f0:c4:9f:16:9b:b5:5c:eb: 2b:c9:7f:6c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+0duj5mDSmM+jU6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcwMDE0MjUtNjk2NS00YzFmLThlMzUtZjU3OGQxMTIy OTVjMB4XDTI2MTEwMjA5MDAyNFoXDTI2MTEwNTA5MDAwMFowLzEtMCsGA1UEAxMk MmEyNDdjN2YtNGZlNS00ZjMyLWE5ODAtNmIyOTI3MWQ4ODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrO8Mpms7KATA2eaQ05G/kDj/hIZqIG17WEY Wf70XAyiedLNwNerNN09Us2aWNVtAOIexdMaMOp04HTpBLtXTD8CdYLURcDIn+C0 bhAE78AjeaC0hp++pWsWqXZMf/Q5M/VpWDDkJT3xWwFVmoekOjU3iDruyzry7Mec 63nxeNyc95HULgbl20AGXProxUJjHcNaTTBSx92aEMjCLhWrHaLegCXCM7g7uaz3 yzGzlU1yFPMznlgMBDPf5z/s8Fwg8LXw0BDt7+OWOWZ4CQ9MvZZ1GBEWSGTzmC7m QsZPqCwOnmHH+kH1Shmw5CUp+Z3oPIX7/+SvL5mk6ihdp8hzMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFqiTR3iYinnTs5ZMdTuKcWppTRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAw MTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4ZDExMjI5NWMvYTcwMDE0MjUtNjk2NS00 YzFmLThlMzUtZjU3OGQxMTIyOTVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTcwMDE0MjUtNjk2NS00YzFmLThl MzUtZjU3OGQxMTIyOTVjL2E3MDAxNDI1LTY5NjUtNGMxZi04ZTM1LWY1NzhkMTEy Mjk1Yy5jcmwwHwYDVR0jBBgwFoAU9GxN8F4XluZ5iCEPwLopcDLWK8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAwMTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4 ZDExMjI5NWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAl//wLZ16YsNaYf1CoidZK cJ2JDglFnZrT99y4yYFizQ+5YBzOMJMbPE0q0iYOnnjZp3a+qmX0/fnvEpTCAk4W G2Fnkkkh9tyWb85+FirvCbEU0c6d3a/WvCxyNeo4pnZocpSbC9co6SozCQbT+bwK 9ng2CsMfU5rVQHnaywvxpCIGhkrFbJ463SHjIqugb2IXDuOoB137xY2iK8TS8lW+ hgZnvFJD/tUlQv7qk087tqh+ZLm3JFShgQBkdoa+mtMMDEcURaXzxMw3c7pkl8D1 5Afk0DzqBVXaVLCtYB0cpzXpSVWYuS0ifvdVrI3n7hz1XcTB8MSfFpu1XOsryX9s -----END CERTIFICATE-----Generated at Mon Nov 2 14:18:23 2026 by rpki-client