$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft File: c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft (raw, json) Hash identifier: j9LkqzggxwjlO/7+69XUvfaB8Kmwac/kxvBPsJ0wQXs= Subject key identifier: E4:CB:9A:55:0C:13:D1:44:A5:06:69:C1:B5:69:9F:A0:F4:62:18:CD Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584FB8A6FA4739481DBAB8557000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft Manifest number: 010D0C9F4328584073A829E3051185C1AED5AE0E Signing time: Tue 03 Nov 2026 21:00:23 +0000 Manifest this update: Tue 03 Nov 2026 21:00:23 +0000 Manifest next update: Fri 06 Nov 2026 21:00:00 +0000 Files and hashes: 1: 1404fac3-bbc2-308f-8af1-df72ff2c55be.roa (hash: aPyg+Rn5EZTZkOf0+lBNrJgUXnfCQBPVFdztmQCb/0I=) 2: 175486fd-ca0f-3f0b-8fde-5143519bfdfe.roa (hash: 5pRo7sOqQfcU3IkqKv/n10k8TbXyIdyhM/DxYruYE2Q=) 3: c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl (hash: l+uo66HFqlGid1IWPC+Yw1As4Q7/vMTdqKAuNueb6kA=) 4: eb089c1b-c5cb-3caa-a868-952fc11242db.roa (hash: 3+OA5gy4OtEHJPN28225lhnxyPjwim0P4K6O9LSLF2M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b8:a6:fa:47:39:48:1d:ba:b8:55:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Nov 3 21:00:23 2026 GMT Not After : Nov 6 21:00:00 2026 GMT Subject: CN=35c08bcf-31ee-4ed4-af71-906802bca781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c5:60:60:c3:99:3b:3c:d3:b5:cd:bc:5d:d3: d2:bc:37:d8:49:87:72:21:c3:4c:c6:da:4d:e2:e2: 34:bd:8c:97:df:19:b0:2b:ff:7e:62:98:bf:32:3a: ac:5b:96:77:91:a8:5f:9c:f7:6e:2f:ea:9f:ac:cd: c0:ac:0a:8c:43:0e:17:49:26:78:28:43:17:d7:4f: d1:02:8a:4d:62:bb:18:a1:eb:15:91:cb:e7:e1:bd: 52:ea:ae:3d:82:47:47:91:9e:0d:00:b7:c2:2e:05: 67:98:60:d7:32:44:97:20:ef:cd:c5:90:88:14:43: 2d:f1:56:0d:fb:3d:79:25:e6:79:4d:23:aa:50:21: 8e:24:69:b3:1f:be:88:36:82:b4:10:51:1e:95:33: a8:4d:45:13:b1:61:39:63:c6:db:63:c9:ab:0b:6c: 91:b8:2a:3c:2c:6e:24:08:a4:3a:b4:21:1e:c7:c2: 6f:ba:b2:ac:74:11:14:87:7c:6c:93:c5:f5:8d:58: d8:36:6a:d4:74:8b:db:b3:33:ee:20:eb:11:e9:a7: b0:4f:0e:39:61:ae:3c:7b:64:a2:63:ff:0d:d8:1b: 86:9f:6f:ba:c1:03:67:88:94:2e:39:5a:d2:7c:5d: b0:54:29:6b:e1:b1:ca:79:53:38:c1:d9:9a:0e:73: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CB:9A:55:0C:13:D1:44:A5:06:69:C1:B5:69:9F:A0:F4:62:18:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:53:02:59:e5:46:fb:8c:e0:69:7f:a1:9a:c6:2c:d1:e8:d6: 50:5f:79:d4:50:b1:13:b6:de:9f:3a:0d:e5:37:86:7e:dd:a5: 7b:4c:11:1e:4c:e3:7e:14:99:bd:61:dc:c5:05:0c:45:5e:27: 4e:b1:8f:c8:0e:d2:23:3b:33:fe:3e:09:61:4c:0c:9a:e2:c0: 67:c5:f4:42:5e:a1:db:c7:1e:01:09:82:3c:5c:c3:b4:d0:35: 9f:2c:20:d8:d8:3b:28:a7:48:82:7a:83:66:a0:25:19:fd:e9: 97:d4:88:97:8f:7d:5f:c5:17:70:b9:b9:62:d0:a2:14:39:6f: dd:8e:7e:ca:80:8b:76:d6:0c:a0:51:39:77:4b:bc:de:ab:97: 85:ac:7e:6b:c2:5e:8a:07:98:e2:fa:ce:d5:7c:8c:e5:5a:aa: ad:f3:db:bc:5a:c7:bf:87:98:82:60:f5:b3:71:b8:2f:1f:56: c8:17:08:40:09:10:cc:b3:44:7f:58:ff:16:51:cc:9b:56:48: 00:e7:0b:d4:90:c0:8f:9d:6b:54:83:fd:d1:03:96:ad:0f:04: 4f:c2:e2:f7:af:b3:3f:39:ea:1a:7c:2c:b8:f8:20:19:2f:5d: b5:a9:5c:62:35:ab:77:82:8f:49:da:33:fe:a5:3c:78:61:2a: 85:d3:13:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+4pvpHOUgdurhVcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI2MTEwMzIxMDAyM1oXDTI2MTEwNjIxMDAwMFowLzEtMCsGA1UEAxMk MzVjMDhiY2YtMzFlZS00ZWQ0LWFmNzEtOTA2ODAyYmNhNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsVgYMOZOzzTtc28XdPSvDfYSYdyIcNMxtpN 4uI0vYyX3xmwK/9+Ypi/MjqsW5Z3kahfnPduL+qfrM3ArAqMQw4XSSZ4KEMX10/R AopNYrsYoesVkcvn4b1S6q49gkdHkZ4NALfCLgVnmGDXMkSXIO/NxZCIFEMt8VYN +z15JeZ5TSOqUCGOJGmzH76INoK0EFEelTOoTUUTsWE5Y8bbY8mrC2yRuCo8LG4k CKQ6tCEex8JvurKsdBEUh3xsk8X1jVjYNmrUdIvbszPuIOsR6aewTw45Ya48e2Si Y/8N2BuGn2+6wQNniJQuOVrSfF2wVClr4bHKeVM4wdmaDnO6vQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOTLmlUME9FEpQZpwbVpn6D0YhjNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvYzg1ZjNiMmMtYzM5MS00 OWUzLWEzYTUtZWE0MzAyMzVjYzZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQUwJZ5Ub7jOBpf6GaxizR 6NZQX3nUULETtt6fOg3lN4Z+3aV7TBEeTON+FJm9YdzFBQxFXidOsY/IDtIjOzP+ PglhTAya4sBnxfRCXqHbxx4BCYI8XMO00DWfLCDY2Dsop0iCeoNmoCUZ/emX1IiX j31fxRdwubli0KIUOW/djn7KgIt21gygUTl3S7zeq5eFrH5rwl6KB5ji+s7VfIzl Wqqt89u8Wse/h5iCYPWzcbgvH1bIFwhACRDMs0R/WP8WUcybVkgA5wvUkMCPnWtU g/3RA5atDwRPwuL3r7M/OeoafCy4+CAZL121qVxiNat3go9J2jP+pTx4YSqF0xNI -----END CERTIFICATE-----Generated at Wed Nov 4 07:35:10 2026 by rpki-client