$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft File: cadf002a-d081-4e51-89c4-f7121259516d.mft (raw, json) Hash identifier: qXtBKr5RIUWEhe65FXRWymAh1IWQGoHUTjWSCNH9tvM= Subject key identifier: 86:A4:57:1D:A5:EF:80:78:D0:EB:FF:00:8C:93:9F:A4:A8:4B:31:F9 Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F4328584F7B1E2B8D29C1CAE954941000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft Manifest number: 010D0C9F43285842AD9ECC2C9997439D002F5852 Signing time: Mon 12 Oct 2026 20:00:24 +0000 Manifest this update: Mon 12 Oct 2026 20:00:24 +0000 Manifest next update: Thu 15 Oct 2026 20:00:00 +0000 Files and hashes: 1: 088b1098-9f13-3b9c-9ed2-1c879f079fea.roa (hash: mHcvGXfL8Sc2B2QsxVlm7Vhnc2BG47ZOiGuQpymUEt0=) 2: 966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa (hash: Sgh3LMIklEScC77lv/WSyI+S3Gt0c3XRxDvnhQuUqys=) 3: a8f35c59-b971-3d84-a662-b03a19638ac2.roa (hash: Jb8pg2zhCTBWTwYuIWXe9PzrKC5tz+FN+CB+pZ0Y+bU=) 4: cadf002a-d081-4e51-89c4-f7121259516d.crl (hash: B8iYQ4nNFffw+QyqoKeMwPQEuXjkNlmS7Ppat7yVI2k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:1e:2b:8d:29:c1:ca:e9:54:94:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Oct 12 20:00:24 2026 GMT Not After : Oct 15 20:00:00 2026 GMT Subject: CN=2cbbf8d9-8c6b-4b5d-a996-f67a11f9341f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cc:c5:0c:a6:5b:52:96:68:11:86:f2:0e:6d: 48:8f:be:d4:b8:8b:50:4c:3b:3a:e8:3b:8f:fd:f5: a2:76:5a:26:e1:ed:60:10:76:ac:85:1d:aa:a8:68: c1:92:a8:97:4e:1b:7c:ae:95:95:d9:3c:00:a8:52: 87:06:59:33:e0:c9:4c:a0:c1:65:80:9b:10:b3:d9: b6:cc:6a:91:2a:c3:ef:18:bc:be:8a:34:14:6d:bd: 83:a9:71:95:ca:6a:7d:24:ff:7f:c0:44:41:5f:51: ef:28:a5:90:13:28:c4:cd:47:ec:5a:11:f4:b7:39: f2:5e:01:11:e3:dd:23:a8:77:fc:27:85:b5:de:0e: 0c:e7:17:a6:11:59:aa:bd:80:f3:b4:55:56:de:bd: 54:94:4d:af:73:08:63:51:53:3a:8f:8b:85:e6:2c: 3e:d1:d0:bb:b1:23:a2:0a:04:15:cd:db:95:ab:65: 5b:1f:0f:b7:61:7e:97:74:3a:81:0d:80:51:66:8a: 6a:d0:96:ac:ac:6c:42:3c:5f:41:26:0d:59:c1:60: 54:6b:6e:e5:67:49:c1:5b:41:85:a5:6a:1a:a6:fd: 38:7b:44:3a:1f:cd:5b:38:d2:59:2d:2f:13:b3:fb: 78:e6:80:e8:dc:2f:b3:d5:64:fc:21:e2:e4:ad:44: 69:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A4:57:1D:A5:EF:80:78:D0:EB:FF:00:8C:93:9F:A4:A8:4B:31:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:21:6e:f5:b4:02:58:95:b1:41:68:ff:99:1d:2a:a6:87:fc: c5:06:63:c3:a3:51:e6:12:26:a7:48:a9:5a:eb:4f:9e:65:b7: 97:71:7b:21:bd:2d:5d:93:d7:4d:7b:8f:eb:e2:37:0c:f7:88: 73:1b:2c:e4:11:4b:e4:87:a9:06:84:ad:f4:03:bb:25:76:16: 3a:68:dc:b7:c2:80:ff:38:a2:42:58:61:fe:23:02:6d:fc:35: dc:57:17:83:f3:81:29:4e:fd:67:cf:1c:53:9a:a2:98:58:54: 9e:b6:17:7b:4d:8c:34:39:46:12:46:d5:f1:ec:2e:d1:a0:34: 8e:3f:84:7d:51:a5:1f:14:8b:69:b4:c8:3c:0d:01:52:40:26: 24:99:b7:4e:cd:86:d4:9c:98:85:e7:23:9e:2c:ed:7d:56:c2: 3c:c6:d5:46:7e:f2:0e:e1:00:54:4a:70:ba:ad:2d:2f:16:6a: 4e:68:35:3f:c9:48:73:de:b4:b0:de:a0:e4:bc:48:26:1b:2c: bb:b4:49:7e:e2:d0:c6:6f:8f:d4:94:4d:91:44:85:b8:b8:2d: b4:f7:f6:85:e0:cf:84:13:27:df:0e:aa:eb:a5:6c:9e:11:dc: b8:13:57:78:c3:51:75:dd:31:94:c5:b0:9e:ab:a8:30:30:4e: bc:0b:a6:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE97HiuNKcHK6VSUEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI2MTAxMjIwMDAyNFoXDTI2MTAxNTIwMDAwMFowLzEtMCsGA1UEAxMk MmNiYmY4ZDktOGM2Yi00YjVkLWE5OTYtZjY3YTExZjkzNDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgczFDKZbUpZoEYbyDm1Ij77UuItQTDs66DuP /fWidlom4e1gEHashR2qqGjBkqiXTht8rpWV2TwAqFKHBlkz4MlMoMFlgJsQs9m2 zGqRKsPvGLy+ijQUbb2DqXGVymp9JP9/wERBX1HvKKWQEyjEzUfsWhH0tznyXgER 490jqHf8J4W13g4M5xemEVmqvYDztFVW3r1UlE2vcwhjUVM6j4uF5iw+0dC7sSOi CgQVzduVq2VbHw+3YX6XdDqBDYBRZopq0JasrGxCPF9BJg1ZwWBUa27lZ0nBW0GF pWoapv04e0Q6H81bONJZLS8Ts/t45oDo3C+z1WT8IeLkrURp2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIakVx2l74B40Ov/AIyTn6SoSzH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvY2FkZjAwMmEtZDA4MS00 ZTUxLTg5YzQtZjcxMjEyNTk1MTZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATIW71tAJYlbFBaP+ZHSqm h/zFBmPDo1HmEianSKla60+eZbeXcXshvS1dk9dNe4/r4jcM94hzGyzkEUvkh6kG hK30A7sldhY6aNy3woD/OKJCWGH+IwJt/DXcVxeD84EpTv1nzxxTmqKYWFSethd7 TYw0OUYSRtXx7C7RoDSOP4R9UaUfFItptMg8DQFSQCYkmbdOzYbUnJiF5yOeLO19 VsI8xtVGfvIO4QBUSnC6rS0vFmpOaDU/yUhz3rSw3qDkvEgmGyy7tEl+4tDGb4/U lE2RRIW4uC209/aF4M+EEyffDqrrpWyeEdy4E1d4w1F13TGUxbCeq6gwME68C6Yi -----END CERTIFICATE-----Generated at Tue Oct 13 16:08:23 2026 by rpki-client