$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft File: 25393f82-9e95-47aa-9897-0027f6c5e3d4.mft (raw, json) Hash identifier: ki8/jv7QQBSbrRLymRsHv3cH4Tbmz0pVRoJE19VphS0= Subject key identifier: 47:02:3E:EA:71:41:69:EA:F9:69:1E:2D:56:BA:38:BE:9B:63:3A:95 Authority key identifier: 38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E Certificate issuer: /CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Certificate serial: 010D0C9F4328584F6DF91E4882D393977C9FC180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft Manifest number: 010D0C9F43285846E41B34F5F05C912653C097C6 Signing time: Thu 08 Oct 2026 03:00:23 +0000 Manifest this update: Thu 08 Oct 2026 03:00:23 +0000 Manifest next update: Sat 10 Oct 2026 03:00:00 +0000 Files and hashes: 1: 25393f82-9e95-47aa-9897-0027f6c5e3d4.crl (hash: Gju0z99I7cAGXnmiuJxcIPHso4afoHUTgPD+mK0lbh4=) 2: 9c46e998-1908-3d4b-a119-3d998db7b89b.roa (hash: 0PeH7d2IAkazfdCDvL70BD7vrgFMUSJX3PlgYwb2pE8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:f9:1e:48:82:d3:93:97:7c:9f:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Validity Not Before: Oct 8 03:00:23 2026 GMT Not After : Oct 10 03:00:00 2026 GMT Subject: CN=33e6ba9b-fc64-459f-adef-dfd13016e710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:47:a7:ba:3c:41:de:b1:df:e3:50:7d:11:2e: 75:5f:16:cc:05:fb:89:eb:6e:f2:50:be:87:6c:37: 5f:ae:fb:5e:18:0a:98:88:2a:9d:f7:55:0a:26:cf: 04:24:ca:27:d5:9c:36:d8:5a:4f:a4:57:cc:7c:22: bc:da:29:1f:bd:77:f1:5f:d0:3f:b2:e9:57:18:ca: 67:a2:27:d4:24:7e:c6:5b:d3:45:72:00:ba:5c:c8: 5f:83:8b:cc:aa:57:18:99:17:76:ec:48:e6:32:57: 79:70:cc:02:3b:2e:bb:c7:25:b2:0d:30:f9:3b:30: df:65:64:8c:c4:2b:a7:4f:03:11:32:7a:18:42:ed: 72:21:03:7a:4a:09:22:ab:22:51:1d:fe:e9:24:a8: 7a:13:2a:1f:da:82:51:18:d5:62:a0:2f:37:c9:ef: 24:c2:df:82:21:5a:ab:4c:ef:c0:6e:28:56:47:6a: 73:ce:e0:e9:53:a2:d7:57:b8:46:ed:49:fc:36:a8: 1e:02:3e:f2:06:dc:af:40:bb:1b:2f:7a:60:36:42: d3:73:89:41:d9:30:a3:84:a2:92:63:a5:64:da:52: ab:96:0d:e0:92:1a:1e:1c:07:26:51:ac:02:39:5d: 9c:8b:6e:1e:94:cc:70:fb:d1:2a:56:70:ca:ab:46: 9a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:02:3E:EA:71:41:69:EA:F9:69:1E:2D:56:BA:38:BE:9B:63:3A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl X509v3 Authority Key Identifier: keyid:38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:44:af:db:d7:f0:c0:d7:46:00:a5:02:32:13:10:96:bd:d9: 6e:ee:aa:e4:ec:6f:04:47:da:8b:31:6c:b6:ea:48:57:bb:db: 92:33:18:90:9a:a4:2e:90:08:0a:3f:25:6c:38:99:18:56:20: 50:2f:95:06:f6:d2:46:3e:47:0b:c9:a7:16:8f:ce:48:98:d9: 86:0b:8a:e3:d7:1d:8b:1d:fe:83:22:3e:b3:3c:11:e8:17:65: ea:ae:2e:31:d4:53:6c:67:74:e9:a2:a0:21:7a:78:bd:2e:f5: bc:1c:b4:6b:91:29:c8:11:96:ee:dd:90:30:c7:92:25:02:bb: 2f:ba:91:60:a9:73:db:5b:74:bc:b0:49:13:45:3c:92:9d:f5: 6b:f3:2c:fb:9e:b2:16:95:d9:eb:84:b9:da:86:5f:1b:15:86: 81:bb:f0:aa:f5:d0:e3:13:70:91:81:ce:26:2f:a7:97:47:af: 7d:ae:b4:cb:ac:82:8b:9d:59:f4:5f:27:66:5d:eb:cb:6b:ec: b3:b7:dc:19:81:58:0d:ae:e3:db:03:49:5c:cb:6a:26:5f:fb: e0:58:f1:09:f3:b4:4a:0c:85:36:93:bf:13:74:19:21:60:36: 40:c5:22:37:6e:36:a3:45:ed:01:70:c5:ee:b3:84:6a:a5:b1: 06:f0:82:69 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9t+R5IgtOTl3yfwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTNmODItOWU5NS00N2FhLTk4OTctMDAyN2Y2YzVl M2Q0MB4XDTI2MTAwODAzMDAyM1oXDTI2MTAxMDAzMDAwMFowLzEtMCsGA1UEAxMk MzNlNmJhOWItZmM2NC00NTlmLWFkZWYtZGZkMTMwMTZlNzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEenujxB3rHf41B9ES51XxbMBfuJ627yUL6H bDdfrvteGAqYiCqd91UKJs8EJMon1Zw22FpPpFfMfCK82ikfvXfxX9A/sulXGMpn oifUJH7GW9NFcgC6XMhfg4vMqlcYmRd27EjmMld5cMwCOy67xyWyDTD5OzDfZWSM xCunTwMRMnoYQu1yIQN6SgkiqyJRHf7pJKh6Eyof2oJRGNVioC83ye8kwt+CIVqr TO/AbihWR2pzzuDpU6LXV7hG7Un8NqgeAj7yBtyvQLsbL3pgNkLTc4lB2TCjhKKS Y6Vk2lKrlg3gkhoeHAcmUawCOV2ci24elMxw+9EqVnDKq0aaBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEcCPupxQWnq+WkeLVa6OL6bYzqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5 M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3ZjZjNWUzZDQvMjUzOTNmODItOWU5NS00 N2FhLTk4OTctMDAyN2Y2YzVlM2Q0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjUzOTNmODItOWU5NS00N2FhLTk4 OTctMDAyN2Y2YzVlM2Q0LzI1MzkzZjgyLTllOTUtNDdhYS05ODk3LTAwMjdmNmM1 ZTNkNC5jcmwwHwYDVR0jBBgwFoAUOAgtINaveaoYgr9lJFwNdefJhm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3 ZjZjNWUzZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApRK/b1/DA10YApQIyExCW vdlu7qrk7G8ER9qLMWy26khXu9uSMxiQmqQukAgKPyVsOJkYViBQL5UG9tJGPkcL yacWj85ImNmGC4rj1x2LHf6DIj6zPBHoF2Xqri4x1FNsZ3TpoqAheni9LvW8HLRr kSnIEZbu3ZAwx5IlArsvupFgqXPbW3S8sEkTRTySnfVr8yz7nrIWldnrhLnahl8b FYaBu/Cq9dDjE3CRgc4mL6eXR699rrTLrIKLnVn0XydmXevLa+yzt9wZgVgNruPb A0lcy2omX/vgWPEJ87RKDIU2k78TdBkhYDZAxSI3bjajRe0BcMXus4RqpbEG8IJp -----END CERTIFICATE-----Generated at Thu Oct 8 21:10:00 2026 by rpki-client