$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.mft File: a4738e65-dd12-4c12-b10b-7a16621165e0.mft (raw, json) Hash identifier: A5ppslQo626Z0hEAzFqQJzreSrqlmPZQVrrCuUCkvx0= Subject key identifier: EA:88:E5:8B:65:31:EE:0A:3B:4C:CB:22:C0:1A:04:89:CD:0A:61:14 Authority key identifier: DD:D4:30:A7:71:FC:6D:D7:8F:83:5F:80:E1:0F:94:67:CE:F1:26:87 Certificate issuer: /CN=a4738e65-dd12-4c12-b10b-7a16621165e0 Certificate serial: 010D0C9F4328584FA3D498BE8285383659817600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.mft Manifest number: 010D0C9F4328584B73E77F49CD7C7241AD6BC78C Signing time: Tue 27 Oct 2026 10:00:26 +0000 Manifest this update: Tue 27 Oct 2026 10:00:26 +0000 Manifest next update: Fri 30 Oct 2026 10:00:00 +0000 Files and hashes: 1: a4738e65-dd12-4c12-b10b-7a16621165e0.crl (hash: acfGczTYNL0agmS/aKKKUA9aBqSmAU7yKRvdCU2pC1A=) 2: b857fd5a-5185-3e49-b5f7-ca152e420a13.roa (hash: /feXPvAzn4Fyv1/BPPpUi26iMtESCWX7neMcjXAXRxA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a3:d4:98:be:82:85:38:36:59:81:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4738e65-dd12-4c12-b10b-7a16621165e0 Validity Not Before: Oct 27 10:00:26 2026 GMT Not After : Oct 30 10:00:00 2026 GMT Subject: CN=b46e270e-4cab-4c81-8469-f3109c62ad3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:bb:66:b0:95:cd:21:35:82:4b:4d:a0:be: d5:ed:b6:e7:45:68:55:0d:9f:a5:ae:8e:8d:78:e0: 0f:5c:fe:d3:83:4e:de:e9:2c:ef:23:51:28:0d:0c: a6:aa:03:9f:86:5e:b0:62:e9:6e:ff:24:09:75:b7: 0b:4b:ea:23:fa:d3:c8:97:00:be:00:d8:73:8f:14: 84:8a:17:37:b0:31:84:35:35:d1:1e:4c:4b:02:96: d2:54:52:58:ae:b5:dd:d5:6e:82:6d:0e:f5:75:5d: 99:3c:77:bf:12:c6:fe:ba:8a:e3:60:9d:a3:f9:5b: 68:17:20:c8:1b:2e:33:a7:2e:2a:03:1e:ae:ba:9a: 19:1a:09:37:4c:58:6f:8e:35:09:1e:06:fd:21:dd: 02:29:c3:3e:a4:2d:f5:22:1d:53:8b:6c:dc:27:42: 3c:d7:67:0b:b5:56:6e:c4:c2:79:e6:f8:e3:08:95: 92:08:cb:8e:3f:42:f5:09:73:da:99:75:a3:75:0f: f5:c3:1b:6e:49:dd:da:29:dc:62:70:67:d8:3f:fc: c2:e8:9b:a5:26:be:c8:c9:78:8d:fe:09:14:cd:87: d0:67:12:ca:95:6e:d6:44:ec:37:bd:03:eb:ff:50: 58:bf:62:17:f3:39:9e:b0:61:62:d5:ac:98:08:b0: 2d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:88:E5:8B:65:31:EE:0A:3B:4C:CB:22:C0:1A:04:89:CD:0A:61:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.crl X509v3 Authority Key Identifier: keyid:DD:D4:30:A7:71:FC:6D:D7:8F:83:5F:80:E1:0F:94:67:CE:F1:26:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:cc:14:58:b6:a5:41:e8:a9:f7:f3:e8:7f:ca:0e:26:d0:bf: ee:5e:fb:f6:03:29:7a:4d:77:82:e2:1e:4e:9a:1d:f9:d6:40: 21:af:e2:4d:fa:97:a9:c2:66:dc:54:7b:4a:55:7f:cb:01:09: fb:f9:f8:cd:ff:95:bb:bb:10:fd:9c:25:13:00:f1:8a:3b:69: 12:20:38:68:dd:06:f7:7b:91:92:a5:69:cf:e8:a3:34:c1:c2: 8c:38:ad:da:72:84:71:4b:a8:79:4f:63:5f:9c:ef:a8:5d:68: 59:7d:76:2c:fa:95:cd:3e:e8:fc:0d:cf:8a:08:e0:6a:d8:6f: 91:2f:52:f4:c2:ab:20:95:9b:b9:ee:3e:67:5c:6d:c4:51:37: 7c:58:ff:a9:98:e0:d5:eb:e8:63:95:03:d8:cc:cc:96:81:8e: b4:ac:77:05:28:1f:e3:1e:d5:60:e3:f9:a8:48:bb:3c:6c:29: 3b:2f:7e:05:db:23:79:14:da:5c:3c:a2:8b:1e:51:55:bb:8d: c7:dc:e2:53:eb:89:0d:6c:24:8e:f3:dd:cc:10:6d:53:3e:4c: dc:0b:17:5f:0c:8a:04:f1:92:f6:09:8b:1d:5a:75:ce:17:be: 09:1a:68:74:1a:cb:2a:aa:e8:41:08:02:73:31:0b:f2:6b:87: 20:6d:cc:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+j1Ji+goU4NlmBdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQ3MzhlNjUtZGQxMi00YzEyLWIxMGItN2ExNjYyMTE2 NWUwMB4XDTI2MTAyNzEwMDAyNloXDTI2MTAzMDEwMDAwMFowLzEtMCsGA1UEAxMk YjQ2ZTI3MGUtNGNhYi00YzgxLTg0NjktZjMxMDljNjJhZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRy7ZrCVzSE1gktNoL7V7bbnRWhVDZ+lro6N eOAPXP7Tg07e6SzvI1EoDQymqgOfhl6wYulu/yQJdbcLS+oj+tPIlwC+ANhzjxSE ihc3sDGENTXRHkxLApbSVFJYrrXd1W6CbQ71dV2ZPHe/Esb+uorjYJ2j+VtoFyDI Gy4zpy4qAx6uupoZGgk3TFhvjjUJHgb9Id0CKcM+pC31Ih1Ti2zcJ0I812cLtVZu xMJ55vjjCJWSCMuOP0L1CXPamXWjdQ/1wxtuSd3aKdxicGfYP/zC6JulJr7IyXiN /gkUzYfQZxLKlW7WROw3vQPr/1BYv2IX8zmesGFi1ayYCLAtPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOqI5YtlMe4KO0zLIsAaBInNCmEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hNDcz OGU2NS1kZDEyLTRjMTItYjEwYi03YTE2NjIxMTY1ZTAvYTQ3MzhlNjUtZGQxMi00 YzEyLWIxMGItN2ExNjYyMTE2NWUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTQ3MzhlNjUtZGQxMi00YzEyLWIx MGItN2ExNjYyMTE2NWUwL2E0NzM4ZTY1LWRkMTItNGMxMi1iMTBiLTdhMTY2MjEx NjVlMC5jcmwwHwYDVR0jBBgwFoAU3dQwp3H8bdePg1+A4Q+UZ87xJocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hNDczOGU2NS1kZDEyLTRjMTItYjEwYi03YTE2 NjIxMTY1ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGzBRYtqVB6Kn38+h/yg4m 0L/uXvv2Ayl6TXeC4h5Omh351kAhr+JN+pepwmbcVHtKVX/LAQn7+fjN/5W7uxD9 nCUTAPGKO2kSIDho3Qb3e5GSpWnP6KM0wcKMOK3acoRxS6h5T2NfnO+oXWhZfXYs +pXNPuj8Dc+KCOBq2G+RL1L0wqsglZu57j5nXG3EUTd8WP+pmODV6+hjlQPYzMyW gY60rHcFKB/jHtVg4/moSLs8bCk7L34F2yN5FNpcPKKLHlFVu43H3OJT64kNbCSO 893MEG1TPkzcCxdfDIoE8ZL2CYsdWnXOF74JGmh0GssqquhBCAJzMQvya4cgbcy1 -----END CERTIFICATE-----Generated at Tue Oct 27 15:23:28 2026 by rpki-client