$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft File: 1af0a650-f612-4b2a-9af3-b8090917fefd.mft (raw, json) Hash identifier: odGxq7eJBoU4eqWTXY6/qi9O/pk/Z5TjQyYrtVccBvg= Subject key identifier: 42:A6:74:3F:29:CF:70:A6:87:11:05:D9:BA:8A:D5:B7:A1:14:BF:DD Authority key identifier: 0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D Certificate issuer: /CN=1af0a650-f612-4b2a-9af3-b8090917fefd Certificate serial: 010D0C9F4328584F7D53F1C1EDD4075686F33300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft Manifest number: 010D0C9F4328584BE67F5BDBA8BBD49634FD1A52 Signing time: Tue 13 Oct 2026 15:00:24 +0000 Manifest this update: Tue 13 Oct 2026 15:00:24 +0000 Manifest next update: Thu 15 Oct 2026 15:00:00 +0000 Files and hashes: 1: 1af0a650-f612-4b2a-9af3-b8090917fefd.crl (hash: MQwAQBjkb4c7FhLi83nvb6sbXcgtDztbvh64WvLne2g=) 2: c9a357e8-5b34-3488-aff9-64850d85d2ab.roa (hash: dnR580swcZLsxOiXAL+6QWYrILf9dfhxuocqSI4qgKM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:53:f1:c1:ed:d4:07:56:86:f3:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1af0a650-f612-4b2a-9af3-b8090917fefd Validity Not Before: Oct 13 15:00:24 2026 GMT Not After : Oct 15 15:00:00 2026 GMT Subject: CN=1b719b5d-dc40-41bc-881a-4c4472d0ff94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:cc:50:36:a0:2c:16:20:54:0b:ea:35:10: 87:ec:6c:bd:d5:93:20:eb:84:7f:eb:59:4d:13:11: eb:34:05:fa:c9:86:cd:e5:2b:bd:a3:38:a2:b2:0a: b5:d4:80:f0:3f:a0:8b:01:57:8c:42:7a:a1:1b:e5: 6b:4e:d5:0d:a4:82:89:29:1f:6c:f7:8a:21:c6:b4: 8a:05:dd:a9:c0:b8:a0:5d:ec:51:d3:05:1b:56:e5: 64:4b:04:3d:64:4c:46:0d:5b:62:4b:e9:4e:c5:2d: 0a:a7:fd:93:95:52:b8:cd:2e:4e:f6:7b:6e:e7:ef: e8:d9:a5:0a:5d:6d:e5:e0:a5:48:5b:91:90:15:6f: 65:c9:5c:be:21:12:1c:a1:26:8b:bd:f1:3b:6d:d4: 78:63:9a:3f:fa:e3:71:55:9d:27:94:94:5c:a0:3b: 3e:2c:5c:74:8c:eb:2a:8d:e8:85:94:de:c4:74:41: 4d:4f:4f:da:e3:22:ac:5c:45:31:4b:26:62:5d:34: 55:36:c7:7d:61:f4:81:d5:2b:25:ea:d3:0f:13:fb: 9f:f4:36:7c:3d:38:c4:2b:52:4e:9b:4d:30:bf:ed: 11:6f:2d:17:53:0f:3d:43:0f:e5:f0:97:f3:17:ed: 50:33:d3:b5:6e:4d:f4:77:fe:88:09:f4:4b:f1:e3: 0f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A6:74:3F:29:CF:70:A6:87:11:05:D9:BA:8A:D5:B7:A1:14:BF:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl X509v3 Authority Key Identifier: keyid:0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:2f:1d:52:aa:a6:01:49:5b:31:88:cd:a1:ca:a3:86:9a:7e: dd:84:e4:0f:ee:75:8f:ca:f7:45:cc:d1:75:69:b7:dd:83:fc: 47:90:84:7b:a1:8f:7c:4f:7a:0c:fb:43:fa:e2:f5:29:c9:e0: 1e:09:b7:6d:b6:3f:c6:c1:97:1a:49:52:7b:e8:57:8a:d6:10: a0:5f:44:4f:0a:21:9a:1a:39:32:a2:84:8a:1c:78:13:06:e0: c6:34:00:76:ef:67:bc:06:fb:08:d5:f3:0d:48:c2:48:38:9d: 80:0d:de:14:a8:20:43:99:d2:ea:7c:0d:ba:3b:79:10:87:f3: 24:b1:e0:eb:39:8c:97:fb:18:39:0e:01:ef:0d:39:14:fe:e9: 8f:8f:76:7e:d8:a1:d9:ba:8c:29:ea:cb:32:0b:73:54:5c:f3: 00:2c:74:2e:4c:69:37:9b:26:24:2b:9f:ab:40:75:c8:d2:ea: c6:75:aa:64:5d:71:97:56:09:eb:25:af:0e:d4:4b:8e:81:f0: b6:40:b7:4c:72:17:2a:e0:73:f4:b3:8f:64:87:6d:cc:79:9f: d6:11:59:15:77:72:1a:ad:f7:b6:40:f6:c1:c9:85:bf:0b:7a: 18:79:90:a2:07:f1:1a:d8:35:2e:1c:df:ee:f7:aa:63:f4:29: 1d:d0:f2:eb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE99U/HB7dQHVobzMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFmMGE2NTAtZjYxMi00YjJhLTlhZjMtYjgwOTA5MTdm ZWZkMB4XDTI2MTAxMzE1MDAyNFoXDTI2MTAxNTE1MDAwMFowLzEtMCsGA1UEAxMk MWI3MTliNWQtZGM0MC00MWJjLTg4MWEtNGM0NDcyZDBmZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKPMUDagLBYgVAvqNRCH7Gy91ZMg64R/61lN ExHrNAX6yYbN5Su9oziisgq11IDwP6CLAVeMQnqhG+VrTtUNpIKJKR9s94ohxrSK Bd2pwLigXexR0wUbVuVkSwQ9ZExGDVtiS+lOxS0Kp/2TlVK4zS5O9ntu5+/o2aUK XW3l4KVIW5GQFW9lyVy+IRIcoSaLvfE7bdR4Y5o/+uNxVZ0nlJRcoDs+LFx0jOsq jeiFlN7EdEFNT0/a4yKsXEUxSyZiXTRVNsd9YfSB1Ssl6tMPE/uf9DZ8PTjEK1JO m00wv+0Rby0XUw89Qw/l8JfzF+1QM9O1bk30d/6ICfRL8eMPRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEKmdD8pz3CmhxEF2bqK1behFL/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYw YTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5MDkxN2ZlZmQvMWFmMGE2NTAtZjYxMi00 YjJhLTlhZjMtYjgwOTA5MTdmZWZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWFmMGE2NTAtZjYxMi00YjJhLTlh ZjMtYjgwOTA5MTdmZWZkLzFhZjBhNjUwLWY2MTItNGIyYS05YWYzLWI4MDkwOTE3 ZmVmZC5jcmwwHwYDVR0jBBgwFoAUDWTi2ayqXnf8z1b/B9EFaOXwJJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYwYTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5 MDkxN2ZlZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByLx1SqqYBSVsxiM2hyqOG mn7dhOQP7nWPyvdFzNF1abfdg/xHkIR7oY98T3oM+0P64vUpyeAeCbdttj/GwZca SVJ76FeK1hCgX0RPCiGaGjkyooSKHHgTBuDGNAB272e8BvsI1fMNSMJIOJ2ADd4U qCBDmdLqfA26O3kQh/MkseDrOYyX+xg5DgHvDTkU/umPj3Z+2KHZuowp6ssyC3NU XPMALHQuTGk3myYkK5+rQHXI0urGdapkXXGXVgnrJa8O1EuOgfC2QLdMchcq4HP0 s49kh23MeZ/WEVkVd3Iarfe2QPbByYW/C3oYeZCiB/Ea2DUuHN/u96pj9Ckd0PLr -----END CERTIFICATE-----Generated at Tue Oct 13 17:42:18 2026 by rpki-client