$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.mft File: cd2e5d70-fbb5-4b45-baa3-0763c26d4968.mft (raw, json) Hash identifier: nD26skdH6hAHks1Yi60elD0f8UJFGDZUJ5x2bL3A704= Subject key identifier: 95:7C:D9:39:0A:DF:66:B2:F4:D8:E6:C2:55:8C:6B:86:AF:D5:64:2C Authority key identifier: C8:B7:6E:20:04:83:AE:CE:D1:D1:DB:F7:E8:EC:7F:B0:D4:F3:76:73 Certificate issuer: /CN=cd2e5d70-fbb5-4b45-baa3-0763c26d4968 Certificate serial: 010D0C9F4328584F7B59BA6E2F7596FFFA8CF080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.mft Manifest number: 010D0C9F4328584C5FC863A211141CBFCA761565 Signing time: Mon 12 Oct 2026 22:00:26 +0000 Manifest this update: Mon 12 Oct 2026 22:00:26 +0000 Manifest next update: Wed 14 Oct 2026 22:00:00 +0000 Files and hashes: 1: 6aca919f-7194-3657-a9cd-84082ad16747.roa (hash: HgYjIftdnZhVVPnPCjHMb8/lLySVOeDQ3nSHI7KuTOo=) 2: cd2e5d70-fbb5-4b45-baa3-0763c26d4968.crl (hash: 8Es6GfYRwCzxsIR10d4zHmI0uuuajuQUbYfrWdDAVYY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:59:ba:6e:2f:75:96:ff:fa:8c:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2e5d70-fbb5-4b45-baa3-0763c26d4968 Validity Not Before: Oct 12 22:00:26 2026 GMT Not After : Oct 14 22:00:00 2026 GMT Subject: CN=790f1ed7-da34-4154-bc82-ba98bfa4e32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:11:98:b1:81:46:69:1a:06:e3:41:66:b8:b6: 48:04:f1:9f:eb:0c:1c:a0:bc:b4:f6:8e:be:cf:9a: 31:1f:c5:77:ec:81:5d:37:b8:be:3d:a5:15:75:f0: 89:07:3a:66:46:58:f4:d7:53:1e:f9:bf:b5:4d:62: 31:ff:b1:2d:11:b5:69:c1:08:58:b4:02:ea:f8:e0: 6d:1a:07:32:7b:79:cb:a7:15:92:61:8b:4d:90:76: 63:31:2a:7b:1a:23:db:a4:08:c5:87:2e:ad:74:5c: 53:2a:86:b7:c6:23:bb:cb:60:d7:1c:fa:42:0e:1f: a5:ef:95:1c:38:36:b2:c2:1b:1f:37:d9:3e:8c:e3: 99:d6:9f:b4:3b:7e:c1:7d:55:42:1e:f2:98:49:87: 78:c6:72:aa:fb:c2:30:bb:36:4d:ad:53:60:11:84: e0:65:a4:fd:34:9f:31:62:ff:42:d8:af:31:e7:6a: df:c5:1d:06:56:7f:97:59:d3:b7:2a:b6:f6:f7:71: 88:df:d5:ae:68:ad:71:cf:32:cc:87:1b:bf:79:98: c4:53:35:b2:8c:19:d3:5f:03:54:25:03:78:6c:2f: be:7f:81:5f:4d:94:4b:86:27:a6:e5:02:8c:2e:99: 5a:ef:53:1b:37:7d:87:0c:02:35:20:86:f3:56:64: 68:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7C:D9:39:0A:DF:66:B2:F4:D8:E6:C2:55:8C:6B:86:AF:D5:64:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.crl X509v3 Authority Key Identifier: keyid:C8:B7:6E:20:04:83:AE:CE:D1:D1:DB:F7:E8:EC:7F:B0:D4:F3:76:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:71:c2:68:fd:20:12:ad:62:de:39:71:5e:42:ff:99:79:5c: f6:a5:da:c4:65:8e:c0:c8:1b:c0:b2:3f:c7:9a:5a:0a:0a:ec: 6c:53:b8:f1:4a:68:b6:09:20:3d:b0:4d:24:46:9e:6e:47:a3: 95:c8:d1:24:70:53:d1:d0:37:5a:ac:17:8c:4e:08:cc:8a:eb: 88:07:10:30:3a:af:83:9d:39:c8:5c:2b:be:7b:e6:91:03:65: b2:94:98:97:98:9d:05:ad:fa:58:e9:9a:18:cc:54:9e:b7:44: 8e:47:49:8e:bc:1d:f2:be:ea:45:1a:9e:4e:04:d5:d9:f3:ef: 52:5f:0f:07:9a:06:33:dd:b7:a7:21:2e:8c:e1:13:a3:81:0d: 4d:c4:33:0d:d7:fb:e6:51:71:f0:4a:ab:d5:35:ec:63:f7:a4: f6:93:e5:4f:f0:10:5c:46:36:c4:ee:f8:e3:0d:79:be:0e:b0: 03:f1:fa:ac:28:ad:d2:87:cd:97:11:c2:51:da:68:a0:75:51: b7:c0:c1:6b:ee:5e:fc:8c:c5:1a:0c:e8:a2:35:7f:31:92:26: 37:db:b0:7b:58:14:52:8b:a7:63:bf:49:fe:78:4d:5f:73:41: 1d:46:8e:55:c5:e3:a4:12:97:1d:21:fc:10:4f:03:8a:cf:44: 40:7e:44:d5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE97WbpuL3WW//qM8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZTVkNzAtZmJiNS00YjQ1LWJhYTMtMDc2M2MyNmQ0 OTY4MB4XDTI2MTAxMjIyMDAyNloXDTI2MTAxNDIyMDAwMFowLzEtMCsGA1UEAxMk NzkwZjFlZDctZGEzNC00MTU0LWJjODItYmE5OGJmYTRlMzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxGYsYFGaRoG40FmuLZIBPGf6wwcoLy09o6+ z5oxH8V37IFdN7i+PaUVdfCJBzpmRlj011Me+b+1TWIx/7EtEbVpwQhYtALq+OBt Ggcye3nLpxWSYYtNkHZjMSp7GiPbpAjFhy6tdFxTKoa3xiO7y2DXHPpCDh+l75Uc ODaywhsfN9k+jOOZ1p+0O37BfVVCHvKYSYd4xnKq+8IwuzZNrVNgEYTgZaT9NJ8x Yv9C2K8x52rfxR0GVn+XWdO3Krb293GI39WuaK1xzzLMhxu/eZjEUzWyjBnTXwNU JQN4bC++f4FfTZRLhiem5QKMLpla71MbN32HDAI1IIbzVmRocQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJV82TkK32ay9NjmwlWMa4av1WQsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZDJl NWQ3MC1mYmI1LTRiNDUtYmFhMy0wNzYzYzI2ZDQ5NjgvY2QyZTVkNzAtZmJiNS00 YjQ1LWJhYTMtMDc2M2MyNmQ0OTY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2QyZTVkNzAtZmJiNS00YjQ1LWJh YTMtMDc2M2MyNmQ0OTY4L2NkMmU1ZDcwLWZiYjUtNGI0NS1iYWEzLTA3NjNjMjZk NDk2OC5jcmwwHwYDVR0jBBgwFoAUyLduIASDrs7R0dv36Ox/sNTzdnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZDJlNWQ3MC1mYmI1LTRiNDUtYmFhMy0wNzYz YzI2ZDQ5NjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsccJo/SASrWLeOXFeQv+Z eVz2pdrEZY7AyBvAsj/HmloKCuxsU7jxSmi2CSA9sE0kRp5uR6OVyNEkcFPR0Dda rBeMTgjMiuuIBxAwOq+DnTnIXCu+e+aRA2WylJiXmJ0FrfpY6ZoYzFSet0SOR0mO vB3yvupFGp5OBNXZ8+9SXw8HmgYz3benIS6M4ROjgQ1NxDMN1/vmUXHwSqvVNexj 96T2k+VP8BBcRjbE7vjjDXm+DrAD8fqsKK3Sh82XEcJR2migdVG3wMFr7l78jMUa DOiiNX8xkiY327B7WBRSi6djv0n+eE1fc0EdRo5VxeOkEpcdIfwQTwOKz0RAfkTV -----END CERTIFICATE-----Generated at Tue Oct 13 19:26:19 2026 by rpki-client