$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft File: be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft (raw, json) Hash identifier: /1EPhEqJ7brhC0UlMS7XWkefkpMa2cNstIYCLu1W7nE= Subject key identifier: 4A:22:DF:67:90:D9:8E:74:CD:DF:32:CC:A9:B6:89:39:FD:E1:B1:F2 Authority key identifier: F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A Certificate issuer: /CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9 Certificate serial: 010D0C9F4328584F9155D58154670DC09ED62B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft Manifest number: 010D0C9F43285840F1B61272025108BE12B510EF Signing time: Tue 20 Oct 2026 19:00:24 +0000 Manifest this update: Tue 20 Oct 2026 19:00:24 +0000 Manifest next update: Thu 22 Oct 2026 19:00:00 +0000 Files and hashes: 1: be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl (hash: cOg1SxNYhmuwvOfWqlB7p7Lx+vJHenZUXMCIvvatBXQ=) 2: fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa (hash: ntTGZDv3EGj3pm7tVv7/b43gbYX2MWqwEqxubzxSW2U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:91:55:d5:81:54:67:0d:c0:9e:d6:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9 Validity Not Before: Oct 20 19:00:24 2026 GMT Not After : Oct 22 19:00:00 2026 GMT Subject: CN=e64b648a-f718-49cb-8dd9-4a1ee0de8db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:b2:a4:cd:5b:84:1e:c2:d4:1b:c2:4b:32: 98:52:54:76:04:ee:97:d0:cf:5e:5d:1d:9e:bd:ef: 02:6d:ed:33:b9:64:5e:24:ff:4a:9e:37:98:d5:a6: 46:fe:6d:b6:29:24:55:25:72:53:33:c1:96:8f:53: d8:87:10:28:7f:4d:f6:a1:79:fd:45:4c:0c:6a:e4: 41:3a:e1:96:f9:b4:64:b7:7b:80:23:67:d3:35:17: ee:eb:a8:7a:50:0a:c4:3b:b1:66:06:61:3b:a6:02: 96:2a:05:07:a4:6f:b8:fc:00:97:10:68:d5:96:88: 7b:cf:52:09:5a:ef:8e:0a:c8:fa:e9:46:cc:0e:8f: 2d:cc:06:72:a0:78:6b:84:31:1b:f0:63:e3:71:08: 2a:46:06:93:c3:dc:74:f3:a5:66:83:b1:85:75:a9: b5:cf:0d:02:28:d8:bf:50:64:71:14:54:57:3f:71: c2:5d:fc:4c:31:6e:ae:47:5d:91:09:50:67:2e:03: 78:fd:03:d3:49:b4:7b:9f:8a:b3:5f:f4:ba:75:1b: 38:0b:03:98:71:35:58:97:b7:ef:12:d1:df:f2:17: 21:6f:8a:3b:e1:93:0c:87:16:47:99:88:69:9d:bc: d0:cc:b9:fe:b6:13:38:7a:5d:16:29:74:d6:17:da: 65:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:22:DF:67:90:D9:8E:74:CD:DF:32:CC:A9:B6:89:39:FD:E1:B1:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl X509v3 Authority Key Identifier: keyid:F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:86:41:88:c1:db:3e:90:69:ea:d6:00:fb:da:b4:dc:32:fb: fa:61:cb:2b:99:be:60:73:19:bc:17:5b:e5:0a:84:c1:3a:b7: 45:59:f4:7b:85:50:43:a4:48:a3:b8:4b:99:4b:65:67:00:c1: 39:a4:43:99:72:8a:b7:83:c9:57:a1:fe:96:8d:9b:13:c8:ab: 5e:22:6f:eb:c3:0c:fc:c5:8b:a4:5f:74:8d:96:65:4a:82:65: d1:8d:39:a7:a6:4f:45:95:d2:d5:fc:ab:5a:02:ab:2e:78:c2: 24:b0:79:25:4c:b4:e5:c9:a4:80:34:db:21:dc:c0:fb:61:fa: 83:15:24:5c:ec:dc:32:43:62:a0:cb:08:33:f4:57:58:29:9d: 51:fc:f2:5c:ed:42:16:e2:12:07:d5:b3:eb:54:07:17:97:b2: 51:00:14:54:2d:68:a7:0d:61:e2:36:f0:b9:89:ed:50:0e:7a: fa:5c:01:71:94:7e:28:29:9f:81:1b:d8:2c:74:cb:7f:95:55: bd:80:62:5f:3d:52:9d:d3:db:82:7d:47:f5:d4:ab:82:11:90: a5:9a:31:57:03:1c:69:b2:01:b4:0c:88:71:62:82:c6:b0:d6: 1b:c3:c1:94:95:38:a2:dd:20:ea:bb:78:78:10:61:28:0a:02: 2e:d5:40:8a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+RVdWBVGcNwJ7WK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU5MDg5NWEtM2M0My00YjM4LWE1YWEtYjFlYmMyNjFi NmY5MB4XDTI2MTAyMDE5MDAyNFoXDTI2MTAyMjE5MDAwMFowLzEtMCsGA1UEAxMk ZTY0YjY0OGEtZjcxOC00OWNiLThkZDktNGExZWUwZGU4ZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypSypM1bhB7C1BvCSzKYUlR2BO6X0M9eXR2e ve8Cbe0zuWReJP9KnjeY1aZG/m22KSRVJXJTM8GWj1PYhxAof032oXn9RUwMauRB OuGW+bRkt3uAI2fTNRfu66h6UArEO7FmBmE7pgKWKgUHpG+4/ACXEGjVloh7z1IJ Wu+OCsj66UbMDo8tzAZyoHhrhDEb8GPjcQgqRgaTw9x086Vmg7GFdam1zw0CKNi/ UGRxFFRXP3HCXfxMMW6uR12RCVBnLgN4/QPTSbR7n4qzX/S6dRs4CwOYcTVYl7fv EtHf8hchb4o74ZMMhxZHmYhpnbzQzLn+thM4el0WKXTWF9plWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEoi32eQ2Y50zd8yzKm2iTn94bHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iZTkw ODk1YS0zYzQzLTRiMzgtYTVhYS1iMWViYzI2MWI2ZjkvYmU5MDg5NWEtM2M0My00 YjM4LWE1YWEtYjFlYmMyNjFiNmY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmU5MDg5NWEtM2M0My00YjM4LWE1 YWEtYjFlYmMyNjFiNmY5L2JlOTA4OTVhLTNjNDMtNGIzOC1hNWFhLWIxZWJjMjYx YjZmOS5jcmwwHwYDVR0jBBgwFoAU8VVqNlvNKrthwKWsN7V+4tbW7gowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iZTkwODk1YS0zYzQzLTRiMzgtYTVhYS1iMWVi YzI2MWI2ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuhkGIwds+kGnq1gD72rTc Mvv6Ycsrmb5gcxm8F1vlCoTBOrdFWfR7hVBDpEijuEuZS2VnAME5pEOZcoq3g8lX of6WjZsTyKteIm/rwwz8xYukX3SNlmVKgmXRjTmnpk9FldLV/KtaAqsueMIksHkl TLTlyaSANNsh3MD7YfqDFSRc7NwyQ2Kgywgz9FdYKZ1R/PJc7UIW4hIH1bPrVAcX l7JRABRULWinDWHiNvC5ie1QDnr6XAFxlH4oKZ+BG9gsdMt/lVW9gGJfPVKd09uC fUf11KuCEZClmjFXAxxpsgG0DIhxYoLGsNYbw8GUlTii3SDqu3h4EGEoCgIu1UCK -----END CERTIFICATE-----Generated at Tue Oct 20 22:28:11 2026 by rpki-client