$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.mft File: e9986c58-4c7a-450f-9355-1382b40eb86e.mft (raw, json) Hash identifier: oJyTXvCrHqsHVJ+KQdLJWuzf4C7Hfhdk6rZpzIfFZ0M= Subject key identifier: A2:1A:94:61:BD:F9:F4:F2:E1:77:C1:A1:1E:19:EF:61:40:60:AA:32 Authority key identifier: 93:39:46:E8:CC:9A:E5:5A:55:8B:D1:88:85:97:2B:D5:C8:E6:1D:22 Certificate issuer: /CN=e9986c58-4c7a-450f-9355-1382b40eb86e Certificate serial: 010D0C9F4328584F8EE4713C25AC30F94EDF7600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.mft Manifest number: 010D0C9F432858482FC5AA32D15BE980092715B4 Signing time: Mon 19 Oct 2026 22:00:24 +0000 Manifest this update: Mon 19 Oct 2026 22:00:24 +0000 Manifest next update: Thu 22 Oct 2026 22:00:00 +0000 Files and hashes: 1: 07cdf4ff-3d86-3034-9063-bc02000bef1e.roa (hash: QYMJuDcgpoigIVkUFlAawQzPJlOywVXzHQQJc0iZYVo=) 2: e9986c58-4c7a-450f-9355-1382b40eb86e.crl (hash: lHe8hmrF2Z9kGLM63ThuoFMlwHCiviHFH35CR4eLVlk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8e:e4:71:3c:25:ac:30:f9:4e:df:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9986c58-4c7a-450f-9355-1382b40eb86e Validity Not Before: Oct 19 22:00:24 2026 GMT Not After : Oct 22 22:00:00 2026 GMT Subject: CN=20e550cc-2945-408a-afb8-2f00ad219c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:64:10:2e:11:ab:36:d7:66:bc:1d:c3:c2:d6: a0:ec:95:f8:6c:2b:32:09:f5:58:8e:e4:df:ab:04: dd:6a:0a:2e:2e:fb:81:2b:ab:35:9a:87:d7:e1:ec: 27:8d:d1:25:4e:44:62:f2:51:33:f9:ee:c7:40:f5: 28:84:9d:7b:60:2b:53:79:c2:71:27:2a:d1:9c:c6: db:0b:bd:20:f1:bf:4c:d6:a6:0e:b5:ff:3d:a7:dd: d5:9e:a7:89:7d:e2:1f:72:77:da:08:6f:d8:d1:a1: db:91:5f:a8:17:10:7d:97:c9:1c:55:4f:52:0a:8d: ef:1d:06:71:c2:81:ef:39:df:08:b7:f9:93:8f:f9: 28:4a:1d:14:c7:52:04:a9:24:b4:09:60:d6:b7:00: 98:c6:da:cd:77:d3:e4:0f:3a:5b:ea:22:da:6e:f4: 6c:58:ed:ea:39:45:bd:7f:d7:c5:81:5f:2f:2c:62: 52:50:e2:4f:17:08:19:12:88:6a:92:cc:a0:ce:0c: 9b:b0:f4:f6:49:35:db:4f:41:ff:ac:83:3b:38:01: bd:9c:3d:50:6e:c0:75:a9:89:15:10:ae:b5:a9:27: d7:27:25:47:27:45:e6:47:cc:25:15:31:a6:80:84: e4:17:ab:86:eb:80:ad:e6:95:13:fc:03:df:4c:84: b9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1A:94:61:BD:F9:F4:F2:E1:77:C1:A1:1E:19:EF:61:40:60:AA:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.crl X509v3 Authority Key Identifier: keyid:93:39:46:E8:CC:9A:E5:5A:55:8B:D1:88:85:97:2B:D5:C8:E6:1D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9b:b9:c4:a9:ee:61:0d:5d:c7:1d:3d:c9:b2:f9:e5:96:65: 44:6b:b3:3d:21:4d:a3:52:f1:b2:bf:f5:ec:9d:20:a2:f6:4c: e1:5a:e9:c3:c3:7c:7c:01:63:de:bb:b1:ef:96:db:b3:e7:b9: 98:b2:c1:9c:cf:f3:9a:25:c5:b8:a0:af:b8:0a:3e:12:be:57: b9:2d:b8:d7:2b:71:61:52:0b:39:72:e2:0d:41:ea:7a:c3:b5: c8:c1:9a:82:06:4f:70:6e:f3:ba:d3:04:75:ae:b9:68:b4:64: 63:40:a7:f9:fd:3a:10:d8:0a:ec:59:bb:fb:55:bf:5d:c6:6f: 6d:38:b9:46:52:e3:f6:4f:c1:ad:70:50:c3:a5:c9:f0:8e:00: 44:2b:52:5f:39:c5:37:70:7c:c3:fd:56:a8:92:a6:99:4f:6d: 28:5e:c3:ef:5e:7b:14:2e:28:2c:3c:78:fb:44:21:46:5a:50: 59:6b:74:7c:ee:2f:69:45:6d:e2:55:52:b2:75:41:5c:06:74: ea:62:4b:0a:ed:16:b3:7e:7a:5a:1b:90:a9:23:37:17:60:b0: e9:e8:6c:3d:be:80:3b:db:24:af:87:94:93:aa:54:fd:5c:9d: 13:98:1f:bf:c9:90:07:b6:35:02:fc:ae:4e:2a:0c:90:f4:34: 52:6c:35:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+O5HE8Jaww+U7fdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk5ODZjNTgtNGM3YS00NTBmLTkzNTUtMTM4MmI0MGVi ODZlMB4XDTI2MTAxOTIyMDAyNFoXDTI2MTAyMjIyMDAwMFowLzEtMCsGA1UEAxMk MjBlNTUwY2MtMjk0NS00MDhhLWFmYjgtMmYwMGFkMjE5YzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2QQLhGrNtdmvB3Dwtag7JX4bCsyCfVYjuTf qwTdagouLvuBK6s1mofX4ewnjdElTkRi8lEz+e7HQPUohJ17YCtTecJxJyrRnMbb C70g8b9M1qYOtf89p93VnqeJfeIfcnfaCG/Y0aHbkV+oFxB9l8kcVU9SCo3vHQZx woHvOd8It/mTj/koSh0Ux1IEqSS0CWDWtwCYxtrNd9PkDzpb6iLabvRsWO3qOUW9 f9fFgV8vLGJSUOJPFwgZEohqksygzgybsPT2STXbT0H/rIM7OAG9nD1QbsB1qYkV EK61qSfXJyVHJ0XmR8wlFTGmgITkF6uG64Ct5pUT/APfTIS5hQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKIalGG9+fTy4XfBoR4Z72FAYKoyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOTk4 NmM1OC00YzdhLTQ1MGYtOTM1NS0xMzgyYjQwZWI4NmUvZTk5ODZjNTgtNGM3YS00 NTBmLTkzNTUtMTM4MmI0MGViODZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTk5ODZjNTgtNGM3YS00NTBmLTkz NTUtMTM4MmI0MGViODZlL2U5OTg2YzU4LTRjN2EtNDUwZi05MzU1LTEzODJiNDBl Yjg2ZS5jcmwwHwYDVR0jBBgwFoAUkzlG6Mya5VpVi9GIhZcr1cjmHSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOTk4NmM1OC00YzdhLTQ1MGYtOTM1NS0xMzgy YjQwZWI4NmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsm7nEqe5hDV3HHT3Jsvnl lmVEa7M9IU2jUvGyv/XsnSCi9kzhWunDw3x8AWPeu7Hvltuz57mYssGcz/OaJcW4 oK+4Cj4Svle5LbjXK3FhUgs5cuINQep6w7XIwZqCBk9wbvO60wR1rrlotGRjQKf5 /ToQ2ArsWbv7Vb9dxm9tOLlGUuP2T8GtcFDDpcnwjgBEK1JfOcU3cHzD/VaokqaZ T20oXsPvXnsULigsPHj7RCFGWlBZa3R87i9pRW3iVVKydUFcBnTqYksK7Razfnpa G5CpIzcXYLDp6Gw9voA72ySvh5STqlT9XJ0TmB+/yZAHtjUC/K5OKgyQ9DRSbDVK -----END CERTIFICATE-----Generated at Tue Oct 20 06:32:20 2026 by rpki-client