$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0cfd7843-dc41-445a-925e-51b4db504083/0cfd7843-dc41-445a-925e-51b4db504083.mft File: 0cfd7843-dc41-445a-925e-51b4db504083.mft (raw, json) Hash identifier: 4MvGk5a+scT8lgHXlfqiOljnrbSa0finSdJy9CXbFhE= Subject key identifier: 89:61:23:F0:27:BD:28:A3:7B:A7:E8:5A:F2:36:D3:46:90:38:69:5D Authority key identifier: C7:E0:87:11:AA:4D:CB:62:04:1F:EC:BF:64:1D:D5:96:20:C3:09:3F Certificate issuer: /CN=0cfd7843-dc41-445a-925e-51b4db504083 Certificate serial: 010D0C9F4328584FB32F5DFCFB1EE4CE35D371C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0cfd7843-dc41-445a-925e-51b4db504083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0cfd7843-dc41-445a-925e-51b4db504083/0cfd7843-dc41-445a-925e-51b4db504083.mft Manifest number: 010D0C9F4328584FAAE1299AA1CC3938A8A3E604 Signing time: Sun 01 Nov 2026 22:00:24 +0000 Manifest this update: Sun 01 Nov 2026 22:00:24 +0000 Manifest next update: Tue 03 Nov 2026 22:00:00 +0000 Files and hashes: 1: 0cfd7843-dc41-445a-925e-51b4db504083.crl (hash: 0WzqzpasYw4GISCRF+2n6e0EZ1d8VMxYYLNa6dsDlyA=) 2: 9829c89e-d61f-3b69-a62c-adcd94b441ed.roa (hash: QR2kAfFsvMFxfCs8k0mXBLJWtIqV2SQvO+3HEhd4jAs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0cfd7843-dc41-445a-925e-51b4db504083/0cfd7843-dc41-445a-925e-51b4db504083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0cfd7843-dc41-445a-925e-51b4db504083/0cfd7843-dc41-445a-925e-51b4db504083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0cfd7843-dc41-445a-925e-51b4db504083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:2f:5d:fc:fb:1e:e4:ce:35:d3:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cfd7843-dc41-445a-925e-51b4db504083 Validity Not Before: Nov 1 22:00:24 2026 GMT Not After : Nov 3 22:00:00 2026 GMT Subject: CN=59fd1a67-55ab-4899-8a96-7e94efaf83f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c7:83:7e:db:45:4d:66:93:1f:42:80:62:01: 59:f8:15:3c:dc:fd:4c:86:da:8e:fd:54:fa:64:fd: 4c:f3:6d:0b:24:7b:14:f0:0f:ff:57:cd:46:86:68: 2a:24:92:1d:92:c2:5b:ad:a1:51:c9:cf:a5:0a:49: 2b:6b:d0:44:8b:4e:29:24:d2:5a:bc:3a:8f:24:09: 5c:6d:5f:48:94:e2:ce:a1:a9:1e:ac:c6:b4:a5:f0: 24:88:4a:67:87:98:06:8f:b9:8b:2e:d2:f3:0b:f2: 28:32:4d:1e:63:80:13:5e:0a:07:f4:98:0c:1d:e1: fc:8b:a2:f0:fd:e1:04:25:70:57:b5:46:87:92:c5: 3b:11:50:7f:d4:91:da:4c:72:04:bb:00:10:51:f4: f6:b2:76:8e:b8:d0:e6:03:20:fc:d3:46:b9:27:8b: 6b:40:12:5e:bf:6e:d0:1e:b8:7d:aa:3b:86:60:5a: 0f:3a:c7:e6:ab:fe:01:5d:67:df:1b:d0:c6:7e:c8: 75:29:7f:77:ea:cb:2c:c6:ef:e5:1c:9e:f7:9e:2b: 52:11:41:da:54:fe:d3:f9:f2:22:f0:fa:a1:4a:52: 2f:58:1f:63:78:72:f1:67:71:eb:7d:3f:7b:ad:fb: 3d:f8:c3:64:e0:1f:45:db:54:5d:d7:a5:c9:f6:7f: 2f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:61:23:F0:27:BD:28:A3:7B:A7:E8:5A:F2:36:D3:46:90:38:69:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0cfd7843-dc41-445a-925e-51b4db504083/0cfd7843-dc41-445a-925e-51b4db504083.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0cfd7843-dc41-445a-925e-51b4db504083/0cfd7843-dc41-445a-925e-51b4db504083.crl X509v3 Authority Key Identifier: keyid:C7:E0:87:11:AA:4D:CB:62:04:1F:EC:BF:64:1D:D5:96:20:C3:09:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0cfd7843-dc41-445a-925e-51b4db504083.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e7:54:a5:26:71:11:45:c6:b6:16:b7:69:ef:b4:af:0d:0f: 58:98:97:99:6c:f2:fe:f4:7e:2f:a1:14:8c:49:d9:24:2a:37: 11:df:de:56:0b:24:e6:66:c4:e4:58:da:54:45:f4:39:9f:bd: 81:f1:76:23:25:d6:3f:41:64:84:c3:18:00:30:91:41:02:bb: 3f:bd:cc:8a:d5:49:a2:a2:08:4d:06:db:18:8b:da:7c:2c:9f: 3c:f4:86:53:80:64:94:a2:72:9b:a9:99:72:92:f6:93:64:32: cb:34:1b:aa:2d:e2:c0:e0:f0:bb:9a:6c:2e:65:3c:56:70:8c: 15:46:57:3c:45:56:51:e7:bd:91:87:81:b3:6f:c2:cd:34:d1: 4b:41:5b:f5:95:92:6c:78:32:60:62:2d:54:58:c2:aa:cf:af: c9:c9:79:59:7c:72:97:a4:e5:f8:dc:c1:c2:f1:57:c6:4e:a9: f3:f6:f2:f2:e9:47:b4:ce:ad:24:c6:b9:b2:4e:c6:5f:6d:5c: 73:49:b2:b4:69:db:3a:aa:32:0f:17:c8:17:13:77:1e:c3:a5: 1e:9b:ce:fc:19:6b:48:c4:96:4b:7a:c5:02:ef:15:9e:bc:62: ce:cc:3e:76:46:02:43:58:53:ab:6b:34:5a:4c:9b:24:95:20: 30:83:3d:5b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+zL138+x7kzjXTccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNmZDc4NDMtZGM0MS00NDVhLTkyNWUtNTFiNGRiNTA0 MDgzMB4XDTI2MTEwMTIyMDAyNFoXDTI2MTEwMzIyMDAwMFowLzEtMCsGA1UEAxMk NTlmZDFhNjctNTVhYi00ODk5LThhOTYtN2U5NGVmYWY4M2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMeDfttFTWaTH0KAYgFZ+BU83P1MhtqO/VT6 ZP1M820LJHsU8A//V81GhmgqJJIdksJbraFRyc+lCkkra9BEi04pJNJavDqPJAlc bV9IlOLOoakerMa0pfAkiEpnh5gGj7mLLtLzC/IoMk0eY4ATXgoH9JgMHeH8i6Lw /eEEJXBXtUaHksU7EVB/1JHaTHIEuwAQUfT2snaOuNDmAyD800a5J4trQBJev27Q Hrh9qjuGYFoPOsfmq/4BXWffG9DGfsh1KX936sssxu/lHJ73nitSEUHaVP7T+fIi 8PqhSlIvWB9jeHLxZ3HrfT97rfs9+MNk4B9F21Rd16XJ9n8v/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIlhI/AnvSije6foWvI200aQOGldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8wY2Zk Nzg0My1kYzQxLTQ0NWEtOTI1ZS01MWI0ZGI1MDQwODMvMGNmZDc4NDMtZGM0MS00 NDVhLTkyNWUtNTFiNGRiNTA0MDgzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzc1MjZhMC1m ZTRlLTQ3NDEtYjM5Yi0zMjMzNTNhMWViZjIvMGNmZDc4NDMtZGM0MS00NDVhLTky NWUtNTFiNGRiNTA0MDgzLzBjZmQ3ODQzLWRjNDEtNDQ1YS05MjVlLTUxYjRkYjUw NDA4My5jcmwwHwYDVR0jBBgwFoAUx+CHEapNy2IEH+y/ZB3VliDDCT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0 MS1iMzliLTMyMzM1M2ExZWJmMi8wY2ZkNzg0My1kYzQxLTQ0NWEtOTI1ZS01MWI0 ZGI1MDQwODMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAA51SlJnERRca2Frdp77Sv DQ9YmJeZbPL+9H4voRSMSdkkKjcR395WCyTmZsTkWNpURfQ5n72B8XYjJdY/QWSE wxgAMJFBArs/vcyK1UmioghNBtsYi9p8LJ889IZTgGSUonKbqZlykvaTZDLLNBuq LeLA4PC7mmwuZTxWcIwVRlc8RVZR572Rh4Gzb8LNNNFLQVv1lZJseDJgYi1UWMKq z6/JyXlZfHKXpOX43MHC8VfGTqnz9vLy6Ue0zq0kxrmyTsZfbVxzSbK0ads6qjIP F8gXE3cew6Uem878GWtIxJZLesUC7xWevGLOzD52RgJDWFOrazRaTJsklSAwgz1b -----END CERTIFICATE-----Generated at Mon Nov 2 14:28:32 2026 by rpki-client