$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab/ec87d7e1-2860-4694-838a-88ce3a47f3ab.mft File: ec87d7e1-2860-4694-838a-88ce3a47f3ab.mft (raw, json) Hash identifier: p9qCh4xyMkmQp3NSOJjmmeRYQFxrCU7HBNbyTLgDllI= Subject key identifier: CD:2B:85:43:43:C2:83:98:B8:42:F3:87:AB:99:5D:FC:41:F0:38:7F Authority key identifier: 5D:35:FC:BE:AB:4A:70:FB:30:7A:B9:BC:69:B3:6E:D7:F1:0B:EA:25 Certificate issuer: /CN=ec87d7e1-2860-4694-838a-88ce3a47f3ab Certificate serial: 010D0C9F4328584FA4C2D01FCC46AE0717C61500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab/ec87d7e1-2860-4694-838a-88ce3a47f3ab.mft Manifest number: 010D0C9F432858496251F48B744D9CED291655BE Signing time: Tue 27 Oct 2026 18:00:23 +0000 Manifest this update: Tue 27 Oct 2026 18:00:23 +0000 Manifest next update: Fri 30 Oct 2026 18:00:00 +0000 Files and hashes: 1: ec87d7e1-2860-4694-838a-88ce3a47f3ab.crl (hash: xTfLkCpY3jtAddSP4KDAIAtSl16Kc275ThBlRSPU2N0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab/ec87d7e1-2860-4694-838a-88ce3a47f3ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab/ec87d7e1-2860-4694-838a-88ce3a47f3ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a4:c2:d0:1f:cc:46:ae:07:17:c6:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec87d7e1-2860-4694-838a-88ce3a47f3ab Validity Not Before: Oct 27 18:00:23 2026 GMT Not After : Oct 30 18:00:00 2026 GMT Subject: CN=cc6bc4a7-e3a1-40bc-81e2-60c274df7603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:26:91:cd:99:ab:05:d2:71:42:ad:0c:d1:b0: 59:2a:3d:37:a7:74:b1:23:c8:54:5d:a4:0d:e9:85: d3:c8:b2:86:0a:0d:b0:7d:63:1c:ec:e7:c7:e5:7c: da:c8:15:b8:5e:90:0d:f4:af:0c:81:0c:7b:32:e9: 9b:ca:d2:ea:3f:2e:a4:d6:eb:b4:56:a8:8e:62:d3: 60:ab:3c:b2:f8:e3:c2:a2:03:9f:12:2c:21:c1:4c: 6d:d4:aa:0d:59:be:59:d5:e2:e3:5f:c7:1d:52:65: 44:11:39:68:12:06:a1:04:fa:be:72:33:fa:3a:11: 1b:1b:dd:56:d2:6d:d0:da:34:43:d6:e8:c0:0a:5a: c2:9b:02:5a:16:40:bf:30:e5:e9:48:9a:0b:72:3a: 11:0e:87:58:b5:a4:5d:ae:22:9f:c5:9a:0d:10:01: 87:03:16:45:92:1e:26:1f:44:46:32:e9:bf:88:b0: b5:5b:f4:19:23:17:aa:81:2b:ca:96:87:b6:b2:30: b2:fd:12:d7:ac:0c:d2:2f:f5:d4:3b:67:54:ed:61: 68:02:de:53:bd:9a:41:54:c4:8a:28:7e:92:4b:71: 6b:1a:8a:b5:c4:34:2a:58:b9:e0:fe:d4:a8:f0:91: bb:e7:e5:2d:fb:12:33:2b:ef:90:7b:9f:c4:62:53: 57:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2B:85:43:43:C2:83:98:B8:42:F3:87:AB:99:5D:FC:41:F0:38:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab/ec87d7e1-2860-4694-838a-88ce3a47f3ab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab/ec87d7e1-2860-4694-838a-88ce3a47f3ab.crl X509v3 Authority Key Identifier: keyid:5D:35:FC:BE:AB:4A:70:FB:30:7A:B9:BC:69:B3:6E:D7:F1:0B:EA:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ec87d7e1-2860-4694-838a-88ce3a47f3ab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ee:71:44:47:91:87:20:44:37:d7:03:f3:52:c7:c6:32:a3: b7:0b:c0:f4:85:49:5d:9c:e8:b7:af:49:77:f9:5a:7e:15:1e: f8:b2:09:13:e0:e2:47:7a:be:61:87:49:1b:15:d3:69:be:d2: 9b:d5:27:3b:d8:d1:3e:3e:f8:c7:c3:d9:53:fa:cf:b8:83:a8: ca:00:41:ad:83:bb:7b:f4:7c:83:69:88:4b:bc:63:4d:01:1d: 05:94:ca:6d:00:03:42:c0:a3:ba:3c:2b:94:89:5a:e4:a8:b6: f7:36:74:e1:35:4f:67:7c:8e:d1:8d:9e:54:d3:f7:82:6a:be: 78:9b:65:09:bb:37:48:9b:2d:fe:bd:ef:9f:30:53:ea:45:4e: 6b:ba:bd:e3:e2:1d:24:4d:f1:e5:2b:47:3a:62:b5:f7:eb:02: 81:04:f1:bd:fc:95:e6:d6:52:d9:68:d4:3f:70:fe:c4:b3:4e: 57:bd:b1:61:02:32:e0:b2:a5:fc:5b:51:c5:c9:8e:5c:2f:cb: 35:63:03:61:a7:f8:d7:fd:ca:4e:ec:25:26:a6:e0:06:c3:6b: 6a:3c:3f:b7:75:d9:87:c7:8b:74:5d:d1:8f:d9:43:91:ff:78: 2e:57:51:19:e9:d8:1f:e2:40:4b:b6:28:24:ab:ad:a1:69:b0: d4:3f:bc:71 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+kwtAfzEauBxfGFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM4N2Q3ZTEtMjg2MC00Njk0LTgzOGEtODhjZTNhNDdm M2FiMB4XDTI2MTAyNzE4MDAyM1oXDTI2MTAzMDE4MDAwMFowLzEtMCsGA1UEAxMk Y2M2YmM0YTctZTNhMS00MGJjLTgxZTItNjBjMjc0ZGY3NjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyaRzZmrBdJxQq0M0bBZKj03p3SxI8hUXaQN 6YXTyLKGCg2wfWMc7OfH5XzayBW4XpAN9K8MgQx7MumbytLqPy6k1uu0VqiOYtNg qzyy+OPCogOfEiwhwUxt1KoNWb5Z1eLjX8cdUmVEETloEgahBPq+cjP6OhEbG91W 0m3Q2jRD1ujAClrCmwJaFkC/MOXpSJoLcjoRDodYtaRdriKfxZoNEAGHAxZFkh4m H0RGMum/iLC1W/QZIxeqgSvKloe2sjCy/RLXrAzSL/XUO2dU7WFoAt5TvZpBVMSK KH6SS3FrGoq1xDQqWLng/tSo8JG75+Ut+xIzK++Qe5/EYlNXxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM0rhUNDwoOYuELzh6uZXfxB8Dh/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lYzg3 ZDdlMS0yODYwLTQ2OTQtODM4YS04OGNlM2E0N2YzYWIvZWM4N2Q3ZTEtMjg2MC00 Njk0LTgzOGEtODhjZTNhNDdmM2FiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWM4N2Q3ZTEtMjg2MC00Njk0LTgz OGEtODhjZTNhNDdmM2FiL2VjODdkN2UxLTI4NjAtNDY5NC04MzhhLTg4Y2UzYTQ3 ZjNhYi5jcmwwHwYDVR0jBBgwFoAUXTX8vqtKcPswerm8abNu1/EL6iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lYzg3ZDdlMS0yODYwLTQ2OTQtODM4YS04OGNl M2E0N2YzYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA97nFER5GHIEQ31wPzUsfG MqO3C8D0hUldnOi3r0l3+Vp+FR74sgkT4OJHer5hh0kbFdNpvtKb1Sc72NE+PvjH w9lT+s+4g6jKAEGtg7t79HyDaYhLvGNNAR0FlMptAANCwKO6PCuUiVrkqLb3NnTh NU9nfI7RjZ5U0/eCar54m2UJuzdImy3+ve+fMFPqRU5rur3j4h0kTfHlK0c6YrX3 6wKBBPG9/JXm1lLZaNQ/cP7Es05XvbFhAjLgsqX8W1HFyY5cL8s1YwNhp/jX/cpO 7CUmpuAGw2tqPD+3ddmHx4t0XdGP2UOR/3guV1EZ6dgf4kBLtigkq62habDUP7xx -----END CERTIFICATE-----Generated at Wed Oct 28 19:43:41 2026 by rpki-client