$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft File: 9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft (raw, json) Hash identifier: lurJOj/sG4nnUsRwX3fuTlhXdt34N83Vrjs7qbRBG7c= Subject key identifier: 71:E0:77:12:E3:59:4E:69:5B:8E:58:3F:37:C3:71:DD:32:33:DD:80 Authority key identifier: C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF Certificate issuer: /CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Certificate serial: 010D0C9F4328584F7511A2AC36E7C81EF5EA62C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft Manifest number: 010D0C9F43285847FF6DB89C0ACD762A7E013CBD Signing time: Sat 10 Oct 2026 16:00:25 +0000 Manifest this update: Sat 10 Oct 2026 16:00:25 +0000 Manifest next update: Tue 13 Oct 2026 16:00:00 +0000 Files and hashes: 1: 9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl (hash: ASHSBk9W5HYOGu/DMiJYmK0mauGHf/qJc5MBYGpUowU=) 2: bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa (hash: KaDvGdDboahaNF6J8BeznymYtQ1h1igrVvjrLASfik8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:75:11:a2:ac:36:e7:c8:1e:f5:ea:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Validity Not Before: Oct 10 16:00:25 2026 GMT Not After : Oct 13 16:00:00 2026 GMT Subject: CN=bbcf297c-d661-47d4-a053-f5ad37485e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b7:68:17:67:ae:6e:a7:89:e5:cd:fd:28:19: da:98:5b:fe:25:75:7d:bd:03:1e:d4:ff:be:54:25: 44:3d:98:9d:b5:d1:e6:94:74:cc:1b:1e:e4:b6:7f: 55:33:6a:91:1d:3a:f7:d7:ab:7b:86:fc:38:e2:44: ba:52:07:34:ef:8e:b4:ca:ac:43:64:c7:70:43:6b: 97:43:c9:57:bb:d9:a3:76:19:e4:22:80:f0:b4:03: c6:d8:19:f0:1e:87:21:f6:49:30:8d:a5:37:45:5c: 19:1e:76:ab:64:f7:b5:c7:d4:0a:2a:2a:2a:31:4b: 4b:21:2d:8a:88:0d:0e:a6:34:8b:0f:ef:fe:21:2d: 3a:4e:09:63:48:c5:23:56:78:04:13:65:f0:8b:67: ad:d4:06:b5:bf:90:13:bc:54:ef:22:f8:d2:54:aa: 96:4e:2b:b1:0d:79:56:3f:79:7d:50:2a:fd:f4:31: 76:65:84:db:b9:97:f0:5a:1f:bf:b6:db:9e:0c:db: 35:42:15:bf:e2:e1:29:57:65:31:d7:5b:fe:98:f0: ec:29:4d:04:31:31:07:2d:cd:f9:79:2b:72:fe:2c: 8e:08:8b:a6:e6:03:3f:78:bb:5c:4d:48:13:6f:5b: 8b:c9:53:38:b5:df:a9:9f:a0:19:e3:3d:1e:d1:1e: 94:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E0:77:12:E3:59:4E:69:5B:8E:58:3F:37:C3:71:DD:32:33:DD:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl X509v3 Authority Key Identifier: keyid:C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e0:ee:9f:e9:a5:dd:65:97:25:3e:6b:9c:3b:ad:96:e0:07: 35:39:26:8d:4b:4d:7e:24:b0:9a:96:f3:d7:1e:1d:5b:37:36: 62:24:92:eb:71:00:39:92:bf:35:c6:e8:d6:c9:b0:3c:ac:7b: 2b:cb:b2:07:64:d1:90:b5:30:76:4a:f3:9f:b2:3f:52:89:2b: f8:26:26:12:6c:48:1e:c6:6c:1f:8d:e1:d6:30:45:f1:e8:d3: 5b:cf:89:01:b7:8d:8b:e4:d4:10:9b:0d:ac:77:20:8c:10:11: 2a:f1:1d:a5:1d:28:33:d5:8f:71:25:0e:db:33:fc:d3:55:34: 40:ce:09:33:98:63:24:14:8d:e0:a0:c4:7a:cc:94:38:8b:95: 5e:e0:94:f0:85:05:0b:b7:a9:85:06:1b:1a:43:40:4d:cd:34: df:31:29:30:ba:f0:69:bb:d7:14:3c:58:a4:59:88:f6:af:23: 4a:20:1e:e2:23:e9:9a:ae:3d:0b:c9:ee:65:47:d5:14:16:72: b5:b8:92:ba:00:79:e6:52:5c:7b:af:88:87:2a:15:23:c5:7a: 5d:81:ce:0e:c4:08:3e:e5:02:4d:4c:af:98:15:ae:07:20:db: 57:d1:04:33:99:71:28:da:0b:3d:66:ce:e8:26:f4:2a:41:fd: d9:9f:5d:f6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE91EaKsNufIHvXqYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY3NWU4ZDctZTQ1Zi00NzY3LTg5MzktYTJjNTM5NGMx ZTdjMB4XDTI2MTAxMDE2MDAyNVoXDTI2MTAxMzE2MDAwMFowLzEtMCsGA1UEAxMk YmJjZjI5N2MtZDY2MS00N2Q0LWEwNTMtZjVhZDM3NDg1ZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLdoF2eubqeJ5c39KBnamFv+JXV9vQMe1P++ VCVEPZidtdHmlHTMGx7ktn9VM2qRHTr316t7hvw44kS6Ugc07460yqxDZMdwQ2uX Q8lXu9mjdhnkIoDwtAPG2BnwHoch9kkwjaU3RVwZHnarZPe1x9QKKioqMUtLIS2K iA0OpjSLD+/+IS06TgljSMUjVngEE2Xwi2et1Aa1v5ATvFTvIvjSVKqWTiuxDXlW P3l9UCr99DF2ZYTbuZfwWh+/ttueDNs1QhW/4uEpV2Ux11v+mPDsKU0EMTEHLc35 eSty/iyOCIum5gM/eLtcTUgTb1uLyVM4td+pn6AZ4z0e0R6UYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHHgdxLjWU5pW45YPzfDcd0yM92AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1 ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1Mzk0YzFlN2MvOWY3NWU4ZDctZTQ1Zi00 NzY3LTg5MzktYTJjNTM5NGMxZTdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWY3NWU4ZDctZTQ1Zi00NzY3LTg5 MzktYTJjNTM5NGMxZTdjLzlmNzVlOGQ3LWU0NWYtNDc2Ny04OTM5LWEyYzUzOTRj MWU3Yy5jcmwwHwYDVR0jBBgwFoAUyH8zWAiDwuDCCmmEkgol+iy/Pu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1 Mzk0YzFlN2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAo4O6f6aXdZZclPmucO62W 4Ac1OSaNS01+JLCalvPXHh1bNzZiJJLrcQA5kr81xujWybA8rHsry7IHZNGQtTB2 SvOfsj9SiSv4JiYSbEgexmwfjeHWMEXx6NNbz4kBt42L5NQQmw2sdyCMEBEq8R2l HSgz1Y9xJQ7bM/zTVTRAzgkzmGMkFI3goMR6zJQ4i5Ve4JTwhQULt6mFBhsaQ0BN zTTfMSkwuvBpu9cUPFikWYj2ryNKIB7iI+marj0Lye5lR9UUFnK1uJK6AHnmUlx7 r4iHKhUjxXpdgc4OxAg+5QJNTK+YFa4HINtX0QQzmXEo2gs9Zs7oJvQqQf3Zn132 -----END CERTIFICATE-----Generated at Sun Oct 11 10:44:53 2026 by rpki-client