$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.mft File: 0638a41c-1a08-44d2-a17c-c5272b5171a2.mft (raw, json) Hash identifier: pj3hozhmHnyef2rRlewSwwM580KqYb40IDV3Wn+DKZM= Subject key identifier: 5F:71:18:DB:64:8A:47:68:44:D6:45:7F:5A:51:EC:21:64:20:F7:2F Authority key identifier: C1:F7:3F:D2:75:CC:DF:E9:FF:07:1B:07:E0:8B:EC:06:6F:28:D2:90 Certificate issuer: /CN=0638a41c-1a08-44d2-a17c-c5272b5171a2 Certificate serial: 010D0C9F4328584F860D42B14233C18F149CA854 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.mft Manifest number: 010D0C9F4328584CBB5019137B0BA11639FA07C7 Signing time: Fri 16 Oct 2026 18:00:24 +0000 Manifest this update: Fri 16 Oct 2026 18:00:24 +0000 Manifest next update: Mon 19 Oct 2026 18:00:00 +0000 Files and hashes: 1: 0638a41c-1a08-44d2-a17c-c5272b5171a2.crl (hash: Rl3i+BBGQz+vjNQ+tQMumi+TqFt2PiMpdwniS1Fou/4=) 2: bb0cb880-ae81-36ef-b70e-c7eab5062a81.roa (hash: mQF+YfEZIkqsySNkiJCvbVlJeumTk49mJLgriFJkhQ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:0d:42:b1:42:33:c1:8f:14:9c:a8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0638a41c-1a08-44d2-a17c-c5272b5171a2 Validity Not Before: Oct 16 18:00:24 2026 GMT Not After : Oct 19 18:00:00 2026 GMT Subject: CN=1c3d941c-771a-4371-9775-651561518cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:6b:d1:90:16:bd:bf:73:e9:79:13:b6:a4: 37:2e:85:ad:3c:13:62:5a:c6:64:d7:19:d7:1f:d0: 6c:98:e2:e6:00:a6:12:6e:ba:f7:06:77:5c:31:98: 8d:de:37:1a:91:08:b5:81:9f:90:f7:c5:75:89:6e: 97:f6:5a:33:ed:e6:76:68:b5:72:75:03:16:07:ea: 9c:95:c9:cb:3c:cc:e8:8a:f7:ed:d1:ac:9e:eb:a6: 6f:74:49:ac:49:13:47:fe:83:51:ec:40:f7:2d:27: 04:41:5b:e5:e9:c0:8c:ea:4e:7a:cc:78:ef:ab:04: 96:54:6d:db:9e:dc:fd:21:f8:5a:a8:40:bb:c1:08: 33:5d:75:fc:b5:61:26:88:96:c3:f2:2e:52:44:f5: 48:25:14:1f:af:33:fa:33:6a:fd:3d:f7:c6:d4:5d: 42:96:58:87:31:27:4f:99:9f:20:9c:22:21:e2:f8: c9:08:0d:13:e9:23:29:5d:5f:96:24:94:c2:45:f8: fe:49:9e:94:97:fe:c6:08:56:41:0e:fa:c8:fa:30: e9:20:17:92:15:54:36:61:5d:d1:34:6d:26:bf:3b: 23:85:e2:32:ae:40:ad:4e:25:8c:4d:e9:26:1d:1c: bf:2f:97:97:62:53:df:b7:e2:0e:cb:da:b2:fc:3e: d5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:71:18:DB:64:8A:47:68:44:D6:45:7F:5A:51:EC:21:64:20:F7:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.crl X509v3 Authority Key Identifier: keyid:C1:F7:3F:D2:75:CC:DF:E9:FF:07:1B:07:E0:8B:EC:06:6F:28:D2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:4e:58:11:b2:eb:91:f7:e9:68:38:1a:49:2e:10:a8:ac:e5: 39:9e:a6:2c:aa:59:39:2f:3c:11:40:4c:e3:aa:4b:05:98:da: 7c:8e:56:3d:e1:77:f0:62:ae:9a:bb:5d:d8:86:e7:31:4d:55: 99:39:b7:4a:02:47:15:63:7a:00:d0:02:aa:e5:17:6e:c8:58: 94:a4:93:e9:6a:4f:17:43:3f:83:95:06:ed:6b:19:76:c9:ce: 05:14:8a:90:d9:db:cb:03:0b:cc:07:96:ec:b6:55:b8:40:16: 9d:c8:d4:ad:56:86:23:9d:38:93:84:a4:da:36:ab:bd:ad:06: 0d:fa:81:95:f4:bd:31:db:d9:ef:4d:92:4f:16:cb:6e:78:ff: 87:d3:06:ac:c7:14:89:6b:37:e9:31:b1:73:13:a1:3e:a6:a6: d7:81:ca:2f:3e:f9:aa:3a:bb:30:79:c0:01:0e:95:57:6f:91: 44:83:e8:5d:3d:90:d7:00:3e:2a:07:f2:08:7f:b1:96:42:0b: 27:e4:f9:0c:00:19:24:f2:9c:0d:67:fa:43:ef:81:29:12:c6: 1c:54:d5:2d:4a:f0:bf:80:e1:ce:a4:d2:35:45:15:eb:f5:00: 14:fc:66:67:31:53:59:4e:9a:1f:d2:5c:76:cb:4d:3e:89:5f: 38:f1:f2:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+GDUKxQjPBjxScqFQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzOGE0MWMtMWEwOC00NGQyLWExN2MtYzUyNzJiNTE3 MWEyMB4XDTI2MTAxNjE4MDAyNFoXDTI2MTAxOTE4MDAwMFowLzEtMCsGA1UEAxMk MWMzZDk0MWMtNzcxYS00MzcxLTk3NzUtNjUxNTYxNTE4Y2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Fr0ZAWvb9z6XkTtqQ3LoWtPBNiWsZk1xnX H9BsmOLmAKYSbrr3BndcMZiN3jcakQi1gZ+Q98V1iW6X9loz7eZ2aLVydQMWB+qc lcnLPMzoivft0aye66ZvdEmsSRNH/oNR7ED3LScEQVvl6cCM6k56zHjvqwSWVG3b ntz9IfhaqEC7wQgzXXX8tWEmiJbD8i5SRPVIJRQfrzP6M2r9PffG1F1ClliHMSdP mZ8gnCIh4vjJCA0T6SMpXV+WJJTCRfj+SZ6Ul/7GCFZBDvrI+jDpIBeSFVQ2YV3R NG0mvzsjheIyrkCtTiWMTekmHRy/L5eXYlPft+IOy9qy/D7V9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF9xGNtkikdoRNZFf1pR7CFkIPcvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wNjM4 YTQxYy0xYTA4LTQ0ZDItYTE3Yy1jNTI3MmI1MTcxYTIvMDYzOGE0MWMtMWEwOC00 NGQyLWExN2MtYzUyNzJiNTE3MWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDYzOGE0MWMtMWEwOC00NGQyLWEx N2MtYzUyNzJiNTE3MWEyLzA2MzhhNDFjLTFhMDgtNDRkMi1hMTdjLWM1MjcyYjUx NzFhMi5jcmwwHwYDVR0jBBgwFoAUwfc/0nXM3+n/BxsH4IvsBm8o0pAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wNjM4YTQxYy0xYTA4LTQ0ZDItYTE3Yy1jNTI3 MmI1MTcxYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxTlgRsuuR9+loOBpJLhCo rOU5nqYsqlk5LzwRQEzjqksFmNp8jlY94XfwYq6au13YhucxTVWZObdKAkcVY3oA 0AKq5RduyFiUpJPpak8XQz+DlQbtaxl2yc4FFIqQ2dvLAwvMB5bstlW4QBadyNSt VoYjnTiThKTaNqu9rQYN+oGV9L0x29nvTZJPFstueP+H0wasxxSJazfpMbFzE6E+ pqbXgcovPvmqOrswecABDpVXb5FEg+hdPZDXAD4qB/IIf7GWQgsn5PkMABkk8pwN Z/pD74EpEsYcVNUtSvC/gOHOpNI1RRXr9QAU/GZnMVNZTpof0lx2y00+iV848fIT -----END CERTIFICATE-----Generated at Sat Oct 17 14:09:39 2026 by rpki-client