$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.mft File: 2a29d871-a08a-4114-af86-3cc6d04de0e1.mft (raw, json) Hash identifier: fcXD46BjzTrwxX5M9xen8Rzw5GGekMSm4yHL2Vy52YA= Subject key identifier: 29:6B:49:8F:F2:4C:93:7C:A5:4D:9F:C7:DA:BF:D6:F5:03:B5:D9:00 Authority key identifier: 36:A1:02:0F:7A:87:90:CE:CA:16:13:0F:0B:A6:AF:B8:47:96:F6:31 Certificate issuer: /CN=2a29d871-a08a-4114-af86-3cc6d04de0e1 Certificate serial: 010D0C9F4328584F7246F8602F2BEB1B5FBD34C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.mft Manifest number: 010D0C9F4328584B6106719C2859B48B53AAC603 Signing time: Fri 09 Oct 2026 16:00:25 +0000 Manifest this update: Fri 09 Oct 2026 16:00:25 +0000 Manifest next update: Sun 11 Oct 2026 16:00:00 +0000 Files and hashes: 1: 2a29d871-a08a-4114-af86-3cc6d04de0e1.crl (hash: a6/ccapgdnoYcM54aHm0UsVNYmeefFzWeD8+NNeoRAM=) 2: 3fad941b-d30c-3ceb-9abe-73b65d3933b0.roa (hash: AoRp2plys5baBi4s4SDalUqMbxhB+uwiqPZ3XxpS6+s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:46:f8:60:2f:2b:eb:1b:5f:bd:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a29d871-a08a-4114-af86-3cc6d04de0e1 Validity Not Before: Oct 9 16:00:25 2026 GMT Not After : Oct 11 16:00:00 2026 GMT Subject: CN=26205fb9-d016-42eb-a9d9-a97dba87ff07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:77:2b:98:0b:68:58:85:9b:a3:d7:fb:18:d1: df:32:dc:06:82:24:16:11:a7:bb:4d:b5:2d:1e:db: 7b:56:54:7d:cd:02:0f:7c:71:be:5f:c1:24:5d:7d: 37:39:89:56:9c:ac:9a:17:5b:b8:79:f2:73:97:38: d1:01:b5:9a:b8:2b:59:3b:3c:83:41:56:2b:b2:03: 74:1d:38:52:9c:96:0f:e6:6d:8b:01:ec:f0:0b:2e: a4:06:4e:c8:19:71:18:ab:4e:0d:c3:26:be:6b:15: 08:0b:80:ed:9a:78:c6:59:7f:ec:cf:aa:85:76:7e: ab:bb:55:bd:7d:70:4a:66:5b:df:dc:19:52:19:2a: a3:27:0f:71:8d:ce:0f:48:7f:24:9d:dd:a5:5f:cc: 7b:dd:49:60:69:04:18:0d:31:29:fa:26:b6:a2:fb: 4d:62:5f:58:c3:d3:0c:38:66:fc:da:2c:06:01:2f: 10:ce:69:66:29:cd:f0:19:31:91:39:37:1b:bc:5e: 4f:b9:f5:cc:3e:e2:74:5b:4d:98:54:14:ce:91:c3: bc:ec:10:12:75:90:9e:13:b7:f2:9c:a4:bf:56:0f: 66:dc:0d:f7:14:65:67:e6:9f:66:9c:74:2b:ae:82: a8:6f:14:22:ab:59:b3:4d:86:84:c2:cb:89:a6:b6: a3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6B:49:8F:F2:4C:93:7C:A5:4D:9F:C7:DA:BF:D6:F5:03:B5:D9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1/2a29d871-a08a-4114-af86-3cc6d04de0e1.crl X509v3 Authority Key Identifier: keyid:36:A1:02:0F:7A:87:90:CE:CA:16:13:0F:0B:A6:AF:B8:47:96:F6:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a29d871-a08a-4114-af86-3cc6d04de0e1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d9:13:8e:97:3f:6e:9a:2a:b0:ea:86:e9:6f:d9:74:c7:7e: b3:d0:fc:80:3e:8b:b9:91:d7:7d:74:0f:8a:97:77:4b:b1:b4: 0a:d3:a7:54:22:61:da:7a:2b:b4:b9:e4:8f:c8:28:1a:8b:35: 02:eb:2f:92:9e:9f:ac:a2:16:86:fe:de:3d:7b:c1:85:f7:12: 86:ec:3c:ec:81:c0:a1:0d:ed:19:44:18:d0:d2:70:a6:31:c9: 16:23:a8:93:5a:8d:ce:57:9d:7c:54:a8:76:38:e8:45:e3:bf: 6d:bb:82:9f:9c:42:5e:bb:ec:bd:62:53:b8:21:66:3f:de:53: 33:bf:13:02:4b:dc:c2:3a:87:ff:5c:f9:08:58:93:9a:46:fb: c8:d9:0f:b5:89:1b:41:73:b5:bb:c3:75:14:9d:38:7a:5f:71: 8a:c5:93:1b:8b:44:a7:7d:56:a7:21:9f:f7:0b:38:27:a0:f1: 42:bd:f1:01:05:98:91:a7:5d:7c:44:93:08:5d:cc:8c:46:7a: 04:94:60:24:6d:96:32:56:fe:33:de:c4:a9:7f:23:14:9a:a5: e3:86:c1:1b:1f:79:8d:7b:bd:8b:12:df:4a:c7:b2:9b:3e:b9: 53:24:a2:e1:a6:82:16:39:bb:fd:2f:54:dc:1e:9b:1c:76:b6: b2:bc:bf:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9yRvhgLyvrG1+9NMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyOWQ4NzEtYTA4YS00MTE0LWFmODYtM2NjNmQwNGRl MGUxMB4XDTI2MTAwOTE2MDAyNVoXDTI2MTAxMTE2MDAwMFowLzEtMCsGA1UEAxMk MjYyMDVmYjktZDAxNi00MmViLWE5ZDktYTk3ZGJhODdmZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HcrmAtoWIWbo9f7GNHfMtwGgiQWEae7TbUt Htt7VlR9zQIPfHG+X8EkXX03OYlWnKyaF1u4efJzlzjRAbWauCtZOzyDQVYrsgN0 HThSnJYP5m2LAezwCy6kBk7IGXEYq04Nwya+axUIC4DtmnjGWX/sz6qFdn6ru1W9 fXBKZlvf3BlSGSqjJw9xjc4PSH8knd2lX8x73UlgaQQYDTEp+ia2ovtNYl9Yw9MM OGb82iwGAS8QzmlmKc3wGTGROTcbvF5PufXMPuJ0W02YVBTOkcO87BASdZCeE7fy nKS/Vg9m3A33FGVn5p9mnHQrroKobxQiq1mzTYaEwsuJpraj6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFClrSY/yTJN8pU2fx9q/1vUDtdkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYTI5 ZDg3MS1hMDhhLTQxMTQtYWY4Ni0zY2M2ZDA0ZGUwZTEvMmEyOWQ4NzEtYTA4YS00 MTE0LWFmODYtM2NjNmQwNGRlMGUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmEyOWQ4NzEtYTA4YS00MTE0LWFm ODYtM2NjNmQwNGRlMGUxLzJhMjlkODcxLWEwOGEtNDExNC1hZjg2LTNjYzZkMDRk ZTBlMS5jcmwwHwYDVR0jBBgwFoAUNqECD3qHkM7KFhMPC6avuEeW9jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYTI5ZDg3MS1hMDhhLTQxMTQtYWY4Ni0zY2M2 ZDA0ZGUwZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAj2ROOlz9umiqw6obpb9l0 x36z0PyAPou5kdd9dA+Kl3dLsbQK06dUImHaeiu0ueSPyCgaizUC6y+Snp+sohaG /t49e8GF9xKG7DzsgcChDe0ZRBjQ0nCmMckWI6iTWo3OV518VKh2OOhF479tu4Kf nEJeu+y9YlO4IWY/3lMzvxMCS9zCOof/XPkIWJOaRvvI2Q+1iRtBc7W7w3UUnTh6 X3GKxZMbi0SnfVanIZ/3CzgnoPFCvfEBBZiRp118RJMIXcyMRnoElGAkbZYyVv4z 3sSpfyMUmqXjhsEbH3mNe72LEt9Kx7KbPrlTJKLhpoIWObv9L1TcHpscdrayvL+S -----END CERTIFICATE-----Generated at Fri Oct 9 17:45:32 2026 by rpki-client