$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft File: bff64bc2-33e0-4980-b94c-1b0369245ea4.mft (raw, json) Hash identifier: RFyfERCmjM7jm1JUoR5BE6jJX5xhY5ExaRCOEwKKLcg= Subject key identifier: D7:5A:34:B6:AC:C5:FF:CE:78:CC:4C:D4:B0:70:E0:1A:36:07:F2:88 Authority key identifier: FB:F2:4B:6F:5C:87:63:98:4E:6E:8E:20:7E:45:43:E9:E5:3D:0C:77 Certificate issuer: /CN=bff64bc2-33e0-4980-b94c-1b0369245ea4 Certificate serial: 010D0C9F4328584F9C45064705BEBE0E59559140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft Manifest number: 010D0C9F4328584A76A2C44F62F6A11836988C65 Signing time: Sat 24 Oct 2026 17:00:24 +0000 Manifest this update: Sat 24 Oct 2026 17:00:24 +0000 Manifest next update: Tue 27 Oct 2026 17:00:00 +0000 Files and hashes: 1: 9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa (hash: qbjfQzt/8XjpqRzHn7I0HY+01mRe8OPB4ob8rlqqDWc=) 2: bff64bc2-33e0-4980-b94c-1b0369245ea4.crl (hash: 6DU+W+9e+sk2cawuin3XhPvHSO5L4adTmAWcndzmyWw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9c:45:06:47:05:be:be:0e:59:55:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bff64bc2-33e0-4980-b94c-1b0369245ea4 Validity Not Before: Oct 24 17:00:24 2026 GMT Not After : Oct 27 17:00:00 2026 GMT Subject: CN=f9d10302-21e0-4c8d-887d-a4c543813b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1f:92:b6:53:43:31:43:1b:a2:3a:ee:f2:2f: 67:71:3c:ef:1f:40:5a:d1:4d:6c:91:f5:e2:0f:85: 96:88:7b:8b:3e:3c:9a:2e:1c:16:cb:be:af:17:43: eb:39:47:85:a3:f5:73:28:6a:9c:33:35:62:46:29: 7f:b5:85:e0:9a:f7:a5:d2:6e:fc:91:ce:16:53:df: 84:cf:a5:f5:95:f3:b2:bb:41:38:9c:24:65:37:27: e7:92:ec:95:59:1e:15:99:1c:26:7a:12:54:42:6a: c6:49:42:e9:2b:a2:76:18:7d:56:4a:40:89:87:79: 1c:12:52:fa:ac:d3:38:dd:f5:5a:8a:56:a3:a3:90: f6:52:1c:e8:5c:f7:29:46:30:a2:a2:55:79:7a:aa: 6b:82:b2:d4:a8:b3:cd:b8:5e:d4:55:68:73:a1:42: 6d:ea:cb:d9:6b:59:0b:ce:30:62:dc:aa:ea:08:68: 83:e7:58:e9:c6:4b:6d:b0:9d:8e:5b:f3:63:96:9b: e6:31:43:12:8b:8c:70:05:6a:df:04:5f:7e:09:bb: fb:df:05:76:2d:68:79:a2:79:14:a1:84:2a:09:b6: 2c:d4:e9:31:eb:c2:b3:d3:af:7d:78:91:1b:a1:94: d8:38:d9:a4:20:b1:48:f1:97:8c:ac:87:ed:54:43: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5A:34:B6:AC:C5:FF:CE:78:CC:4C:D4:B0:70:E0:1A:36:07:F2:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.crl X509v3 Authority Key Identifier: keyid:FB:F2:4B:6F:5C:87:63:98:4E:6E:8E:20:7E:45:43:E9:E5:3D:0C:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:eb:e3:db:51:3e:77:f9:44:a1:8b:6b:25:c5:2b:19:c3:b7: 19:ea:76:4a:78:22:57:c8:21:5f:ae:6c:d1:83:b6:79:3f:89: 68:e8:0a:68:bc:0d:96:31:bd:0d:08:36:da:87:c6:af:de:10: a7:60:2b:dd:b8:55:31:f5:ff:a3:88:9b:26:e3:e0:38:0e:0b: 1b:8d:d9:dd:54:8e:c6:9a:ed:9d:7c:f4:1c:c1:5e:69:c2:30: 19:8f:fb:4e:2a:83:c2:2b:6a:9f:f9:30:86:4f:76:77:9e:ac: b1:75:6a:09:1b:1f:69:50:9d:39:2a:10:6e:b7:75:34:39:14: dd:50:58:9c:46:8a:8a:6a:c3:ae:75:01:4f:f4:64:73:e5:ac: 97:84:f2:f0:70:7c:1d:99:d6:67:3d:7e:e8:41:ac:8b:c6:2a: 33:f0:76:81:32:a3:3b:a1:b2:50:4a:4b:a4:2f:88:9d:8b:89: 65:de:1e:f3:11:51:05:66:ee:96:a0:49:86:9b:66:64:33:de: 14:8d:72:b0:07:64:05:29:76:6e:65:d0:3a:89:1e:f7:a7:fb: 2e:4d:92:60:c9:7c:f0:dd:6b:12:38:da:19:cb:23:6c:dc:6f: a8:89:8a:a6:13:f6:9d:34:7d:b1:76:af:ad:1f:2f:b4:6f:81: e9:6e:68:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+cRQZHBb6+DllVkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZmNjRiYzItMzNlMC00OTgwLWI5NGMtMWIwMzY5MjQ1 ZWE0MB4XDTI2MTAyNDE3MDAyNFoXDTI2MTAyNzE3MDAwMFowLzEtMCsGA1UEAxMk ZjlkMTAzMDItMjFlMC00YzhkLTg4N2QtYTRjNTQzODEzYjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh+StlNDMUMbojru8i9ncTzvH0Ba0U1skfXi D4WWiHuLPjyaLhwWy76vF0PrOUeFo/VzKGqcMzViRil/tYXgmvel0m78kc4WU9+E z6X1lfOyu0E4nCRlNyfnkuyVWR4VmRwmehJUQmrGSULpK6J2GH1WSkCJh3kcElL6 rNM43fVailajo5D2UhzoXPcpRjCiolV5eqprgrLUqLPNuF7UVWhzoUJt6svZa1kL zjBi3KrqCGiD51jpxkttsJ2OW/NjlpvmMUMSi4xwBWrfBF9+Cbv73wV2LWh5onkU oYQqCbYs1Okx68Kz0699eJEboZTYONmkILFI8ZeMrIftVEPTlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNdaNLasxf/OeMxM1LBw4Bo2B/KIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iZmY2 NGJjMi0zM2UwLTQ5ODAtYjk0Yy0xYjAzNjkyNDVlYTQvYmZmNjRiYzItMzNlMC00 OTgwLWI5NGMtMWIwMzY5MjQ1ZWE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmZmNjRiYzItMzNlMC00OTgwLWI5 NGMtMWIwMzY5MjQ1ZWE0L2JmZjY0YmMyLTMzZTAtNDk4MC1iOTRjLTFiMDM2OTI0 NWVhNC5jcmwwHwYDVR0jBBgwFoAU+/JLb1yHY5hObo4gfkVD6eU9DHcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iZmY2NGJjMi0zM2UwLTQ5ODAtYjk0Yy0xYjAz NjkyNDVlYTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCw6+PbUT53+UShi2slxSsZ w7cZ6nZKeCJXyCFfrmzRg7Z5P4lo6ApovA2WMb0NCDbah8av3hCnYCvduFUx9f+j iJsm4+A4DgsbjdndVI7Gmu2dfPQcwV5pwjAZj/tOKoPCK2qf+TCGT3Z3nqyxdWoJ Gx9pUJ05KhBut3U0ORTdUFicRoqKasOudQFP9GRz5ayXhPLwcHwdmdZnPX7oQayL xioz8HaBMqM7obJQSkukL4idi4ll3h7zEVEFZu6WoEmGm2ZkM94UjXKwB2QFKXZu ZdA6iR73p/suTZJgyXzw3WsSONoZyyNs3G+oiYqmE/adNH2xdq+tHy+0b4Hpbmgy -----END CERTIFICATE-----Generated at Sun Oct 25 12:12:15 2026 by rpki-client