$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a2617de0-a5e1-4c68-9eda-b13152b7ec7e/a2617de0-a5e1-4c68-9eda-b13152b7ec7e.mft File: a2617de0-a5e1-4c68-9eda-b13152b7ec7e.mft (raw, json) Hash identifier: Alcc9mvTMOqL4Kfwk9pkA8meo1K9qQbuWK3iDyREBs0= Subject key identifier: 8E:95:AB:CB:F4:53:BE:33:19:39:DC:42:1B:61:4D:54:B0:E7:92:1A Authority key identifier: F5:38:67:6B:C7:AA:7D:5C:B7:4E:D0:C7:E3:AC:1A:0D:7C:7A:C4:26 Certificate issuer: /CN=a2617de0-a5e1-4c68-9eda-b13152b7ec7e Certificate serial: 010D0C9F4328584F45606C1604146CA6BA3EF580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a2617de0-a5e1-4c68-9eda-b13152b7ec7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a2617de0-a5e1-4c68-9eda-b13152b7ec7e/a2617de0-a5e1-4c68-9eda-b13152b7ec7e.mft Manifest number: 010D0C9F4328584F3FE3FF6A8A144B06598D8F82 Signing time: Wed 23 Sep 2026 14:00:22 +0000 Manifest this update: Wed 23 Sep 2026 14:00:22 +0000 Manifest next update: Sat 26 Sep 2026 14:00:00 +0000 Files and hashes: 1: a2617de0-a5e1-4c68-9eda-b13152b7ec7e.crl (hash: ycJ1ey0XG5cVCpHC/QjPqfK/KbkeXYTTEkyvLLlWZAU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a2617de0-a5e1-4c68-9eda-b13152b7ec7e/a2617de0-a5e1-4c68-9eda-b13152b7ec7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a2617de0-a5e1-4c68-9eda-b13152b7ec7e/a2617de0-a5e1-4c68-9eda-b13152b7ec7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a2617de0-a5e1-4c68-9eda-b13152b7ec7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:60:6c:16:04:14:6c:a6:ba:3e:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2617de0-a5e1-4c68-9eda-b13152b7ec7e Validity Not Before: Sep 23 14:00:22 2026 GMT Not After : Sep 26 14:00:00 2026 GMT Subject: CN=add50512-1928-4358-ab38-9200a9956399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:cb:f9:39:44:4b:69:88:c5:32:a3:fc:26: b7:1b:a7:28:f3:a8:59:6c:0d:19:02:03:3c:4c:7b: ad:43:11:0d:5e:36:d4:e5:e9:8c:28:37:30:72:2e: 7d:c0:16:00:4c:67:38:8b:2b:da:35:2b:42:df:4d: 12:72:05:2e:78:16:64:6b:e0:16:c4:06:7c:2c:7b: e3:14:85:06:6f:35:b7:c1:bc:a8:eb:66:0f:e2:ca: f6:a6:4a:aa:0d:3e:12:f4:06:4b:8f:a8:3c:82:a8: b2:58:71:01:d0:0e:14:4f:bb:a6:5a:99:63:1c:5f: 1a:f9:81:f2:42:15:c6:e6:20:39:5e:0c:38:b5:46: 5c:53:2b:67:0c:71:ae:e4:77:64:57:f5:49:4c:34: a3:e7:8f:e6:0d:f4:c9:20:7b:72:8b:f6:8a:10:f3: 9f:8e:c1:ab:22:59:5b:ab:42:0e:c3:34:99:71:82: 0b:a0:f3:e1:f4:de:49:32:94:39:4c:40:64:6a:9b: fd:a5:2b:cc:45:de:06:ac:00:e9:c3:28:97:f7:60: 72:80:40:90:ee:0f:25:0a:f6:20:88:7f:51:9b:61: 62:6c:36:f1:1e:3e:a4:25:be:38:e7:05:fb:92:cf: d8:67:a1:3f:cf:5f:00:cb:7a:cf:10:b0:c1:d2:b5: bf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:95:AB:CB:F4:53:BE:33:19:39:DC:42:1B:61:4D:54:B0:E7:92:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a2617de0-a5e1-4c68-9eda-b13152b7ec7e/a2617de0-a5e1-4c68-9eda-b13152b7ec7e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a2617de0-a5e1-4c68-9eda-b13152b7ec7e/a2617de0-a5e1-4c68-9eda-b13152b7ec7e.crl X509v3 Authority Key Identifier: keyid:F5:38:67:6B:C7:AA:7D:5C:B7:4E:D0:C7:E3:AC:1A:0D:7C:7A:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a2617de0-a5e1-4c68-9eda-b13152b7ec7e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c6:a1:dc:b4:d3:f4:be:36:70:c4:0e:84:8b:1e:6b:c1:64: 73:74:e4:68:58:96:12:2d:99:38:0f:ad:54:fc:6b:f2:ba:05: ae:64:c5:3a:2f:08:f1:bc:f5:9d:c3:d8:a0:e2:83:8d:5a:d1: 4b:08:6c:25:eb:9a:48:2e:70:54:fb:d3:71:3a:0a:cf:3a:b2: 4c:91:2e:58:46:dd:bd:dc:93:98:a7:38:07:19:ad:19:84:86: b1:ee:4b:66:ad:f8:30:a5:fe:a3:24:de:51:36:ce:83:38:02: 20:70:09:85:96:25:5b:f2:3a:88:f4:30:ec:0f:9b:5a:0f:13: 99:4d:25:e2:38:3e:61:f2:6f:36:38:73:26:74:c1:43:fa:41: 5e:8c:f5:3d:96:0c:49:bc:a8:2f:36:25:1b:24:c2:fb:9c:0f: 4c:c1:78:08:42:13:15:81:cf:fb:63:42:7e:3a:f5:ad:60:c3: 8e:27:2a:f9:08:df:d8:94:38:8b:28:fd:45:66:d7:e1:12:12: 7c:a1:1b:63:f7:c2:61:3f:ee:e7:cf:26:b6:2a:d7:86:f5:b5: 3a:bc:c6:44:24:b6:ac:44:ad:5f:94:da:ac:4f:f0:14:6c:b2: 3a:31:a1:e1:d8:25:5a:ad:f9:50:3f:81:b6:7d:54:47:20:16: 03:5f:ef:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9FYGwWBBRspro+9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI2MTdkZTAtYTVlMS00YzY4LTllZGEtYjEzMTUyYjdl YzdlMB4XDTI2MDkyMzE0MDAyMloXDTI2MDkyNjE0MDAwMFowLzEtMCsGA1UEAxMk YWRkNTA1MTItMTkyOC00MzU4LWFiMzgtOTIwMGE5OTU2Mzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwbL+TlES2mIxTKj/Ca3G6co86hZbA0ZAgM8 THutQxENXjbU5emMKDcwci59wBYATGc4iyvaNStC300ScgUueBZka+AWxAZ8LHvj FIUGbzW3wbyo62YP4sr2pkqqDT4S9AZLj6g8gqiyWHEB0A4UT7umWpljHF8a+YHy QhXG5iA5Xgw4tUZcUytnDHGu5HdkV/VJTDSj54/mDfTJIHtyi/aKEPOfjsGrIllb q0IOwzSZcYILoPPh9N5JMpQ5TEBkapv9pSvMRd4GrADpwyiX92BygECQ7g8lCvYg iH9Rm2FibDbxHj6kJb445wX7ks/YZ6E/z18Ay3rPELDB0rW//QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI6Vq8v0U74zGTncQhthTVSw55IaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9hMjYx N2RlMC1hNWUxLTRjNjgtOWVkYS1iMTMxNTJiN2VjN2UvYTI2MTdkZTAtYTVlMS00 YzY4LTllZGEtYjEzMTUyYjdlYzdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYTI2MTdkZTAtYTVlMS00YzY4LTll ZGEtYjEzMTUyYjdlYzdlL2EyNjE3ZGUwLWE1ZTEtNGM2OC05ZWRhLWIxMzE1MmI3 ZWM3ZS5jcmwwHwYDVR0jBBgwFoAU9Thna8eqfVy3TtDH46waDXx6xCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9hMjYxN2RlMC1hNWUxLTRjNjgtOWVkYS1iMTMx NTJiN2VjN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcxqHctNP0vjZwxA6Eix5r wWRzdORoWJYSLZk4D61U/GvyugWuZMU6LwjxvPWdw9ig4oONWtFLCGwl65pILnBU +9NxOgrPOrJMkS5YRt293JOYpzgHGa0ZhIax7ktmrfgwpf6jJN5RNs6DOAIgcAmF liVb8jqI9DDsD5taDxOZTSXiOD5h8m82OHMmdMFD+kFejPU9lgxJvKgvNiUbJML7 nA9MwXgIQhMVgc/7Y0J+OvWtYMOOJyr5CN/YlDiLKP1FZtfhEhJ8oRtj98JhP+7n zya2KteG9bU6vMZEJLasRK1flNqsT/AUbLI6MaHh2CVarflQP4G2fVRHIBYDX+/h -----END CERTIFICATE-----Generated at Thu Sep 24 12:40:48 2026 by rpki-client