$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.mft File: 4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.mft (raw, json) Hash identifier: 7Hss8rIRWbsbqg/Il88va2s6geaZmOd18V8kkIf0PTU= Subject key identifier: 01:CF:55:C9:C1:F4:4D:FF:B2:C6:02:89:33:64:C7:C1:4D:A6:34:3D Authority key identifier: 53:E2:5E:B8:51:AD:FF:5D:A7:50:EB:28:1F:DD:BB:A6:9F:8C:62:62 Certificate issuer: /CN=4a01faf0-6a8e-4e38-92b4-49d20c47fcb7 Certificate serial: 010D0C9F4328584F457E365D3BE3E4D756C4D080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.mft Manifest number: 010D0C9F43285844BCAF2FE5C74267198B718096 Signing time: Wed 23 Sep 2026 15:00:23 +0000 Manifest this update: Wed 23 Sep 2026 15:00:23 +0000 Manifest next update: Sat 26 Sep 2026 15:00:00 +0000 Files and hashes: 1: 4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.crl (hash: r/NwAoHmDpI7U0ZKW5ASVt7XG22aEDKg95Nr2f2jbzM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:7e:36:5d:3b:e3:e4:d7:56:c4:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a01faf0-6a8e-4e38-92b4-49d20c47fcb7 Validity Not Before: Sep 23 15:00:23 2026 GMT Not After : Sep 26 15:00:00 2026 GMT Subject: CN=4e026dbf-a94a-4d14-be8b-d16d428a37d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:80:c2:ee:9d:1a:4b:97:c3:06:ca:50:24:ee: 47:65:cd:f3:15:a9:f7:44:22:3f:37:bf:b6:c9:00: b9:d9:d6:e7:24:d1:fe:5b:18:de:7a:8b:c3:05:fe: 6d:33:d8:c7:eb:58:98:69:dc:7f:a0:4a:57:4d:e2: 9a:ab:c6:b1:f0:86:31:39:fb:2f:42:9e:a5:8f:38: f0:7d:f5:3b:7f:9d:7b:72:2b:b2:b5:b7:f2:ed:63: 4c:a8:b0:1a:79:6a:30:6e:fb:72:9a:fb:5f:56:dc: 11:59:8e:e0:4a:76:31:6c:e7:ce:73:6b:4e:94:90: 1d:f3:97:d6:f2:64:e0:6c:20:ca:5d:9e:d5:91:62: 8f:e0:5f:9b:79:88:76:86:b2:4f:89:5c:3c:b8:f5: 70:29:c5:c1:84:cc:a7:7b:70:a2:f2:31:b2:b5:00: 86:14:a6:20:3e:be:80:9c:79:12:56:06:15:d1:c9: 2a:b5:85:c4:88:e1:ea:e0:b1:c6:32:ed:78:a5:05: 19:f4:c6:dc:0f:bd:f0:4c:87:a3:fc:c7:3a:00:1d: 0f:9f:9c:97:03:d8:3f:00:cd:aa:1b:61:04:73:b7: c4:92:d9:12:59:d6:06:ff:48:b0:c0:b7:40:c2:d2: 8f:09:a2:c5:4d:f5:27:3a:94:00:a5:a9:59:8d:86: 3f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:55:C9:C1:F4:4D:FF:B2:C6:02:89:33:64:C7:C1:4D:A6:34:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.crl X509v3 Authority Key Identifier: keyid:53:E2:5E:B8:51:AD:FF:5D:A7:50:EB:28:1F:DD:BB:A6:9F:8C:62:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c0:1c:3b:c9:11:a3:21:6d:dd:d8:3b:6a:28:ab:46:67:86: 33:6d:12:56:30:d4:ca:78:99:18:b3:6f:00:67:66:ea:48:8d: 89:82:22:b8:4e:96:b2:84:32:9c:9e:d2:52:c4:b6:4b:2c:22: 10:aa:e4:a1:9d:de:96:2d:0c:a1:0c:3a:47:fe:bd:2b:1f:59: 8d:d9:7c:e9:da:c2:9c:74:98:91:79:31:5f:95:2c:9e:b6:be: b9:ac:4b:68:77:23:62:76:27:49:57:4b:85:74:df:1f:22:59: 57:aa:95:2d:2c:7d:a3:12:fe:1d:8f:a9:c7:27:d6:1e:34:2b: 14:92:c2:12:ff:4a:c7:eb:36:2e:be:1d:80:7c:fd:24:64:e1: e0:ea:d6:e0:54:2d:df:5d:66:18:8f:3a:86:57:4e:9f:bd:d3: 0f:2e:1e:c2:8a:be:43:fe:19:d6:13:4a:cf:0e:24:5d:6e:98: bf:be:90:9f:81:c3:9c:d2:f4:5d:98:25:12:46:4f:38:12:f5: 45:18:24:43:bb:28:f3:ca:02:7e:bc:6e:1a:c9:a1:42:9f:ac: 46:c7:c0:74:10:30:d3:4b:67:dd:92:15:63:30:e5:90:d1:5d: af:e2:d4:ec:a3:65:43:19:a8:e5:a6:ac:0e:b4:1e:fc:64:d5: 89:35:e8:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9FfjZdO+Pk11bE0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwMWZhZjAtNmE4ZS00ZTM4LTkyYjQtNDlkMjBjNDdm Y2I3MB4XDTI2MDkyMzE1MDAyM1oXDTI2MDkyNjE1MDAwMFowLzEtMCsGA1UEAxMk NGUwMjZkYmYtYTk0YS00ZDE0LWJlOGItZDE2ZDQyOGEzN2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYDC7p0aS5fDBspQJO5HZc3zFan3RCI/N7+2 yQC52dbnJNH+WxjeeovDBf5tM9jH61iYadx/oEpXTeKaq8ax8IYxOfsvQp6ljzjw ffU7f517ciuytbfy7WNMqLAaeWowbvtymvtfVtwRWY7gSnYxbOfOc2tOlJAd85fW 8mTgbCDKXZ7VkWKP4F+beYh2hrJPiVw8uPVwKcXBhMyne3Ci8jGytQCGFKYgPr6A nHkSVgYV0ckqtYXEiOHq4LHGMu14pQUZ9MbcD73wTIej/Mc6AB0Pn5yXA9g/AM2q G2EEc7fEktkSWdYG/0iwwLdAwtKPCaLFTfUnOpQApalZjYY/awIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAHPVcnB9E3/ssYCiTNkx8FNpjQ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YTAx ZmFmMC02YThlLTRlMzgtOTJiNC00OWQyMGM0N2ZjYjcvNGEwMWZhZjAtNmE4ZS00 ZTM4LTkyYjQtNDlkMjBjNDdmY2I3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGEwMWZhZjAtNmE4ZS00ZTM4LTky YjQtNDlkMjBjNDdmY2I3LzRhMDFmYWYwLTZhOGUtNGUzOC05MmI0LTQ5ZDIwYzQ3 ZmNiNy5jcmwwHwYDVR0jBBgwFoAUU+JeuFGt/12nUOsoH927pp+MYmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YTAxZmFmMC02YThlLTRlMzgtOTJiNC00OWQy MGM0N2ZjYjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8wBw7yRGjIW3d2DtqKKtG Z4YzbRJWMNTKeJkYs28AZ2bqSI2JgiK4TpayhDKcntJSxLZLLCIQquShnd6WLQyh DDpH/r0rH1mN2Xzp2sKcdJiReTFflSyetr65rEtodyNididJV0uFdN8fIllXqpUt LH2jEv4dj6nHJ9YeNCsUksIS/0rH6zYuvh2AfP0kZOHg6tbgVC3fXWYYjzqGV06f vdMPLh7Cir5D/hnWE0rPDiRdbpi/vpCfgcOc0vRdmCUSRk84EvVFGCRDuyjzygJ+ vG4ayaFCn6xGx8B0EDDTS2fdkhVjMOWQ0V2v4tTso2VDGajlpqwOtB78ZNWJNeiY -----END CERTIFICATE-----Generated at Thu Sep 24 10:40:28 2026 by rpki-client