$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d/5203a694-5cc2-43f1-be5c-5799819b975d.mft File: 5203a694-5cc2-43f1-be5c-5799819b975d.mft (raw, json) Hash identifier: AcShqpMGdmuJBrgSk2ZaR80fT3E75sa9nh/r/BBn9rA= Subject key identifier: 32:6E:78:44:53:E1:84:D4:CC:84:1F:0A:BF:56:A5:4C:8B:6D:19:DA Authority key identifier: 65:3B:56:34:2A:06:AD:FC:04:3D:A2:96:38:C1:2F:BA:37:9E:14:FC Certificate issuer: /CN=5203a694-5cc2-43f1-be5c-5799819b975d Certificate serial: 010D0C9F4328584F4E90F2DFFD88AA2FBE765D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d/5203a694-5cc2-43f1-be5c-5799819b975d.mft Manifest number: 010D0C9F432858455421D0D97776D9B344513FD3 Signing time: Sat 26 Sep 2026 21:00:23 +0000 Manifest this update: Sat 26 Sep 2026 21:00:23 +0000 Manifest next update: Mon 28 Sep 2026 21:00:00 +0000 Files and hashes: 1: 5203a694-5cc2-43f1-be5c-5799819b975d.crl (hash: bMTHoNNKquDQY0juU5bNliaqUdIebM/Sx7N71cjV+mw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d/5203a694-5cc2-43f1-be5c-5799819b975d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d/5203a694-5cc2-43f1-be5c-5799819b975d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4e:90:f2:df:fd:88:aa:2f:be:76:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5203a694-5cc2-43f1-be5c-5799819b975d Validity Not Before: Sep 26 21:00:23 2026 GMT Not After : Sep 28 21:00:00 2026 GMT Subject: CN=83ae2cba-ec74-4d06-a4fd-5f6a2dfa3f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:34:f0:ea:e9:32:03:68:a4:bb:89:b7:51:eb: 2e:9f:0a:30:5c:2c:c6:28:54:38:08:9f:2b:bc:6c: 50:36:1d:7c:78:05:bd:d2:fb:0c:36:f2:2a:86:e7: cf:da:dd:cf:c8:a9:ec:13:ab:20:09:30:36:b6:bf: 28:47:01:47:97:3c:ec:b4:1b:7c:e2:35:c5:57:39: c3:57:c2:be:7d:2d:44:20:a0:9c:8f:d0:68:4e:52: aa:97:6f:7c:cf:a8:a4:3c:3b:f0:76:b3:b6:16:12: 4a:3e:df:f2:9d:b7:1f:f5:d2:ca:33:15:9b:49:f1: 28:3e:fc:9a:1a:1c:16:aa:e2:73:6a:2e:e2:af:2e: e6:4d:90:90:d5:0c:8b:86:60:57:d3:6d:0b:24:6e: 75:d0:04:d0:59:53:b3:1a:2e:49:36:da:e6:38:b3: 54:8c:c7:86:4e:30:c0:84:2c:c2:10:1b:88:0b:08: a1:b1:d1:ed:22:cf:52:c3:9b:c0:8f:20:c1:bb:e4: d7:9b:85:bf:19:46:fe:68:f9:4b:1a:18:c1:1d:f7: 71:4f:8a:aa:e2:1c:2c:4e:24:2e:30:5d:af:91:84: af:bb:84:26:d6:6e:e9:5c:5e:75:e0:6a:c6:dc:31: 0b:72:22:f1:e7:1c:e3:43:9c:34:b3:b2:db:85:f9: de:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6E:78:44:53:E1:84:D4:CC:84:1F:0A:BF:56:A5:4C:8B:6D:19:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d/5203a694-5cc2-43f1-be5c-5799819b975d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d/5203a694-5cc2-43f1-be5c-5799819b975d.crl X509v3 Authority Key Identifier: keyid:65:3B:56:34:2A:06:AD:FC:04:3D:A2:96:38:C1:2F:BA:37:9E:14:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e9:f1:ab:ad:eb:97:02:23:62:55:fe:2f:a3:cd:3d:5a:2a: 33:f0:3b:75:8c:fa:d8:64:e2:ec:0b:a7:46:8c:fd:35:76:74: c4:48:9f:35:7d:5a:4a:85:49:27:ad:c2:8f:67:70:2c:db:ff: 34:b1:b6:18:9f:74:f1:e4:1d:32:c8:66:e3:3f:64:68:08:2c: 16:0e:a1:c4:9f:a8:17:30:01:19:c4:1a:04:82:84:fb:9a:f1: 73:b9:a7:b6:88:49:38:4e:46:0e:04:8c:b9:de:6c:f4:1c:da: b8:3d:33:60:64:a0:81:b0:be:cb:ff:a9:d4:53:62:cc:bf:c9: bd:0d:67:3c:e5:07:95:7a:1d:ab:4d:82:9a:77:11:4d:01:c8: 26:66:54:45:e4:70:bb:a2:fa:81:a9:16:93:54:32:78:79:3b: 93:55:8e:44:f7:b1:cf:b0:7a:14:cd:ee:31:4a:8b:a0:31:79: 49:2e:40:2c:df:83:db:f9:4d:66:00:54:eb:38:26:61:f5:de: 14:78:d8:cb:1e:af:a7:a8:ba:c7:ac:21:88:51:b8:e1:b0:26: 20:45:6b:78:10:8a:c0:d5:5d:6e:a7:e6:16:99:05:32:e7:cd: 21:f5:ca:4f:87:48:4e:6a:d1:f5:02:c3:f6:d7:fb:03:54:ed: 92:6a:71:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9OkPLf/YiqL752XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIwM2E2OTQtNWNjMi00M2YxLWJlNWMtNTc5OTgxOWI5 NzVkMB4XDTI2MDkyNjIxMDAyM1oXDTI2MDkyODIxMDAwMFowLzEtMCsGA1UEAxMk ODNhZTJjYmEtZWM3NC00ZDA2LWE0ZmQtNWY2YTJkZmEzZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzTw6ukyA2iku4m3UesunwowXCzGKFQ4CJ8r vGxQNh18eAW90vsMNvIqhufP2t3PyKnsE6sgCTA2tr8oRwFHlzzstBt84jXFVznD V8K+fS1EIKCcj9BoTlKql298z6ikPDvwdrO2FhJKPt/ynbcf9dLKMxWbSfEoPvya GhwWquJzai7iry7mTZCQ1QyLhmBX020LJG510ATQWVOzGi5JNtrmOLNUjMeGTjDA hCzCEBuICwihsdHtIs9Sw5vAjyDBu+TXm4W/GUb+aPlLGhjBHfdxT4qq4hwsTiQu MF2vkYSvu4Qm1m7pXF514GrG3DELciLx5xzjQ5w0s7Lbhfne3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDJueERT4YTUzIQfCr9WpUyLbRnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81MjAz YTY5NC01Y2MyLTQzZjEtYmU1Yy01Nzk5ODE5Yjk3NWQvNTIwM2E2OTQtNWNjMi00 M2YxLWJlNWMtNTc5OTgxOWI5NzVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTIwM2E2OTQtNWNjMi00M2YxLWJl NWMtNTc5OTgxOWI5NzVkLzUyMDNhNjk0LTVjYzItNDNmMS1iZTVjLTU3OTk4MTli OTc1ZC5jcmwwHwYDVR0jBBgwFoAUZTtWNCoGrfwEPaKWOMEvujeeFPwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81MjAzYTY5NC01Y2MyLTQzZjEtYmU1Yy01Nzk5 ODE5Yjk3NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBn6fGrreuXAiNiVf4vo809 Wioz8Dt1jPrYZOLsC6dGjP01dnTESJ81fVpKhUknrcKPZ3As2/80sbYYn3Tx5B0y yGbjP2RoCCwWDqHEn6gXMAEZxBoEgoT7mvFzuae2iEk4TkYOBIy53mz0HNq4PTNg ZKCBsL7L/6nUU2LMv8m9DWc85QeVeh2rTYKadxFNAcgmZlRF5HC7ovqBqRaTVDJ4 eTuTVY5E97HPsHoUze4xSougMXlJLkAs34Pb+U1mAFTrOCZh9d4UeNjLHq+nqLrH rCGIUbjhsCYgRWt4EIrA1V1up+YWmQUy580h9cpPh0hOatH1AsP21/sDVO2SanFo -----END CERTIFICATE-----Generated at Sun Sep 27 16:14:59 2026 by rpki-client