$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft File: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft (raw, json) Hash identifier: 8xMLS2Z9WdbsdV7tbKtVwdDiLjuUAAT3wZFfclFpnpo= Subject key identifier: D5:32:68:67:4E:1E:33:FB:D1:AC:4E:65:3B:38:EA:2F:08:D8:9C:3B Authority key identifier: 14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 Certificate issuer: /CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Certificate serial: 010D0C9F4328584F5D92596CA5D3DB67ACAD27A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft Manifest number: 010D0C9F4328584073A8433349A69053F9B88E57 Signing time: Fri 02 Oct 2026 06:00:23 +0000 Manifest this update: Fri 02 Oct 2026 06:00:23 +0000 Manifest next update: Sun 04 Oct 2026 06:00:00 +0000 Files and hashes: 1: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl (hash: 2RWJySXm+p922LQeKfQ8Hjs6wBwWhDkLXe1HmzAUDmo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5d:92:59:6c:a5:d3:db:67:ac:ad:27:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Validity Not Before: Oct 2 06:00:23 2026 GMT Not After : Oct 4 06:00:00 2026 GMT Subject: CN=1f42e7cf-08a8-4f80-a347-057b1761e02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:9e:24:92:6e:50:19:8a:13:fe:9d:26:94: a8:87:81:d0:e1:21:1b:65:c1:a9:76:4a:d4:ae:a7: 4b:7e:84:c6:20:98:74:12:47:79:99:97:c4:cf:ca: 1a:1f:b4:82:be:56:62:14:ad:8e:6a:d3:6b:05:eb: 94:34:90:a4:31:af:ae:b8:38:a3:21:3f:96:ca:e5: 66:83:4a:83:e2:1b:4d:51:4f:9a:06:6c:aa:b4:d7: 81:15:e2:fe:01:eb:da:59:66:e6:2c:b6:82:d1:c7: 49:d2:b6:b6:22:72:fb:67:19:69:33:31:f7:c3:83: e9:d6:10:4f:e5:17:c9:62:0c:56:d0:26:05:f9:6e: c4:8c:a9:ee:9c:a5:de:33:2f:21:af:be:d7:ce:9e: 7f:ef:a4:1a:30:b1:be:ed:8c:ff:65:70:a3:3c:1c: be:d9:20:b9:cd:c3:09:36:3b:23:d2:a6:b4:c5:0a: 40:82:d4:d7:80:0f:37:d0:c3:cc:e9:46:2d:77:51: 12:40:bb:9d:72:c0:35:d5:d8:6d:8f:a6:6f:f1:6b: a1:e4:63:e4:88:1b:ae:cc:e6:f9:40:9a:74:1b:bb: 6e:49:25:3f:fd:80:a6:13:de:f2:03:78:ea:ff:06: 0c:30:df:14:4d:a2:3c:a5:5b:ad:7c:74:d0:bd:fb: 70:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:32:68:67:4E:1E:33:FB:D1:AC:4E:65:3B:38:EA:2F:08:D8:9C:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl X509v3 Authority Key Identifier: keyid:14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:91:d9:86:04:89:73:f9:46:97:51:81:90:cd:0a:40:26:08: 53:a3:88:ab:3d:17:db:d3:83:af:cd:30:cb:6c:09:fd:fd:59: 2a:2b:f5:7e:3c:f3:e2:33:94:c0:e8:31:40:9f:69:90:a8:06: 0e:2c:6f:4d:a9:7a:84:1a:53:96:0a:1e:dd:e3:5b:3e:10:59: 6b:83:7e:b7:c1:a1:85:50:bf:f2:ba:d1:9f:38:2a:bf:9f:1a: 4d:43:aa:6a:95:bf:e9:4c:e5:1c:7e:8b:e5:42:50:42:19:d8: 37:21:de:4c:d6:c0:47:13:1a:23:fb:38:10:aa:59:ac:12:c2: d2:f2:72:c3:7d:ec:5c:2c:18:8a:26:72:b9:14:8e:3e:2d:99: 1e:f4:fa:bb:b9:90:07:ba:b1:a2:35:c0:93:73:12:de:a2:2d: 1b:20:2c:5a:52:32:b8:f4:7a:5d:7a:e7:ea:0f:59:00:c3:b2: fd:2f:39:9f:7f:f0:61:53:c9:9e:62:e9:8b:77:37:71:68:d3: 1d:7a:43:ab:90:6e:96:2a:c6:f2:16:1c:5f:ff:0f:fc:a1:ff: 58:a7:5e:5a:c5:b2:ec:1a:57:e1:31:be:8e:ac:10:d7:06:cf: 5f:be:4d:79:07:e6:11:51:bc:40:59:3d:12:b7:6f:d6:14:b5: b7:63:5e:38 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9dkllspdPbZ6ytJ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhMWNmMzQtOWRlNi00M2IyLThjNmUtZWZiMjdhOWFj NWFlMB4XDTI2MTAwMjA2MDAyM1oXDTI2MTAwNDA2MDAwMFowLzEtMCsGA1UEAxMk MWY0MmU3Y2YtMDhhOC00ZjgwLWEzNDctMDU3YjE3NjFlMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXSeJJJuUBmKE/6dJpSoh4HQ4SEbZcGpdkrU rqdLfoTGIJh0Ekd5mZfEz8oaH7SCvlZiFK2OatNrBeuUNJCkMa+uuDijIT+WyuVm g0qD4htNUU+aBmyqtNeBFeL+AevaWWbmLLaC0cdJ0ra2InL7ZxlpMzH3w4Pp1hBP 5RfJYgxW0CYF+W7EjKnunKXeMy8hr77Xzp5/76QaMLG+7Yz/ZXCjPBy+2SC5zcMJ Njsj0qa0xQpAgtTXgA830MPM6UYtd1ESQLudcsA11dhtj6Zv8Wuh5GPkiBuuzOb5 QJp0G7tuSSU//YCmE97yA3jq/wYMMN8UTaI8pVutfHTQvftwZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNUyaGdOHjP70axOZTs46i8I2Jw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMmEx Y2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIyN2E5YWM1YWUvYTJhMWNmMzQtOWRlNi00 M2IyLThjNmUtZWZiMjdhOWFjNWFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTJhMWNmMzQtOWRlNi00M2IyLThj NmUtZWZiMjdhOWFjNWFlL2EyYTFjZjM0LTlkZTYtNDNiMi04YzZlLWVmYjI3YTlh YzVhZS5jcmwwHwYDVR0jBBgwFoAUFHGsHivolCUJQfzWWQdMo7XPuzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMmExY2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIy N2E5YWM1YWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC5kdmGBIlz+UaXUYGQzQpA JghTo4irPRfb04OvzTDLbAn9/VkqK/V+PPPiM5TA6DFAn2mQqAYOLG9NqXqEGlOW Ch7d41s+EFlrg363waGFUL/yutGfOCq/nxpNQ6pqlb/pTOUcfovlQlBCGdg3Id5M 1sBHExoj+zgQqlmsEsLS8nLDfexcLBiKJnK5FI4+LZke9Pq7uZAHurGiNcCTcxLe oi0bICxaUjK49HpdeufqD1kAw7L9Lzmff/BhU8meYumLdzdxaNMdekOrkG6WKsby Fhxf/w/8of9Yp15axbLsGlfhMb6OrBDXBs9fvk15B+YRUbxAWT0St2/WFLW3Y144 -----END CERTIFICATE-----Generated at Fri Oct 2 17:23:01 2026 by rpki-client