$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.mft File: 23a33a5f-da0f-4c5a-910f-1f508872bef2.mft (raw, json) Hash identifier: 1XR+5tnDO0M/CdnqN1n1+DGsHmemyf+FOGb9whRtmBY= Subject key identifier: 4A:EC:58:C0:35:E4:D1:D7:57:20:7E:F8:9E:4F:79:A8:78:24:F8:7D Authority key identifier: 74:B3:7F:AD:3B:3A:6C:F4:BD:03:4C:90:EF:A1:C6:5E:9F:1F:BE:60 Certificate issuer: /CN=23a33a5f-da0f-4c5a-910f-1f508872bef2 Certificate serial: 010D0C9F4328584F4DFC15DAC34B6AE9825AB0E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.mft Manifest number: 010D0C9F4328584ED32AE8A97CC482EC0077EDCC Signing time: Sat 26 Sep 2026 16:00:23 +0000 Manifest this update: Sat 26 Sep 2026 16:00:23 +0000 Manifest next update: Tue 29 Sep 2026 16:00:00 +0000 Files and hashes: 1: 23a33a5f-da0f-4c5a-910f-1f508872bef2.crl (hash: LSmWADvVE9eZKD+nwaiyHYVDXBK4nrkZFgYCeQ/BxBk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:fc:15:da:c3:4b:6a:e9:82:5a:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a33a5f-da0f-4c5a-910f-1f508872bef2 Validity Not Before: Sep 26 16:00:23 2026 GMT Not After : Sep 29 16:00:00 2026 GMT Subject: CN=ec8402a6-eb57-4e74-ab91-c8e9e6583f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7a:6f:76:36:22:ea:b3:2f:da:cb:0e:70:b8: 4f:b1:ec:a5:a8:23:f4:ae:61:50:b4:51:f0:96:93: 65:1f:c2:22:01:9c:3f:a1:11:fa:52:ba:b4:b3:c0: 9a:7f:16:4b:ca:63:a8:39:22:fc:e1:62:c9:05:92: 44:b3:8a:58:85:7f:3c:cb:6e:16:f2:17:e4:71:b4: 15:c5:f7:66:8a:f5:b7:51:d9:aa:d9:84:5c:fa:09: 71:8d:6c:01:5e:eb:de:64:2f:15:94:5c:27:ed:bd: 87:7d:18:1f:9e:7f:47:ed:ad:24:ed:d1:bb:64:a6: 1c:8a:e4:bb:34:2e:d7:e1:f8:ea:4f:48:57:6e:73: 2a:78:d2:42:6a:a7:00:a4:57:24:53:6e:77:85:a7: 26:20:5a:a0:0c:0e:74:86:62:48:57:ca:72:53:1a: b2:0a:c1:22:55:db:e9:84:1d:43:de:29:82:bb:1a: a8:68:e6:c9:3e:37:55:43:43:75:82:30:ee:0d:81: 29:6b:df:2c:eb:8f:57:6d:c1:0c:6a:77:bb:1a:d3: dc:92:1b:33:f6:2d:63:54:b3:62:6f:5f:fc:f3:86: af:24:97:ab:e5:69:f4:e4:d4:2a:f7:3d:62:ea:88: 38:37:e6:f6:d4:d7:03:35:a9:cd:07:e2:a5:59:e2: ff:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EC:58:C0:35:E4:D1:D7:57:20:7E:F8:9E:4F:79:A8:78:24:F8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.crl X509v3 Authority Key Identifier: keyid:74:B3:7F:AD:3B:3A:6C:F4:BD:03:4C:90:EF:A1:C6:5E:9F:1F:BE:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:2b:ed:dc:f0:fe:fc:c0:ec:39:3d:d4:bf:ce:13:db:fd:ca: 04:7e:98:6a:e7:2a:43:c5:31:0c:0e:78:99:4a:d5:f5:4e:76: 3e:c9:15:a4:04:c0:ac:99:3a:b1:b0:ed:71:5c:67:01:4f:02: ad:d1:9a:d6:3d:7d:e1:c1:57:54:48:79:71:77:bf:51:0a:49: f4:37:15:8e:b3:71:90:e3:97:82:1e:e0:28:ed:8e:40:e2:2e: 2a:c1:40:36:f7:1e:7c:b9:48:61:e6:a1:86:60:e6:da:7b:d3: 52:e9:29:f6:55:02:38:9b:a7:47:84:5c:6a:11:bf:11:53:d5: d2:69:32:39:25:d8:6c:f6:f5:bc:7b:64:b0:4f:0f:b2:dd:59: b9:db:98:bd:a4:fa:0c:d2:cb:0d:89:d7:dd:67:12:ee:71:c3: 4c:cc:39:20:bc:78:53:4c:00:7d:7c:89:21:e1:8e:4b:80:9d: 89:87:ce:e9:5c:c9:1f:e2:63:32:2c:21:ad:d9:28:08:bf:ca: c4:28:40:e5:6e:c8:f8:66:9d:eb:9f:04:3d:e6:e4:10:43:f1: 4a:9b:02:3e:8e:0f:80:09:36:82:85:0b:bb:d3:e6:a7:38:e5: 0d:cb:40:cb:63:6f:43:43:38:ac:3b:ed:4d:c3:84:a5:31:66: cb:bf:20:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9N/BXaw0tq6YJasOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNhMzNhNWYtZGEwZi00YzVhLTkxMGYtMWY1MDg4NzJi ZWYyMB4XDTI2MDkyNjE2MDAyM1oXDTI2MDkyOTE2MDAwMFowLzEtMCsGA1UEAxMk ZWM4NDAyYTYtZWI1Ny00ZTc0LWFiOTEtYzhlOWU2NTgzZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3pvdjYi6rMv2ssOcLhPseylqCP0rmFQtFHw lpNlH8IiAZw/oRH6Urq0s8CafxZLymOoOSL84WLJBZJEs4pYhX88y24W8hfkcbQV xfdmivW3Udmq2YRc+glxjWwBXuveZC8VlFwn7b2HfRgfnn9H7a0k7dG7ZKYciuS7 NC7X4fjqT0hXbnMqeNJCaqcApFckU253hacmIFqgDA50hmJIV8pyUxqyCsEiVdvp hB1D3imCuxqoaObJPjdVQ0N1gjDuDYEpa98s649XbcEMane7GtPckhsz9i1jVLNi b1/884avJJer5Wn05NQq9z1i6og4N+b21NcDNanNB+KlWeL/owIDAQABo4IDbjCC A2owHQYDVR0OBBYEFErsWMA15NHXVyB++J5Peah4JPh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8yM2Ez M2E1Zi1kYTBmLTRjNWEtOTEwZi0xZjUwODg3MmJlZjIvMjNhMzNhNWYtZGEwZi00 YzVhLTkxMGYtMWY1MDg4NzJiZWYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMjNhMzNhNWYtZGEwZi00YzVhLTkx MGYtMWY1MDg4NzJiZWYyLzIzYTMzYTVmLWRhMGYtNGM1YS05MTBmLTFmNTA4ODcy YmVmMi5jcmwwHwYDVR0jBBgwFoAUdLN/rTs6bPS9A0yQ76HGXp8fvmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8yM2EzM2E1Zi1kYTBmLTRjNWEtOTEwZi0xZjUw ODg3MmJlZjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+K+3c8P78wOw5PdS/zhPb /coEfphq5ypDxTEMDniZStX1TnY+yRWkBMCsmTqxsO1xXGcBTwKt0ZrWPX3hwVdU SHlxd79RCkn0NxWOs3GQ45eCHuAo7Y5A4i4qwUA29x58uUhh5qGGYObae9NS6Sn2 VQI4m6dHhFxqEb8RU9XSaTI5Jdhs9vW8e2SwTw+y3Vm525i9pPoM0ssNidfdZxLu ccNMzDkgvHhTTAB9fIkh4Y5LgJ2Jh87pXMkf4mMyLCGt2SgIv8rEKEDlbsj4Zp3r nwQ95uQQQ/FKmwI+jg+ACTaChQu70+anOOUNy0DLY29DQzisO+1Nw4SlMWbLvyBA -----END CERTIFICATE-----Generated at Sun Sep 27 05:09:08 2026 by rpki-client