$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft File: 970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft (raw, json) Hash identifier: Xd7sU82S6rt+cVUkGruVximOvv7LbHzvuHXX8n8JPV0= Subject key identifier: 17:39:27:01:7E:C9:CC:14:00:EA:53:BA:0B:2D:53:4C:D6:D0:18:67 Authority key identifier: EC:22:C7:95:B9:33:D4:1F:25:36:2E:46:3A:C7:61:A5:B8:FB:C7:86 Certificate issuer: /CN=970b2ca4-5c66-4e09-8b39-88295bcc7d1d Certificate serial: 010D0C9F4328584FD77A3EC18195DFA0EA055490 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft Manifest number: 010D0C9F4328584EFAE93805E98EDA3339D43CCF Signing time: Sat 14 Nov 2026 22:00:23 +0000 Manifest this update: Sat 14 Nov 2026 22:00:23 +0000 Manifest next update: Mon 16 Nov 2026 22:00:00 +0000 Files and hashes: 1: 970b2ca4-5c66-4e09-8b39-88295bcc7d1d.crl (hash: qpQbyrxjm9fSCBY8IeHTEY458OpYv3JyZssvo/GCH0M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d7:7a:3e:c1:81:95:df:a0:ea:05:54:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970b2ca4-5c66-4e09-8b39-88295bcc7d1d Validity Not Before: Nov 14 22:00:23 2026 GMT Not After : Nov 16 22:00:00 2026 GMT Subject: CN=beaa4254-0827-4e0e-b120-6cd720398491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:43:fc:57:14:28:9d:3c:32:29:ce:61:38:88: 5a:96:95:a5:47:d7:94:e5:a6:05:c5:63:b1:c1:b5: e3:e6:c1:a8:41:81:03:e6:cf:5f:df:20:3b:29:a5: 6b:9e:50:50:ec:1c:41:d2:2a:aa:b0:54:b8:87:c5: f1:99:2b:df:ee:99:20:57:8e:47:e8:d4:fd:fc:96: 38:44:4c:ae:4b:28:53:a7:e7:63:10:88:f3:92:0b: 2e:e1:1c:84:fb:64:ad:3e:fd:a6:c0:3f:f0:9d:53: 64:9a:5e:3b:fa:de:88:5c:ff:be:02:bf:67:e0:7e: 88:b4:c1:ce:dc:13:88:84:35:f2:27:81:ba:85:46: c4:bb:f7:50:dc:68:dd:d7:86:cc:12:a5:6f:0c:75: b1:77:8c:98:61:6b:c0:de:1b:7f:c1:3c:20:18:e8: ff:41:44:89:01:f6:7b:90:9b:a8:42:02:c8:9c:52: 7e:01:ab:34:2c:a3:8f:bc:56:61:d9:05:53:d1:00: ab:7b:4d:0f:40:3c:4b:36:01:4f:ca:32:0e:8d:ec: 4b:8c:8e:ff:b1:b8:35:2d:3a:40:3a:46:e7:97:cc: 82:68:37:f9:19:f1:d9:4d:8e:a8:92:5d:2e:4f:f8: ca:4f:a9:d2:9d:d2:5a:84:52:f8:bd:d9:e3:dd:45: 2a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:39:27:01:7E:C9:CC:14:00:EA:53:BA:0B:2D:53:4C:D6:D0:18:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.crl X509v3 Authority Key Identifier: keyid:EC:22:C7:95:B9:33:D4:1F:25:36:2E:46:3A:C7:61:A5:B8:FB:C7:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d5:37:0f:4e:68:37:0b:ee:bc:bc:40:f4:f8:51:22:96:31: ee:57:95:5e:48:94:c6:9e:f4:8d:bb:a6:5f:ee:20:c3:45:31: 66:c7:d5:68:36:c7:8a:9a:1b:80:f7:60:60:7c:f9:8f:5b:4e: 0e:d5:66:a7:b7:6e:eb:f5:0b:1d:fa:e7:8e:39:4a:eb:ef:1e: 83:85:3b:b4:be:f1:15:63:d2:65:1f:8e:8b:37:f0:30:0a:40: b2:02:78:60:a8:d8:21:c6:3d:85:7f:5d:c8:a4:e7:00:c3:e6: 85:ab:b9:a6:c6:1f:e3:8c:0e:da:22:af:a5:23:47:dd:d3:84: 93:a1:a6:fe:c7:5f:74:19:92:f0:d1:50:8f:ac:aa:f0:a7:c8: 38:55:26:a9:b4:c9:d9:34:71:13:e6:29:80:9f:a3:74:87:da: b3:c3:70:18:0f:83:0a:cf:1e:4c:be:20:6e:7d:ef:c2:fb:9f: 34:25:24:4f:12:77:80:32:37:8d:35:3d:d8:85:d9:e1:b9:78: be:c8:91:62:7b:6f:f4:5c:9c:45:13:69:14:72:20:37:1a:a2: 98:3c:88:ed:97:ee:fc:83:79:4f:df:a3:94:06:b5:df:c5:17: 86:10:97:ff:f5:0f:e4:8a:3e:f8:62:69:99:6b:06:e8:30:22: b7:60:99:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/Xej7BgZXfoOoFVJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcwYjJjYTQtNWM2Ni00ZTA5LThiMzktODgyOTViY2M3 ZDFkMB4XDTI2MTExNDIyMDAyM1oXDTI2MTExNjIyMDAwMFowLzEtMCsGA1UEAxMk YmVhYTQyNTQtMDgyNy00ZTBlLWIxMjAtNmNkNzIwMzk4NDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUP8VxQonTwyKc5hOIhalpWlR9eU5aYFxWOx wbXj5sGoQYED5s9f3yA7KaVrnlBQ7BxB0iqqsFS4h8XxmSvf7pkgV45H6NT9/JY4 REyuSyhTp+djEIjzkgsu4RyE+2StPv2mwD/wnVNkml47+t6IXP++Ar9n4H6ItMHO 3BOIhDXyJ4G6hUbEu/dQ3Gjd14bMEqVvDHWxd4yYYWvA3ht/wTwgGOj/QUSJAfZ7 kJuoQgLInFJ+Aas0LKOPvFZh2QVT0QCre00PQDxLNgFPyjIOjexLjI7/sbg1LTpA Okbnl8yCaDf5GfHZTY6okl0uT/jKT6nSndJahFL4vdnj3UUqPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBc5JwF+ycwUAOpTugstU0zW0BhnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85NzBi MmNhNC01YzY2LTRlMDktOGIzOS04ODI5NWJjYzdkMWQvOTcwYjJjYTQtNWM2Ni00 ZTA5LThiMzktODgyOTViY2M3ZDFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOTcwYjJjYTQtNWM2Ni00ZTA5LThi MzktODgyOTViY2M3ZDFkLzk3MGIyY2E0LTVjNjYtNGUwOS04YjM5LTg4Mjk1YmNj N2QxZC5jcmwwHwYDVR0jBBgwFoAU7CLHlbkz1B8lNi5GOsdhpbj7x4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi85NzBiMmNhNC01YzY2LTRlMDktOGIzOS04ODI5 NWJjYzdkMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB71TcPTmg3C+68vED0+FEi ljHuV5VeSJTGnvSNu6Zf7iDDRTFmx9VoNseKmhuA92BgfPmPW04O1Want27r9Qsd +ueOOUrr7x6DhTu0vvEVY9JlH46LN/AwCkCyAnhgqNghxj2Ff13IpOcAw+aFq7mm xh/jjA7aIq+lI0fd04SToab+x190GZLw0VCPrKrwp8g4VSaptMnZNHET5imAn6N0 h9qzw3AYD4MKzx5MviBufe/C+580JSRPEneAMjeNNT3YhdnhuXi+yJFie2/0XJxF E2kUciA3GqKYPIjtl+78g3lP36OUBrXfxReGEJf/9Q/kij74YmmZawboMCK3YJni -----END CERTIFICATE-----Generated at Sun Nov 15 12:15:45 2026 by rpki-client