$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft File: 970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft (raw, json) Hash identifier: NLIYKOgo9jk1iQLB1i5ylRDz58fBgidDzDfSZdHrlus= Subject key identifier: AF:F0:E0:D5:40:8C:21:45:BA:14:94:0E:8D:BA:99:0C:24:24:DE:C7 Authority key identifier: EC:22:C7:95:B9:33:D4:1F:25:36:2E:46:3A:C7:61:A5:B8:FB:C7:86 Certificate issuer: /CN=970b2ca4-5c66-4e09-8b39-88295bcc7d1d Certificate serial: 010D0C9F4328584F4919568125B269BEE6708400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft Manifest number: 010D0C9F4328584EFAE93805E98EDA3339D43C9C Signing time: Thu 24 Sep 2026 22:00:23 +0000 Manifest this update: Thu 24 Sep 2026 22:00:23 +0000 Manifest next update: Sun 27 Sep 2026 22:00:00 +0000 Files and hashes: 1: 970b2ca4-5c66-4e09-8b39-88295bcc7d1d.crl (hash: qxyncmKxPy5MFLEpMpYElK09Ys08UZ7cenfLfmPoeNg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:19:56:81:25:b2:69:be:e6:70:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970b2ca4-5c66-4e09-8b39-88295bcc7d1d Validity Not Before: Sep 24 22:00:23 2026 GMT Not After : Sep 27 22:00:00 2026 GMT Subject: CN=1b8311d8-33bd-4253-a044-f0b87c28e4df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:ad:14:43:d3:bb:4d:6e:49:30:a7:74:88: cc:34:fb:ad:2e:4e:d4:67:f7:e6:7f:aa:b2:ab:5f: 7d:68:ed:d1:d7:82:37:37:c3:fa:c5:cd:e4:62:46: 93:8a:1d:7b:ba:c8:99:13:4c:2a:f7:24:a2:bf:e2: 4c:08:ba:8d:6a:0d:d2:a4:08:92:ba:00:a8:15:c7: 18:34:39:6f:64:59:7c:fa:d7:51:bf:a6:93:bc:02: a2:0e:75:f6:54:90:f0:4b:bd:b6:e8:74:9c:e7:66: 69:33:f7:76:47:4b:12:32:31:29:27:ca:74:fe:68: 94:4a:b9:89:4e:e9:28:80:9d:ec:6b:71:6d:b9:ce: cd:8e:af:cb:47:ee:3d:a3:75:69:49:99:9e:7e:7e: d0:1f:18:1e:ed:b6:05:bc:47:84:23:e8:53:c9:b4: f7:50:8b:dd:86:32:69:cb:4e:f6:95:62:95:d2:bb: 77:13:c8:5c:f9:65:d9:12:ea:88:ec:92:b1:86:2d: 80:30:2f:79:51:7c:98:9f:ac:a7:5b:0e:f3:8a:a9: 19:8e:32:09:4a:eb:5b:62:45:3e:54:f8:45:e5:6f: 6b:a0:75:40:38:cc:61:13:28:fa:c2:c7:57:77:26: e2:8e:ee:45:00:52:e4:ed:41:09:95:9b:45:ec:81: c1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F0:E0:D5:40:8C:21:45:BA:14:94:0E:8D:BA:99:0C:24:24:DE:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.crl X509v3 Authority Key Identifier: keyid:EC:22:C7:95:B9:33:D4:1F:25:36:2E:46:3A:C7:61:A5:B8:FB:C7:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a1:66:cd:4c:bd:d8:be:6d:b7:cb:50:70:6d:c4:6a:47:35: ae:eb:4b:46:fc:39:33:5a:6f:8b:57:74:15:bb:d9:15:8f:5e: 4e:45:79:a6:9c:d0:9b:16:e8:db:ae:87:41:92:54:a9:d9:9e: e7:84:5d:09:7b:9a:2e:1a:27:5e:24:14:86:c5:7b:16:2e:c7: 84:45:3f:f5:ca:a1:40:08:0e:2b:16:86:b1:d7:a1:c0:52:a2: 7b:8d:9f:8a:a7:fd:31:61:23:49:a5:4e:56:86:fc:ed:0b:ca: f3:5f:0e:6b:40:49:48:ad:a0:5e:ca:5c:f8:0e:3d:24:50:ae: 4c:54:94:15:06:8d:48:42:28:d9:d0:d2:c2:b1:a3:13:22:38: 80:1d:92:9a:34:95:8b:e8:5b:af:4f:45:9d:eb:59:4f:30:7b: 22:72:9d:4a:0d:20:b9:0b:a9:97:c7:be:85:8b:1a:28:98:5b: 14:93:94:26:d8:ab:2f:14:3e:b7:f5:84:4c:07:db:43:08:18: 05:62:b8:f4:67:cd:29:43:71:12:4c:26:e3:24:1c:fb:bc:8e: af:61:77:6d:0d:8b:a0:bd:50:d8:86:03:0c:f7:5d:23:44:e2: 85:4e:0e:ec:a9:fc:68:18:d3:81:67:ee:c2:3e:4d:98:37:0f: ab:91:ca:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9JGVaBJbJpvuZwhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcwYjJjYTQtNWM2Ni00ZTA5LThiMzktODgyOTViY2M3 ZDFkMB4XDTI2MDkyNDIyMDAyM1oXDTI2MDkyNzIyMDAwMFowLzEtMCsGA1UEAxMk MWI4MzExZDgtMzNiZC00MjUzLWEwNDQtZjBiODdjMjhlNGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/etFEPTu01uSTCndIjMNPutLk7UZ/fmf6qy q199aO3R14I3N8P6xc3kYkaTih17usiZE0wq9ySiv+JMCLqNag3SpAiSugCoFccY NDlvZFl8+tdRv6aTvAKiDnX2VJDwS7226HSc52ZpM/d2R0sSMjEpJ8p0/miUSrmJ TukogJ3sa3Ftuc7Njq/LR+49o3VpSZmefn7QHxge7bYFvEeEI+hTybT3UIvdhjJp y072lWKV0rt3E8hc+WXZEuqI7JKxhi2AMC95UXyYn6ynWw7ziqkZjjIJSutbYkU+ VPhF5W9roHVAOMxhEyj6wsdXdybiju5FAFLk7UEJlZtF7IHBkQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK/w4NVAjCFFuhSUDo26mQwkJN7HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85NzBi MmNhNC01YzY2LTRlMDktOGIzOS04ODI5NWJjYzdkMWQvOTcwYjJjYTQtNWM2Ni00 ZTA5LThiMzktODgyOTViY2M3ZDFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOTcwYjJjYTQtNWM2Ni00ZTA5LThi MzktODgyOTViY2M3ZDFkLzk3MGIyY2E0LTVjNjYtNGUwOS04YjM5LTg4Mjk1YmNj N2QxZC5jcmwwHwYDVR0jBBgwFoAU7CLHlbkz1B8lNi5GOsdhpbj7x4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi85NzBiMmNhNC01YzY2LTRlMDktOGIzOS04ODI5 NWJjYzdkMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAboWbNTL3Yvm23y1BwbcRq RzWu60tG/DkzWm+LV3QVu9kVj15ORXmmnNCbFujbrodBklSp2Z7nhF0Je5ouGide JBSGxXsWLseERT/1yqFACA4rFoax16HAUqJ7jZ+Kp/0xYSNJpU5WhvztC8rzXw5r QElIraBeylz4Dj0kUK5MVJQVBo1IQijZ0NLCsaMTIjiAHZKaNJWL6FuvT0Wd61lP MHsicp1KDSC5C6mXx76FixoomFsUk5Qm2KsvFD639YRMB9tDCBgFYrj0Z80pQ3ES TCbjJBz7vI6vYXdtDYugvVDYhgMM910jROKFTg7sqfxoGNOBZ+7CPk2YNw+rkcrA -----END CERTIFICATE-----Generated at Fri Sep 25 16:38:43 2026 by rpki-client