$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a/5d5aa871-75c5-4818-a650-7e4de0f18c1a.mft File: 5d5aa871-75c5-4818-a650-7e4de0f18c1a.mft (raw, json) Hash identifier: oLqDZEULrFZJgRQQQz1/crCD3OO9RLih+dYdYYp3bBs= Subject key identifier: 05:9F:94:16:D5:8F:6F:57:F9:C1:41:49:31:12:A0:11:EF:AE:F8:2D Authority key identifier: E2:AA:8B:34:CF:8E:62:54:73:C7:8D:ED:AC:42:C8:7A:4C:12:CF:92 Certificate issuer: /CN=5d5aa871-75c5-4818-a650-7e4de0f18c1a Certificate serial: 010D0C9F4328584F47EF8935F53D061B5CF57958 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a/5d5aa871-75c5-4818-a650-7e4de0f18c1a.mft Manifest number: 010D0C9F4328584E7EF73707FE8562C26D0BBE88 Signing time: Thu 24 Sep 2026 12:00:22 +0000 Manifest this update: Thu 24 Sep 2026 12:00:22 +0000 Manifest next update: Sun 27 Sep 2026 12:00:00 +0000 Files and hashes: 1: 5d5aa871-75c5-4818-a650-7e4de0f18c1a.crl (hash: 2JRL3HPwMiQPDimgUEn5LDuadD0lEZSgjrFt3tnOpTs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a/5d5aa871-75c5-4818-a650-7e4de0f18c1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a/5d5aa871-75c5-4818-a650-7e4de0f18c1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:47:ef:89:35:f5:3d:06:1b:5c:f5:79:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d5aa871-75c5-4818-a650-7e4de0f18c1a Validity Not Before: Sep 24 12:00:22 2026 GMT Not After : Sep 27 12:00:00 2026 GMT Subject: CN=786c3e8b-b8eb-4ea8-9eea-38f4a8f9d8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:b5:1d:1a:68:a3:f6:ed:40:84:63:67:69: 2e:3f:00:8c:56:bb:7c:1e:fc:bc:c6:5c:71:61:17: 12:ef:32:79:0f:b3:4b:96:5c:89:8a:74:0a:67:d6: a0:8a:de:0d:7a:dc:cc:49:b1:48:09:60:f7:bc:6f: e9:f8:42:ae:bc:49:f5:1c:7d:71:40:62:17:79:4b: 6b:26:f4:8e:9d:12:50:54:ac:43:18:7f:54:55:d5: 1b:71:2e:2c:61:f7:b7:6c:3f:ea:c4:8a:59:14:b0: 28:07:f0:a9:57:9a:00:59:7c:88:48:de:50:f6:e9: f9:17:29:88:c3:c8:f7:95:c9:68:1c:29:e5:14:2c: 86:57:06:94:76:bc:68:72:cd:b4:67:35:4f:e2:64: 4d:dc:ec:ec:ee:5f:b8:cc:c6:89:46:e0:ed:9d:c4: c2:88:72:62:3f:0e:95:fa:c4:cf:44:05:21:a2:91: cc:a4:92:73:83:d1:15:3f:d2:f4:1c:ff:79:ba:fc: 29:8b:6b:d9:19:4e:5d:46:f7:7b:f0:a0:cb:49:c7: bb:a2:f7:d1:e6:e0:32:38:d4:df:03:b4:e9:1e:e5: d7:49:52:90:98:6a:79:e6:bb:a4:ac:c4:86:44:c5: 32:b0:d3:99:7b:48:62:8f:e9:47:14:f8:29:0d:d2: be:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9F:94:16:D5:8F:6F:57:F9:C1:41:49:31:12:A0:11:EF:AE:F8:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a/5d5aa871-75c5-4818-a650-7e4de0f18c1a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a/5d5aa871-75c5-4818-a650-7e4de0f18c1a.crl X509v3 Authority Key Identifier: keyid:E2:AA:8B:34:CF:8E:62:54:73:C7:8D:ED:AC:42:C8:7A:4C:12:CF:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ef:56:56:27:90:38:86:b4:3b:01:26:e2:87:80:16:d7:78: 8e:e6:38:9d:42:15:fe:ea:dc:54:90:db:ec:21:15:29:ab:a5: c3:78:ab:be:64:ea:03:2b:77:b5:0b:73:5b:d2:af:fb:82:e1: 11:1f:d1:ba:d1:7d:2f:cf:aa:d5:71:dc:8e:9b:49:5f:f9:2b: 3e:0d:0f:9b:57:6a:01:4e:39:5b:7a:cf:07:a6:e5:1a:ba:53: 5d:6e:59:68:66:7c:ea:a2:76:73:de:d1:6f:b2:32:80:2a:e2: 6f:e1:b2:ee:eb:aa:0d:a9:6c:dc:f6:7f:60:80:f9:93:f3:1d: ba:1c:f8:dd:ee:6e:f4:2d:63:4e:7b:24:e4:77:ba:4b:43:e5: 1c:33:e9:43:46:4e:fb:2a:dc:6a:c9:fa:51:a4:28:d7:5f:5e: 75:d7:98:56:6a:7e:5c:aa:b6:b1:aa:0f:f9:7d:0d:3c:cb:30: c0:6b:60:dc:4d:b3:df:49:45:59:4c:88:5d:b4:e9:34:84:b9: b0:d9:d9:fb:10:24:be:7f:02:ee:bf:b7:69:fe:0f:89:75:31: 38:f2:84:fe:bf:54:17:5c:b3:a3:3e:26:0f:a7:2b:f3:d2:b7: 02:51:f3:29:50:e9:de:b3:d7:cb:9f:d5:ba:9a:3c:b9:59:35: 4b:ed:30:6a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9H74k19T0GG1z1eVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ1YWE4NzEtNzVjNS00ODE4LWE2NTAtN2U0ZGUwZjE4 YzFhMB4XDTI2MDkyNDEyMDAyMloXDTI2MDkyNzEyMDAwMFowLzEtMCsGA1UEAxMk Nzg2YzNlOGItYjhlYi00ZWE4LTllZWEtMzhmNGE4ZjlkOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosq1HRpoo/btQIRjZ2kuPwCMVrt8Hvy8xlxx YRcS7zJ5D7NLllyJinQKZ9agit4NetzMSbFICWD3vG/p+EKuvEn1HH1xQGIXeUtr JvSOnRJQVKxDGH9UVdUbcS4sYfe3bD/qxIpZFLAoB/CpV5oAWXyISN5Q9un5FymI w8j3lcloHCnlFCyGVwaUdrxocs20ZzVP4mRN3Ozs7l+4zMaJRuDtncTCiHJiPw6V +sTPRAUhopHMpJJzg9EVP9L0HP95uvwpi2vZGU5dRvd78KDLSce7ovfR5uAyONTf A7TpHuXXSVKQmGp55rukrMSGRMUysNOZe0hij+lHFPgpDdK+vQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAWflBbVj29X+cFBSTESoBHvrvgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZDVh YTg3MS03NWM1LTQ4MTgtYTY1MC03ZTRkZTBmMThjMWEvNWQ1YWE4NzEtNzVjNS00 ODE4LWE2NTAtN2U0ZGUwZjE4YzFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWQ1YWE4NzEtNzVjNS00ODE4LWE2 NTAtN2U0ZGUwZjE4YzFhLzVkNWFhODcxLTc1YzUtNDgxOC1hNjUwLTdlNGRlMGYx OGMxYS5jcmwwHwYDVR0jBBgwFoAU4qqLNM+OYlRzx43trELIekwSz5IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZDVhYTg3MS03NWM1LTQ4MTgtYTY1MC03ZTRk ZTBmMThjMWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAW71ZWJ5A4hrQ7ASbih4AW 13iO5jidQhX+6txUkNvsIRUpq6XDeKu+ZOoDK3e1C3Nb0q/7guERH9G60X0vz6rV cdyOm0lf+Ss+DQ+bV2oBTjlbes8HpuUaulNdblloZnzqonZz3tFvsjKAKuJv4bLu 66oNqWzc9n9ggPmT8x26HPjd7m70LWNOeyTkd7pLQ+UcM+lDRk77KtxqyfpRpCjX X15115hWan5cqraxqg/5fQ08yzDAa2DcTbPfSUVZTIhdtOk0hLmw2dn7ECS+fwLu v7dp/g+JdTE48oT+v1QXXLOjPiYPpyvz0rcCUfMpUOnes9fLn9W6mjy5WTVL7TBq -----END CERTIFICATE-----Generated at Thu Sep 24 14:19:06 2026 by rpki-client