$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft File: 0ec17157-66de-4aab-85e7-28af4de430e2.mft (raw, json) Hash identifier: 5DUb8sCco/sueoIeE3CQ+n4mJeWDckjJByPmR+0mH7k= Subject key identifier: 65:94:30:3B:2A:68:35:96:CF:04:F1:01:00:BC:A9:3F:C9:59:A9:D9 Authority key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 Certificate issuer: /CN=0ec17157-66de-4aab-85e7-28af4de430e2 Certificate serial: 010D0C9F4328584F407DBE2D274594184D613500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft Manifest number: 010D0C9F43285843A8B9A7EBB23BFBB59BA71741 Signing time: Mon 21 Sep 2026 20:00:23 +0000 Manifest this update: Mon 21 Sep 2026 20:00:23 +0000 Manifest next update: Wed 23 Sep 2026 20:00:00 +0000 Files and hashes: 1: 0ec17157-66de-4aab-85e7-28af4de430e2.crl (hash: 5qnC0GnZHIlxT2aJnyWaBZrbGN6aLbRycn6xDMNvpQQ=) 2: d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a.cer (hash: Hn3prJrqHNDvNCFR4gMuVawpaxQFzcCtOIK4vGwbc0U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:7d:be:2d:27:45:94:18:4d:61:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ec17157-66de-4aab-85e7-28af4de430e2 Validity Not Before: Sep 21 20:00:23 2026 GMT Not After : Sep 23 20:00:00 2026 GMT Subject: CN=231eefcb-e0bc-469c-a2cf-16668c9a2b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3c:44:af:fc:5c:07:6d:46:d7:2b:e7:db:04: 8e:e7:2f:cd:43:f3:1d:8d:a6:6b:06:5e:53:ef:c3: d7:f7:82:b9:8a:6f:62:bc:a1:b1:1b:18:32:f9:3f: 34:cb:6c:12:d9:8d:b6:e3:78:95:b7:87:1f:3b:29: 63:52:04:53:17:61:ba:f6:bd:8d:d5:cf:88:8c:19: 75:fa:91:a8:a1:03:ab:1a:4d:c5:11:d0:d4:4a:ca: b3:e9:00:0f:8a:aa:4c:a9:41:cb:87:4d:0c:60:5d: 7d:97:9f:c5:2e:26:28:4d:a6:91:6a:db:7e:f1:cc: de:8f:09:ef:79:e2:3c:ca:57:6a:2c:05:38:31:8f: c9:46:73:73:4c:f2:5d:27:48:15:7c:02:bb:48:96: f8:b3:2d:61:85:79:e2:88:74:f8:5a:b0:cc:bd:b1: 52:dc:51:3c:e5:be:15:4f:b5:2c:5b:e4:80:dd:f2: 18:59:a7:b0:88:80:fd:ef:ca:80:34:52:2c:8f:65: 65:21:cc:8e:3c:74:53:74:37:b1:a7:5d:72:80:f1: 49:6e:76:ac:9a:a8:4e:9e:50:42:f6:a7:fb:26:53: 72:b4:f2:ff:0a:8d:80:e3:fb:09:8a:21:27:51:66: 09:82:60:24:98:b0:d2:5a:23:4f:1d:41:7d:e6:91: 1e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:94:30:3B:2A:68:35:96:CF:04:F1:01:00:BC:A9:3F:C9:59:A9:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl X509v3 Authority Key Identifier: keyid:CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:72:ad:36:1b:d4:22:6b:ed:db:f2:be:9b:c3:f7:e0:5b:94: bd:a1:ad:04:e2:a4:05:c5:3f:7d:f0:1c:4c:16:5e:bf:46:25: 45:f2:d1:d5:7d:84:2c:8f:d5:66:b8:62:40:5d:dd:6f:28:92: f1:54:15:07:52:5c:5d:9d:95:8b:0d:cf:d8:0d:97:58:96:79: 6b:09:82:ed:b7:6c:6e:86:7d:69:ae:91:7a:13:c5:3e:ae:da: 86:6e:88:22:74:53:42:11:df:01:8f:4c:6e:d1:60:d5:08:b3: 73:08:96:55:0f:ba:26:bf:0d:12:66:d6:4c:1c:41:3b:66:ca: 7c:81:b9:61:c1:5d:c4:d4:56:54:1e:77:57:a9:1b:7b:79:37: b8:03:35:ff:5c:38:f7:d5:05:99:35:38:39:96:4d:8b:25:ed: 9f:cd:74:c0:1d:a2:c6:8e:e7:35:4c:fa:84:82:a5:e3:19:30: 25:8e:58:7c:49:61:53:cf:49:5c:cf:1c:a8:19:cd:0f:98:bf: 8f:0e:6d:53:9a:a3:d1:bf:db:3b:9f:fb:d5:f4:c8:90:d4:0b: 7d:30:e2:6a:aa:2b:e0:1a:72:25:d5:fc:a9:84:36:78:46:61: ca:4a:fa:d6:3f:15:36:b1:89:2e:9b:34:51:67:82:d4:c5:bd: ff:0e:6a:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Afb4tJ0WUGE1hNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVjMTcxNTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQz MGUyMB4XDTI2MDkyMTIwMDAyM1oXDTI2MDkyMzIwMDAwMFowLzEtMCsGA1UEAxMk MjMxZWVmY2ItZTBiYy00NjljLWEyY2YtMTY2NjhjOWEyYjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDxEr/xcB21G1yvn2wSO5y/NQ/MdjaZrBl5T 78PX94K5im9ivKGxGxgy+T80y2wS2Y2243iVt4cfOyljUgRTF2G69r2N1c+IjBl1 +pGooQOrGk3FEdDUSsqz6QAPiqpMqUHLh00MYF19l5/FLiYoTaaRatt+8czejwnv eeI8yldqLAU4MY/JRnNzTPJdJ0gVfAK7SJb4sy1hhXniiHT4WrDMvbFS3FE85b4V T7UsW+SA3fIYWaewiID978qANFIsj2VlIcyOPHRTdDexp11ygPFJbnasmqhOnlBC 9qf7JlNytPL/Co2A4/sJiiEnUWYJgmAkmLDSWiNPHUF95pEeWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGWUMDsqaDWWzwTxAQC8qT/JWanZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMx NzE1Ny02NmRlLTRhYWItODVlNy0yOGFmNGRlNDMwZTIvMGVjMTcxNTctNjZkZS00 YWFiLTg1ZTctMjhhZjRkZTQzMGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGVjMTcxNTctNjZkZS00YWFiLTg1 ZTctMjhhZjRkZTQzMGUyLzBlYzE3MTU3LTY2ZGUtNGFhYi04NWU3LTI4YWY0ZGU0 MzBlMi5jcmwwHwYDVR0jBBgwFoAUy1R9vySHpXGysMeIlpnnOSA/cmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0yOGFm NGRlNDMwZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCcq02G9Qia+3b8r6bw/fg W5S9oa0E4qQFxT998BxMFl6/RiVF8tHVfYQsj9VmuGJAXd1vKJLxVBUHUlxdnZWL Dc/YDZdYlnlrCYLtt2xuhn1prpF6E8U+rtqGbogidFNCEd8Bj0xu0WDVCLNzCJZV D7omvw0SZtZMHEE7Zsp8gblhwV3E1FZUHndXqRt7eTe4AzX/XDj31QWZNTg5lk2L Je2fzXTAHaLGjuc1TPqEgqXjGTAljlh8SWFTz0lczxyoGc0PmL+PDm1TmqPRv9s7 n/vV9MiQ1At9MOJqqivgGnIl1fyphDZ4RmHKSvrWPxU2sYkumzRRZ4LUxb3/Dmos -----END CERTIFICATE-----Generated at Tue Sep 22 22:00:15 2026 by rpki-client