$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0/b586df36-3c71-4c6f-974d-2c9545c25eb0.mft File: b586df36-3c71-4c6f-974d-2c9545c25eb0.mft (raw, json) Hash identifier: kg1zxLh1iK6xRdjHGudGIg+8A6LNgW9UUUXfbjnjJgs= Subject key identifier: E5:29:F9:75:0D:AF:FB:8E:45:2C:D5:E4:71:4A:47:AB:A8:B5:20:88 Authority key identifier: 68:AB:98:AC:87:47:4A:49:7C:C5:C2:06:7B:E0:29:E8:7F:D2:EF:AA Certificate issuer: /CN=b586df36-3c71-4c6f-974d-2c9545c25eb0 Certificate serial: 010D0C9F4328584F4F9CEE7D4A86539439F98840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0/b586df36-3c71-4c6f-974d-2c9545c25eb0.mft Manifest number: 010D0C9F432858491595115A8A54F4ED24DB95BB Signing time: Sun 27 Sep 2026 06:00:23 +0000 Manifest this update: Sun 27 Sep 2026 06:00:23 +0000 Manifest next update: Tue 29 Sep 2026 06:00:00 +0000 Files and hashes: 1: b586df36-3c71-4c6f-974d-2c9545c25eb0.crl (hash: 6liJkKGwo6tFZPfZy31E6o5b4WftqvASkKx9jn9bU58=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0/b586df36-3c71-4c6f-974d-2c9545c25eb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0/b586df36-3c71-4c6f-974d-2c9545c25eb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:9c:ee:7d:4a:86:53:94:39:f9:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b586df36-3c71-4c6f-974d-2c9545c25eb0 Validity Not Before: Sep 27 06:00:23 2026 GMT Not After : Sep 29 06:00:00 2026 GMT Subject: CN=3b73f123-df06-4fca-b601-b6bac391ae23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e5:31:08:97:57:e4:28:58:ef:6c:a1:71:b6: 42:34:ab:59:e1:59:c0:01:d9:a7:5d:0f:9f:e4:0a: c7:ca:ca:eb:05:35:25:44:76:42:27:ed:7a:da:65: 57:3d:c8:08:03:25:c6:40:4d:92:01:9f:ba:63:c4: 34:76:56:de:28:d8:05:6f:f5:5f:ed:fd:9e:78:14: a2:0a:1f:ce:b9:bc:15:23:07:bc:76:a7:2b:86:fb: 01:94:27:12:0a:2e:8a:6b:a4:b7:b6:c8:1b:12:97: 8d:cf:b5:c9:d8:cc:b3:da:f0:4b:37:d2:39:d0:ab: 50:cb:c6:ca:44:8d:5f:ee:36:86:34:35:22:15:cb: 0f:59:fb:a1:72:4b:d7:9c:03:04:cd:1a:86:19:57: 29:65:7d:1f:e1:78:1b:ff:e0:b5:27:7d:63:b7:2f: 99:79:71:75:a2:85:a5:d8:c5:b0:5f:02:da:74:c4: d3:cb:84:93:8d:25:1b:14:1a:97:96:4f:00:e4:71: 20:87:2a:48:d4:f7:94:a9:57:3c:15:67:fc:5c:ac: 05:40:08:c1:0c:c7:f1:a5:a5:56:08:06:46:df:1a: be:42:4c:dc:d3:16:83:a2:c4:83:af:9f:ea:fc:34: fa:c9:2a:84:cc:07:a5:ca:d4:8b:75:71:1f:72:c5: 7c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:29:F9:75:0D:AF:FB:8E:45:2C:D5:E4:71:4A:47:AB:A8:B5:20:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0/b586df36-3c71-4c6f-974d-2c9545c25eb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0/b586df36-3c71-4c6f-974d-2c9545c25eb0.crl X509v3 Authority Key Identifier: keyid:68:AB:98:AC:87:47:4A:49:7C:C5:C2:06:7B:E0:29:E8:7F:D2:EF:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:8b:67:5a:fb:18:1b:ab:13:1c:a8:7c:da:fa:4a:26:3b:ac: 60:c3:0b:8b:d1:a7:a9:86:e9:77:08:51:81:5a:84:34:cc:67: d1:26:b7:04:9e:6f:23:3a:80:da:f7:82:09:34:1d:4f:6e:f6: dd:21:f4:5a:14:05:6f:e5:a7:86:d6:81:86:7b:b4:6c:08:63: b5:2a:93:92:10:ab:d3:a8:73:60:57:4e:78:83:d1:22:a4:5c: 99:dc:0a:fa:b7:92:0e:5e:95:ca:d1:e5:2b:f1:ca:b4:83:6a: 79:f7:45:a4:f9:3a:72:22:76:59:50:4a:ee:cb:ef:9c:fb:91: a4:df:4d:0d:0c:36:9c:78:83:5a:94:b8:f4:95:bb:06:2c:7a: 02:19:62:0e:7e:47:e8:52:51:32:85:16:90:d2:6a:6a:1a:35: 73:90:9d:bb:41:96:bf:f9:94:9c:fe:ad:3b:6a:5c:98:0f:05: 83:13:f4:13:81:27:a7:31:36:41:0a:3d:72:0a:6f:94:ec:21: 41:5c:c3:4f:63:61:1d:fc:fa:b5:2c:05:1d:2a:75:ee:d0:d8: b2:47:37:e3:97:91:54:3f:c4:34:83:ff:b3:44:b1:17:3a:18: 3d:8f:d5:f8:87:90:94:be:69:9c:83:25:9e:29:c2:a3:03:8d: fc:31:0c:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9PnO59SoZTlDn5iEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU4NmRmMzYtM2M3MS00YzZmLTk3NGQtMmM5NTQ1YzI1 ZWIwMB4XDTI2MDkyNzA2MDAyM1oXDTI2MDkyOTA2MDAwMFowLzEtMCsGA1UEAxMk M2I3M2YxMjMtZGYwNi00ZmNhLWI2MDEtYjZiYWMzOTFhZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouUxCJdX5ChY72yhcbZCNKtZ4VnAAdmnXQ+f 5ArHysrrBTUlRHZCJ+162mVXPcgIAyXGQE2SAZ+6Y8Q0dlbeKNgFb/Vf7f2eeBSi Ch/OubwVIwe8dqcrhvsBlCcSCi6Ka6S3tsgbEpeNz7XJ2Myz2vBLN9I50KtQy8bK RI1f7jaGNDUiFcsPWfuhckvXnAMEzRqGGVcpZX0f4Xgb/+C1J31jty+ZeXF1ooWl 2MWwXwLadMTTy4STjSUbFBqXlk8A5HEghypI1PeUqVc8FWf8XKwFQAjBDMfxpaVW CAZG3xq+Qkzc0xaDosSDr5/q/DT6ySqEzAelytSLdXEfcsV86wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOUp+XUNr/uORSzV5HFKR6uotSCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNTg2 ZGYzNi0zYzcxLTRjNmYtOTc0ZC0yYzk1NDVjMjVlYjAvYjU4NmRmMzYtM2M3MS00 YzZmLTk3NGQtMmM5NTQ1YzI1ZWIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjU4NmRmMzYtM2M3MS00YzZmLTk3 NGQtMmM5NTQ1YzI1ZWIwL2I1ODZkZjM2LTNjNzEtNGM2Zi05NzRkLTJjOTU0NWMy NWViMC5jcmwwHwYDVR0jBBgwFoAUaKuYrIdHSkl8xcIGe+Ap6H/S76owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNTg2ZGYzNi0zYzcxLTRjNmYtOTc0ZC0yYzk1 NDVjMjVlYjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUi2da+xgbqxMcqHza+kom O6xgwwuL0aephul3CFGBWoQ0zGfRJrcEnm8jOoDa94IJNB1PbvbdIfRaFAVv5aeG 1oGGe7RsCGO1KpOSEKvTqHNgV054g9EipFyZ3Ar6t5IOXpXK0eUr8cq0g2p590Wk +TpyInZZUEruy++c+5Gk300NDDaceINalLj0lbsGLHoCGWIOfkfoUlEyhRaQ0mpq GjVzkJ27QZa/+ZSc/q07alyYDwWDE/QTgSenMTZBCj1yCm+U7CFBXMNPY2Ed/Pq1 LAUdKnXu0NiyRzfjl5FUP8Q0g/+zRLEXOhg9j9X4h5CUvmmcgyWeKcKjA438MQxj -----END CERTIFICATE-----Generated at Sun Sep 27 10:36:08 2026 by rpki-client