$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bc2692a2-b3ea-41af-a460-31fa3c3e23b6/bc2692a2-b3ea-41af-a460-31fa3c3e23b6.mft File: bc2692a2-b3ea-41af-a460-31fa3c3e23b6.mft (raw, json) Hash identifier: wkDJ3PEWgVi9oxEZS6PnHeNBjJkv5AHfLeyxPGoqlwE= Subject key identifier: 75:66:7B:DD:6C:B7:8D:5A:4E:54:6A:DE:17:25:50:0F:8F:A0:58:0D Authority key identifier: CC:4D:B4:D3:EB:C4:67:4A:86:00:0B:AC:FD:16:89:29:BA:60:51:2D Certificate issuer: /CN=bc2692a2-b3ea-41af-a460-31fa3c3e23b6 Certificate serial: 010D0C9F4328584F40D70DB68B94E4E9DE593460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bc2692a2-b3ea-41af-a460-31fa3c3e23b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bc2692a2-b3ea-41af-a460-31fa3c3e23b6/bc2692a2-b3ea-41af-a460-31fa3c3e23b6.mft Manifest number: 010D0C9F4328584D42038EC627D46641BDABA937 Signing time: Mon 21 Sep 2026 23:00:23 +0000 Manifest this update: Mon 21 Sep 2026 23:00:23 +0000 Manifest next update: Wed 23 Sep 2026 23:00:00 +0000 Files and hashes: 1: bc2692a2-b3ea-41af-a460-31fa3c3e23b6.crl (hash: 0xI1ww+0mfI4enDPHCopA/ElSERL3zWuzNmYEEEEp/E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bc2692a2-b3ea-41af-a460-31fa3c3e23b6/bc2692a2-b3ea-41af-a460-31fa3c3e23b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bc2692a2-b3ea-41af-a460-31fa3c3e23b6/bc2692a2-b3ea-41af-a460-31fa3c3e23b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bc2692a2-b3ea-41af-a460-31fa3c3e23b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:d7:0d:b6:8b:94:e4:e9:de:59:34:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc2692a2-b3ea-41af-a460-31fa3c3e23b6 Validity Not Before: Sep 21 23:00:23 2026 GMT Not After : Sep 23 23:00:00 2026 GMT Subject: CN=959a7a66-09aa-44eb-b51b-4b2475a34074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:87:17:91:33:cb:d2:f1:81:e1:3b:3a:f2:7a: a9:79:b7:24:3f:9e:6d:d7:63:9b:81:06:e7:9a:2d: d8:8b:a1:ff:d1:bc:bb:8f:2c:4b:48:90:c2:b5:cd: 9c:11:ea:22:c1:4e:61:3b:e4:7c:ad:5e:a2:36:fd: 51:fb:e2:93:1c:a8:52:15:5d:da:42:01:64:8a:b7: 8b:f7:cd:56:b9:bc:56:4c:c6:c7:2e:77:6f:ad:fc: 13:0a:d8:03:ef:21:56:3f:c2:0e:57:35:02:c5:df: 40:a0:e2:6f:59:a0:03:4d:73:ed:7c:aa:89:5d:3d: 22:95:5b:1a:ee:fd:97:27:86:d0:56:d8:99:db:4a: 22:ec:b9:f4:6d:02:e4:f7:d5:8b:d0:c0:24:31:9e: 25:34:56:ab:2d:2f:65:f3:39:19:8f:e2:7a:47:70: 78:61:8b:da:89:cd:c6:19:28:13:61:c6:07:2d:29: 23:97:6e:dc:0d:76:c3:7f:ea:81:07:08:e7:57:9d: 9d:4e:5a:dc:09:83:4e:22:fa:ac:f9:e4:5a:3f:c4: 3a:72:38:a4:2e:d0:80:9d:5c:b6:c5:64:fd:8d:b7: 31:5d:2f:d0:5f:9c:ed:88:33:7a:8e:3f:43:a5:0c: 64:95:96:f8:12:f8:3a:65:c0:f4:63:a3:05:ab:19: f8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:66:7B:DD:6C:B7:8D:5A:4E:54:6A:DE:17:25:50:0F:8F:A0:58:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bc2692a2-b3ea-41af-a460-31fa3c3e23b6/bc2692a2-b3ea-41af-a460-31fa3c3e23b6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bc2692a2-b3ea-41af-a460-31fa3c3e23b6/bc2692a2-b3ea-41af-a460-31fa3c3e23b6.crl X509v3 Authority Key Identifier: keyid:CC:4D:B4:D3:EB:C4:67:4A:86:00:0B:AC:FD:16:89:29:BA:60:51:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bc2692a2-b3ea-41af-a460-31fa3c3e23b6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:83:62:12:1f:fb:31:6f:b8:9b:b4:6b:08:84:09:e7:f2:08: cc:86:80:ae:57:7f:72:a5:f6:12:51:bc:74:0c:ca:6e:4b:a5: fe:d9:9a:be:42:47:65:02:71:c1:7d:b5:9d:94:48:7e:f4:e4: 26:4f:96:93:f0:1b:64:62:ff:19:36:42:f5:05:fa:1d:eb:88: 58:46:ce:8d:7f:26:2a:5d:53:3d:14:d7:e6:e5:58:d1:2c:af: 10:b8:8e:78:71:cf:e7:fe:5a:01:74:19:75:1a:4c:3c:ee:52: a1:48:52:bb:74:42:84:2f:d6:75:61:d2:1f:df:e8:a5:26:d3: c6:6a:b2:c3:95:eb:cb:82:e2:60:8a:fa:3a:14:73:08:d3:3a: 35:92:76:ab:9d:73:ce:e6:8a:2d:d7:01:15:b2:2f:48:6a:83: 0f:b2:79:2d:94:55:66:04:46:cb:71:1a:a3:9a:bb:dc:26:39: fd:ba:99:1c:6d:4b:f7:00:e3:df:d0:f3:5f:9b:2b:88:7f:d5: b7:9d:a8:1d:44:a7:8c:92:f8:83:9c:44:c6:93:9a:c1:b5:4f: 0c:a4:c0:4f:78:9d:8d:0e:b3:fe:4b:f9:e8:80:eb:27:cb:e2: d7:2b:96:a0:bb:6f:dd:b8:2d:73:64:3d:1c:3f:88:79:60:09: 7b:bf:67:57 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9A1w22i5Tk6d5ZNGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMyNjkyYTItYjNlYS00MWFmLWE0NjAtMzFmYTNjM2Uy M2I2MB4XDTI2MDkyMTIzMDAyM1oXDTI2MDkyMzIzMDAwMFowLzEtMCsGA1UEAxMk OTU5YTdhNjYtMDlhYS00NGViLWI1MWItNGIyNDc1YTM0MDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjocXkTPL0vGB4Ts68nqpebckP55t12ObgQbn mi3Yi6H/0by7jyxLSJDCtc2cEeoiwU5hO+R8rV6iNv1R++KTHKhSFV3aQgFkireL 981WubxWTMbHLndvrfwTCtgD7yFWP8IOVzUCxd9AoOJvWaADTXPtfKqJXT0ilVsa 7v2XJ4bQVtiZ20oi7Ln0bQLk99WL0MAkMZ4lNFarLS9l8zkZj+J6R3B4YYvaic3G GSgTYcYHLSkjl27cDXbDf+qBBwjnV52dTlrcCYNOIvqs+eRaP8Q6cjikLtCAnVy2 xWT9jbcxXS/QX5ztiDN6jj9DpQxklZb4Evg6ZcD0Y6MFqxn4TQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHVme91st41aTlRq3hclUA+PoFgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYzI2 OTJhMi1iM2VhLTQxYWYtYTQ2MC0zMWZhM2MzZTIzYjYvYmMyNjkyYTItYjNlYS00 MWFmLWE0NjAtMzFmYTNjM2UyM2I2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYmMyNjkyYTItYjNlYS00MWFmLWE0 NjAtMzFmYTNjM2UyM2I2L2JjMjY5MmEyLWIzZWEtNDFhZi1hNDYwLTMxZmEzYzNl MjNiNi5jcmwwHwYDVR0jBBgwFoAUzE200+vEZ0qGAAus/RaJKbpgUS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYzI2OTJhMi1iM2VhLTQxYWYtYTQ2MC0zMWZh M2MzZTIzYjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAog2ISH/sxb7ibtGsIhAnn 8gjMhoCuV39ypfYSUbx0DMpuS6X+2Zq+QkdlAnHBfbWdlEh+9OQmT5aT8BtkYv8Z NkL1Bfod64hYRs6NfyYqXVM9FNfm5VjRLK8QuI54cc/n/loBdBl1Gkw87lKhSFK7 dEKEL9Z1YdIf3+ilJtPGarLDlevLguJgivo6FHMI0zo1knarnXPO5oot1wEVsi9I aoMPsnktlFVmBEbLcRqjmrvcJjn9upkcbUv3AOPf0PNfmyuIf9W3nagdRKeMkviD nETGk5rBtU8MpMBPeJ2NDrP+S/nogOsny+LXK5agu2/duC1zZD0cP4h5YAl7v2dX -----END CERTIFICATE-----Generated at Tue Sep 22 23:45:44 2026 by rpki-client