$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft File: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft (raw, json) Hash identifier: EZLETDSg0ar3PSGvjMcUSFo0/dmGC76Q/RuZIlFI/F4= Subject key identifier: D6:C6:74:14:36:73:78:17:DA:FF:83:64:EA:3B:EA:8E:C2:98:A4:6D Authority key identifier: 0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B Certificate issuer: /CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Certificate serial: 010D0C9F4328584F49907C55AA9980DD68435680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft Manifest number: 010D0C9F4328584B4BCFD881B87CBE90580D32EE Signing time: Fri 25 Sep 2026 02:00:25 +0000 Manifest this update: Fri 25 Sep 2026 02:00:25 +0000 Manifest next update: Mon 28 Sep 2026 02:00:00 +0000 Files and hashes: 1: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl (hash: wc3xsyIzE7guqFDrOMXpx9RqSoW7D+qTak1xs2qzdX8=) 2: 4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer (hash: YQB3ja0LD/RpPSpiFOvhsYwRInhxQQNy5l8nfauLYkE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:90:7c:55:aa:99:80:dd:68:43:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Validity Not Before: Sep 25 02:00:25 2026 GMT Not After : Sep 28 02:00:00 2026 GMT Subject: CN=65c525ec-7e0e-4957-b8bb-442ded2137be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:89:bb:54:64:5f:62:18:e1:d8:d4:4d:ee:33: b3:29:cb:92:1c:75:d6:6e:37:a5:d8:d3:70:5d:43: b1:c7:21:83:61:2f:db:59:7a:d3:a0:01:a6:52:b5: 53:b1:a9:3b:8a:b6:b7:74:67:b4:76:13:76:15:44: 65:3a:e0:11:93:5e:78:56:73:96:28:9b:f5:a8:37: b0:c7:51:b4:01:de:20:13:87:11:25:83:62:cc:22: 6b:c7:b6:ed:0c:c8:1b:0d:e0:88:3a:14:46:a1:6c: 28:02:73:04:6e:d6:15:3a:40:c2:68:9e:2c:d3:1f: 74:dc:f6:a9:68:74:54:37:52:95:55:fd:9f:13:bb: e2:a5:cd:5b:08:c4:62:9a:e2:a5:dc:30:83:98:3a: a5:9c:ff:0a:87:4f:24:6d:ca:68:d1:e8:a3:f5:42: b3:1a:10:d0:cf:71:b2:0e:98:fb:77:5b:34:61:b7: 4b:4f:fe:b9:08:ba:bd:9a:2d:06:02:7c:70:f2:2e: 03:c7:f9:ac:3b:a3:04:1f:c1:6e:17:70:6e:95:b1: d2:7e:70:da:51:2f:1d:98:df:d5:6c:9c:35:b5:69: 7c:e1:26:0e:7e:5a:b7:76:c7:2f:1c:b1:c5:12:a4: ee:d7:15:30:32:ce:d4:03:b0:70:66:55:92:d9:23: b7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C6:74:14:36:73:78:17:DA:FF:83:64:EA:3B:EA:8E:C2:98:A4:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl X509v3 Authority Key Identifier: keyid:0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ae:08:87:a3:11:f3:c9:ad:2a:91:65:29:76:3e:c3:d3:b8: f5:a3:f3:67:56:02:c1:55:fe:1a:42:90:c7:e9:58:14:aa:72: 5a:15:ff:2e:09:8f:6d:0a:93:69:95:ca:6e:1d:d8:78:0a:b6: cb:03:b3:ce:0f:d0:de:4d:31:bd:e8:71:79:3e:52:60:75:67: ea:2d:53:ee:3d:46:32:a1:8b:03:43:bc:b1:19:8f:28:10:0d: b1:e2:22:1e:d5:23:b3:9b:64:21:c3:19:f4:a8:a7:ca:c5:6d: cd:db:9d:f3:39:fe:d2:37:82:a9:50:83:d0:b6:9b:81:21:6e: fb:15:51:eb:d2:e8:23:11:e3:a1:e2:11:24:06:83:67:64:cf: 55:ea:a7:73:a6:a3:82:33:fe:2e:52:a1:f4:07:7c:bb:2e:db: 98:d1:94:15:dd:e8:39:9b:71:d0:94:d2:56:f8:6f:be:33:83: de:ed:da:f5:bf:1f:26:c2:95:40:f4:48:c7:c1:08:f4:e4:8d: 1a:fa:ff:e7:21:d7:ae:5b:cd:a0:49:fc:8a:b2:03:06:3d:f7: 7e:33:2c:28:38:03:02:cc:c2:10:94:41:dd:ec:03:2b:f2:d2: 24:7b:15:f8:02:2b:3c:f8:09:8d:bc:3a:da:46:fa:31:1b:0f: b9:d8:f3:ce -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9JkHxVqpmA3WhDVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1NGI4YTEtNjlkZS00NjMwLTgwMDYtNGRjOGZmZTIz YmRkMB4XDTI2MDkyNTAyMDAyNVoXDTI2MDkyODAyMDAwMFowLzEtMCsGA1UEAxMk NjVjNTI1ZWMtN2UwZS00OTU3LWI4YmItNDQyZGVkMjEzN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYm7VGRfYhjh2NRN7jOzKcuSHHXWbjel2NNw XUOxxyGDYS/bWXrToAGmUrVTsak7ira3dGe0dhN2FURlOuARk154VnOWKJv1qDew x1G0Ad4gE4cRJYNizCJrx7btDMgbDeCIOhRGoWwoAnMEbtYVOkDCaJ4s0x903Pap aHRUN1KVVf2fE7vipc1bCMRimuKl3DCDmDqlnP8Kh08kbcpo0eij9UKzGhDQz3Gy Dpj7d1s0YbdLT/65CLq9mi0GAnxw8i4Dx/msO6MEH8FuF3BulbHSfnDaUS8dmN/V bJw1tWl84SYOflq3dscvHLHFEqTu1xUwMs7UA7BwZlWS2SO3swIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNbGdBQ2c3gX2v+DZOo76o7CmKRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0 YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4ZmZlMjNiZGQvMjk1NGI4YTEtNjlkZS00 NjMwLTgwMDYtNGRjOGZmZTIzYmRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjk1NGI4YTEtNjlkZS00NjMwLTgw MDYtNGRjOGZmZTIzYmRkLzI5NTRiOGExLTY5ZGUtNDYzMC04MDA2LTRkYzhmZmUy M2JkZC5jcmwwHwYDVR0jBBgwFoAUCtV6etttzc0D69uV89EzrhnHBgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4 ZmZlMjNiZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIrgiHoxHzya0qkWUpdj7D 07j1o/NnVgLBVf4aQpDH6VgUqnJaFf8uCY9tCpNplcpuHdh4CrbLA7POD9DeTTG9 6HF5PlJgdWfqLVPuPUYyoYsDQ7yxGY8oEA2x4iIe1SOzm2Qhwxn0qKfKxW3N253z Of7SN4KpUIPQtpuBIW77FVHr0ugjEeOh4hEkBoNnZM9V6qdzpqOCM/4uUqH0B3y7 LtuY0ZQV3eg5m3HQlNJW+G++M4Pe7dr1vx8mwpVA9EjHwQj05I0a+v/nIdeuW82g SfyKsgMGPfd+MywoOAMCzMIQlEHd7AMr8tIkexX4Ais8+AmNvDraRvoxGw+52PPO -----END CERTIFICATE-----Generated at Fri Sep 25 21:59:07 2026 by rpki-client