$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.mft File: 5a57bda3-7411-4b5c-825c-231b2d2011d3.mft (raw, json) Hash identifier: xUMpBfgCLYsesAma8dp95k8BBdDjx25PS8oJVwGtJLU= Subject key identifier: 22:49:E2:B9:F1:23:CD:01:CB:D2:2D:57:16:E9:B6:28:E7:DC:FD:A2 Authority key identifier: 24:AC:7D:A1:08:58:D7:CF:25:48:17:2A:35:51:4C:09:41:5D:A3:F2 Certificate issuer: /CN=5a57bda3-7411-4b5c-825c-231b2d2011d3 Certificate serial: 010D0C9F4328584F43486E915AED6DE7C8EFF700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.mft Manifest number: 010D0C9F4328584A7162C3B1AFDA880220475DBA Signing time: Tue 22 Sep 2026 20:00:23 +0000 Manifest this update: Tue 22 Sep 2026 20:00:23 +0000 Manifest next update: Fri 25 Sep 2026 20:00:00 +0000 Files and hashes: 1: 5a57bda3-7411-4b5c-825c-231b2d2011d3.crl (hash: niSpFWxEw4uFcT+cK/jwXa5ju5CfkJZ7CGVF+sD+1xk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:48:6e:91:5a:ed:6d:e7:c8:ef:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a57bda3-7411-4b5c-825c-231b2d2011d3 Validity Not Before: Sep 22 20:00:23 2026 GMT Not After : Sep 25 20:00:00 2026 GMT Subject: CN=ebd6a761-6eb6-4b33-b2a5-05c8915ca5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:12:af:e3:93:d5:9f:0e:44:3d:b6:28:ec:a0: 67:37:24:6f:b4:8d:03:3a:87:4c:41:75:66:77:b3: 35:1b:8e:af:ea:d5:23:3c:87:1e:20:87:2b:b0:1e: d2:a8:4f:fd:66:1c:3e:44:24:da:ab:19:7f:87:96: d6:22:81:c5:a4:c7:35:65:20:26:8d:97:fe:d8:d3: 30:b0:da:b7:42:d2:a7:48:c0:c4:dc:c5:07:ec:8a: 0c:6c:e9:e6:77:50:39:a7:60:be:98:f3:e9:96:45: af:26:39:d6:a5:48:d8:ea:19:6c:96:81:f1:2f:d2: 29:db:10:95:56:c3:c3:dd:89:08:9c:f1:5f:41:49: d6:df:6b:17:18:0e:f4:03:8d:d1:05:9e:86:52:87: db:02:9b:f6:bd:6a:d4:cd:dd:df:87:e2:ff:44:5d: b3:d6:db:d6:18:9d:80:ed:f8:2f:41:6e:43:23:9f: 1f:8a:d3:e7:35:c5:36:65:b5:d3:ac:3c:22:e1:6c: bd:50:0b:58:ae:3f:fc:68:d6:c9:a5:30:49:0b:90: 38:97:92:5b:5a:1e:d2:bd:76:fc:fb:fa:9f:82:0b: db:b8:62:df:5f:7e:76:e4:97:d2:3a:f8:cd:22:ec: be:33:dd:8e:0e:ba:65:3c:b4:52:79:c5:b7:54:75: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:49:E2:B9:F1:23:CD:01:CB:D2:2D:57:16:E9:B6:28:E7:DC:FD:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.crl X509v3 Authority Key Identifier: keyid:24:AC:7D:A1:08:58:D7:CF:25:48:17:2A:35:51:4C:09:41:5D:A3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8c:08:50:73:c6:58:61:6c:73:f5:ba:7a:dc:95:cf:3d:95: 68:75:f0:cc:db:59:73:7e:d5:63:8a:7a:05:4e:f9:c1:5f:0a: 66:31:ba:8b:aa:fa:ee:ab:12:ce:28:bd:c1:b3:5a:7a:e4:28: c1:0b:15:51:42:54:01:46:2a:3e:91:f5:e3:00:fb:77:6f:49: 05:62:99:63:89:12:51:24:95:f1:84:2a:3c:66:97:28:c6:f8: 52:f2:03:10:df:55:8b:80:60:b7:dc:81:52:1e:7a:91:96:8d: 81:d7:36:a5:74:e7:28:7b:cd:61:d8:15:ad:e8:4d:83:a4:85: f2:60:93:f8:f9:bc:f4:37:7c:e3:fe:bf:9f:3e:38:52:a3:02: c0:50:7c:aa:32:fb:9b:4f:b8:bf:c6:f4:d1:02:f2:65:2d:38: 6f:b8:59:87:a9:c9:5b:9c:4d:10:25:bc:ea:a0:ba:e8:f8:db: b6:3a:e0:ef:f9:a5:3a:ed:f6:93:51:65:63:f2:0e:fd:90:46: af:a7:e4:da:b3:91:c3:a2:be:3e:0a:4c:8b:6a:21:83:21:03: 2b:74:ee:02:70:0b:4f:2e:9f:6f:d6:40:0d:14:72:78:6a:e9: 82:6d:fc:ee:92:19:a2:e2:0f:49:26:8b:0a:d9:81:93:e9:29: 6c:b8:5b:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9DSG6RWu1t58jv9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE1N2JkYTMtNzQxMS00YjVjLTgyNWMtMjMxYjJkMjAx MWQzMB4XDTI2MDkyMjIwMDAyM1oXDTI2MDkyNTIwMDAwMFowLzEtMCsGA1UEAxMk ZWJkNmE3NjEtNmViNi00YjMzLWIyYTUtMDVjODkxNWNhNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRKv45PVnw5EPbYo7KBnNyRvtI0DOodMQXVm d7M1G46v6tUjPIceIIcrsB7SqE/9Zhw+RCTaqxl/h5bWIoHFpMc1ZSAmjZf+2NMw sNq3QtKnSMDE3MUH7IoMbOnmd1A5p2C+mPPplkWvJjnWpUjY6hlsloHxL9Ip2xCV VsPD3YkInPFfQUnW32sXGA70A43RBZ6GUofbApv2vWrUzd3fh+L/RF2z1tvWGJ2A 7fgvQW5DI58fitPnNcU2ZbXTrDwi4Wy9UAtYrj/8aNbJpTBJC5A4l5JbWh7SvXb8 +/qfggvbuGLfX3525JfSOvjNIuy+M92ODrplPLRSecW3VHU9MQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCJJ4rnxI80By9ItVxbptijn3P2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81YTU3 YmRhMy03NDExLTRiNWMtODI1Yy0yMzFiMmQyMDExZDMvNWE1N2JkYTMtNzQxMS00 YjVjLTgyNWMtMjMxYjJkMjAxMWQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWE1N2JkYTMtNzQxMS00YjVjLTgy NWMtMjMxYjJkMjAxMWQzLzVhNTdiZGEzLTc0MTEtNGI1Yy04MjVjLTIzMWIyZDIw MTFkMy5jcmwwHwYDVR0jBBgwFoAUJKx9oQhY188lSBcqNVFMCUFdo/IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81YTU3YmRhMy03NDExLTRiNWMtODI1Yy0yMzFi MmQyMDExZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgjAhQc8ZYYWxz9bp63JXP PZVodfDM21lzftVjinoFTvnBXwpmMbqLqvruqxLOKL3Bs1p65CjBCxVRQlQBRio+ kfXjAPt3b0kFYpljiRJRJJXxhCo8ZpcoxvhS8gMQ31WLgGC33IFSHnqRlo2B1zal dOcoe81h2BWt6E2DpIXyYJP4+bz0N3zj/r+fPjhSowLAUHyqMvubT7i/xvTRAvJl LThvuFmHqclbnE0QJbzqoLro+Nu2OuDv+aU67faTUWVj8g79kEavp+Tas5HDor4+ CkyLaiGDIQMrdO4CcAtPLp9v1kANFHJ4aumCbfzukhmi4g9JJosK2YGT6SlsuFuY -----END CERTIFICATE-----Generated at Wed Sep 23 08:58:20 2026 by rpki-client