$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft File: 2149afff-d907-4d42-a1e9-e162fad34f0d.mft (raw, json) Hash identifier: Z2re5Fm+V4XvPySXETyh5QPcTZmIS/3rfXnLqIY5Bg0= Subject key identifier: E7:D6:FA:96:CE:48:59:AC:99:26:26:D7:5F:E5:F2:3C:7B:23:8A:B1 Authority key identifier: 2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 Certificate issuer: /CN=2149afff-d907-4d42-a1e9-e162fad34f0d Certificate serial: 010D0C9F4328584F3D3BF13C79EEAA2C784F6E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft Manifest number: 010D0C9F432858449B57AC092D104FF3C5F0450F Signing time: Sun 20 Sep 2026 16:00:23 +0000 Manifest this update: Sun 20 Sep 2026 16:00:23 +0000 Manifest next update: Tue 22 Sep 2026 16:00:00 +0000 Files and hashes: 1: 2149afff-d907-4d42-a1e9-e162fad34f0d.crl (hash: 2vb1Us39qyUdlMcU5wm1CkiO8FLuZtMSPrm9FlLZLII=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3d:3b:f1:3c:79:ee:aa:2c:78:4f:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2149afff-d907-4d42-a1e9-e162fad34f0d Validity Not Before: Sep 20 16:00:23 2026 GMT Not After : Sep 22 16:00:00 2026 GMT Subject: CN=c0c58f2a-dac7-4448-92d5-6c2a0778eec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8c:05:1c:b5:b1:4f:1e:24:55:5a:82:66:cd: 44:27:0e:4a:35:47:19:72:26:aa:fc:7c:af:16:13: 9b:00:30:b2:11:91:e5:6b:15:77:72:b3:06:51:ba: 92:00:63:d3:8c:0c:39:a4:02:fb:e5:6f:93:4e:ab: 03:4b:1e:de:d1:8f:2a:df:fa:fe:1e:c0:05:f4:f9: 91:d5:57:53:71:e8:ff:27:3c:da:75:ed:0c:cd:42: 11:20:4a:03:cb:dc:c7:56:2c:56:f6:2d:f6:d9:b1: 26:56:b1:9f:bd:2a:8d:84:fd:b3:8f:d3:95:50:c3: 94:b6:cd:4f:57:38:ec:16:4d:52:de:5f:d1:45:52: ba:33:58:b0:ce:13:b8:12:92:3a:e1:d6:95:30:ea: f8:f5:b2:58:0a:03:6c:a8:fb:5a:82:c3:ce:03:66: 68:9e:44:6f:53:1a:da:9e:75:00:12:71:55:fa:67: 8f:d7:2c:f0:15:66:24:1c:1e:29:d0:d8:99:68:65: b1:f3:78:ee:23:8a:f2:80:e6:44:45:25:6f:b2:f4: 5f:4b:db:94:ad:c0:a3:fa:bd:1c:0e:4a:f0:ae:30: fe:7d:66:f9:95:91:93:75:11:35:71:ce:c8:8e:60: 53:ac:6f:24:de:c9:7f:f8:88:34:a0:08:5c:94:c7: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D6:FA:96:CE:48:59:AC:99:26:26:D7:5F:E5:F2:3C:7B:23:8A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl X509v3 Authority Key Identifier: keyid:2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:16:3f:21:df:ac:eb:ba:ca:c0:c7:cc:a4:06:f3:26:81:74: 44:7d:15:1c:a7:5e:7c:2c:f5:da:5d:9a:3b:f6:83:f7:f9:36: e8:d7:1c:8b:5f:2a:72:4e:01:2e:9b:2f:b4:f3:b3:60:db:21: 5e:e7:1d:46:da:7c:29:62:b4:9c:8a:8c:72:b9:cd:61:4c:d8: d7:ba:20:eb:17:77:f6:1e:c3:5e:92:78:3c:13:0d:75:7d:0a: e9:18:99:60:8a:f0:68:d8:fe:a4:c7:af:87:c3:4b:ed:14:5c: aa:17:99:e3:e1:69:f2:94:4d:d2:2d:9c:51:48:b4:eb:ec:a9: 3b:54:6d:d2:c6:98:a1:23:c0:a0:dc:df:86:4c:a5:07:d9:2c: ce:b6:61:9b:a2:2f:f9:54:91:da:e2:f5:5e:06:22:cf:00:69: 32:d6:7a:e7:15:22:ac:94:72:0f:68:96:9f:44:28:e9:35:2f: 26:54:c3:7a:94:bb:78:91:e7:ef:88:31:7e:e9:2a:4c:89:f3: 36:06:34:b8:5a:e5:13:1c:61:68:70:07:17:90:b5:c5:cc:63: e0:17:1b:7c:2f:99:61:03:36:fa:e6:18:2c:b0:13:14:3d:a2: 7d:32:f8:d7:de:57:40:c4:4b:58:1a:54:bf:fb:5c:cf:f1:2c: 1a:74:a5:23 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE89O/E8ee6qLHhPbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0OWFmZmYtZDkwNy00ZDQyLWExZTktZTE2MmZhZDM0 ZjBkMB4XDTI2MDkyMDE2MDAyM1oXDTI2MDkyMjE2MDAwMFowLzEtMCsGA1UEAxMk YzBjNThmMmEtZGFjNy00NDQ4LTkyZDUtNmMyYTA3NzhlZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgowFHLWxTx4kVVqCZs1EJw5KNUcZciaq/Hyv FhObADCyEZHlaxV3crMGUbqSAGPTjAw5pAL75W+TTqsDSx7e0Y8q3/r+HsAF9PmR 1VdTcej/Jzzade0MzUIRIEoDy9zHVixW9i322bEmVrGfvSqNhP2zj9OVUMOUts1P VzjsFk1S3l/RRVK6M1iwzhO4EpI64daVMOr49bJYCgNsqPtagsPOA2ZonkRvUxra nnUAEnFV+meP1yzwFWYkHB4p0NiZaGWx83juI4rygOZERSVvsvRfS9uUrcCj+r0c DkrwrjD+fWb5lZGTdRE1cc7IjmBTrG8k3sl/+Ig0oAhclMeFAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOfW+pbOSFmsmSYm11/l8jx7I4qxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5 YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYyZmFkMzRmMGQvMjE0OWFmZmYtZDkwNy00 ZDQyLWExZTktZTE2MmZhZDM0ZjBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjE0OWFmZmYtZDkwNy00ZDQyLWEx ZTktZTE2MmZhZDM0ZjBkLzIxNDlhZmZmLWQ5MDctNGQ0Mi1hMWU5LWUxNjJmYWQz NGYwZC5jcmwwHwYDVR0jBBgwFoAUL1GdNS50NL4xJ5wiscUz17gfbkcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYy ZmFkMzRmMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxFj8h36zrusrAx8ykBvMm gXREfRUcp158LPXaXZo79oP3+Tbo1xyLXypyTgEumy+087Ng2yFe5x1G2nwpYrSc ioxyuc1hTNjXuiDrF3f2HsNekng8Ew11fQrpGJlgivBo2P6kx6+Hw0vtFFyqF5nj 4WnylE3SLZxRSLTr7Kk7VG3SxpihI8Cg3N+GTKUH2SzOtmGboi/5VJHa4vVeBiLP AGky1nrnFSKslHIPaJafRCjpNS8mVMN6lLt4kefviDF+6SpMifM2BjS4WuUTHGFo cAcXkLXFzGPgFxt8L5lhAzb65hgssBMUPaJ9MvjX3ldAxEtYGlS/+1zP8SwadKUj -----END CERTIFICATE-----Generated at Mon Sep 21 09:53:35 2026 by rpki-client