$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft File: a316d791-42be-46db-a9be-4bfacf99332c.mft (raw, json) Hash identifier: 7Z6MPXTnd8T3hSVoq4+ninx743go3CKth0cTpA2odd8= Subject key identifier: 24:9C:DD:78:29:D8:EE:90:38:1C:0A:82:A4:5C:31:AC:14:2F:F1:86 Authority key identifier: 4E:CE:A2:81:DC:95:A1:1D:38:6D:20:7E:C9:61:75:95:CA:94:F2:98 Certificate issuer: /CN=a316d791-42be-46db-a9be-4bfacf99332c Certificate serial: 010D0C9F4328584F432AB2381406A54B7E129600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft Manifest number: 010D0C9F43285845833E1B28A28271A6029CFFFE Signing time: Tue 22 Sep 2026 19:00:24 +0000 Manifest this update: Tue 22 Sep 2026 19:00:24 +0000 Manifest next update: Fri 25 Sep 2026 19:00:00 +0000 Files and hashes: 1: a316d791-42be-46db-a9be-4bfacf99332c.crl (hash: QEZirhFOV7YQrK8qn808fpz//aYO6rEJK3ZmTHJ/XKQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:2a:b2:38:14:06:a5:4b:7e:12:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a316d791-42be-46db-a9be-4bfacf99332c Validity Not Before: Sep 22 19:00:24 2026 GMT Not After : Sep 25 19:00:00 2026 GMT Subject: CN=70000b73-caf5-4924-91f1-34a996184c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:df:1c:a6:d1:54:1e:0e:6b:a9:39:ec:7c: 63:62:fa:5e:42:9b:a2:0e:fa:73:b8:2c:92:0f:05: 47:ee:43:c3:f6:7d:e5:bb:c7:0e:13:6a:68:a4:86: f0:f3:d4:a4:13:65:e7:71:ff:50:59:f5:50:f1:c1: ed:26:58:bb:d0:a3:27:99:7a:10:88:7c:5e:b4:1f: 89:a5:a5:a7:78:f1:7e:24:00:a1:0e:82:21:7c:1d: cc:63:67:da:59:83:f7:ed:3b:9e:b4:67:41:a4:6c: ed:45:d1:c7:ac:26:c1:34:ae:38:26:e1:f0:50:d3: 55:a4:b4:bc:e3:87:d6:d4:ae:4e:96:47:4f:ba:9f: 7f:4e:05:d7:98:dc:2f:97:6d:1c:6b:23:64:20:b8: 1f:31:28:d7:e7:37:4a:7f:9b:39:8a:b1:d6:66:7c: 2c:59:b2:b5:b8:71:31:1d:9a:38:53:c8:a5:b7:63: 23:03:23:11:cd:c0:67:ec:17:a0:57:52:2d:bf:38: 46:e4:86:b3:6c:91:f1:1c:da:a9:77:9e:bc:b6:d4: 9b:ec:c0:7b:4c:9d:7e:83:b9:24:bf:5c:61:6a:70: 0b:b5:3b:c9:80:65:2e:de:05:c2:e7:80:28:d4:59: d6:ca:eb:75:1c:ba:ed:77:89:69:2f:d4:66:71:28: 1a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9C:DD:78:29:D8:EE:90:38:1C:0A:82:A4:5C:31:AC:14:2F:F1:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.crl X509v3 Authority Key Identifier: keyid:4E:CE:A2:81:DC:95:A1:1D:38:6D:20:7E:C9:61:75:95:CA:94:F2:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:05:6e:81:62:00:e2:cc:db:06:f0:09:59:63:76:59:c2:7b: f8:19:39:12:8e:44:ea:59:72:29:5c:45:8c:1f:61:26:7e:58: 90:0d:79:1e:f1:cc:fb:95:a1:bc:95:1b:ec:ff:f5:15:dd:4d: cc:18:18:4c:54:cd:3f:80:98:33:f0:7c:8a:11:62:2c:1b:ea: d8:28:3b:55:09:ad:ac:65:e5:80:b8:6c:82:9e:50:32:ee:f0: bb:e3:0c:78:ae:a4:d2:67:7b:3a:c9:6b:bb:86:a2:8d:42:4a: 87:df:92:96:fb:1b:86:19:23:7e:9b:0e:1c:05:58:02:8c:6c: 59:b7:d8:88:ee:b5:a4:27:97:8f:1d:99:6a:11:68:55:6a:c2: 11:88:16:a7:ba:18:9c:1e:44:67:26:82:a0:77:8d:13:9d:45: cd:27:1f:96:b9:fc:61:f6:d4:5b:77:9f:ec:33:d0:93:f9:74: 14:c2:93:69:2e:60:eb:04:94:9a:b6:e0:fa:51:04:b3:b5:14: ff:f8:c0:b4:a8:40:be:c3:6d:02:77:15:f9:5f:6f:25:35:1d: 42:5d:87:34:80:60:b1:6a:c2:d4:0b:4f:4b:3c:69:72:f6:87: 0d:26:33:0c:f0:46:44:41:fd:2b:19:a1:1d:f9:96:2a:19:0c: 3f:be:17:1e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9DKrI4FAalS34SlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMxNmQ3OTEtNDJiZS00NmRiLWE5YmUtNGJmYWNmOTkz MzJjMB4XDTI2MDkyMjE5MDAyNFoXDTI2MDkyNTE5MDAwMFowLzEtMCsGA1UEAxMk NzAwMDBiNzMtY2FmNS00OTI0LTkxZjEtMzRhOTk2MTg0Yzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbDfHKbRVB4Oa6k57HxjYvpeQpuiDvpzuCyS DwVH7kPD9n3lu8cOE2popIbw89SkE2Xncf9QWfVQ8cHtJli70KMnmXoQiHxetB+J paWnePF+JAChDoIhfB3MY2faWYP37TuetGdBpGztRdHHrCbBNK44JuHwUNNVpLS8 44fW1K5OlkdPup9/TgXXmNwvl20cayNkILgfMSjX5zdKf5s5irHWZnwsWbK1uHEx HZo4U8ilt2MjAyMRzcBn7BegV1ItvzhG5IazbJHxHNqpd568ttSb7MB7TJ1+g7kk v1xhanALtTvJgGUu3gXC54Ao1FnWyut1HLrtd4lpL9RmcSga6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCSc3Xgp2O6QOBwKgqRcMawUL/GGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMzE2 ZDc5MS00MmJlLTQ2ZGItYTliZS00YmZhY2Y5OTMzMmMvYTMxNmQ3OTEtNDJiZS00 NmRiLWE5YmUtNGJmYWNmOTkzMzJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTMxNmQ3OTEtNDJiZS00NmRiLWE5 YmUtNGJmYWNmOTkzMzJjL2EzMTZkNzkxLTQyYmUtNDZkYi1hOWJlLTRiZmFjZjk5 MzMyYy5jcmwwHwYDVR0jBBgwFoAUTs6igdyVoR04bSB+yWF1lcqU8pgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMzE2ZDc5MS00MmJlLTQ2ZGItYTliZS00YmZh Y2Y5OTMzMmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOBW6BYgDizNsG8AlZY3ZZ wnv4GTkSjkTqWXIpXEWMH2EmfliQDXke8cz7laG8lRvs//UV3U3MGBhMVM0/gJgz 8HyKEWIsG+rYKDtVCa2sZeWAuGyCnlAy7vC74wx4rqTSZ3s6yWu7hqKNQkqH35KW +xuGGSN+mw4cBVgCjGxZt9iI7rWkJ5ePHZlqEWhVasIRiBanuhicHkRnJoKgd40T nUXNJx+Wufxh9tRbd5/sM9CT+XQUwpNpLmDrBJSatuD6UQSztRT/+MC0qEC+w20C dxX5X28lNR1CXYc0gGCxasLUC09LPGly9ocNJjMM8EZEQf0rGaEd+ZYqGQw/vhce -----END CERTIFICATE-----Generated at Wed Sep 23 07:59:51 2026 by rpki-client