$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/5de35d89-662a-401a-a494-7d5da6facae1.mft File: 5de35d89-662a-401a-a494-7d5da6facae1.mft (raw, json) Hash identifier: 0uq1Vl3YbWe8rkQrFQkrPIZhVE3eKey4jV5lk04LdNs= Subject key identifier: 95:5B:37:0C:83:72:30:91:08:17:0F:CA:59:00:7C:C6:ED:A4:56:CE Authority key identifier: 82:C2:14:32:47:64:53:0A:2A:10:B1:B2:91:5A:E2:83:9D:40:66:DD Certificate issuer: /CN=5de35d89-662a-401a-a494-7d5da6facae1 Certificate serial: 010D0C9F4328584F409B8CF081F52A6FEAE2B400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/5de35d89-662a-401a-a494-7d5da6facae1.mft Manifest number: 010D0C9F4328584073A828AF17BCF85EEBC1C2CD Signing time: Mon 21 Sep 2026 21:00:22 +0000 Manifest this update: Mon 21 Sep 2026 21:00:22 +0000 Manifest next update: Wed 23 Sep 2026 21:00:00 +0000 Files and hashes: 1: 5de35d89-662a-401a-a494-7d5da6facae1.crl (hash: Bng3+cJSzbkvxP0W0IsPgfYH8h4+B190IXoBCULry8I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/5de35d89-662a-401a-a494-7d5da6facae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/5de35d89-662a-401a-a494-7d5da6facae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:9b:8c:f0:81:f5:2a:6f:ea:e2:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5de35d89-662a-401a-a494-7d5da6facae1 Validity Not Before: Sep 21 21:00:22 2026 GMT Not After : Sep 23 21:00:00 2026 GMT Subject: CN=0f9a8b95-07c6-4f3f-9211-8136e62f7a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:68:60:02:02:25:ea:86:38:64:a7:55:48:c9: 3d:3d:a2:72:89:82:1e:dc:1a:80:0f:e8:8f:ad:cd: 10:13:89:69:38:95:c5:4b:44:aa:9b:ed:26:30:52: 13:2d:db:f4:33:2f:03:97:03:b8:fb:b9:ba:89:6f: e5:b4:7e:0a:8f:ee:af:04:0a:51:08:03:6f:25:58: 70:d7:bd:93:09:5e:c7:28:33:3a:2e:18:73:c6:aa: 38:27:22:af:5b:95:16:da:c7:73:e1:05:7a:e1:8b: ca:62:8e:18:3b:a5:9b:14:c6:7c:9f:52:18:7b:b2: fa:d9:33:d6:9f:e0:42:70:f8:d8:64:8a:e2:16:9e: c5:0c:d3:9a:f7:7d:c3:ea:85:b8:64:2d:a9:35:fd: 87:ea:f4:69:3a:40:12:68:c3:02:51:bd:a5:98:cb: e7:92:91:2d:e4:06:59:53:89:0f:b9:61:ed:a3:e5: 29:4d:68:01:36:b8:99:29:41:60:3a:c8:c1:eb:1b: 56:0e:5a:27:2b:c8:67:2e:ec:5c:1f:6a:5c:ee:a2: 09:6f:a6:37:94:6b:02:80:75:17:b5:70:0d:fe:7f: ef:76:3f:aa:a9:33:7b:9e:79:96:f6:e4:a9:e2:0e: 06:d4:72:49:d5:9f:0e:d8:ac:5e:de:1b:7f:c5:3f: 11:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5B:37:0C:83:72:30:91:08:17:0F:CA:59:00:7C:C6:ED:A4:56:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/5de35d89-662a-401a-a494-7d5da6facae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/5de35d89-662a-401a-a494-7d5da6facae1.crl X509v3 Authority Key Identifier: keyid:82:C2:14:32:47:64:53:0A:2A:10:B1:B2:91:5A:E2:83:9D:40:66:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:2e:25:95:e2:8d:91:64:22:c7:58:e0:21:e5:9d:51:3f:16: 54:1d:91:f6:7d:25:51:92:67:2c:17:de:0d:47:1b:fd:a2:b7: 9d:d5:f4:93:3f:cd:00:d1:52:fb:b5:18:fe:68:a4:31:01:31: b5:12:70:8a:a6:aa:9e:fa:05:78:9b:53:e6:4a:37:35:18:10: d9:9b:3e:27:86:3e:e7:5b:81:8d:99:94:a0:7a:f5:a4:02:63: 97:54:b2:98:94:dd:c4:53:97:95:4f:5e:9c:30:c0:a8:6a:a3: a4:f0:39:d1:d9:6a:22:b5:78:11:88:0f:d8:9c:70:ee:71:ad: 23:24:19:5e:97:04:5e:32:16:1b:be:8e:ce:41:98:80:16:51: 90:34:d2:81:b9:2e:71:ab:f4:1d:08:29:38:7d:e2:99:94:66: 0b:ed:a6:4a:7b:67:a6:f6:cf:8c:82:03:d1:78:2e:81:b4:2d: a7:93:1d:12:0d:41:d3:ff:5d:44:db:de:79:99:b5:d6:c1:42: 43:b1:f9:7a:c7:4f:44:41:ee:46:8e:c2:25:d0:e1:fc:f2:4a: fa:f3:f5:1f:8a:da:95:98:05:2e:dd:cf:39:82:dd:e8:c4:fd: a2:49:12:7c:1e:b7:33:b8:b6:b1:91:8d:83:32:f9:6c:64:5b: d3:a3:c3:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Am4zwgfUqb+ritAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRlMzVkODktNjYyYS00MDFhLWE0OTQtN2Q1ZGE2ZmFj YWUxMB4XDTI2MDkyMTIxMDAyMloXDTI2MDkyMzIxMDAwMFowLzEtMCsGA1UEAxMk MGY5YThiOTUtMDdjNi00ZjNmLTkyMTEtODEzNmU2MmY3YTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGhgAgIl6oY4ZKdVSMk9PaJyiYIe3BqAD+iP rc0QE4lpOJXFS0Sqm+0mMFITLdv0My8DlwO4+7m6iW/ltH4Kj+6vBApRCANvJVhw 172TCV7HKDM6Lhhzxqo4JyKvW5UW2sdz4QV64YvKYo4YO6WbFMZ8n1IYe7L62TPW n+BCcPjYZIriFp7FDNOa933D6oW4ZC2pNf2H6vRpOkASaMMCUb2lmMvnkpEt5AZZ U4kPuWHto+UpTWgBNriZKUFgOsjB6xtWDlonK8hnLuxcH2pc7qIJb6Y3lGsCgHUX tXAN/n/vdj+qqTN7nnmW9uSp4g4G1HJJ1Z8O2Kxe3ht/xT8RqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJVbNwyDcjCRCBcPylkAfMbtpFbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGUz NWQ4OS02NjJhLTQwMWEtYTQ5NC03ZDVkYTZmYWNhZTEvNWRlMzVkODktNjYyYS00 MDFhLWE0OTQtN2Q1ZGE2ZmFjYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRlMzVkODktNjYyYS00MDFhLWE0 OTQtN2Q1ZGE2ZmFjYWUxLzVkZTM1ZDg5LTY2MmEtNDAxYS1hNDk0LTdkNWRhNmZh Y2FlMS5jcmwwHwYDVR0jBBgwFoAUgsIUMkdkUwoqELGykVrig51AZt0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGUzNWQ4OS02NjJhLTQwMWEtYTQ5NC03ZDVk YTZmYWNhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJLiWV4o2RZCLHWOAh5Z1R PxZUHZH2fSVRkmcsF94NRxv9ored1fSTP80A0VL7tRj+aKQxATG1EnCKpqqe+gV4 m1PmSjc1GBDZmz4nhj7nW4GNmZSgevWkAmOXVLKYlN3EU5eVT16cMMCoaqOk8DnR 2WoitXgRiA/YnHDuca0jJBlelwReMhYbvo7OQZiAFlGQNNKBuS5xq/QdCCk4feKZ lGYL7aZKe2em9s+MggPReC6BtC2nkx0SDUHT/11E2955mbXWwUJDsfl6x09EQe5G jsIl0OH88kr68/UfitqVmAUu3c85gt3oxP2iSRJ8HrczuLaxkY2DMvlsZFvTo8O2 -----END CERTIFICATE-----Generated at Tue Sep 22 23:02:03 2026 by rpki-client