$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: UElMnbHgA1s6eIcecTAR/gvFzwZUQHT8jSDJglajtcQ= Subject key identifier: CD:C0:BD:4C:D7:13:63:87:48:48:91:6F:0E:94:B7:5D:A5:A4:13:6B Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584F4200DF73081DDDAB4902E5C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3CB7 Signing time: Tue 22 Sep 2026 09:00:23 +0000 Manifest this update: Tue 22 Sep 2026 09:00:23 +0000 Manifest next update: Thu 24 Sep 2026 09:00:00 +0000 Files and hashes: 1: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: rngW9YJq6wSNzE2htyAjaG0uj8zi1pH1nWy4wzAnOWg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:00:df:73:08:1d:dd:ab:49:02:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Sep 22 09:00:23 2026 GMT Not After : Sep 24 09:00:00 2026 GMT Subject: CN=722fc91f-fd08-4f9c-92be-0692eff2f2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:01:d3:1a:66:8c:19:af:01:70:f5:d4:53:ee: c0:07:96:60:42:02:94:34:da:67:02:40:5a:4c:02: e9:aa:46:00:83:90:9e:7f:8a:eb:49:4f:48:dc:0f: 12:c1:eb:67:ca:e6:4d:f4:5a:d9:33:1d:66:6b:c3: c1:d3:5d:b2:70:cc:fe:77:b5:67:e5:72:fb:79:34: 5a:42:ad:93:18:df:dd:77:4a:0b:d3:0b:7b:e3:c5: 3c:4f:2d:b7:a4:5b:ed:85:c1:31:ce:16:f3:35:5e: 6f:1f:95:46:da:77:03:e6:e9:55:6c:07:ea:17:e2: 68:be:0a:2d:e6:7c:6b:bf:3d:dc:e3:ab:13:99:3a: a1:f3:dd:78:79:88:2e:24:86:2f:f1:4d:83:de:56: 4f:e1:25:7d:ff:99:fa:31:9e:5b:95:ea:41:ba:ce: aa:44:65:5a:fb:00:86:c6:2c:36:28:71:b4:ed:e5: f4:b1:ed:1f:85:c2:0a:4c:5c:dd:75:9e:6c:e6:4a: db:cf:a2:24:30:22:d7:c4:e0:c9:e1:e1:b1:81:4a: 2d:ec:61:b7:5b:96:77:7f:8f:19:e0:a2:ca:8b:d3: ac:9b:cb:7e:6f:1e:bc:fb:d8:40:a5:a0:80:c9:2d: a1:2d:9d:d6:98:0f:53:fc:87:b4:03:f5:68:4c:bc: 9b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C0:BD:4C:D7:13:63:87:48:48:91:6F:0E:94:B7:5D:A5:A4:13:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:38:f3:75:f5:de:eb:17:45:1b:6f:81:43:0a:36:57:65:9d: 3e:1d:e4:76:ea:c6:2d:41:9f:ed:40:41:de:a6:26:b8:a1:d0: a3:d0:b7:08:c9:8a:ab:99:64:f2:40:1e:da:6f:c6:7a:d9:e8: 0c:06:1d:87:37:c8:3f:4b:7d:ca:53:f0:48:d2:ab:ba:4f:5e: 92:d5:a6:7d:12:9e:ac:d6:0e:5f:7a:8e:7b:1e:30:4b:8c:09: 9c:d9:29:0f:4a:92:ba:bc:cd:b0:3e:0c:34:c3:80:1c:aa:42: e7:2a:72:af:53:04:7d:43:e1:39:b2:7d:cd:d4:83:a7:e1:72: 0e:40:14:d6:b3:af:53:c6:a0:18:6d:75:c8:02:be:41:a8:c2: 00:a2:c7:6c:da:25:dc:5c:03:b0:2d:21:13:8b:03:5a:b8:67: 1c:20:0b:c4:68:84:be:01:c4:c4:cf:b6:22:12:dc:8e:1e:a7: 9a:f6:b8:c6:71:2c:ad:87:e9:51:cf:68:93:1d:c6:2b:e8:2e: b6:38:d7:5e:22:72:bd:b9:69:12:06:db:f4:8f:1e:70:91:f5: 0b:02:7b:3e:70:ab:36:5c:c5:32:51:9d:74:ea:85:79:8b:0c: 80:e8:71:ec:ea:c9:84:ae:ac:75:ac:4d:e3:14:a9:e1:85:9e: c9:5f:db:fa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9CAN9zCB3dq0kC5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI2MDkyMjA5MDAyM1oXDTI2MDkyNDA5MDAwMFowLzEtMCsGA1UEAxMk NzIyZmM5MWYtZmQwOC00ZjljLTkyYmUtMDY5MmVmZjJmMmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwHTGmaMGa8BcPXUU+7AB5ZgQgKUNNpnAkBa TALpqkYAg5Cef4rrSU9I3A8SwetnyuZN9FrZMx1ma8PB012ycMz+d7Vn5XL7eTRa Qq2TGN/dd0oL0wt748U8Ty23pFvthcExzhbzNV5vH5VG2ncD5ulVbAfqF+Jovgot 5nxrvz3c46sTmTqh8914eYguJIYv8U2D3lZP4SV9/5n6MZ5blepBus6qRGVa+wCG xiw2KHG07eX0se0fhcIKTFzddZ5s5krbz6IkMCLXxODJ4eGxgUot7GG3W5Z3f48Z 4KLKi9Osm8t+bx68+9hApaCAyS2hLZ3WmA9T/Ie0A/VoTLybKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM3AvUzXE2OHSEiRbw6Ut12lpBNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUOPN19d7rF0Ubb4FDCjZX ZZ0+HeR26sYtQZ/tQEHepia4odCj0LcIyYqrmWTyQB7ab8Z62egMBh2HN8g/S33K U/BI0qu6T16S1aZ9Ep6s1g5feo57HjBLjAmc2SkPSpK6vM2wPgw0w4AcqkLnKnKv UwR9Q+E5sn3N1IOn4XIOQBTWs69TxqAYbXXIAr5BqMIAosds2iXcXAOwLSETiwNa uGccIAvEaIS+AcTEz7YiEtyOHqea9rjGcSyth+lRz2iTHcYr6C62ONdeInK9uWkS Btv0jx5wkfULAns+cKs2XMUyUZ106oV5iwyA6HHs6smErqx1rE3jFKnhhZ7JX9v6 -----END CERTIFICATE-----Generated at Tue Sep 22 23:10:21 2026 by rpki-client