$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.mft File: 23a33a5f-da0f-4c5a-910f-1f508872bef2.mft (raw, json) Hash identifier: 1zSMI5jBSvmQWur+xJ9q7qnutHLARbL4mXa8KQ7RRto= Subject key identifier: 68:51:39:D5:3F:1E:7F:07:A8:DE:D3:02:3A:3B:4F:EA:64:03:68:71 Authority key identifier: 74:B3:7F:AD:3B:3A:6C:F4:BD:03:4C:90:EF:A1:C6:5E:9F:1F:BE:60 Certificate issuer: /CN=23a33a5f-da0f-4c5a-910f-1f508872bef2 Certificate serial: 010D0C9F4328584F3D3BEEEFBFC9C8473E892580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.mft Manifest number: 010D0C9F4328584ED32AE8A97CC482EC0077EDC6 Signing time: Sun 20 Sep 2026 16:00:23 +0000 Manifest this update: Sun 20 Sep 2026 16:00:23 +0000 Manifest next update: Wed 23 Sep 2026 16:00:00 +0000 Files and hashes: 1: 23a33a5f-da0f-4c5a-910f-1f508872bef2.crl (hash: crKHQ9GY2D1tIC1DvMIoLnlSKEmHr5sQneWP0UM5MZ0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3d:3b:ee:ef:bf:c9:c8:47:3e:89:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a33a5f-da0f-4c5a-910f-1f508872bef2 Validity Not Before: Sep 20 16:00:23 2026 GMT Not After : Sep 23 16:00:00 2026 GMT Subject: CN=205ce053-7d84-4e68-8f25-575dd3393531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5f:42:af:56:12:be:6a:53:69:ea:2f:73:b6: 17:fb:48:fd:cc:5a:cd:ae:07:f7:ab:6e:4a:c1:55: f2:22:79:15:f9:80:ef:9e:6a:71:ab:38:05:60:94: 7e:05:1d:16:11:ac:e8:1c:ae:82:c4:af:9f:bb:5d: 92:a9:f9:5a:90:05:78:a3:99:b6:48:11:b4:19:c6: 0a:85:ef:f8:a1:4d:c4:55:bb:93:ed:a1:1f:9c:da: db:59:6a:61:bf:bd:4b:c2:88:ea:3b:64:66:e9:f0: 70:0d:af:a5:47:e4:4d:39:ad:37:6e:70:6c:4f:4d: 81:0d:dd:37:00:0e:85:bd:4d:54:0b:1e:c3:61:7d: 55:e1:47:27:70:40:b3:fb:18:ba:b4:33:b1:9d:fe: 0b:05:11:2a:81:06:2f:ff:b7:be:89:ef:0d:1a:6f: 32:0f:26:a7:57:3d:74:0f:32:df:39:3b:15:5a:bb: cf:1b:2f:b2:ed:8d:0a:24:d6:76:d6:45:6c:3c:13: f6:f2:48:27:0f:43:d2:18:1c:e7:f7:ae:c9:ea:60: aa:10:6b:df:a5:6e:a0:58:39:e0:79:69:83:e0:1a: 17:9f:b5:47:5d:21:e9:5e:7a:c4:f3:40:ac:34:de: cd:49:cc:ed:70:99:9c:ba:29:2c:f8:de:fc:e5:9b: a5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:51:39:D5:3F:1E:7F:07:A8:DE:D3:02:3A:3B:4F:EA:64:03:68:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.crl X509v3 Authority Key Identifier: keyid:74:B3:7F:AD:3B:3A:6C:F4:BD:03:4C:90:EF:A1:C6:5E:9F:1F:BE:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:09:e8:bf:44:f7:6f:60:0d:08:d0:bb:37:cf:87:f5:67:57: a8:19:03:14:bc:65:70:52:8a:ed:25:5e:80:a2:81:41:b5:de: a4:02:c6:18:02:4c:7d:0c:72:e1:8a:ec:c0:5c:9c:f8:1c:a1: e1:ae:e1:76:51:21:69:97:a5:a1:b6:ca:85:80:de:b1:ed:92: e4:91:72:72:3d:47:96:a0:42:38:ff:a1:6d:e1:1f:ee:c8:ee: 17:56:35:e9:1d:e4:ac:39:b2:3f:45:18:98:71:6d:03:09:2f: 11:23:a6:5f:7b:9d:65:24:d1:6b:89:a4:18:80:17:3d:7b:85: ef:38:73:1e:aa:b0:9c:62:1e:94:18:8d:cf:1e:ea:a9:8b:72: 30:64:71:56:d3:7b:f8:74:40:37:59:72:a4:bc:65:6e:81:e8: e3:b7:8f:3b:4f:ef:7a:3d:eb:f1:87:7c:98:64:91:f7:30:eb: 46:74:ca:88:07:4c:cf:95:2d:cc:50:5e:b5:96:ed:b5:eb:f6: 4a:58:98:6f:1c:62:b9:e5:7c:b8:ac:53:7c:0e:43:fa:60:6d: e9:c9:00:2f:94:33:aa:cc:28:89:5d:02:8f:e6:ae:5f:4f:5e: 97:89:54:a1:fd:3b:8a:ad:1b:78:4c:21:1b:65:d8:b6:73:d0: 5d:cc:fe:90 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE89O+7vv8nIRz6JJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNhMzNhNWYtZGEwZi00YzVhLTkxMGYtMWY1MDg4NzJi ZWYyMB4XDTI2MDkyMDE2MDAyM1oXDTI2MDkyMzE2MDAwMFowLzEtMCsGA1UEAxMk MjA1Y2UwNTMtN2Q4NC00ZTY4LThmMjUtNTc1ZGQzMzkzNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7F9Cr1YSvmpTaeovc7YX+0j9zFrNrgf3q25K wVXyInkV+YDvnmpxqzgFYJR+BR0WEazoHK6CxK+fu12SqflakAV4o5m2SBG0GcYK he/4oU3EVbuT7aEfnNrbWWphv71LwojqO2Rm6fBwDa+lR+RNOa03bnBsT02BDd03 AA6FvU1UCx7DYX1V4UcncECz+xi6tDOxnf4LBREqgQYv/7e+ie8NGm8yDyanVz10 DzLfOTsVWrvPGy+y7Y0KJNZ21kVsPBP28kgnD0PSGBzn967J6mCqEGvfpW6gWDng eWmD4BoXn7VHXSHpXnrE80CsNN7NScztcJmcuiks+N785ZulYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGhROdU/Hn8HqN7TAjo7T+pkA2hxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8yM2Ez M2E1Zi1kYTBmLTRjNWEtOTEwZi0xZjUwODg3MmJlZjIvMjNhMzNhNWYtZGEwZi00 YzVhLTkxMGYtMWY1MDg4NzJiZWYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMjNhMzNhNWYtZGEwZi00YzVhLTkx MGYtMWY1MDg4NzJiZWYyLzIzYTMzYTVmLWRhMGYtNGM1YS05MTBmLTFmNTA4ODcy YmVmMi5jcmwwHwYDVR0jBBgwFoAUdLN/rTs6bPS9A0yQ76HGXp8fvmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8yM2EzM2E1Zi1kYTBmLTRjNWEtOTEwZi0xZjUw ODg3MmJlZjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfCei/RPdvYA0I0Ls3z4f1 Z1eoGQMUvGVwUortJV6AooFBtd6kAsYYAkx9DHLhiuzAXJz4HKHhruF2USFpl6Wh tsqFgN6x7ZLkkXJyPUeWoEI4/6Ft4R/uyO4XVjXpHeSsObI/RRiYcW0DCS8RI6Zf e51lJNFriaQYgBc9e4XvOHMeqrCcYh6UGI3PHuqpi3IwZHFW03v4dEA3WXKkvGVu gejjt487T+96Pevxh3yYZJH3MOtGdMqIB0zPlS3MUF61lu216/ZKWJhvHGK55Xy4 rFN8DkP6YG3pyQAvlDOqzCiJXQKP5q5fT16XiVSh/TuKrRt4TCEbZdi2c9BdzP6Q -----END CERTIFICATE-----Generated at Sun Sep 20 19:06:19 2026 by rpki-client