$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4101deb3-e79d-45fa-b076-d2b6a0c7f890/4101deb3-e79d-45fa-b076-d2b6a0c7f890.mft File: 4101deb3-e79d-45fa-b076-d2b6a0c7f890.mft (raw, json) Hash identifier: ISpsDdTqzzkWl5FUYsPGR9p6h0c8pPCMTkxsX6tmGaA= Subject key identifier: A1:4E:9D:7E:4F:1B:E2:87:F3:25:E7:D4:DA:F0:27:CC:54:1F:B3:B9 Authority key identifier: 84:0B:58:B1:A8:F5:6D:39:C4:30:D9:1D:65:6E:33:25:F6:2D:39:D3 Certificate issuer: /CN=4101deb3-e79d-45fa-b076-d2b6a0c7f890 Certificate serial: 010D0C9F4328584F405FFDD835DF645DDDDE0400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4101deb3-e79d-45fa-b076-d2b6a0c7f890.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4101deb3-e79d-45fa-b076-d2b6a0c7f890/4101deb3-e79d-45fa-b076-d2b6a0c7f890.mft Manifest number: 010D0C9F4328584EA6D54A11BA9A90FBDD3BB897 Signing time: Mon 21 Sep 2026 19:00:24 +0000 Manifest this update: Mon 21 Sep 2026 19:00:24 +0000 Manifest next update: Wed 23 Sep 2026 19:00:00 +0000 Files and hashes: 1: 4101deb3-e79d-45fa-b076-d2b6a0c7f890.crl (hash: YSFQgjEfLRmBTkxOG35j5sQynU7bVzMrh7PvXRcAjaY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4101deb3-e79d-45fa-b076-d2b6a0c7f890/4101deb3-e79d-45fa-b076-d2b6a0c7f890.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4101deb3-e79d-45fa-b076-d2b6a0c7f890/4101deb3-e79d-45fa-b076-d2b6a0c7f890.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4101deb3-e79d-45fa-b076-d2b6a0c7f890.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:5f:fd:d8:35:df:64:5d:dd:de:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4101deb3-e79d-45fa-b076-d2b6a0c7f890 Validity Not Before: Sep 21 19:00:24 2026 GMT Not After : Sep 23 19:00:00 2026 GMT Subject: CN=eb6a76f9-dfd8-48f7-9c19-85f68ccdbf87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5c:5d:86:6a:75:d3:55:81:17:9e:0f:2b:1b: f9:ed:f3:06:98:a7:a6:f6:ec:52:ed:24:a3:05:ef: 1b:22:2c:5b:d4:9d:b1:99:d8:2e:6e:c5:ac:85:a3: 83:ca:39:db:88:e6:11:9f:2d:4e:9d:de:3c:b1:56: 60:b7:c5:8f:37:9b:32:16:50:7e:95:c0:3c:76:c6: ec:f5:2d:9e:f3:39:ad:b9:1a:b4:26:1b:31:ad:a0: ad:5d:6b:a0:38:91:6b:e9:5e:80:65:8e:05:d4:bc: de:3f:8b:68:27:13:5e:2d:be:e0:c6:c0:4c:50:21: 26:9b:13:dc:40:d0:9a:f9:f9:82:c0:b2:c0:b8:c5: 3c:ad:9c:71:d4:88:88:b0:0f:b3:59:da:87:6f:90: e2:ad:dd:ef:d3:ad:10:fe:6f:b4:ba:ce:f3:dd:fc: b3:68:d4:0f:9c:a1:53:b6:99:09:10:8c:48:82:82: f1:4d:eb:b3:ee:01:cf:8a:28:93:ed:dd:d1:ed:68: 22:70:25:e1:d1:36:3c:4d:c9:00:80:a0:d5:27:ed: ce:9e:e3:ff:29:19:55:07:9c:10:2e:44:5f:ce:75: f2:b3:d6:a6:ed:66:5d:4e:a6:5d:5e:bd:5c:7c:53: 79:33:08:5d:c4:80:d9:66:0a:22:c5:d2:20:2f:fe: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4E:9D:7E:4F:1B:E2:87:F3:25:E7:D4:DA:F0:27:CC:54:1F:B3:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4101deb3-e79d-45fa-b076-d2b6a0c7f890/4101deb3-e79d-45fa-b076-d2b6a0c7f890.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4101deb3-e79d-45fa-b076-d2b6a0c7f890/4101deb3-e79d-45fa-b076-d2b6a0c7f890.crl X509v3 Authority Key Identifier: keyid:84:0B:58:B1:A8:F5:6D:39:C4:30:D9:1D:65:6E:33:25:F6:2D:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4101deb3-e79d-45fa-b076-d2b6a0c7f890.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:32:64:f8:29:5b:8b:c1:8a:80:19:af:31:03:b9:74:a0:25: 7e:39:fc:23:ee:6e:7d:c1:0b:f6:9a:f1:75:d6:e0:04:c5:08: 4a:e8:75:2b:66:fc:7a:4e:f1:ee:2a:39:f1:b5:42:95:d6:ff: b9:2a:25:51:06:55:98:bb:06:cd:c4:22:1c:b7:b9:ec:b5:e5: 73:e1:63:a9:11:56:6a:e8:ec:71:5e:b7:f4:6d:40:af:ed:87: 1c:58:51:0b:46:84:18:14:8c:36:c9:69:36:d9:56:ba:4c:04: cc:e6:ef:2f:33:76:e3:66:f1:02:6b:d0:06:b3:66:72:bb:be: 59:ea:99:3f:b6:8b:ea:3b:07:e2:91:70:5e:e5:fb:6b:98:d1: 79:c9:09:cd:8b:c5:eb:de:80:c3:52:f8:33:7b:e6:80:13:78: 1c:19:34:7d:71:22:71:b9:52:44:a9:f5:03:e2:fb:99:19:70: 08:99:ce:df:e8:4f:bd:55:e7:bc:41:27:33:2c:71:e6:0f:3b: 10:14:b1:80:31:95:d5:f5:e8:46:64:66:52:1a:f8:0b:c9:94: e1:8d:43:cd:cc:cf:09:dc:29:9d:65:31:6d:c0:6f:64:8c:be: 73:5c:ff:73:8e:00:f3:ea:70:2f:18:9c:bd:68:61:7d:ee:cc: 12:8c:25:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9AX/3YNd9kXd3eBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDEwMWRlYjMtZTc5ZC00NWZhLWIwNzYtZDJiNmEwYzdm ODkwMB4XDTI2MDkyMTE5MDAyNFoXDTI2MDkyMzE5MDAwMFowLzEtMCsGA1UEAxMk ZWI2YTc2ZjktZGZkOC00OGY3LTljMTktODVmNjhjY2RiZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFxdhmp101WBF54PKxv57fMGmKem9uxS7SSj Be8bIixb1J2xmdgubsWshaODyjnbiOYRny1Ond48sVZgt8WPN5syFlB+lcA8dsbs 9S2e8zmtuRq0JhsxraCtXWugOJFr6V6AZY4F1LzeP4toJxNeLb7gxsBMUCEmmxPc QNCa+fmCwLLAuMU8rZxx1IiIsA+zWdqHb5Dird3v060Q/m+0us7z3fyzaNQPnKFT tpkJEIxIgoLxTeuz7gHPiiiT7d3R7WgicCXh0TY8TckAgKDVJ+3OnuP/KRlVB5wQ LkRfznXys9am7WZdTqZdXr1cfFN5MwhdxIDZZgoixdIgL/71mQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKFOnX5PG+KH8yXn1NrwJ8xUH7O5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80MTAx ZGViMy1lNzlkLTQ1ZmEtYjA3Ni1kMmI2YTBjN2Y4OTAvNDEwMWRlYjMtZTc5ZC00 NWZhLWIwNzYtZDJiNmEwYzdmODkwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDEwMWRlYjMtZTc5ZC00NWZhLWIw NzYtZDJiNmEwYzdmODkwLzQxMDFkZWIzLWU3OWQtNDVmYS1iMDc2LWQyYjZhMGM3 Zjg5MC5jcmwwHwYDVR0jBBgwFoAUhAtYsaj1bTnEMNkdZW4zJfYtOdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80MTAxZGViMy1lNzlkLTQ1ZmEtYjA3Ni1kMmI2 YTBjN2Y4OTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXMmT4KVuLwYqAGa8xA7l0 oCV+Ofwj7m59wQv2mvF11uAExQhK6HUrZvx6TvHuKjnxtUKV1v+5KiVRBlWYuwbN xCIct7nsteVz4WOpEVZq6OxxXrf0bUCv7YccWFELRoQYFIw2yWk22Va6TATM5u8v M3bjZvECa9AGs2Zyu75Z6pk/tovqOwfikXBe5ftrmNF5yQnNi8Xr3oDDUvgze+aA E3gcGTR9cSJxuVJEqfUD4vuZGXAImc7f6E+9Vee8QSczLHHmDzsQFLGAMZXV9ehG ZGZSGvgLyZThjUPNzM8J3CmdZTFtwG9kjL5zXP9zjgDz6nAvGJy9aGF97swSjCUJ -----END CERTIFICATE-----Generated at Mon Sep 21 23:02:16 2026 by rpki-client