$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft File: 970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft (raw, json) Hash identifier: MLm8SBbofCDNdZqNzMPsM9aeWbMeGHqoLfpuroeR+ZM= Subject key identifier: 08:2D:70:B4:29:A4:7C:7E:2B:8D:B8:EE:A3:96:5B:39:C1:B7:8C:17 Authority key identifier: EC:22:C7:95:B9:33:D4:1F:25:36:2E:46:3A:C7:61:A5:B8:FB:C7:86 Certificate issuer: /CN=970b2ca4-5c66-4e09-8b39-88295bcc7d1d Certificate serial: 010D0C9F4328584F4383FBD0E8DCFF071535CB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft Manifest number: 010D0C9F4328584EFAE93805E98EDA3339D43C9A Signing time: Tue 22 Sep 2026 22:00:23 +0000 Manifest this update: Tue 22 Sep 2026 22:00:23 +0000 Manifest next update: Fri 25 Sep 2026 22:00:00 +0000 Files and hashes: 1: 970b2ca4-5c66-4e09-8b39-88295bcc7d1d.crl (hash: RowDi2OwGQO2X73YEr6Hw4oY8Y5zufltz3iFdaE9ibk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:83:fb:d0:e8:dc:ff:07:15:35:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970b2ca4-5c66-4e09-8b39-88295bcc7d1d Validity Not Before: Sep 22 22:00:23 2026 GMT Not After : Sep 25 22:00:00 2026 GMT Subject: CN=2c783f21-f067-4bf7-ac54-120f2e74f8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:59:d6:a8:f2:a5:fc:ba:0c:46:c5:d8:87:30: 40:a3:f5:9d:7e:7b:a5:e3:fe:c6:02:5c:c1:50:d4: 7d:f8:ca:04:95:ad:72:32:82:bd:41:03:27:32:1d: 70:7a:a7:e2:73:68:73:a0:f4:8c:10:0e:e6:29:e0: f1:df:b2:a2:6e:5c:cd:9f:67:a3:c4:00:c5:f6:67: 05:0f:b5:ea:5c:05:c3:c8:22:46:6e:9f:19:55:97: 27:fb:79:88:6a:99:c6:c7:68:74:ff:e5:ce:9d:99: 66:02:12:9f:8d:29:97:d2:e8:d7:0c:58:5c:23:05: 08:5b:b9:de:94:cd:ed:b6:33:65:1f:5c:7f:b4:e9: 3c:6c:fb:be:91:1a:a4:37:09:06:ed:37:17:e7:41: 1e:92:cc:3d:ad:e9:18:2e:5d:c3:13:ab:d7:75:60: 75:cb:30:2a:e7:62:0a:b1:c2:07:40:dd:86:e3:a1: cc:04:c1:ee:24:1e:85:1f:9a:d8:6e:4f:60:cd:e4: 6d:9c:b7:f6:a9:9c:42:79:33:9c:76:f8:95:2a:06: 64:ff:83:15:0e:10:47:fa:ce:80:af:20:50:84:a9: 2d:d6:22:b8:4e:f1:a9:cb:cf:e7:e5:f3:96:ae:f3: a2:8e:1c:cc:4a:01:e4:fa:ad:4b:d1:01:4e:a3:a4: 60:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2D:70:B4:29:A4:7C:7E:2B:8D:B8:EE:A3:96:5B:39:C1:B7:8C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.crl X509v3 Authority Key Identifier: keyid:EC:22:C7:95:B9:33:D4:1F:25:36:2E:46:3A:C7:61:A5:B8:FB:C7:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/970b2ca4-5c66-4e09-8b39-88295bcc7d1d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:46:ac:4c:b8:c5:17:16:e4:8d:eb:d9:4e:a7:f5:59:75:e7: 5e:68:15:25:e8:1e:1a:a2:a8:33:74:15:fa:62:42:43:b2:f8: e6:e7:f9:68:6c:39:49:3d:aa:14:b3:02:5b:04:18:88:d5:6a: 7d:f0:9b:78:d2:cc:98:b6:fa:3f:1e:df:1f:6a:40:f2:be:c9: be:39:a5:b3:b6:bc:e8:e0:f4:75:44:38:cb:f7:de:ee:99:14: 36:be:04:0d:05:f0:5a:90:c4:5a:0e:90:0c:fa:42:65:c5:da: 61:55:20:48:b9:d4:04:14:db:4f:1e:50:c6:4f:bc:6d:bb:f2: 57:70:fe:2d:34:64:79:cd:43:54:cb:12:e3:02:84:30:75:1f: 79:a1:8b:55:58:0d:1f:97:3b:e6:bc:fe:43:c5:b6:c0:5c:9e: 41:d9:af:2f:ad:a7:8b:62:b8:9d:19:7b:f2:fb:0e:af:b2:01: ca:cd:d6:9c:f2:f1:d0:3f:26:14:9f:3e:74:df:c1:bd:bf:f6: a5:60:65:bd:42:48:6b:ac:0e:aa:ef:27:04:7d:34:da:d6:98: ec:14:c8:50:f9:23:e8:12:dc:52:82:3a:5a:12:fb:3c:22:81: 96:01:88:e0:46:dc:58:c5:57:93:26:f3:52:e2:16:2f:72:e8: 43:d4:68:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Dg/vQ6Nz/BxU1y0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcwYjJjYTQtNWM2Ni00ZTA5LThiMzktODgyOTViY2M3 ZDFkMB4XDTI2MDkyMjIyMDAyM1oXDTI2MDkyNTIyMDAwMFowLzEtMCsGA1UEAxMk MmM3ODNmMjEtZjA2Ny00YmY3LWFjNTQtMTIwZjJlNzRmOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFnWqPKl/LoMRsXYhzBAo/Wdfnul4/7GAlzB UNR9+MoEla1yMoK9QQMnMh1weqfic2hzoPSMEA7mKeDx37KiblzNn2ejxADF9mcF D7XqXAXDyCJGbp8ZVZcn+3mIapnGx2h0/+XOnZlmAhKfjSmX0ujXDFhcIwUIW7ne lM3ttjNlH1x/tOk8bPu+kRqkNwkG7TcX50Eeksw9rekYLl3DE6vXdWB1yzAq52IK scIHQN2G46HMBMHuJB6FH5rYbk9gzeRtnLf2qZxCeTOcdviVKgZk/4MVDhBH+s6A ryBQhKkt1iK4TvGpy8/n5fOWrvOijhzMSgHk+q1L0QFOo6RgjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAgtcLQppHx+K4247qOWWznBt4wXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85NzBi MmNhNC01YzY2LTRlMDktOGIzOS04ODI5NWJjYzdkMWQvOTcwYjJjYTQtNWM2Ni00 ZTA5LThiMzktODgyOTViY2M3ZDFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOTcwYjJjYTQtNWM2Ni00ZTA5LThi MzktODgyOTViY2M3ZDFkLzk3MGIyY2E0LTVjNjYtNGUwOS04YjM5LTg4Mjk1YmNj N2QxZC5jcmwwHwYDVR0jBBgwFoAU7CLHlbkz1B8lNi5GOsdhpbj7x4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi85NzBiMmNhNC01YzY2LTRlMDktOGIzOS04ODI5 NWJjYzdkMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGRqxMuMUXFuSN69lOp/VZ dedeaBUl6B4aoqgzdBX6YkJDsvjm5/lobDlJPaoUswJbBBiI1Wp98Jt40syYtvo/ Ht8fakDyvsm+OaWztrzo4PR1RDjL997umRQ2vgQNBfBakMRaDpAM+kJlxdphVSBI udQEFNtPHlDGT7xtu/JXcP4tNGR5zUNUyxLjAoQwdR95oYtVWA0flzvmvP5DxbbA XJ5B2a8vraeLYridGXvy+w6vsgHKzdac8vHQPyYUnz5038G9v/alYGW9QkhrrA6q 7ycEfTTa1pjsFMhQ+SPoEtxSgjpaEvs8IoGWAYjgRtxYxVeTJvNS4hYvcuhD1Ggy -----END CERTIFICATE-----Generated at Wed Sep 23 01:10:05 2026 by rpki-client