$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d588e7e5-5248-4f79-8eb9-169f5d0a9784/d588e7e5-5248-4f79-8eb9-169f5d0a9784.mft File: d588e7e5-5248-4f79-8eb9-169f5d0a9784.mft (raw, json) Hash identifier: FlAaB4RhIQNDZNbqovBvBTJfLb3JSiIHlPaquTkjJkY= Subject key identifier: A5:4F:F9:37:CA:AA:4F:74:BE:4A:DB:19:D8:73:10:A6:81:87:5A:A7 Authority key identifier: CF:70:2E:18:E7:C1:D0:06:88:4E:00:C7:2C:23:F5:01:7E:A8:6C:C7 Certificate issuer: /CN=d588e7e5-5248-4f79-8eb9-169f5d0a9784 Certificate serial: 010D0C9F4328584F405FF525C4CB5C9508FF8F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d588e7e5-5248-4f79-8eb9-169f5d0a9784.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d588e7e5-5248-4f79-8eb9-169f5d0a9784/d588e7e5-5248-4f79-8eb9-169f5d0a9784.mft Manifest number: 010D0C9F4328584F24791645504DDDBCF0CBB30A Signing time: Mon 21 Sep 2026 19:00:24 +0000 Manifest this update: Mon 21 Sep 2026 19:00:24 +0000 Manifest next update: Thu 24 Sep 2026 19:00:00 +0000 Files and hashes: 1: d588e7e5-5248-4f79-8eb9-169f5d0a9784.crl (hash: HLZUTrelMGruRUGkkUbYDN1AhFqmuHfKrixPU+kGei4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d588e7e5-5248-4f79-8eb9-169f5d0a9784/d588e7e5-5248-4f79-8eb9-169f5d0a9784.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d588e7e5-5248-4f79-8eb9-169f5d0a9784/d588e7e5-5248-4f79-8eb9-169f5d0a9784.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d588e7e5-5248-4f79-8eb9-169f5d0a9784.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:5f:f5:25:c4:cb:5c:95:08:ff:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d588e7e5-5248-4f79-8eb9-169f5d0a9784 Validity Not Before: Sep 21 19:00:24 2026 GMT Not After : Sep 24 19:00:00 2026 GMT Subject: CN=747658a0-2cd7-4dd0-b67f-14b847a2e218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:08:c2:05:d4:5b:d3:fd:c2:b5:c7:e1:fd:68: ad:75:a2:3c:39:c1:1c:47:96:a4:d5:69:80:ad:d5: b2:8f:7f:74:1f:fb:84:79:2e:e8:a3:54:19:3d:83: 9a:ae:4c:61:a1:4b:06:e5:e0:71:db:b9:b5:57:15: 29:d9:09:96:80:67:61:6d:2b:c6:84:9c:8b:4e:40: ae:e7:52:0c:04:47:1a:d1:fc:bb:1b:fd:de:51:71: e4:30:ca:00:9d:72:d9:9d:4e:cd:8a:23:45:ce:f9: cf:dd:13:f9:04:38:1f:ef:9d:17:ac:ea:13:a8:e9: 9a:87:f7:28:c3:5c:37:de:51:a4:e2:9d:ba:7c:61: 42:90:7d:7d:b5:94:d5:02:cb:ea:6e:ef:ee:d9:9e: 87:a4:de:e0:b3:ed:9d:fc:b5:27:6b:c9:27:60:11: 21:e9:59:18:fd:9e:cd:71:ab:7f:2d:98:fe:cf:e2: 89:81:27:a9:44:b4:3f:a0:11:63:d5:fd:85:2d:3b: 73:2c:e1:27:ea:cd:78:d2:79:ba:63:c5:88:9c:cb: ed:21:12:ab:9e:71:24:28:40:aa:67:ea:ac:15:f3: 4b:0c:0d:71:56:d0:86:6e:8a:6b:9c:65:9c:cb:69: 74:f1:ec:b2:84:b2:fb:8e:8b:f1:46:27:46:d4:e7: 7e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4F:F9:37:CA:AA:4F:74:BE:4A:DB:19:D8:73:10:A6:81:87:5A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d588e7e5-5248-4f79-8eb9-169f5d0a9784/d588e7e5-5248-4f79-8eb9-169f5d0a9784.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d588e7e5-5248-4f79-8eb9-169f5d0a9784/d588e7e5-5248-4f79-8eb9-169f5d0a9784.crl X509v3 Authority Key Identifier: keyid:CF:70:2E:18:E7:C1:D0:06:88:4E:00:C7:2C:23:F5:01:7E:A8:6C:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d588e7e5-5248-4f79-8eb9-169f5d0a9784.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0c:16:63:4e:4d:e7:8e:da:70:3e:94:08:64:da:94:32:0d: 3d:eb:5c:15:ce:22:c0:d6:d5:01:fd:d1:d2:70:9f:19:cc:48: a5:91:6a:89:2c:0a:fc:76:be:a9:7b:3d:a5:c6:4b:af:74:93: 56:ea:79:b7:5e:4c:5b:7f:74:c7:da:d9:7a:f0:fc:0c:74:c1: f6:e4:13:d4:7b:9b:2a:56:9d:4b:c2:b9:db:a3:80:e6:10:58: e4:ef:e2:f9:74:2e:c6:8b:8b:80:b5:0f:34:1b:c3:b3:15:82: 29:ac:c5:27:3e:f2:71:03:d7:bd:b5:79:1f:8c:67:b3:be:ce: 06:82:07:4b:e2:60:0f:ee:45:0a:60:08:53:2a:8c:34:5b:77: f9:49:a3:d1:cd:a1:b6:ad:b0:8b:58:40:9c:6b:c2:b5:c4:68: 26:f8:a6:35:b2:e6:dd:d6:7a:ae:1c:bb:5d:04:15:2e:f9:68: 3b:95:6b:e4:02:32:2d:e7:b2:98:14:8c:5b:00:58:4c:fc:50: 22:0b:d5:01:94:73:93:9f:09:40:d0:56:31:c5:f2:b2:ef:83: 4a:1f:d6:08:45:9a:74:76:bb:63:d6:c0:4e:0f:5b:f2:97:82: 9d:dc:96:65:97:7e:60:fd:71:e5:34:97:0c:00:b3:0f:a9:92: d7:56:b4:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9AX/UlxMtclQj/jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OGU3ZTUtNTI0OC00Zjc5LThlYjktMTY5ZjVkMGE5 Nzg0MB4XDTI2MDkyMTE5MDAyNFoXDTI2MDkyNDE5MDAwMFowLzEtMCsGA1UEAxMk NzQ3NjU4YTAtMmNkNy00ZGQwLWI2N2YtMTRiODQ3YTJlMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwjCBdRb0/3Ctcfh/WitdaI8OcEcR5ak1WmA rdWyj390H/uEeS7oo1QZPYOarkxhoUsG5eBx27m1VxUp2QmWgGdhbSvGhJyLTkCu 51IMBEca0fy7G/3eUXHkMMoAnXLZnU7NiiNFzvnP3RP5BDgf750XrOoTqOmah/co w1w33lGk4p26fGFCkH19tZTVAsvqbu/u2Z6HpN7gs+2d/LUna8knYBEh6VkY/Z7N cat/LZj+z+KJgSepRLQ/oBFj1f2FLTtzLOEn6s140nm6Y8WInMvtIRKrnnEkKECq Z+qsFfNLDA1xVtCGboprnGWcy2l08eyyhLL7jovxRidG1Od+FwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKVP+TfKqk90vkrbGdhzEKaBh1qnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9kNTg4 ZTdlNS01MjQ4LTRmNzktOGViOS0xNjlmNWQwYTk3ODQvZDU4OGU3ZTUtNTI0OC00 Zjc5LThlYjktMTY5ZjVkMGE5Nzg0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZDU4OGU3ZTUtNTI0OC00Zjc5LThl YjktMTY5ZjVkMGE5Nzg0L2Q1ODhlN2U1LTUyNDgtNGY3OS04ZWI5LTE2OWY1ZDBh OTc4NC5jcmwwHwYDVR0jBBgwFoAUz3AuGOfB0AaITgDHLCP1AX6obMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9kNTg4ZTdlNS01MjQ4LTRmNzktOGViOS0xNjlm NWQwYTk3ODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4DBZjTk3njtpwPpQIZNqU Mg0961wVziLA1tUB/dHScJ8ZzEilkWqJLAr8dr6pez2lxkuvdJNW6nm3Xkxbf3TH 2tl68PwMdMH25BPUe5sqVp1Lwrnbo4DmEFjk7+L5dC7Gi4uAtQ80G8OzFYIprMUn PvJxA9e9tXkfjGezvs4GggdL4mAP7kUKYAhTKow0W3f5SaPRzaG2rbCLWECca8K1 xGgm+KY1subd1nquHLtdBBUu+Wg7lWvkAjIt57KYFIxbAFhM/FAiC9UBlHOTnwlA 0FYxxfKy74NKH9YIRZp0drtj1sBOD1vyl4Kd3JZll35g/XHlNJcMALMPqZLXVrTD -----END CERTIFICATE-----Generated at Mon Sep 21 23:59:38 2026 by rpki-client