$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/352c32df-20ad-4da1-8c5d-742f736563d2/352c32df-20ad-4da1-8c5d-742f736563d2.mft File: 352c32df-20ad-4da1-8c5d-742f736563d2.mft (raw, json) Hash identifier: WiFk5cBJRnig56aXsTkDaO6JIFP9JGlGVy5YEWIAaNU= Subject key identifier: 2A:51:D8:D4:52:E7:CA:E7:4C:A8:75:F3:FF:2F:28:59:60:5B:41:1B Authority key identifier: 29:47:D9:58:3F:9C:2C:E7:C7:B8:D6:6F:51:C5:64:E4:B8:3B:D2:7B Certificate issuer: /CN=352c32df-20ad-4da1-8c5d-742f736563d2 Certificate serial: 010D0C9F4328584F46131D91E7CD174F76733900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/352c32df-20ad-4da1-8c5d-742f736563d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/352c32df-20ad-4da1-8c5d-742f736563d2/352c32df-20ad-4da1-8c5d-742f736563d2.mft Manifest number: 010D0C9F4328584073A827C3D9971E7927430D8F Signing time: Wed 23 Sep 2026 20:00:23 +0000 Manifest this update: Wed 23 Sep 2026 20:00:23 +0000 Manifest next update: Fri 25 Sep 2026 20:00:00 +0000 Files and hashes: 1: 352c32df-20ad-4da1-8c5d-742f736563d2.crl (hash: CUrUcZECMq2OXMoFaLgqHRm055u+N8pCZ5AG2KCWGww=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/352c32df-20ad-4da1-8c5d-742f736563d2/352c32df-20ad-4da1-8c5d-742f736563d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/352c32df-20ad-4da1-8c5d-742f736563d2/352c32df-20ad-4da1-8c5d-742f736563d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/352c32df-20ad-4da1-8c5d-742f736563d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:13:1d:91:e7:cd:17:4f:76:73:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352c32df-20ad-4da1-8c5d-742f736563d2 Validity Not Before: Sep 23 20:00:23 2026 GMT Not After : Sep 25 20:00:00 2026 GMT Subject: CN=ba91d0c6-3e04-45d6-a121-8c42cb30e3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ca:1c:d3:9e:1d:ea:a8:83:0b:36:b2:d8:09: 29:3a:27:49:65:44:47:0d:94:3d:b2:e4:a6:af:a1: 81:40:63:ca:da:06:4e:0f:0c:91:91:88:1f:13:2f: 39:e4:64:39:68:36:73:2e:1b:fd:6c:84:23:f2:79: 55:6c:48:7c:ac:21:64:c2:07:af:86:61:5b:91:8d: 6c:3d:12:f0:d9:91:4f:83:a8:a8:a9:36:40:ae:69: 0f:4f:4b:61:01:b9:76:ea:82:3f:89:cf:49:7b:09: 8d:20:b2:f7:58:f4:72:9a:f4:2e:48:de:e5:85:d1: 29:4d:d0:8a:38:60:25:ba:8a:92:21:d4:3d:db:2a: fc:b2:34:91:2e:ab:bb:6d:78:ff:a6:b4:2a:23:a0: 3f:2b:b2:7e:19:6d:0e:f9:e6:03:61:64:16:a9:ad: 5d:92:62:20:ca:60:05:ab:36:56:14:ad:d6:36:6a: d3:f3:49:c0:cd:2c:7c:d7:c3:db:8a:65:d0:c3:92: 04:1c:f8:8b:02:c8:ae:2d:74:4f:3f:79:1e:ec:cf: a2:21:9a:78:eb:72:f7:09:7c:ec:1a:ac:34:1e:9b: 10:a3:4d:04:8c:7c:8a:2f:52:7c:8e:c0:b3:a5:c3: d7:6a:64:1d:1a:35:25:83:62:38:5c:72:8b:f6:33: c0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:51:D8:D4:52:E7:CA:E7:4C:A8:75:F3:FF:2F:28:59:60:5B:41:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/352c32df-20ad-4da1-8c5d-742f736563d2/352c32df-20ad-4da1-8c5d-742f736563d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/352c32df-20ad-4da1-8c5d-742f736563d2/352c32df-20ad-4da1-8c5d-742f736563d2.crl X509v3 Authority Key Identifier: keyid:29:47:D9:58:3F:9C:2C:E7:C7:B8:D6:6F:51:C5:64:E4:B8:3B:D2:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/352c32df-20ad-4da1-8c5d-742f736563d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:86:3e:d0:5f:71:73:5a:22:e2:dc:a6:96:50:0d:4b:a8:de: 1e:e9:14:6c:f3:af:c7:73:ee:fb:2c:a0:95:d3:c5:fd:c5:9c: 88:39:67:ab:50:62:6e:6b:e7:0c:05:be:8f:4f:82:3e:48:e8: 74:f1:d2:10:a6:6b:61:44:59:80:5d:e1:9c:f8:04:9b:8a:97: 70:7b:83:73:7c:fa:12:41:58:f6:32:8f:71:dd:23:28:4b:ad: f5:b8:8e:dd:59:08:3b:d2:f4:da:b2:56:05:08:d9:64:45:84: 32:ba:6d:f5:f6:46:8d:0c:a1:53:71:11:2d:2c:29:3b:33:80: 20:8f:e1:b8:f8:27:6f:bc:c1:8d:5c:ed:48:e8:7a:4b:6e:7c: 18:bc:e8:69:01:13:07:38:75:66:56:88:c4:23:eb:a4:29:7d: 7e:42:8f:c3:61:f5:73:1d:44:d0:5d:e6:48:e4:39:15:02:c0: 86:00:50:aa:3d:a4:d7:b5:68:9e:db:a0:78:6e:51:c0:91:da: aa:cd:4b:67:ba:cf:ab:0a:70:65:86:81:e2:c7:97:23:07:69: c7:96:97:9f:84:0c:da:34:1b:7a:aa:77:53:c9:f6:47:c3:d5: 54:b8:31:b8:7c:c1:81:20:50:23:1c:b6:d2:01:00:69:d8:c0: 81:0b:cc:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9GEx2R580XT3ZzOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzUyYzMyZGYtMjBhZC00ZGExLThjNWQtNzQyZjczNjU2 M2QyMB4XDTI2MDkyMzIwMDAyM1oXDTI2MDkyNTIwMDAwMFowLzEtMCsGA1UEAxMk YmE5MWQwYzYtM2UwNC00NWQ2LWExMjEtOGM0MmNiMzBlM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMoc054d6qiDCzay2AkpOidJZURHDZQ9suSm r6GBQGPK2gZODwyRkYgfEy855GQ5aDZzLhv9bIQj8nlVbEh8rCFkwgevhmFbkY1s PRLw2ZFPg6ioqTZArmkPT0thAbl26oI/ic9JewmNILL3WPRymvQuSN7lhdEpTdCK OGAluoqSIdQ92yr8sjSRLqu7bXj/prQqI6A/K7J+GW0O+eYDYWQWqa1dkmIgymAF qzZWFK3WNmrT80nAzSx818PbimXQw5IEHPiLAsiuLXRPP3ke7M+iIZp463L3CXzs Gqw0HpsQo00EjHyKL1J8jsCzpcPXamQdGjUlg2I4XHKL9jPAdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCpR2NRS58rnTKh18/8vKFlgW0EbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zNTJj MzJkZi0yMGFkLTRkYTEtOGM1ZC03NDJmNzM2NTYzZDIvMzUyYzMyZGYtMjBhZC00 ZGExLThjNWQtNzQyZjczNjU2M2QyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzUyYzMyZGYtMjBhZC00ZGExLThj NWQtNzQyZjczNjU2M2QyLzM1MmMzMmRmLTIwYWQtNGRhMS04YzVkLTc0MmY3MzY1 NjNkMi5jcmwwHwYDVR0jBBgwFoAUKUfZWD+cLOfHuNZvUcVk5Lg70nswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zNTJjMzJkZi0yMGFkLTRkYTEtOGM1ZC03NDJm NzM2NTYzZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAihj7QX3FzWiLi3KaWUA1L qN4e6RRs86/Hc+77LKCV08X9xZyIOWerUGJua+cMBb6PT4I+SOh08dIQpmthRFmA XeGc+ASbipdwe4NzfPoSQVj2Mo9x3SMoS631uI7dWQg70vTaslYFCNlkRYQyum31 9kaNDKFTcREtLCk7M4Agj+G4+CdvvMGNXO1I6HpLbnwYvOhpARMHOHVmVojEI+uk KX1+Qo/DYfVzHUTQXeZI5DkVAsCGAFCqPaTXtWie26B4blHAkdqqzUtnus+rCnBl hoHix5cjB2nHlpefhAzaNBt6qndTyfZHw9VUuDG4fMGBIFAjHLbSAQBp2MCBC8wO -----END CERTIFICATE-----Generated at Thu Sep 24 01:43:52 2026 by rpki-client