$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/29ab13cd-3871-4ec1-95ed-a304a58c633a/29ab13cd-3871-4ec1-95ed-a304a58c633a.mft File: 29ab13cd-3871-4ec1-95ed-a304a58c633a.mft (raw, json) Hash identifier: J9zYcfxwQzIbZAL3lal48jCwd/nX8xyuNgD/sosCGXc= Subject key identifier: B8:00:CA:6E:ED:5C:D7:20:65:79:C2:85:44:5B:E0:3D:77:54:1E:C9 Authority key identifier: 88:42:5B:0A:8D:23:14:15:F4:75:73:03:FA:C5:14:64:7B:7A:94:77 Certificate issuer: /CN=29ab13cd-3871-4ec1-95ed-a304a58c633a Certificate serial: 010D0C9F4328584F4006A9F5D0853A26156E20A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/29ab13cd-3871-4ec1-95ed-a304a58c633a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/29ab13cd-3871-4ec1-95ed-a304a58c633a/29ab13cd-3871-4ec1-95ed-a304a58c633a.mft Manifest number: 010D0C9F4328584BD36DAAA74C5E5A6295F522BA Signing time: Mon 21 Sep 2026 16:00:23 +0000 Manifest this update: Mon 21 Sep 2026 16:00:23 +0000 Manifest next update: Thu 24 Sep 2026 16:00:00 +0000 Files and hashes: 1: 29ab13cd-3871-4ec1-95ed-a304a58c633a.crl (hash: qbJGW4un9GRMHpDBSeNCT7x67B/IfxQnr5sNPW+CopE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/29ab13cd-3871-4ec1-95ed-a304a58c633a/29ab13cd-3871-4ec1-95ed-a304a58c633a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/29ab13cd-3871-4ec1-95ed-a304a58c633a/29ab13cd-3871-4ec1-95ed-a304a58c633a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/29ab13cd-3871-4ec1-95ed-a304a58c633a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:06:a9:f5:d0:85:3a:26:15:6e:20:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ab13cd-3871-4ec1-95ed-a304a58c633a Validity Not Before: Sep 21 16:00:23 2026 GMT Not After : Sep 24 16:00:00 2026 GMT Subject: CN=8eb31738-3071-4092-ae1e-9ad0ffb668f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b0:69:16:2c:d4:14:dd:37:5a:5d:e1:87:75: 4d:d8:be:bf:e7:69:82:df:01:69:12:01:6f:59:77: 2a:b4:79:3b:66:f7:86:aa:53:fa:d8:41:25:a4:27: e7:77:5a:28:6a:e7:b6:08:f2:48:80:c3:c9:2d:79: c1:5c:0a:21:c5:a1:4c:3f:4a:ff:4d:d4:c1:f5:c8: f5:d1:17:05:3e:af:ba:47:25:2d:3d:2a:2b:7c:9b: ff:9c:47:9a:b9:39:a9:5b:45:b3:b7:75:be:0d:4d: b3:e8:8d:fd:b1:5a:f5:1a:6d:b7:bc:4e:ef:d7:64: 12:0d:87:6c:f5:fa:58:b5:4b:29:73:8f:36:4b:c4: de:5e:8c:c2:51:8e:7f:38:86:c4:8a:e3:ef:94:fd: 88:65:7c:8f:5e:a9:44:1d:76:b5:dd:6c:82:a1:85: c0:9c:b6:e6:1a:6f:a0:04:0a:13:6d:3b:80:5c:c3: eb:53:0d:c1:bf:ee:8d:5d:54:09:f9:6e:4f:32:31: ba:a8:9f:7e:9d:e7:21:15:86:5a:ef:67:10:1a:96: a4:bf:4a:0f:62:b5:98:7c:5d:1c:f0:27:29:3a:1c: b1:db:8e:18:8a:41:c5:da:07:48:cd:dc:98:10:c7: 96:8b:ee:f6:a1:0b:4e:97:c1:86:37:ed:3e:23:d1: fc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:00:CA:6E:ED:5C:D7:20:65:79:C2:85:44:5B:E0:3D:77:54:1E:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/29ab13cd-3871-4ec1-95ed-a304a58c633a/29ab13cd-3871-4ec1-95ed-a304a58c633a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/29ab13cd-3871-4ec1-95ed-a304a58c633a/29ab13cd-3871-4ec1-95ed-a304a58c633a.crl X509v3 Authority Key Identifier: keyid:88:42:5B:0A:8D:23:14:15:F4:75:73:03:FA:C5:14:64:7B:7A:94:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/29ab13cd-3871-4ec1-95ed-a304a58c633a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:03:ec:e4:bd:c6:1e:38:b3:1b:35:2d:4e:56:3c:a8:6d:3a: 15:cb:4d:da:c2:41:f0:f2:f8:1f:23:56:ef:f2:eb:34:3e:60: a7:fc:13:89:d4:29:0a:c4:38:3b:d0:68:e2:90:57:96:6c:af: 96:58:24:21:36:23:03:2b:79:b6:77:d4:03:4d:0d:62:21:cb: c4:d5:24:d7:4d:97:0d:f1:2b:11:15:29:95:b9:4f:0f:6e:58: 08:16:21:0a:a9:52:2b:94:c2:16:d7:dc:27:a2:6c:b4:98:ff: 54:33:78:58:95:8f:e9:d5:c1:4d:6a:32:4f:ff:c9:4c:69:52: aa:4a:82:f9:c8:b2:c9:93:2d:b8:9b:b8:f8:c9:e1:05:26:d9: 19:8f:c4:f2:91:1d:2f:f0:f9:95:cf:c8:95:00:f2:88:ed:91: cc:6f:83:d0:8f:0a:f2:f9:02:85:43:80:52:55:4f:21:b5:55: 01:26:84:18:37:4c:3f:e3:1e:0a:71:c3:68:86:f0:5a:88:81: 90:47:09:1f:5a:c2:62:b1:9f:57:c5:8b:80:a3:3e:7e:11:c5: 6f:eb:8d:75:d9:6a:fb:23:94:11:e3:58:6d:91:c1:4c:ba:63: e7:e1:9a:d1:14:89:ab:d5:56:ac:5f:4a:8e:68:1c:3c:26:dc: fb:1d:16:74 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9ABqn10IU6JhVuIKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlhYjEzY2QtMzg3MS00ZWMxLTk1ZWQtYTMwNGE1OGM2 MzNhMB4XDTI2MDkyMTE2MDAyM1oXDTI2MDkyNDE2MDAwMFowLzEtMCsGA1UEAxMk OGViMzE3MzgtMzA3MS00MDkyLWFlMWUtOWFkMGZmYjY2OGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7BpFizUFN03Wl3hh3VN2L6/52mC3wFpEgFv WXcqtHk7ZveGqlP62EElpCfnd1ooaue2CPJIgMPJLXnBXAohxaFMP0r/TdTB9cj1 0RcFPq+6RyUtPSorfJv/nEeauTmpW0Wzt3W+DU2z6I39sVr1Gm23vE7v12QSDYds 9fpYtUspc482S8TeXozCUY5/OIbEiuPvlP2IZXyPXqlEHXa13WyCoYXAnLbmGm+g BAoTbTuAXMPrUw3Bv+6NXVQJ+W5PMjG6qJ9+nechFYZa72cQGpakv0oPYrWYfF0c 8CcpOhyx244YikHF2gdIzdyYEMeWi+72oQtOl8GGN+0+I9H8VwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLgAym7tXNcgZXnChURb4D13VB7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yOWFi MTNjZC0zODcxLTRlYzEtOTVlZC1hMzA0YTU4YzYzM2EvMjlhYjEzY2QtMzg3MS00 ZWMxLTk1ZWQtYTMwNGE1OGM2MzNhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjlhYjEzY2QtMzg3MS00ZWMxLTk1 ZWQtYTMwNGE1OGM2MzNhLzI5YWIxM2NkLTM4NzEtNGVjMS05NWVkLWEzMDRhNThj NjMzYS5jcmwwHwYDVR0jBBgwFoAUiEJbCo0jFBX0dXMD+sUUZHt6lHcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yOWFiMTNjZC0zODcxLTRlYzEtOTVlZC1hMzA0 YTU4YzYzM2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkA+zkvcYeOLMbNS1OVjyo bToVy03awkHw8vgfI1bv8us0PmCn/BOJ1CkKxDg70GjikFeWbK+WWCQhNiMDK3m2 d9QDTQ1iIcvE1STXTZcN8SsRFSmVuU8PblgIFiEKqVIrlMIW19wnomy0mP9UM3hY lY/p1cFNajJP/8lMaVKqSoL5yLLJky24m7j4yeEFJtkZj8TykR0v8PmVz8iVAPKI 7ZHMb4PQjwry+QKFQ4BSVU8htVUBJoQYN0w/4x4KccNohvBaiIGQRwkfWsJisZ9X xYuAoz5+EcVv64112Wr7I5QR41htkcFMumPn4ZrRFImr1VasX0qOaBw8Jtz7HRZ0 -----END CERTIFICATE-----Generated at Tue Sep 22 16:33:42 2026 by rpki-client