$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a/5d5aa871-75c5-4818-a650-7e4de0f18c1a.mft File: 5d5aa871-75c5-4818-a650-7e4de0f18c1a.mft (raw, json) Hash identifier: HCspedAcy/aHRxnEUM20+kxZOUSr9AlAlt+J0GkR1OM= Subject key identifier: 81:D9:2C:C6:02:7A:0E:A7:DA:CB:76:F4:12:DA:CA:4B:B2:AD:4F:17 Authority key identifier: E2:AA:8B:34:CF:8E:62:54:73:C7:8D:ED:AC:42:C8:7A:4C:12:CF:92 Certificate issuer: /CN=5d5aa871-75c5-4818-a650-7e4de0f18c1a Certificate serial: 010D0C9F4328584F425A36A88517711302CA4780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a/5d5aa871-75c5-4818-a650-7e4de0f18c1a.mft Manifest number: 010D0C9F4328584E7EF73707FE8562C26D0BBE86 Signing time: Tue 22 Sep 2026 12:00:24 +0000 Manifest this update: Tue 22 Sep 2026 12:00:24 +0000 Manifest next update: Fri 25 Sep 2026 12:00:00 +0000 Files and hashes: 1: 5d5aa871-75c5-4818-a650-7e4de0f18c1a.crl (hash: sSWp1Mu+HqCWEkPNa2qWi+iI/PJBqvXVjtHJRXRTtPA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a/5d5aa871-75c5-4818-a650-7e4de0f18c1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a/5d5aa871-75c5-4818-a650-7e4de0f18c1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:5a:36:a8:85:17:71:13:02:ca:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d5aa871-75c5-4818-a650-7e4de0f18c1a Validity Not Before: Sep 22 12:00:24 2026 GMT Not After : Sep 25 12:00:00 2026 GMT Subject: CN=d328f4a9-6f1f-4496-b40b-59ffa5359b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:33:99:ce:b7:f6:f7:78:09:53:e8:c5:45: 15:15:a6:98:ad:f7:30:fe:96:7d:02:a4:3a:9f:6b: 56:cb:40:11:30:d8:d5:02:19:d4:84:03:45:f0:fe: fa:dc:c8:c5:af:4f:cc:b3:df:4c:ac:15:5c:eb:64: 41:03:67:4d:37:5f:bf:83:a6:48:c1:fd:7e:9f:79: a2:36:bd:62:4e:18:ec:92:77:d6:ee:af:83:08:a0: e0:81:31:82:71:ee:91:20:10:51:2c:d0:e1:98:41: 13:ad:67:4e:07:6f:89:85:7a:73:85:ef:6d:71:5c: 9a:68:0e:16:73:0f:e1:6c:92:ae:7a:cd:eb:a3:71: f5:fd:f6:4c:de:3f:49:50:b5:0c:2b:f5:db:43:d2: ee:86:cc:ac:c4:63:ca:a1:ea:6f:c6:32:6e:d3:70: d4:d4:66:41:13:a7:9d:08:c8:09:d7:0a:6b:43:2e: 90:f0:08:96:de:35:f8:a6:39:5f:5a:0e:8d:83:7d: d3:8d:dd:9b:41:b0:f7:21:73:e6:1e:d1:a7:e1:e4: 4e:4f:a5:c1:29:1d:6b:d4:f8:c0:b3:7e:53:93:f5: 59:43:55:63:86:d7:5f:6c:68:8f:69:d9:d9:c3:c1: fe:f4:68:fc:ae:7c:20:61:2d:c5:ad:1f:7d:2b:bf: 52:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D9:2C:C6:02:7A:0E:A7:DA:CB:76:F4:12:DA:CA:4B:B2:AD:4F:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a/5d5aa871-75c5-4818-a650-7e4de0f18c1a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a/5d5aa871-75c5-4818-a650-7e4de0f18c1a.crl X509v3 Authority Key Identifier: keyid:E2:AA:8B:34:CF:8E:62:54:73:C7:8D:ED:AC:42:C8:7A:4C:12:CF:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5d5aa871-75c5-4818-a650-7e4de0f18c1a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a6:71:f5:58:06:21:fd:57:92:41:c9:97:bd:8b:32:9e:c6: 89:9c:34:3f:b3:a2:52:87:9a:98:05:0c:c6:fc:9f:d4:74:db: c2:d4:8f:c7:cc:37:fe:06:80:85:d1:19:4d:31:14:64:53:9b: 0c:d8:45:c8:6f:51:74:16:2d:67:9e:e6:11:4b:9b:74:58:4a: 58:45:19:21:38:38:ff:c2:92:d5:e7:6f:a7:04:64:87:de:68: c2:ea:a6:48:89:16:cd:9a:4b:7b:a0:0c:20:a8:64:70:f9:4f: 03:0f:36:56:86:76:8b:46:77:5c:63:28:bb:69:f5:66:39:7b: b6:0b:96:7f:b4:0c:e9:5e:45:54:b6:77:2d:26:52:2b:0f:0f: 81:8b:64:5e:4d:24:21:b0:b5:17:f5:52:1c:dc:37:f9:ca:04: bc:aa:fe:b8:75:8b:5d:f4:37:d6:33:f0:b8:c4:1a:60:a4:67: ed:12:4b:a9:dd:42:67:be:28:79:16:c4:28:f8:80:7b:d5:58: 95:49:d7:6f:95:5e:4e:26:fc:e6:9f:c2:3b:3d:52:d0:7f:0e: 47:15:bc:96:47:c3:c2:c8:32:ad:5f:fc:0f:d3:c2:1d:45:27: 33:95:db:dc:06:85:0c:36:58:e3:bf:bd:03:c8:37:ec:8c:d9: 86:20:d0:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9CWjaohRdxEwLKR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ1YWE4NzEtNzVjNS00ODE4LWE2NTAtN2U0ZGUwZjE4 YzFhMB4XDTI2MDkyMjEyMDAyNFoXDTI2MDkyNTEyMDAwMFowLzEtMCsGA1UEAxMk ZDMyOGY0YTktNmYxZi00NDk2LWI0MGItNTlmZmE1MzU5YjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9Uzmc639vd4CVPoxUUVFaaYrfcw/pZ9AqQ6 n2tWy0ARMNjVAhnUhANF8P763MjFr0/Ms99MrBVc62RBA2dNN1+/g6ZIwf1+n3mi Nr1iThjsknfW7q+DCKDggTGCce6RIBBRLNDhmEETrWdOB2+JhXpzhe9tcVyaaA4W cw/hbJKues3ro3H1/fZM3j9JULUMK/XbQ9LuhsysxGPKoepvxjJu03DU1GZBE6ed CMgJ1wprQy6Q8AiW3jX4pjlfWg6Ng33Tjd2bQbD3IXPmHtGn4eROT6XBKR1r1PjA s35Tk/VZQ1VjhtdfbGiPadnZw8H+9Gj8rnwgYS3FrR99K79SUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIHZLMYCeg6n2st29BLaykuyrU8XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZDVh YTg3MS03NWM1LTQ4MTgtYTY1MC03ZTRkZTBmMThjMWEvNWQ1YWE4NzEtNzVjNS00 ODE4LWE2NTAtN2U0ZGUwZjE4YzFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWQ1YWE4NzEtNzVjNS00ODE4LWE2 NTAtN2U0ZGUwZjE4YzFhLzVkNWFhODcxLTc1YzUtNDgxOC1hNjUwLTdlNGRlMGYx OGMxYS5jcmwwHwYDVR0jBBgwFoAU4qqLNM+OYlRzx43trELIekwSz5IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZDVhYTg3MS03NWM1LTQ4MTgtYTY1MC03ZTRk ZTBmMThjMWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCpnH1WAYh/VeSQcmXvYsy nsaJnDQ/s6JSh5qYBQzG/J/UdNvC1I/HzDf+BoCF0RlNMRRkU5sM2EXIb1F0Fi1n nuYRS5t0WEpYRRkhODj/wpLV52+nBGSH3mjC6qZIiRbNmkt7oAwgqGRw+U8DDzZW hnaLRndcYyi7afVmOXu2C5Z/tAzpXkVUtnctJlIrDw+Bi2ReTSQhsLUX9VIc3Df5 ygS8qv64dYtd9DfWM/C4xBpgpGftEkup3UJnvih5FsQo+IB71ViVSddvlV5OJvzm n8I7PVLQfw5HFbyWR8PCyDKtX/wP08IdRSczldvcBoUMNljjv70DyDfsjNmGINCL -----END CERTIFICATE-----Generated at Tue Sep 22 17:22:56 2026 by rpki-client