$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft File: a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft (raw, json) Hash identifier: IbKQ7JEJKN4azDpD6VP9/aHZqvqLMP1VrJMBu39aeQs= Subject key identifier: 82:6C:9A:AD:29:09:FA:CD:82:64:CE:02:27:15:E2:D0:C3:61:90:7E Authority key identifier: 1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A Certificate issuer: /CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Certificate serial: 010D0C9F4328584F40246EC440A795D50A6FA880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft Manifest number: 010D0C9F432858440A57C730C85A71D2060E3C17 Signing time: Mon 21 Sep 2026 17:00:22 +0000 Manifest this update: Mon 21 Sep 2026 17:00:22 +0000 Manifest next update: Thu 24 Sep 2026 17:00:00 +0000 Files and hashes: 1: a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl (hash: pB/PrgSf+i71a3EOZpGbofW+2a+Q//d6bVAYpsrC/Nc=) 2: b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa (hash: 9ZogF7ziAIV6SVF/DEp2zecl0IY4MkezLPupmpieTsg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:24:6e:c4:40:a7:95:d5:0a:6f:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Validity Not Before: Sep 21 17:00:22 2026 GMT Not After : Sep 24 17:00:00 2026 GMT Subject: CN=1cf3efaa-26c5-4ac4-9551-78236dafd49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:84:fa:35:e5:80:ad:1c:67:f5:fc:ab:7d: 30:b1:fd:b7:a1:b6:eb:00:36:62:45:9b:e9:ac:9b: 14:bc:ed:1c:46:f9:51:a9:48:68:c7:88:21:70:72: fb:b6:51:3e:9a:75:61:4b:6f:07:98:fb:ae:d4:79: 47:e7:ee:9f:fb:63:81:b9:11:93:5a:66:08:bb:bf: ed:b8:71:86:12:e7:56:4e:55:19:cd:c9:7d:41:a7: b1:ce:94:4e:db:4d:b2:28:03:c0:a7:f6:cb:ca:95: d0:35:2a:fa:f5:3c:3a:7d:ff:21:c7:27:bd:a8:dc: 0e:7e:8e:d4:c1:aa:b0:4d:36:ac:a0:bd:d9:d1:63: 10:b0:09:06:20:9d:70:b0:d8:c7:56:46:43:06:c0: 13:c9:f3:07:ce:a8:96:6c:51:5b:49:53:b1:9c:79: 59:d9:f4:13:33:0e:a4:80:d5:37:53:b7:37:a7:8f: 3d:2f:ad:f2:5d:13:3a:7d:ae:50:b3:3d:97:50:29: 57:df:44:df:83:58:cd:48:63:f0:c6:c5:50:ab:af: 85:0f:a2:c7:3a:71:29:8c:96:35:83:28:f0:c9:a1: 82:83:f1:fa:cf:4a:d9:0b:a4:75:c7:bf:33:9c:35: 10:38:f0:c2:c2:b0:21:6e:24:fc:a5:d8:15:95:6c: 89:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6C:9A:AD:29:09:FA:CD:82:64:CE:02:27:15:E2:D0:C3:61:90:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl X509v3 Authority Key Identifier: keyid:1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a8:20:f5:a2:38:23:81:42:8e:a3:ec:ee:90:03:fa:7d:fa: 96:91:f6:05:a2:7d:c6:07:1e:d8:32:c9:35:56:9b:5f:0c:3e: fc:5b:e3:7d:82:50:51:62:20:b3:ed:78:19:30:42:de:31:b0: 4d:79:b4:93:de:97:32:6b:19:68:4d:86:75:de:98:e4:8e:59: 7c:ee:ed:bb:7a:f0:35:47:58:3f:4f:c9:6d:bf:fd:88:2f:58: b1:13:f8:33:55:e0:da:86:8d:50:0c:ed:77:b0:26:76:43:57: 0f:35:12:b3:32:eb:06:ab:28:48:c6:91:80:d4:bc:2b:5a:22: 79:23:9a:09:00:44:f1:fc:1b:0b:6a:1f:70:8f:1a:37:2d:3a: e3:11:aa:8a:19:b3:85:e7:7b:3e:9f:e8:ba:57:4c:c4:a8:36: d2:9b:3c:63:74:39:41:5a:4c:a6:0e:7b:17:94:6e:f3:dc:18: 1f:e8:94:25:38:e0:8a:e9:9e:08:bd:0a:41:83:6d:7c:51:4a: f4:08:84:c6:86:f8:d9:73:ed:47:4f:36:24:83:1b:e4:33:0c: 9f:8e:66:df:61:51:b4:06:ff:b5:52:82:18:59:d2:ae:84:eb: 1e:ae:35:08:7f:4c:aa:f6:25:2b:0a:53:12:ef:35:86:3c:7a: bc:39:a3:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9AJG7EQKeV1QpvqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiMmU1MzktYzgxYS00OGNkLTk1YTUtN2UzZWFlOGFk MmQyMB4XDTI2MDkyMTE3MDAyMloXDTI2MDkyNDE3MDAwMFowLzEtMCsGA1UEAxMk MWNmM2VmYWEtMjZjNS00YWM0LTk1NTEtNzgyMzZkYWZkNDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO+E+jXlgK0cZ/X8q30wsf23obbrADZiRZvp rJsUvO0cRvlRqUhox4ghcHL7tlE+mnVhS28HmPuu1HlH5+6f+2OBuRGTWmYIu7/t uHGGEudWTlUZzcl9QaexzpRO202yKAPAp/bLypXQNSr69Tw6ff8hxye9qNwOfo7U waqwTTasoL3Z0WMQsAkGIJ1wsNjHVkZDBsATyfMHzqiWbFFbSVOxnHlZ2fQTMw6k gNU3U7c3p489L63yXRM6fa5Qsz2XUClX30Tfg1jNSGPwxsVQq6+FD6LHOnEpjJY1 gyjwyaGCg/H6z0rZC6R1x78znDUQOPDCwrAhbiT8pdgVlWyJBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIJsmq0pCfrNgmTOAicV4tDDYZB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIy ZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNlYWU4YWQyZDIvYTJiMmU1MzktYzgxYS00 OGNkLTk1YTUtN2UzZWFlOGFkMmQyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJiMmU1MzktYzgxYS00OGNkLTk1 YTUtN2UzZWFlOGFkMmQyL2EyYjJlNTM5LWM4MWEtNDhjZC05NWE1LTdlM2VhZThh ZDJkMi5jcmwwHwYDVR0jBBgwFoAUGommnyYskfm9uK6YT5EBTFDa/RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIyZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNl YWU4YWQyZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSqCD1ojgjgUKOo+zukAP6 ffqWkfYFon3GBx7YMsk1VptfDD78W+N9glBRYiCz7XgZMELeMbBNebST3pcyaxlo TYZ13pjkjll87u27evA1R1g/T8ltv/2IL1ixE/gzVeDaho1QDO13sCZ2Q1cPNRKz MusGqyhIxpGA1LwrWiJ5I5oJAETx/BsLah9wjxo3LTrjEaqKGbOF53s+n+i6V0zE qDbSmzxjdDlBWkymDnsXlG7z3Bgf6JQlOOCK6Z4IvQpBg218UUr0CITGhvjZc+1H TzYkgxvkMwyfjmbfYVG0Bv+1UoIYWdKuhOserjUIf0yq9iUrClMS7zWGPHq8OaPi -----END CERTIFICATE-----Generated at Tue Sep 22 01:08:24 2026 by rpki-client