$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.mft File: 2f3df651-bde8-4b01-b3c2-405a8caac7dd.mft (raw, json) Hash identifier: lEyB4MAp4M05ZQyG+vg/eKm1APioAtjqjXuLkGVQS64= Subject key identifier: 10:69:39:A0:92:28:62:6E:2B:2C:7F:17:08:B3:71:A5:33:AB:67:77 Authority key identifier: 98:78:21:86:ED:9D:35:05:CA:8F:79:3A:AC:13:31:BA:88:62:78:CE Certificate issuer: /CN=2f3df651-bde8-4b01-b3c2-405a8caac7dd Certificate serial: 010D0C9F4328584F3EDCCFB5947B3ADD09697700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.mft Manifest number: 010D0C9F4328584822A6A8B59F473DCA95AF240C Signing time: Mon 21 Sep 2026 06:00:22 +0000 Manifest this update: Mon 21 Sep 2026 06:00:22 +0000 Manifest next update: Thu 24 Sep 2026 06:00:00 +0000 Files and hashes: 1: 2f3df651-bde8-4b01-b3c2-405a8caac7dd.crl (hash: Tqn4j708MyAwjhf3oSSyDSiPD8qI7IwN73awAVmUjQ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:dc:cf:b5:94:7b:3a:dd:09:69:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f3df651-bde8-4b01-b3c2-405a8caac7dd Validity Not Before: Sep 21 06:00:22 2026 GMT Not After : Sep 24 06:00:00 2026 GMT Subject: CN=8fa7040b-8371-48f0-ad4c-521d2b8cd254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:30:89:44:f9:33:39:80:fc:68:f0:cf:ec:00: a2:6b:e9:e4:1a:59:b2:53:f6:d7:59:4f:89:9b:8b: fa:6a:2c:d4:c9:50:a9:e8:d2:6a:f2:0d:32:ed:34: 94:1f:92:d3:31:ce:51:98:9f:20:8b:b5:88:fa:f9: be:a0:fa:4c:a3:66:2f:88:4c:ff:8a:f1:5f:41:fc: 32:e9:6c:85:9a:a6:ba:67:d3:8c:06:1c:46:70:c1: e9:c9:33:80:2e:b1:84:88:88:59:15:a0:87:c1:25: 33:0b:23:8b:23:be:cb:86:f5:a9:26:0c:84:92:61: 1f:99:9b:fe:88:6f:60:28:32:c6:75:23:d3:cc:06: 93:e7:fc:b8:20:df:69:8c:c4:cb:00:ab:bb:60:f3: ce:e6:d7:ed:f2:67:1f:95:81:d3:45:e6:19:42:3c: d6:b2:d6:fe:45:d8:42:be:ea:75:56:98:c0:60:f7: 80:cf:d6:bf:37:54:23:cd:1b:e3:29:3b:45:cf:09: ec:12:1e:2c:84:cb:7c:17:05:0a:59:d4:5c:dc:27: 23:04:4f:82:11:80:a8:e1:ca:58:63:3e:b8:05:65: 7a:b2:c0:ce:2c:e3:67:bd:78:92:d4:20:d9:d6:2b: 7e:f1:50:cd:6e:ba:7c:fc:69:60:03:f5:06:e0:89: bf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:69:39:A0:92:28:62:6E:2B:2C:7F:17:08:B3:71:A5:33:AB:67:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.crl X509v3 Authority Key Identifier: keyid:98:78:21:86:ED:9D:35:05:CA:8F:79:3A:AC:13:31:BA:88:62:78:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6c:f7:65:61:c0:b0:44:8d:79:22:a4:f4:9c:36:96:1a:61: 86:fe:43:6e:3c:25:e2:45:1d:5c:98:d0:54:78:5c:ca:37:d9: 72:0e:00:02:f1:37:8f:cb:64:8f:99:30:2e:27:fc:49:83:0f: 8a:19:f7:6c:e0:b8:f1:34:8d:6b:ca:c6:27:e7:50:ee:ba:aa: 6f:76:af:75:05:82:fc:22:3e:8b:86:f0:46:96:fe:d6:20:38: 62:60:6d:fe:85:72:74:84:60:e0:4e:73:c4:05:00:25:22:e5: b2:e8:ee:bf:b1:e3:cc:be:22:8f:66:ca:ee:48:30:d3:64:e0: e2:35:ad:10:26:d9:be:6e:67:bc:96:b1:52:e1:a7:5b:da:e7: 4f:3d:20:4e:33:7d:bc:6b:d4:81:2c:51:6e:1b:1c:98:bf:ba: a6:03:58:a3:38:5e:e5:c2:d2:18:db:ca:b6:6f:53:1a:20:d5: f4:8c:f2:32:8e:93:ce:70:01:8d:91:38:81:23:ff:1b:d7:2e: 87:45:a4:35:04:59:5e:55:f6:81:0e:76:f2:b3:69:66:22:8d: d4:4a:ee:24:69:86:94:bb:25:a7:55:37:42:5c:49:b2:e3:48: 77:de:f8:66:5e:d4:61:98:81:ef:4c:0b:31:ee:1c:4a:f7:fd: d8:19:44:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8+3M+1lHs63QlpdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYzZGY2NTEtYmRlOC00YjAxLWIzYzItNDA1YThjYWFj N2RkMB4XDTI2MDkyMTA2MDAyMloXDTI2MDkyNDA2MDAwMFowLzEtMCsGA1UEAxMk OGZhNzA0MGItODM3MS00OGYwLWFkNGMtNTIxZDJiOGNkMjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzCJRPkzOYD8aPDP7ACia+nkGlmyU/bXWU+J m4v6aizUyVCp6NJq8g0y7TSUH5LTMc5RmJ8gi7WI+vm+oPpMo2YviEz/ivFfQfwy 6WyFmqa6Z9OMBhxGcMHpyTOALrGEiIhZFaCHwSUzCyOLI77LhvWpJgyEkmEfmZv+ iG9gKDLGdSPTzAaT5/y4IN9pjMTLAKu7YPPO5tft8mcflYHTReYZQjzWstb+RdhC vup1VpjAYPeAz9a/N1QjzRvjKTtFzwnsEh4shMt8FwUKWdRc3CcjBE+CEYCo4cpY Yz64BWV6ssDOLONnvXiS1CDZ1it+8VDNbrp8/GlgA/UG4Im/zwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBBpOaCSKGJuKyx/FwizcaUzq2d3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZjNk ZjY1MS1iZGU4LTRiMDEtYjNjMi00MDVhOGNhYWM3ZGQvMmYzZGY2NTEtYmRlOC00 YjAxLWIzYzItNDA1YThjYWFjN2RkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmYzZGY2NTEtYmRlOC00YjAxLWIz YzItNDA1YThjYWFjN2RkLzJmM2RmNjUxLWJkZTgtNGIwMS1iM2MyLTQwNWE4Y2Fh YzdkZC5jcmwwHwYDVR0jBBgwFoAUmHghhu2dNQXKj3k6rBMxuohieM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZjNkZjY1MS1iZGU4LTRiMDEtYjNjMi00MDVh OGNhYWM3ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5bPdlYcCwRI15IqT0nDaW GmGG/kNuPCXiRR1cmNBUeFzKN9lyDgAC8TePy2SPmTAuJ/xJgw+KGfds4LjxNI1r ysYn51Duuqpvdq91BYL8Ij6LhvBGlv7WIDhiYG3+hXJ0hGDgTnPEBQAlIuWy6O6/ sePMviKPZsruSDDTZODiNa0QJtm+bme8lrFS4adb2udPPSBOM328a9SBLFFuGxyY v7qmA1ijOF7lwtIY28q2b1MaINX0jPIyjpPOcAGNkTiBI/8b1y6HRaQ1BFleVfaB Dnbys2lmIo3USu4kaYaUuyWnVTdCXEmy40h33vhmXtRhmIHvTAsx7hxK9/3YGUQI -----END CERTIFICATE-----Generated at Mon Sep 21 16:35:50 2026 by rpki-client