$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft File: 1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft (raw, json) Hash identifier: 9dTsRNco0de01MsRASnD5+P6XJUfy+U8m8d38ymOQig= Subject key identifier: 22:52:CE:8A:4C:4B:A0:06:DE:4D:D8:7A:40:1E:1E:D7:5F:82:34:50 Authority key identifier: 3B:8A:3C:69:D1:E2:A3:9B:09:9B:67:76:AF:BE:58:17:2C:DB:0B:4F Certificate issuer: /CN=1df1d88c-4b1d-4a8a-8319-5d784e995be2 Certificate serial: 010D0C9F4328584F3CA702EA5642FBE158D44300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft Manifest number: 010D0C9F4328584CCE1A458B83B939037D0FD6E4 Signing time: Sun 20 Sep 2026 11:00:22 +0000 Manifest this update: Sun 20 Sep 2026 11:00:22 +0000 Manifest next update: Tue 22 Sep 2026 11:00:00 +0000 Files and hashes: 1: 1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl (hash: lCm68jHrPS0VITUhEtRNasmiiwdQq+JEkQf81y4rcDQ=) 2: 57b08375-edfa-3ca6-816f-7c71735f8648.roa (hash: gXkpxY7AajA6K0iLKXbTmh8Q34vuhS+dVreK+2hZUWw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:a7:02:ea:56:42:fb:e1:58:d4:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1df1d88c-4b1d-4a8a-8319-5d784e995be2 Validity Not Before: Sep 20 11:00:22 2026 GMT Not After : Sep 22 11:00:00 2026 GMT Subject: CN=3c293fc1-3419-41fc-819b-2d53cd62a8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e1:c9:40:40:a2:27:31:d8:82:98:94:7d:28: 3c:f4:2f:b3:13:cd:02:a7:51:c5:ef:b9:c3:1b:93: 80:d9:bb:b6:df:cd:e4:3a:70:21:94:d1:95:01:32: 0b:c1:6b:f4:25:8b:b3:a4:cc:e2:56:bd:55:f0:18: dd:3c:e2:aa:d7:10:99:9e:61:0f:d0:2e:30:44:41: 72:9e:1b:4e:4c:68:f8:3c:de:72:61:64:63:98:26: 8e:cd:ae:02:b1:93:48:f7:0d:de:33:23:96:43:a9: 29:33:7f:68:56:d3:e8:57:5a:c5:94:74:57:47:bf: 38:99:5f:7b:08:98:52:7d:7c:44:8f:dd:a6:b1:5b: 2f:df:cc:ba:9e:0a:19:b4:f1:93:3e:10:e5:95:65: 0b:27:e2:bb:c8:e8:1a:3c:88:1e:3a:bb:53:92:d1: 8d:48:21:5a:5e:63:22:e4:19:f1:34:9d:40:19:62: 40:83:8a:99:f8:5d:3b:b2:e2:73:a6:78:94:6e:2a: a8:07:92:eb:73:f2:bc:7e:61:83:19:35:0c:82:a4: 01:f3:ab:d6:c2:b9:a4:c9:d1:69:2b:0b:5c:b1:c0: 4d:d2:54:ec:7b:81:ac:ec:aa:ef:f2:4d:1e:35:ff: b9:01:b4:1d:c0:ab:f8:5c:2d:9a:1a:96:c4:bf:d1: 22:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:52:CE:8A:4C:4B:A0:06:DE:4D:D8:7A:40:1E:1E:D7:5F:82:34:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl X509v3 Authority Key Identifier: keyid:3B:8A:3C:69:D1:E2:A3:9B:09:9B:67:76:AF:BE:58:17:2C:DB:0B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:65:dc:27:5b:2b:dd:b0:cb:62:17:b2:bd:a3:cc:4f:14:9c: b9:c1:92:3a:f9:4a:c3:55:f6:c9:2e:ab:62:ba:67:74:3c:d6: d2:a8:72:55:6d:2f:0f:ed:8e:72:f2:15:03:a6:d4:fc:1d:26: 14:10:c4:95:59:8c:a6:9b:e7:c0:b2:7c:1c:e4:df:48:57:e8: ed:4f:0f:df:ad:bb:7d:7c:7b:5b:49:2e:74:3b:22:8b:13:9c: 90:3d:f3:26:e4:4a:d6:8c:57:69:b2:87:3d:09:9d:19:b0:10: 10:11:83:2c:20:06:ea:bb:3a:a6:de:3e:b2:c3:e9:ca:e4:7f: 01:27:f6:76:68:8b:af:6f:b9:a2:45:5b:07:cc:6c:6a:bf:e2: d7:15:29:36:6d:24:a0:67:9d:ef:fa:3c:bc:94:7e:d4:3f:85: 57:7b:6a:2d:81:27:1e:28:94:29:a0:26:07:13:63:a4:96:d2: 7a:5e:ba:21:0e:cd:7e:07:3d:b5:a3:67:52:8e:0e:3e:7c:e0: 8e:79:2e:67:c9:e4:a2:17:04:85:86:3a:4d:05:4e:7d:35:74: fb:90:b9:37:ce:84:5e:7f:ce:86:d1:ee:77:d2:58:e0:62:d1: f1:07:92:4b:84:f1:63:42:69:52:f7:61:b2:2c:b0:d6:9d:1f: ac:a3:5c:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE88pwLqVkL74VjUQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRmMWQ4OGMtNGIxZC00YThhLTgzMTktNWQ3ODRlOTk1 YmUyMB4XDTI2MDkyMDExMDAyMloXDTI2MDkyMjExMDAwMFowLzEtMCsGA1UEAxMk M2MyOTNmYzEtMzQxOS00MWZjLTgxOWItMmQ1M2NkNjJhOGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuHJQECiJzHYgpiUfSg89C+zE80Cp1HF77nD G5OA2bu2383kOnAhlNGVATILwWv0JYuzpMziVr1V8BjdPOKq1xCZnmEP0C4wREFy nhtOTGj4PN5yYWRjmCaOza4CsZNI9w3eMyOWQ6kpM39oVtPoV1rFlHRXR784mV97 CJhSfXxEj92msVsv38y6ngoZtPGTPhDllWULJ+K7yOgaPIgeOrtTktGNSCFaXmMi 5BnxNJ1AGWJAg4qZ+F07suJzpniUbiqoB5Lrc/K8fmGDGTUMgqQB86vWwrmkydFp KwtcscBN0lTse4Gs7Krv8k0eNf+5AbQdwKv4XC2aGpbEv9EiDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCJSzopMS6AG3k3YekAeHtdfgjRQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZGYx ZDg4Yy00YjFkLTRhOGEtODMxOS01ZDc4NGU5OTViZTIvMWRmMWQ4OGMtNGIxZC00 YThhLTgzMTktNWQ3ODRlOTk1YmUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMWRmMWQ4OGMtNGIxZC00YThhLTgz MTktNWQ3ODRlOTk1YmUyLzFkZjFkODhjLTRiMWQtNGE4YS04MzE5LTVkNzg0ZTk5 NWJlMi5jcmwwHwYDVR0jBBgwFoAUO4o8adHio5sJm2d2r75YFyzbC08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZGYxZDg4Yy00YjFkLTRhOGEtODMxOS01ZDc4 NGU5OTViZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXZdwnWyvdsMtiF7K9o8xP FJy5wZI6+UrDVfbJLqtiumd0PNbSqHJVbS8P7Y5y8hUDptT8HSYUEMSVWYymm+fA snwc5N9IV+jtTw/frbt9fHtbSS50OyKLE5yQPfMm5ErWjFdpsoc9CZ0ZsBAQEYMs IAbquzqm3j6yw+nK5H8BJ/Z2aIuvb7miRVsHzGxqv+LXFSk2bSSgZ53v+jy8lH7U P4VXe2otgSceKJQpoCYHE2OkltJ6XrohDs1+Bz21o2dSjg4+fOCOeS5nyeSiFwSF hjpNBU59NXT7kLk3zoRef86G0e530ljgYtHxB5JLhPFjQmlS92GyLLDWnR+so1w7 -----END CERTIFICATE-----Generated at Mon Sep 21 10:10:11 2026 by rpki-client