$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.mft File: cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.mft (raw, json) Hash identifier: t2GGHo70FDx6+XfN8dsTsPyWAyIScNM3w2nA19T20O4= Subject key identifier: 70:DD:A7:F8:BB:1C:E9:DD:03:2A:CA:4A:94:B8:9D:3E:4D:4D:58:DF Authority key identifier: A9:A3:A4:31:B4:6B:63:43:F4:75:9C:6D:8A:15:61:D8:F5:56:2B:28 Certificate issuer: /CN=cd5fe8f0-47b2-4750-ab7b-e9ed929415f2 Certificate serial: 010D0C9F4328584F407DC2531877C32F2FDB7880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.mft Manifest number: 010D0C9F4328584D73C8CAB33169C30961E41025 Signing time: Mon 21 Sep 2026 20:00:23 +0000 Manifest this update: Mon 21 Sep 2026 20:00:23 +0000 Manifest next update: Wed 23 Sep 2026 20:00:00 +0000 Files and hashes: 1: cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.crl (hash: CJydlxAqJGFb2pr3Di+iY/LsEro1PuFNOzbKwVcn3EI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:7d:c2:53:18:77:c3:2f:2f:db:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5fe8f0-47b2-4750-ab7b-e9ed929415f2 Validity Not Before: Sep 21 20:00:23 2026 GMT Not After : Sep 23 20:00:00 2026 GMT Subject: CN=2407602a-5da4-4831-8a96-5df98e39c006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:1d:68:e6:2c:da:2d:68:10:08:d4:e2:6f: d0:9d:d2:53:e5:b5:21:b5:77:f3:fb:93:74:4f:1d: c8:3c:c3:90:fa:a6:b8:fe:db:a5:cf:c8:c9:7f:99: e4:05:e7:41:77:fe:9a:e1:72:57:30:d7:47:3d:35: 28:47:5c:f3:2a:24:04:eb:83:fc:76:34:96:31:b5: 9d:08:f0:37:46:73:77:90:b8:56:f3:0e:61:3a:ae: 26:2c:e9:e0:eb:1e:5e:0d:9a:cb:dd:85:b3:51:54: 97:8e:73:ce:28:e2:20:78:cd:e3:23:f6:c9:25:82: db:55:35:80:d0:91:69:bf:4a:e7:56:e0:ca:c6:38: ae:cf:12:62:33:1b:a5:3c:9c:b5:48:a4:70:74:47: c0:3e:64:b3:06:32:69:50:a8:b7:c8:c5:3a:f6:09: d0:33:20:54:e8:cf:a3:cc:e6:f2:47:8b:ac:5c:45: 00:fe:0a:49:b0:dc:3e:6a:c0:ae:1e:2e:f9:3e:df: 22:86:9b:9e:91:ee:3a:ac:4e:f2:3a:7d:81:53:a7: 35:b6:e7:31:67:12:3b:77:51:13:9f:22:6f:60:38: 82:fd:85:87:23:da:89:f7:5c:25:85:b4:b2:2e:e8: d3:5b:ab:74:58:2f:c8:af:11:85:fc:4e:dd:0d:fe: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DD:A7:F8:BB:1C:E9:DD:03:2A:CA:4A:94:B8:9D:3E:4D:4D:58:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.crl X509v3 Authority Key Identifier: keyid:A9:A3:A4:31:B4:6B:63:43:F4:75:9C:6D:8A:15:61:D8:F5:56:2B:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b4:f7:42:4b:6d:23:d7:72:d5:71:ea:4b:5a:7f:07:2b:f6: 2f:8c:7c:5e:1a:cc:b5:cf:2b:6b:49:f6:22:bb:15:84:e2:1a: 52:94:b4:fa:d7:8b:e9:13:06:cf:3c:88:c3:ae:eb:4c:2a:2a: 05:da:8b:8d:85:cb:63:27:2b:06:60:e9:24:6c:a5:aa:d2:8c: 74:97:8d:71:e3:16:88:96:11:ba:a5:8c:30:1b:86:e9:8b:86: 32:93:b2:5c:d6:42:2f:20:01:b1:83:69:cb:d3:39:b8:db:99: 65:42:3d:11:99:27:1e:b8:3c:6b:0a:19:1f:a2:19:b1:95:4c: 79:0f:75:30:aa:61:5d:af:94:9f:05:89:b1:72:b3:86:43:bd: 2b:eb:84:50:fb:69:f4:54:f8:64:9e:d7:24:9f:19:ed:d6:c5: a7:07:37:b5:6c:48:39:d5:6a:29:d1:01:2e:1a:ba:03:f6:16: 79:e0:b8:f8:f8:5e:eb:ee:2f:7e:ae:f9:e4:d2:e9:c4:6c:e2: 27:78:d1:c3:07:65:1d:1c:8f:97:20:ad:44:19:fd:fa:1b:a9: 3d:72:55:7d:19:07:12:89:85:47:33:18:3d:d2:2c:bf:a6:91: 3b:40:cd:f2:13:8b:b3:ca:39:42:67:e8:67:c5:a2:84:26:41: a4:99:db:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9AfcJTGHfDLy/beIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q1ZmU4ZjAtNDdiMi00NzUwLWFiN2ItZTllZDkyOTQx NWYyMB4XDTI2MDkyMTIwMDAyM1oXDTI2MDkyMzIwMDAwMFowLzEtMCsGA1UEAxMk MjQwNzYwMmEtNWRhNC00ODMxLThhOTYtNWRmOThlMzljMDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSgdaOYs2i1oEAjU4m/QndJT5bUhtXfz+5N0 Tx3IPMOQ+qa4/tulz8jJf5nkBedBd/6a4XJXMNdHPTUoR1zzKiQE64P8djSWMbWd CPA3RnN3kLhW8w5hOq4mLOng6x5eDZrL3YWzUVSXjnPOKOIgeM3jI/bJJYLbVTWA 0JFpv0rnVuDKxjiuzxJiMxulPJy1SKRwdEfAPmSzBjJpUKi3yMU69gnQMyBU6M+j zObyR4usXEUA/gpJsNw+asCuHi75Pt8ihpueke46rE7yOn2BU6c1tucxZxI7d1ET nyJvYDiC/YWHI9qJ91wlhbSyLujTW6t0WC/IrxGF/E7dDf5ERQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHDdp/i7HOndAyrKSpS4nT5NTVjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZDVm ZThmMC00N2IyLTQ3NTAtYWI3Yi1lOWVkOTI5NDE1ZjIvY2Q1ZmU4ZjAtNDdiMi00 NzUwLWFiN2ItZTllZDkyOTQxNWYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvY2Q1ZmU4ZjAtNDdiMi00NzUwLWFi N2ItZTllZDkyOTQxNWYyL2NkNWZlOGYwLTQ3YjItNDc1MC1hYjdiLWU5ZWQ5Mjk0 MTVmMi5jcmwwHwYDVR0jBBgwFoAUqaOkMbRrY0P0dZxtihVh2PVWKygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZDVmZThmMC00N2IyLTQ3NTAtYWI3Yi1lOWVk OTI5NDE1ZjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAatPdCS20j13LVcepLWn8H K/YvjHxeGsy1zytrSfYiuxWE4hpSlLT614vpEwbPPIjDrutMKioF2ouNhctjJysG YOkkbKWq0ox0l41x4xaIlhG6pYwwG4bpi4Yyk7Jc1kIvIAGxg2nL0zm425llQj0R mSceuDxrChkfohmxlUx5D3UwqmFdr5SfBYmxcrOGQ70r64RQ+2n0VPhkntcknxnt 1sWnBze1bEg51Wop0QEuGroD9hZ54Lj4+F7r7i9+rvnk0unEbOIneNHDB2UdHI+X IK1EGf36G6k9clV9GQcSiYVHMxg90iy/ppE7QM3yE4uzyjlCZ+hnxaKEJkGkmdvG -----END CERTIFICATE-----Generated at Tue Sep 22 00:54:14 2026 by rpki-client