$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft File: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft (raw, json) Hash identifier: MT8jbe5mLPaNeJheeaghwf4POWa5mT06d0sZPs165hU= Subject key identifier: A0:B2:53:38:FE:2E:9C:94:B6:05:73:57:BE:4D:22:65:39:52:37:FD Authority key identifier: 0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B Certificate issuer: /CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Certificate serial: 010D0C9F4328584F41306AD0B2B3648660A33F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft Manifest number: 010D0C9F4328584B4BCFD881B87CBE90580D32EB Signing time: Tue 22 Sep 2026 02:00:23 +0000 Manifest this update: Tue 22 Sep 2026 02:00:23 +0000 Manifest next update: Thu 24 Sep 2026 02:00:00 +0000 Files and hashes: 1: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl (hash: PdL4uGezDaJ+cqyj1MQ6ppGYBjfKZ8yh20Iuc2lTzSg=) 2: 4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer (hash: YQB3ja0LD/RpPSpiFOvhsYwRInhxQQNy5l8nfauLYkE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:30:6a:d0:b2:b3:64:86:60:a3:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Validity Not Before: Sep 22 02:00:23 2026 GMT Not After : Sep 24 02:00:00 2026 GMT Subject: CN=fd86447d-af84-494e-b8bf-f4520650d8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:83:72:aa:90:23:59:aa:aa:d1:4e:96:54:74: 17:74:b3:7c:ee:a7:bb:42:16:fe:24:d9:f0:db:58: 0f:d2:8b:7f:68:46:e7:7d:80:82:51:b8:3b:03:36: 3f:56:d4:be:48:cc:b3:8a:3b:f4:e0:96:70:8f:c1: 33:27:d7:c5:b9:30:08:f4:44:6c:d9:09:d7:8e:30: 6b:0d:58:35:6d:73:02:17:7a:ec:78:db:31:09:3c: f6:15:21:b5:2a:05:6c:8a:f3:45:98:ac:d8:6c:a2: 03:a0:c3:d3:38:7c:66:39:da:70:ab:ee:07:04:1e: 39:39:4a:3a:5a:6a:3a:77:5d:30:49:04:f9:ec:75: 11:f0:ea:e8:1e:e6:f3:99:76:4f:bb:ca:fc:e8:0e: 03:59:5b:af:3e:07:46:b2:c3:92:8d:ff:28:f3:83: a5:58:d0:dd:ca:c1:62:17:d8:95:ae:db:4d:27:22: 7f:ea:ed:8b:ef:88:33:b9:b0:d2:0e:32:c3:7d:6c: cd:c6:e8:4d:63:32:90:b2:b9:65:62:30:4c:18:d6: 2e:c7:02:3a:47:cf:dc:e1:0f:12:09:11:70:3e:c1: 69:af:04:5a:10:d5:57:f6:30:4e:b8:e3:25:af:4e: 43:f3:94:22:fc:ab:80:1e:f1:d2:05:46:15:5f:5b: 47:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B2:53:38:FE:2E:9C:94:B6:05:73:57:BE:4D:22:65:39:52:37:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl X509v3 Authority Key Identifier: keyid:0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:69:41:a2:fa:11:a6:09:82:a7:6d:de:fc:21:60:09:79:c4: 60:33:4e:09:35:c5:7f:0f:23:7e:a7:5c:63:ff:ef:65:e9:81: b5:99:29:7f:2b:ca:81:24:df:db:b4:ba:3a:7c:d4:a8:aa:3e: 88:9d:59:5f:3d:37:50:7d:87:79:cb:a7:95:68:96:4c:f7:25: 80:c0:c7:c6:2f:f3:c5:34:cc:e8:a5:53:f1:94:57:4e:e6:5c: 7e:24:14:5d:aa:b1:36:2a:ea:f8:d4:42:18:80:6d:44:bf:81: 6b:70:19:af:75:c9:0d:19:bf:6a:24:56:eb:77:ef:a8:84:24: 64:3c:a5:76:67:be:1a:0b:fb:29:f8:04:ba:ea:d9:79:d9:1e: 50:48:7d:c5:d7:d5:cd:d3:5d:75:4a:40:ec:00:a2:4f:9b:c5: 57:f4:04:b6:80:b0:d8:11:aa:58:7b:a8:bf:be:11:0b:c3:28: 5f:5b:87:06:72:1b:99:1e:e7:1a:ed:b2:d4:6c:30:84:97:7a: 1e:77:0f:b9:df:2c:50:43:6c:de:fe:30:a3:95:63:78:d5:a0: 1b:fe:4e:8b:7f:21:97:d8:93:9e:bd:5f:6b:2a:bc:fb:2b:f7: 0d:6e:8a:8a:2c:92:a5:0d:1f:fe:8f:41:7e:b8:99:f9:eb:95: 0b:5c:9a:50 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9BMGrQsrNkhmCjPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1NGI4YTEtNjlkZS00NjMwLTgwMDYtNGRjOGZmZTIz YmRkMB4XDTI2MDkyMjAyMDAyM1oXDTI2MDkyNDAyMDAwMFowLzEtMCsGA1UEAxMk ZmQ4NjQ0N2QtYWY4NC00OTRlLWI4YmYtZjQ1MjA2NTBkOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYNyqpAjWaqq0U6WVHQXdLN87qe7Qhb+JNnw 21gP0ot/aEbnfYCCUbg7AzY/VtS+SMyzijv04JZwj8EzJ9fFuTAI9ERs2QnXjjBr DVg1bXMCF3rseNsxCTz2FSG1KgVsivNFmKzYbKIDoMPTOHxmOdpwq+4HBB45OUo6 Wmo6d10wSQT57HUR8OroHubzmXZPu8r86A4DWVuvPgdGssOSjf8o84OlWNDdysFi F9iVrttNJyJ/6u2L74gzubDSDjLDfWzNxuhNYzKQsrllYjBMGNYuxwI6R8/c4Q8S CRFwPsFprwRaENVX9jBOuOMlr05D85Qi/KuAHvHSBUYVX1tHmQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKCyUzj+LpyUtgVzV75NImU5Ujf9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0 YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4ZmZlMjNiZGQvMjk1NGI4YTEtNjlkZS00 NjMwLTgwMDYtNGRjOGZmZTIzYmRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjk1NGI4YTEtNjlkZS00NjMwLTgw MDYtNGRjOGZmZTIzYmRkLzI5NTRiOGExLTY5ZGUtNDYzMC04MDA2LTRkYzhmZmUy M2JkZC5jcmwwHwYDVR0jBBgwFoAUCtV6etttzc0D69uV89EzrhnHBgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4 ZmZlMjNiZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAeaUGi+hGmCYKnbd78IWAJ ecRgM04JNcV/DyN+p1xj/+9l6YG1mSl/K8qBJN/btLo6fNSoqj6InVlfPTdQfYd5 y6eVaJZM9yWAwMfGL/PFNMzopVPxlFdO5lx+JBRdqrE2Kur41EIYgG1Ev4FrcBmv dckNGb9qJFbrd++ohCRkPKV2Z74aC/sp+AS66tl52R5QSH3F19XN0111SkDsAKJP m8VX9AS2gLDYEapYe6i/vhELwyhfW4cGchuZHuca7bLUbDCEl3oedw+53yxQQ2ze /jCjlWN41aAb/k6LfyGX2JOevV9rKrz7K/cNboqKLJKlDR/+j0F+uJn565ULXJpQ -----END CERTIFICATE-----Generated at Tue Sep 22 16:46:11 2026 by rpki-client