$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823/2a53afad-1629-4fa1-ac19-e8eb64b1e823.mft File: 2a53afad-1629-4fa1-ac19-e8eb64b1e823.mft (raw, json) Hash identifier: ybii/3tnVF1ljQAhlF27UgQQOLQdizeV5EVAE3T69cE= Subject key identifier: CF:BC:95:52:82:8D:6A:56:8A:C4:D1:D5:14:BD:48:8B:30:92:27:BA Authority key identifier: 64:06:22:A7:EE:D9:DE:63:88:95:7E:22:A7:88:90:DD:B8:3D:41:17 Certificate issuer: /CN=2a53afad-1629-4fa1-ac19-e8eb64b1e823 Certificate serial: 010D0C9F4328584F3D1E33EC0C965BCB12500180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823/2a53afad-1629-4fa1-ac19-e8eb64b1e823.mft Manifest number: 010D0C9F4328584B60ECAD892088CAAF5EC6F06A Signing time: Sun 20 Sep 2026 15:00:23 +0000 Manifest this update: Sun 20 Sep 2026 15:00:23 +0000 Manifest next update: Wed 23 Sep 2026 15:00:00 +0000 Files and hashes: 1: 2a53afad-1629-4fa1-ac19-e8eb64b1e823.crl (hash: VEDxqGS2AAnFHfmu5adlyqDtkZL/HfkzaOJ+2Jv6wmQ=) 2: 34d2b1c6-ca94-3c9d-bee8-f9cb20344ebf.roa (hash: tsikOMyHDbjeTY/CFrjs93xKsei86VjHoQ8I1cl+dRU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823/2a53afad-1629-4fa1-ac19-e8eb64b1e823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823/2a53afad-1629-4fa1-ac19-e8eb64b1e823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3d:1e:33:ec:0c:96:5b:cb:12:50:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a53afad-1629-4fa1-ac19-e8eb64b1e823 Validity Not Before: Sep 20 15:00:23 2026 GMT Not After : Sep 23 15:00:00 2026 GMT Subject: CN=3de07aef-5bb9-4d28-aabb-29880420e33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:e7:a8:6f:d1:07:61:4d:8c:3e:67:33:1a: 4f:c1:f7:58:fd:75:29:90:cc:a9:14:32:93:3a:59: 75:05:c3:d8:63:2f:5a:5e:4c:ec:a7:c2:79:00:08: 68:0e:5e:b4:15:41:2b:24:d9:c5:5e:9e:f6:86:83: 4d:3c:9f:94:30:fc:49:87:24:8a:de:09:39:3c:8d: 5e:66:d8:dd:56:4a:cd:ce:36:c4:c3:60:cd:d7:16: ae:b8:3e:f9:59:ef:28:6d:14:6e:07:56:ef:61:4f: 0d:40:9f:be:7d:32:0e:a0:5f:66:cc:58:66:67:51: e0:ce:88:84:e8:8f:7f:52:47:35:82:84:e7:a2:7e: bf:8f:a8:5f:c1:39:18:70:18:68:8d:df:0c:5a:76: 77:bd:cb:4d:bb:c8:1f:28:fa:4c:49:a5:af:a9:a1: f4:b1:f8:01:fe:3a:4e:39:08:53:bf:6a:17:56:8f: 34:2f:ad:04:1a:3f:22:ec:a3:6c:c0:9e:17:46:10: 88:28:90:06:74:45:ff:35:1a:e9:5c:45:2a:92:a6: a1:f4:d0:39:66:4a:46:a0:26:ad:07:07:27:65:08: f8:1f:a3:46:01:81:62:2d:5f:39:06:17:b3:7d:b2: c6:a8:fd:c3:73:6e:f2:40:57:75:56:52:85:dc:3c: 79:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BC:95:52:82:8D:6A:56:8A:C4:D1:D5:14:BD:48:8B:30:92:27:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823/2a53afad-1629-4fa1-ac19-e8eb64b1e823.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823/2a53afad-1629-4fa1-ac19-e8eb64b1e823.crl X509v3 Authority Key Identifier: keyid:64:06:22:A7:EE:D9:DE:63:88:95:7E:22:A7:88:90:DD:B8:3D:41:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2a53afad-1629-4fa1-ac19-e8eb64b1e823.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e9:33:4c:45:72:c8:11:26:e4:e7:dc:0b:0a:44:8b:cf:30: ea:b3:79:45:ea:d3:66:a3:13:bf:85:69:ec:a1:38:d1:4a:73: e2:1a:10:ec:29:60:1e:90:fa:c9:a5:82:5c:5f:aa:e8:ef:02: dc:6b:4f:f0:47:b7:ed:3a:b4:3c:54:5d:5b:11:d1:28:6e:41: 7f:5d:5f:60:be:24:63:5e:8c:be:75:91:7c:30:7c:c1:85:e1: 26:a5:5d:09:53:2d:22:d9:cb:20:81:5c:22:f8:08:29:ff:f2: 14:f3:22:11:5b:e7:d7:5e:b5:44:56:0c:4d:35:3e:65:a8:35: 6d:0b:04:b1:c5:3e:e3:21:bf:9a:7b:66:92:9a:da:26:ed:4b: 83:c0:00:4f:fd:ce:16:8c:00:c3:74:1a:39:82:6f:bd:a2:74: e3:51:dd:70:06:a7:d5:41:70:84:ad:6e:30:26:c4:a6:cf:e2: 14:13:7a:aa:f7:16:70:77:49:15:e9:22:b2:03:e0:97:b3:01: 2c:73:94:87:ab:d4:c6:fb:f2:77:58:d4:6d:70:52:b4:4e:67: 3f:f7:9f:cb:2d:2b:56:ad:11:e7:9f:a0:20:87:b0:6a:83:20: 48:c8:2e:8c:c7:30:97:20:c6:fc:bc:aa:03:38:17:5f:a0:33: 52:47:d1:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE89HjPsDJZbyxJQAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1M2FmYWQtMTYyOS00ZmExLWFjMTktZThlYjY0YjFl ODIzMB4XDTI2MDkyMDE1MDAyM1oXDTI2MDkyMzE1MDAwMFowLzEtMCsGA1UEAxMk M2RlMDdhZWYtNWJiOS00ZDI4LWFhYmItMjk4ODA0MjBlMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZbnqG/RB2FNjD5nMxpPwfdY/XUpkMypFDKT Oll1BcPYYy9aXkzsp8J5AAhoDl60FUErJNnFXp72hoNNPJ+UMPxJhySK3gk5PI1e ZtjdVkrNzjbEw2DN1xauuD75We8obRRuB1bvYU8NQJ++fTIOoF9mzFhmZ1HgzoiE 6I9/Ukc1goTnon6/j6hfwTkYcBhojd8MWnZ3vctNu8gfKPpMSaWvqaH0sfgB/jpO OQhTv2oXVo80L60EGj8i7KNswJ4XRhCIKJAGdEX/NRrpXEUqkqah9NA5ZkpGoCat BwcnZQj4H6NGAYFiLV85BhezfbLGqP3Dc27yQFd1VlKF3Dx5TwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM+8lVKCjWpWisTR1RS9SIswkie6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYTUz YWZhZC0xNjI5LTRmYTEtYWMxOS1lOGViNjRiMWU4MjMvMmE1M2FmYWQtMTYyOS00 ZmExLWFjMTktZThlYjY0YjFlODIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmE1M2FmYWQtMTYyOS00ZmExLWFj MTktZThlYjY0YjFlODIzLzJhNTNhZmFkLTE2MjktNGZhMS1hYzE5LWU4ZWI2NGIx ZTgyMy5jcmwwHwYDVR0jBBgwFoAUZAYip+7Z3mOIlX4ip4iQ3bg9QRcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYTUzYWZhZC0xNjI5LTRmYTEtYWMxOS1lOGVi NjRiMWU4MjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAo6TNMRXLIESbk59wLCkSL zzDqs3lF6tNmoxO/hWnsoTjRSnPiGhDsKWAekPrJpYJcX6ro7wLca0/wR7ftOrQ8 VF1bEdEobkF/XV9gviRjXoy+dZF8MHzBheEmpV0JUy0i2csggVwi+Agp//IU8yIR W+fXXrVEVgxNNT5lqDVtCwSxxT7jIb+ae2aSmtom7UuDwABP/c4WjADDdBo5gm+9 onTjUd1wBqfVQXCErW4wJsSmz+IUE3qq9xZwd0kV6SKyA+CXswEsc5SHq9TG+/J3 WNRtcFK0Tmc/95/LLStWrRHnn6Agh7BqgyBIyC6MxzCXIMb8vKoDOBdfoDNSR9ED -----END CERTIFICATE-----Generated at Mon Sep 21 04:30:54 2026 by rpki-client