$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a217c0af-ef15-44e5-b0e5-ba4ada5f4765/a217c0af-ef15-44e5-b0e5-ba4ada5f4765.mft File: a217c0af-ef15-44e5-b0e5-ba4ada5f4765.mft (raw, json) Hash identifier: QPOLwDH8k+YKJvUl7w5xsPdVBfYygFQpD0aeXzNw+uA= Subject key identifier: 2D:A6:F7:D3:55:56:E4:56:4D:65:9C:0E:45:51:C1:EA:9A:43:EF:B4 Authority key identifier: 5F:33:7D:6F:58:52:0A:04:36:33:95:53:BB:AA:BB:FB:CB:D8:D7:7A Certificate issuer: /CN=a217c0af-ef15-44e5-b0e5-ba4ada5f4765 Certificate serial: 010D0C9F4328584F3DD0CDD3111F0AFCC3E9C040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a217c0af-ef15-44e5-b0e5-ba4ada5f4765.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a217c0af-ef15-44e5-b0e5-ba4ada5f4765/a217c0af-ef15-44e5-b0e5-ba4ada5f4765.mft Manifest number: 010D0C9F4328584ADBA674853CF617253C7D7C12 Signing time: Sun 20 Sep 2026 21:00:23 +0000 Manifest this update: Sun 20 Sep 2026 21:00:23 +0000 Manifest next update: Wed 23 Sep 2026 21:00:00 +0000 Files and hashes: 1: a217c0af-ef15-44e5-b0e5-ba4ada5f4765.crl (hash: BxLdHFhsJFkeEA9mLp+H1FqE+g9LK9W92CJmfCMYeg0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a217c0af-ef15-44e5-b0e5-ba4ada5f4765/a217c0af-ef15-44e5-b0e5-ba4ada5f4765.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a217c0af-ef15-44e5-b0e5-ba4ada5f4765/a217c0af-ef15-44e5-b0e5-ba4ada5f4765.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a217c0af-ef15-44e5-b0e5-ba4ada5f4765.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3d:d0:cd:d3:11:1f:0a:fc:c3:e9:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a217c0af-ef15-44e5-b0e5-ba4ada5f4765 Validity Not Before: Sep 20 21:00:23 2026 GMT Not After : Sep 23 21:00:00 2026 GMT Subject: CN=dcf31dca-924b-4749-abc9-58f7ebb64498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:fe:09:50:cb:df:e1:2f:7b:41:ba:c2:52: de:2d:05:bf:a3:3b:c9:1e:fa:1e:cf:c2:1c:3f:11: 0c:b9:48:e3:60:58:e0:8a:15:d1:7d:0d:a5:40:59: 6d:1d:cf:f2:cf:5b:31:04:c3:a2:14:59:56:17:48: 1d:2f:af:71:fc:93:2c:e5:03:48:e1:2b:60:6d:c1: 6e:24:98:57:fd:a9:44:45:fb:87:20:87:58:a9:da: ba:22:ea:38:ab:c3:d2:c3:85:44:49:62:04:82:60: 89:bf:a7:5a:83:6b:97:0b:07:26:8f:d6:c9:fa:33: 45:4f:9b:21:31:49:7a:c9:1e:38:5d:56:a1:1c:48: 04:ba:94:a7:30:69:3d:5c:ce:c3:ca:8e:3a:76:ab: 7b:e4:7d:ab:77:42:ca:f0:47:1a:08:2a:9e:43:f6: ab:c7:07:6e:37:60:a7:1c:b6:8f:5a:8d:af:95:4d: b5:56:13:04:eb:e9:a1:8b:d6:45:d1:5e:e7:88:5b: ce:be:6b:06:53:21:ba:c6:34:0b:c3:c1:d8:a1:d8: 3b:98:5b:ae:5c:1f:3b:d9:a7:df:79:91:44:ca:d4: 9d:42:73:01:6e:d9:1e:c1:31:6e:c1:5b:33:2f:72: 82:76:99:04:58:d0:a8:a4:ec:9a:60:6e:b3:5d:26: df:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A6:F7:D3:55:56:E4:56:4D:65:9C:0E:45:51:C1:EA:9A:43:EF:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a217c0af-ef15-44e5-b0e5-ba4ada5f4765/a217c0af-ef15-44e5-b0e5-ba4ada5f4765.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a217c0af-ef15-44e5-b0e5-ba4ada5f4765/a217c0af-ef15-44e5-b0e5-ba4ada5f4765.crl X509v3 Authority Key Identifier: keyid:5F:33:7D:6F:58:52:0A:04:36:33:95:53:BB:AA:BB:FB:CB:D8:D7:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a217c0af-ef15-44e5-b0e5-ba4ada5f4765.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:49:ea:0c:cf:64:91:f1:c5:92:43:5c:0b:9f:ea:3a:8f:63: a5:e5:92:0d:65:45:30:31:89:5e:96:b9:e1:cf:35:18:3e:09: fe:1e:a8:b2:d2:74:e4:38:3c:6a:ea:58:38:79:b7:68:3c:d3: db:24:b1:cd:ff:b1:43:86:52:cf:47:a1:d6:44:f8:54:2d:38: 8d:b8:2b:df:d0:05:e5:41:26:72:c4:9f:5f:2e:b1:1c:4d:b4: b8:41:5f:10:a6:59:97:17:a2:78:4c:85:05:7d:2e:51:1c:a2: 3c:f4:1c:94:48:f3:09:16:c4:0d:c0:24:33:1d:25:c7:3e:60: a7:89:fd:b3:34:10:5d:03:83:84:f4:37:2b:83:1e:90:1f:25: ab:af:9e:89:00:38:6f:0d:a8:e0:17:73:d4:b5:4b:44:93:68: 52:c6:be:bb:ba:40:65:d1:e1:89:f0:0d:e8:68:e4:c9:f6:b6: 44:9b:57:10:9d:39:5a:87:a1:12:de:47:d0:6b:b8:04:f2:d3: 03:e6:9b:d8:34:d2:d5:3e:0b:36:67:50:61:68:74:ec:99:ec: c2:a2:e0:79:66:e3:01:14:6b:f7:f4:d5:13:95:f3:28:2a:e6: 52:5b:a9:b7:de:f5:00:90:77:0a:47:68:05:c2:05:d8:b9:fb: a4:6b:53:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE890M3TER8K/MPpwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIxN2MwYWYtZWYxNS00NGU1LWIwZTUtYmE0YWRhNWY0 NzY1MB4XDTI2MDkyMDIxMDAyM1oXDTI2MDkyMzIxMDAwMFowLzEtMCsGA1UEAxMk ZGNmMzFkY2EtOTI0Yi00NzQ5LWFiYzktNThmN2ViYjY0NDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+z+CVDL3+Eve0G6wlLeLQW/ozvJHvoez8Ic PxEMuUjjYFjgihXRfQ2lQFltHc/yz1sxBMOiFFlWF0gdL69x/JMs5QNI4StgbcFu JJhX/alERfuHIIdYqdq6Iuo4q8PSw4VESWIEgmCJv6dag2uXCwcmj9bJ+jNFT5sh MUl6yR44XVahHEgEupSnMGk9XM7Dyo46dqt75H2rd0LK8EcaCCqeQ/arxwduN2Cn HLaPWo2vlU21VhME6+mhi9ZF0V7niFvOvmsGUyG6xjQLw8HYodg7mFuuXB872aff eZFEytSdQnMBbtkewTFuwVszL3KCdpkEWNCopOyaYG6zXSbfTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC2m99NVVuRWTWWcDkVRweqaQ++0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMjE3 YzBhZi1lZjE1LTQ0ZTUtYjBlNS1iYTRhZGE1ZjQ3NjUvYTIxN2MwYWYtZWYxNS00 NGU1LWIwZTUtYmE0YWRhNWY0NzY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTIxN2MwYWYtZWYxNS00NGU1LWIw ZTUtYmE0YWRhNWY0NzY1L2EyMTdjMGFmLWVmMTUtNDRlNS1iMGU1LWJhNGFkYTVm NDc2NS5jcmwwHwYDVR0jBBgwFoAUXzN9b1hSCgQ2M5VTu6q7+8vY13owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMjE3YzBhZi1lZjE1LTQ0ZTUtYjBlNS1iYTRh ZGE1ZjQ3NjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC2SeoMz2SR8cWSQ1wLn+o6 j2Ol5ZINZUUwMYlelrnhzzUYPgn+Hqiy0nTkODxq6lg4ebdoPNPbJLHN/7FDhlLP R6HWRPhULTiNuCvf0AXlQSZyxJ9fLrEcTbS4QV8QplmXF6J4TIUFfS5RHKI89ByU SPMJFsQNwCQzHSXHPmCnif2zNBBdA4OE9Dcrgx6QHyWrr56JADhvDajgF3PUtUtE k2hSxr67ukBl0eGJ8A3oaOTJ9rZEm1cQnTlah6ES3kfQa7gE8tMD5pvYNNLVPgs2 Z1BhaHTsmezCouB5ZuMBFGv39NUTlfMoKuZSW6m33vUAkHcKR2gFwgXYufuka1Oo -----END CERTIFICATE-----Generated at Mon Sep 21 18:16:56 2026 by rpki-client