$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/405c3240-e719-455e-a46d-d4feb7fcb36d/405c3240-e719-455e-a46d-d4feb7fcb36d.mft File: 405c3240-e719-455e-a46d-d4feb7fcb36d.mft (raw, json) Hash identifier: hgwMaPRu1/n6QX8seMHPBUEdbJUVdTAYZUK4ExuJhO0= Subject key identifier: 74:11:29:DE:67:03:14:38:53:C6:C3:7C:CF:E8:75:EA:75:67:84:BD Authority key identifier: CA:29:65:90:8C:DC:FE:03:AA:CD:CE:A9:17:5E:A6:78:5C:DC:70:67 Certificate issuer: /CN=405c3240-e719-455e-a46d-d4feb7fcb36d Certificate serial: 010D0C9F4328584F1090FF92590A7A292B451340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/405c3240-e719-455e-a46d-d4feb7fcb36d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/405c3240-e719-455e-a46d-d4feb7fcb36d/405c3240-e719-455e-a46d-d4feb7fcb36d.mft Manifest number: 010D0C9F4328584DBBEB6E835478551434E4977A Signing time: Fri 04 Sep 2026 16:00:23 +0000 Manifest this update: Fri 04 Sep 2026 16:00:23 +0000 Manifest next update: Mon 07 Sep 2026 16:00:00 +0000 Files and hashes: 1: 405c3240-e719-455e-a46d-d4feb7fcb36d.crl (hash: y3ND4ZcYkweEbtmdrFzcPFFBfmB2ywRfj6qsj5fggcE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/405c3240-e719-455e-a46d-d4feb7fcb36d/405c3240-e719-455e-a46d-d4feb7fcb36d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/405c3240-e719-455e-a46d-d4feb7fcb36d/405c3240-e719-455e-a46d-d4feb7fcb36d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/405c3240-e719-455e-a46d-d4feb7fcb36d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:90:ff:92:59:0a:7a:29:2b:45:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405c3240-e719-455e-a46d-d4feb7fcb36d Validity Not Before: Sep 4 16:00:23 2026 GMT Not After : Sep 7 16:00:00 2026 GMT Subject: CN=8b871147-765a-421a-9949-cd4d7c14c3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:89:e9:ab:ae:e0:fc:1a:94:76:ab:93:31:9b: d0:30:97:43:32:84:e9:37:a9:ae:bb:bd:a2:bb:a1: e0:ea:74:09:4d:d7:ae:82:12:37:b2:79:64:db:3d: 22:bb:58:a1:1a:48:f1:5a:ba:e1:f0:34:d8:e0:e0: 73:17:d6:52:ee:66:06:13:fe:1b:3a:fd:5d:9b:f3: ef:f4:1e:86:b8:96:30:32:6d:2f:8a:44:ea:67:db: b8:f9:d0:bb:cb:36:e8:62:41:fd:06:96:96:c6:d9: 56:ba:1a:d7:6d:06:c7:fd:cc:e6:5f:2f:e6:49:9b: 3b:cb:0a:86:2d:f3:41:2c:ce:0b:6d:ad:6a:fe:ac: 83:9c:5d:15:86:da:e4:6b:5d:16:84:40:4a:bd:88: a0:d6:de:3e:f3:fc:e5:14:bf:4a:c0:f5:a2:d4:47: d4:36:ae:40:af:4e:58:0c:be:0c:70:15:ac:14:cd: f3:41:c3:00:bc:d8:3c:ad:33:2c:ac:d1:1a:58:ac: 99:71:88:ba:3f:c3:22:2a:10:48:3e:94:96:1e:75: 3d:35:81:a8:e7:bd:fa:e8:6e:54:7d:3f:b0:3b:ec: 9e:52:f9:fd:77:82:b6:4a:cf:77:aa:08:dc:82:ea: 7a:fb:5a:74:84:b9:af:34:e2:0f:86:e0:10:e3:83: 41:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:11:29:DE:67:03:14:38:53:C6:C3:7C:CF:E8:75:EA:75:67:84:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/405c3240-e719-455e-a46d-d4feb7fcb36d/405c3240-e719-455e-a46d-d4feb7fcb36d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/405c3240-e719-455e-a46d-d4feb7fcb36d/405c3240-e719-455e-a46d-d4feb7fcb36d.crl X509v3 Authority Key Identifier: keyid:CA:29:65:90:8C:DC:FE:03:AA:CD:CE:A9:17:5E:A6:78:5C:DC:70:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/405c3240-e719-455e-a46d-d4feb7fcb36d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c5:b3:39:d0:e3:c2:10:06:8d:3b:54:7a:ce:d4:d5:eb:5c: 20:69:ba:2d:0a:73:92:58:08:73:70:27:2a:62:12:6e:e4:a8: 14:41:2b:0b:2f:7a:c4:a5:57:77:09:1a:bf:c7:d7:c8:26:7f: d3:25:b3:ee:5e:19:66:7d:b5:3b:78:cb:04:68:2f:ee:06:e2: ee:3b:77:e3:2d:dc:4e:1e:e3:ae:a3:ba:01:9e:07:8f:8a:24: 58:52:08:e3:7c:f1:dc:f8:19:92:a1:cf:36:79:82:40:6c:3c: 56:3f:be:c9:9b:3f:22:4d:62:a7:31:49:23:81:4a:81:3b:ff: 68:14:08:09:83:be:ce:71:85:95:82:db:0b:5f:d9:0b:21:20: b0:0c:ab:5a:fc:aa:07:df:dd:e0:cc:c0:91:04:86:9e:72:10: d0:30:21:43:a2:25:35:19:66:67:df:43:a3:93:bb:14:4f:ed: 84:4a:b3:1d:e8:5f:4a:ef:fb:95:7a:45:51:a9:1f:f9:0f:b3: 3b:e8:27:02:a3:c3:06:ae:c5:60:a1:15:1b:85:09:c8:e0:04: 1a:bf:c1:2c:12:a8:8d:f1:db:79:ae:27:1b:69:f1:96:b9:40: 10:77:3c:f0:75:9b:cf:bc:41:a8:06:26:d8:6e:da:d1:6a:1a: ac:33:49:25 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8QkP+SWQp6KStFE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA1YzMyNDAtZTcxOS00NTVlLWE0NmQtZDRmZWI3ZmNi MzZkMB4XDTI2MDkwNDE2MDAyM1oXDTI2MDkwNzE2MDAwMFowLzEtMCsGA1UEAxMk OGI4NzExNDctNzY1YS00MjFhLTk5NDktY2Q0ZDdjMTRjM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYnpq67g/BqUdquTMZvQMJdDMoTpN6muu72i u6Hg6nQJTdeughI3snlk2z0iu1ihGkjxWrrh8DTY4OBzF9ZS7mYGE/4bOv1dm/Pv 9B6GuJYwMm0vikTqZ9u4+dC7yzboYkH9BpaWxtlWuhrXbQbH/czmXy/mSZs7ywqG LfNBLM4Lba1q/qyDnF0Vhtrka10WhEBKvYig1t4+8/zlFL9KwPWi1EfUNq5Ar05Y DL4McBWsFM3zQcMAvNg8rTMsrNEaWKyZcYi6P8MiKhBIPpSWHnU9NYGo57366G5U fT+wO+yeUvn9d4K2Ss93qgjcgup6+1p0hLmvNOIPhuAQ44NBLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHQRKd5nAxQ4U8bDfM/odep1Z4S9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80MDVj MzI0MC1lNzE5LTQ1NWUtYTQ2ZC1kNGZlYjdmY2IzNmQvNDA1YzMyNDAtZTcxOS00 NTVlLWE0NmQtZDRmZWI3ZmNiMzZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDA1YzMyNDAtZTcxOS00NTVlLWE0 NmQtZDRmZWI3ZmNiMzZkLzQwNWMzMjQwLWU3MTktNDU1ZS1hNDZkLWQ0ZmViN2Zj YjM2ZC5jcmwwHwYDVR0jBBgwFoAUyillkIzc/gOqzc6pF16meFzccGcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80MDVjMzI0MC1lNzE5LTQ1NWUtYTQ2ZC1kNGZl YjdmY2IzNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzxbM50OPCEAaNO1R6ztTV 61wgabotCnOSWAhzcCcqYhJu5KgUQSsLL3rEpVd3CRq/x9fIJn/TJbPuXhlmfbU7 eMsEaC/uBuLuO3fjLdxOHuOuo7oBngePiiRYUgjjfPHc+BmSoc82eYJAbDxWP77J mz8iTWKnMUkjgUqBO/9oFAgJg77OcYWVgtsLX9kLISCwDKta/KoH393gzMCRBIae chDQMCFDoiU1GWZn30Ojk7sUT+2ESrMd6F9K7/uVekVRqR/5D7M76CcCo8MGrsVg oRUbhQnI4AQav8EsEqiN8dt5ricbafGWuUAQdzzwdZvPvEGoBibYbtrRahqsM0kl -----END CERTIFICATE-----Generated at Fri Sep 4 21:20:16 2026 by rpki-client