$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4003cd9a-b67b-40a8-b472-590b7431d0b9/4003cd9a-b67b-40a8-b472-590b7431d0b9.mft File: 4003cd9a-b67b-40a8-b472-590b7431d0b9.mft (raw, json) Hash identifier: Lh+EXpTz8JODLwudfwJZiqvB4ESvAv9yvceAHwxlouY= Subject key identifier: AF:BD:1D:C6:63:CA:A2:4D:E9:95:9A:86:D6:F5:CD:5A:0A:08:69:42 Authority key identifier: 7B:B3:3A:F0:A2:9E:24:DB:1C:BD:5B:AE:C7:94:11:0C:E1:CA:32:A8 Certificate issuer: /CN=4003cd9a-b67b-40a8-b472-590b7431d0b9 Certificate serial: 010D0C9F4328584F7B1E260AA10B893B47B66300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4003cd9a-b67b-40a8-b472-590b7431d0b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4003cd9a-b67b-40a8-b472-590b7431d0b9/4003cd9a-b67b-40a8-b472-590b7431d0b9.mft Manifest number: 010D0C9F4328584F540B848E6C0F030CC964308E Signing time: Mon 12 Oct 2026 20:00:24 +0000 Manifest this update: Mon 12 Oct 2026 20:00:24 +0000 Manifest next update: Thu 15 Oct 2026 20:00:00 +0000 Files and hashes: 1: 4003cd9a-b67b-40a8-b472-590b7431d0b9.crl (hash: LEEXxyoXXTKFAmt3Fqlmz8ymw3rX5sx2etKuRSVqmzc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4003cd9a-b67b-40a8-b472-590b7431d0b9/4003cd9a-b67b-40a8-b472-590b7431d0b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4003cd9a-b67b-40a8-b472-590b7431d0b9/4003cd9a-b67b-40a8-b472-590b7431d0b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4003cd9a-b67b-40a8-b472-590b7431d0b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:1e:26:0a:a1:0b:89:3b:47:b6:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4003cd9a-b67b-40a8-b472-590b7431d0b9 Validity Not Before: Oct 12 20:00:24 2026 GMT Not After : Oct 15 20:00:00 2026 GMT Subject: CN=b757408c-cc97-4f1d-9845-001b7e5fa01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:19:20:ce:bc:e4:eb:51:f4:96:b1:0e:fe:da: 35:fe:18:04:ac:f4:63:bc:83:55:5b:f5:75:79:8f: 87:77:85:46:ec:05:b9:90:93:52:0e:be:1a:31:a0: a0:cc:d7:da:ee:e6:92:0b:2a:0e:34:4c:e2:60:96: e8:7e:37:96:1b:05:44:31:c9:94:4b:ad:b9:a9:93: 18:a8:42:7d:1e:74:f1:3e:ca:68:63:ce:71:b0:2e: 2b:16:1f:11:57:ba:c2:fe:db:a0:c4:18:d6:26:ae: 86:da:df:16:aa:61:a5:9e:05:09:82:fc:45:3d:0b: bb:65:8e:da:f7:d6:0a:7c:a0:d4:2a:68:ba:d9:cc: 1c:e3:8b:73:68:1f:53:34:3a:64:81:67:a1:d9:fa: 66:2e:26:a5:4f:38:09:82:78:82:63:2d:34:fa:85: 2c:86:ab:23:78:a2:37:84:c4:f1:7f:f0:31:22:c6: 55:3f:f1:61:7d:52:65:53:ef:78:c8:23:fd:0c:96: 9d:80:92:e3:cc:9f:df:b6:d5:23:71:4f:6e:20:3d: bc:40:48:cd:0a:dd:ac:06:19:cb:ea:16:f2:29:1a: e0:3c:a4:cc:93:56:e5:7a:be:e4:6e:01:65:9e:fb: 31:eb:39:b3:29:c8:3e:4c:2b:9f:9d:8a:09:e7:da: 68:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BD:1D:C6:63:CA:A2:4D:E9:95:9A:86:D6:F5:CD:5A:0A:08:69:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4003cd9a-b67b-40a8-b472-590b7431d0b9/4003cd9a-b67b-40a8-b472-590b7431d0b9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4003cd9a-b67b-40a8-b472-590b7431d0b9/4003cd9a-b67b-40a8-b472-590b7431d0b9.crl X509v3 Authority Key Identifier: keyid:7B:B3:3A:F0:A2:9E:24:DB:1C:BD:5B:AE:C7:94:11:0C:E1:CA:32:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4003cd9a-b67b-40a8-b472-590b7431d0b9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e7:ef:b4:bc:c5:8c:83:24:e4:a7:78:30:cc:19:f8:c1:9d: 0b:6d:62:e7:4e:22:45:96:34:04:bd:13:83:04:35:6e:ca:ac: 98:82:56:40:63:2a:5b:ba:c1:42:2a:1e:bf:0d:87:81:ab:b6: cf:ae:21:22:8a:a7:ce:d2:7c:64:9f:58:77:51:1e:2e:a0:6b: 8a:8f:30:b7:25:37:4b:e4:7d:79:8b:b5:e5:49:47:19:b1:97: f8:1f:eb:e1:1e:c9:3d:98:39:1a:b6:0f:f7:a9:be:77:1b:0d: 97:9e:e3:0d:d4:bb:23:69:03:c2:05:1d:57:a3:3e:74:0e:fa: d4:d7:22:64:9d:70:7a:1b:4a:1c:03:97:a6:53:39:90:c0:85: 46:d8:b6:46:e5:e6:72:ee:2c:12:c7:55:9f:f0:4f:b7:5f:f5: 42:c7:62:45:14:fa:a8:f3:d2:13:6d:89:83:e1:58:bb:17:7f: 9e:29:c3:d7:ed:80:8a:a0:85:fa:15:84:45:c0:ae:6e:d4:cf: d4:68:c6:aa:35:32:65:48:b1:07:ed:75:f2:92:78:a4:66:df: af:88:17:df:df:e8:f4:a2:15:6d:7f:5a:4a:56:ed:7a:4b:6e: 18:04:50:f5:8c:df:8c:7f:5f:77:3a:f1:a7:fc:ba:3a:50:d8: 48:0d:59:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE97HiYKoQuJO0e2YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwM2NkOWEtYjY3Yi00MGE4LWI0NzItNTkwYjc0MzFk MGI5MB4XDTI2MTAxMjIwMDAyNFoXDTI2MTAxNTIwMDAwMFowLzEtMCsGA1UEAxMk Yjc1NzQwOGMtY2M5Ny00ZjFkLTk4NDUtMDAxYjdlNWZhMDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRkgzrzk61H0lrEO/to1/hgErPRjvINVW/V1 eY+Hd4VG7AW5kJNSDr4aMaCgzNfa7uaSCyoONEziYJbofjeWGwVEMcmUS625qZMY qEJ9HnTxPspoY85xsC4rFh8RV7rC/tugxBjWJq6G2t8WqmGlngUJgvxFPQu7ZY7a 99YKfKDUKmi62cwc44tzaB9TNDpkgWeh2fpmLialTzgJgniCYy00+oUshqsjeKI3 hMTxf/AxIsZVP/FhfVJlU+94yCP9DJadgJLjzJ/fttUjcU9uID28QEjNCt2sBhnL 6hbyKRrgPKTMk1bler7kbgFlnvsx6zmzKcg+TCufnYoJ59popQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK+9HcZjyqJN6ZWahtb1zVoKCGlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MDAz Y2Q5YS1iNjdiLTQwYTgtYjQ3Mi01OTBiNzQzMWQwYjkvNDAwM2NkOWEtYjY3Yi00 MGE4LWI0NzItNTkwYjc0MzFkMGI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDAwM2NkOWEtYjY3Yi00MGE4LWI0 NzItNTkwYjc0MzFkMGI5LzQwMDNjZDlhLWI2N2ItNDBhOC1iNDcyLTU5MGI3NDMx ZDBiOS5jcmwwHwYDVR0jBBgwFoAUe7M68KKeJNscvVuux5QRDOHKMqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MDAzY2Q5YS1iNjdiLTQwYTgtYjQ3Mi01OTBi NzQzMWQwYjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBz5++0vMWMgyTkp3gwzBn4 wZ0LbWLnTiJFljQEvRODBDVuyqyYglZAYypbusFCKh6/DYeBq7bPriEiiqfO0nxk n1h3UR4uoGuKjzC3JTdL5H15i7XlSUcZsZf4H+vhHsk9mDkatg/3qb53Gw2XnuMN 1LsjaQPCBR1Xoz50DvrU1yJknXB6G0ocA5emUzmQwIVG2LZG5eZy7iwSx1Wf8E+3 X/VCx2JFFPqo89ITbYmD4Vi7F3+eKcPX7YCKoIX6FYRFwK5u1M/UaMaqNTJlSLEH 7XXyknikZt+viBff3+j0ohVtf1pKVu16S24YBFD1jN+Mf193OvGn/Lo6UNhIDVlK -----END CERTIFICATE-----Generated at Mon Oct 12 23:17:38 2026 by rpki-client