$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft File: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft (raw, json) Hash identifier: 2AAXOTv0yexBCcjQMOXhiA9azB4xy22bhayUrPyX6yU= Subject key identifier: D3:0C:CE:05:05:39:E7:42:58:FE:E5:C1:6A:AF:8C:CB:E4:65:62:41 Authority key identifier: 14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 Certificate issuer: /CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Certificate serial: 010D0C9F4328584EF37C5AC6FFB2B4D2D02CB860 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft Manifest number: 010D0C9F4328584073A8433349A69053F9B88E31 Signing time: Tue 25 Aug 2026 06:00:23 +0000 Manifest this update: Tue 25 Aug 2026 06:00:23 +0000 Manifest next update: Thu 27 Aug 2026 06:00:00 +0000 Files and hashes: 1: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl (hash: QXTwendoRk+rTzTQ2kigUTyZEv0JI8PWG8tiV8V4F58=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f3:7c:5a:c6:ff:b2:b4:d2:d0:2c:b8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Validity Not Before: Aug 25 06:00:23 2026 GMT Not After : Aug 27 06:00:00 2026 GMT Subject: CN=c30ac6ef-9292-47f5-8f33-222a13353a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:36:11:d5:cd:4a:68:c9:29:fc:db:75:2c: 97:f7:9b:59:64:e2:3f:72:04:3f:78:ae:3d:37:bb: cc:e9:72:f7:cb:80:e0:f2:e3:c3:2d:a6:b1:52:e5: 87:3b:49:b7:ef:e1:c2:f3:d6:fb:59:3c:64:81:4d: 00:67:d4:7e:6d:b8:cb:97:65:e8:54:69:b2:4a:38: 25:96:91:c5:de:87:41:79:f6:c9:f1:cf:4d:cc:67: 5c:30:4e:4e:c0:d6:c4:d2:d4:1a:f1:00:4a:76:74: 9d:5c:dd:cc:20:d2:7f:fa:0d:56:18:89:b4:91:d8: 03:60:1c:7c:c3:c0:89:5f:7b:3d:bf:e7:ad:1d:7b: 29:eb:cb:54:94:16:cd:c0:05:bb:a5:bd:fa:ac:52: cf:58:32:a8:cc:30:33:18:9d:98:0b:25:78:75:6f: 6a:65:93:6c:30:dc:34:66:20:b8:d3:65:93:82:f1: 2c:8f:0e:74:32:6c:cf:10:09:61:07:08:85:e6:8a: 54:89:42:fc:04:4d:f6:89:cc:71:62:67:88:28:6f: 9f:3e:53:90:cf:9b:d5:b7:4b:c3:f4:e5:81:31:8d: d4:eb:d0:11:06:32:36:13:57:55:6b:1b:1c:ac:4c: f0:3b:d6:83:08:c6:d2:95:ba:eb:ac:34:85:2f:a6: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0C:CE:05:05:39:E7:42:58:FE:E5:C1:6A:AF:8C:CB:E4:65:62:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl X509v3 Authority Key Identifier: keyid:14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:07:1f:c4:ce:6f:d8:4c:4d:01:cf:b6:3a:e4:41:a1:a0:bd: 09:bb:d9:04:0f:a2:2d:64:34:f8:8b:2e:5b:4b:4d:fb:9d:97: 39:d7:da:37:bd:28:2a:f4:4f:3c:91:53:b7:3f:08:81:ef:4e: 9f:c0:f0:a4:73:56:dd:14:f7:7a:b6:ed:92:ac:85:6f:7f:8c: 91:2f:0a:85:9d:6a:f5:89:6a:8e:1b:43:f4:81:b0:c2:ae:54: b0:cb:b2:32:31:15:84:40:4a:4f:b7:be:57:a7:83:74:fa:54: ac:c7:9f:d4:7f:e3:dd:18:52:20:42:19:17:f0:80:d9:dd:e9: f5:70:32:e1:a8:a5:b2:67:23:02:36:a8:d8:cc:eb:d1:2c:2d: 9a:84:58:8d:83:e6:ba:6b:c7:cf:2e:8c:60:bc:8c:10:02:49: c2:25:ac:90:a4:4a:0f:f6:1a:9a:5f:b3:52:03:4e:fe:84:7f: 38:57:05:10:05:16:c1:f9:3f:fc:09:6e:d7:8c:b4:6c:2d:4b: 41:f8:85:e7:0e:4a:7a:8c:10:62:e3:b3:c8:18:95:1e:23:b3: 05:d8:54:61:f5:6e:b8:d2:e5:3e:e2:4d:a6:4f:1d:fc:9f:87: 94:c7:30:23:ce:94:ee:5e:2c:46:14:5f:15:2d:40:be:6b:67: f1:9d:be:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7zfFrG/7K00tAsuGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhMWNmMzQtOWRlNi00M2IyLThjNmUtZWZiMjdhOWFj NWFlMB4XDTI2MDgyNTA2MDAyM1oXDTI2MDgyNzA2MDAwMFowLzEtMCsGA1UEAxMk YzMwYWM2ZWYtOTI5Mi00N2Y1LThmMzMtMjIyYTEzMzUzYTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPw2EdXNSmjJKfzbdSyX95tZZOI/cgQ/eK49 N7vM6XL3y4Dg8uPDLaaxUuWHO0m37+HC89b7WTxkgU0AZ9R+bbjLl2XoVGmySjgl lpHF3odBefbJ8c9NzGdcME5OwNbE0tQa8QBKdnSdXN3MINJ/+g1WGIm0kdgDYBx8 w8CJX3s9v+etHXsp68tUlBbNwAW7pb36rFLPWDKozDAzGJ2YCyV4dW9qZZNsMNw0 ZiC402WTgvEsjw50MmzPEAlhBwiF5opUiUL8BE32icxxYmeIKG+fPlOQz5vVt0vD 9OWBMY3U69ARBjI2E1dVaxscrEzwO9aDCMbSlbrrrDSFL6YEdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNMMzgUFOedCWP7lwWqvjMvkZWJBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMmEx Y2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIyN2E5YWM1YWUvYTJhMWNmMzQtOWRlNi00 M2IyLThjNmUtZWZiMjdhOWFjNWFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTJhMWNmMzQtOWRlNi00M2IyLThj NmUtZWZiMjdhOWFjNWFlL2EyYTFjZjM0LTlkZTYtNDNiMi04YzZlLWVmYjI3YTlh YzVhZS5jcmwwHwYDVR0jBBgwFoAUFHGsHivolCUJQfzWWQdMo7XPuzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMmExY2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIy N2E5YWM1YWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhBx/Ezm/YTE0Bz7Y65EGh oL0Ju9kED6ItZDT4iy5bS037nZc519o3vSgq9E88kVO3PwiB706fwPCkc1bdFPd6 tu2SrIVvf4yRLwqFnWr1iWqOG0P0gbDCrlSwy7IyMRWEQEpPt75Xp4N0+lSsx5/U f+PdGFIgQhkX8IDZ3en1cDLhqKWyZyMCNqjYzOvRLC2ahFiNg+a6a8fPLoxgvIwQ AknCJayQpEoP9hqaX7NSA07+hH84VwUQBRbB+T/8CW7XjLRsLUtB+IXnDkp6jBBi 47PIGJUeI7MF2FRh9W640uU+4k2mTx38n4eUxzAjzpTuXixGFF8VLUC+a2fxnb7Z -----END CERTIFICATE-----Generated at Wed Aug 26 07:33:04 2026 by rpki-client