$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft File: e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft (raw, json) Hash identifier: dzmpniVcrAUCPRlhS0ktdsrqnXTvM5l67iEz4BCqLj4= Subject key identifier: C3:60:61:91:4E:71:E4:59:8D:09:1B:ED:B0:5E:29:CD:95:50:1A:C3 Authority key identifier: 78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B Certificate issuer: /CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01 Certificate serial: 010D0C9F4328584EF44CD79A341577B3966CB6A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft Manifest number: 010D0C9F4328584073A855E0A9B391A20808E639 Signing time: Tue 25 Aug 2026 13:00:23 +0000 Manifest this update: Tue 25 Aug 2026 13:00:23 +0000 Manifest next update: Thu 27 Aug 2026 13:00:00 +0000 Files and hashes: 1: e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl (hash: gyL8LT/40ECbqoDMYZO9whEjYaGXbM3OMOxI1wVTMEI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:d7:9a:34:15:77:b3:96:6c:b6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01 Validity Not Before: Aug 25 13:00:23 2026 GMT Not After : Aug 27 13:00:00 2026 GMT Subject: CN=b686eba2-6a86-4312-9850-16f7002959c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:30:a8:44:52:9b:1d:ee:4c:dc:60:8b:ef:b3: 15:7d:bb:90:0a:ed:29:ef:72:6e:9b:84:ef:e0:fc: 9d:13:30:75:1f:3f:6c:91:7b:e2:67:74:eb:14:79: b8:9e:d8:a0:11:c6:df:8d:67:f1:27:15:b2:0c:61: 41:9a:ce:92:39:1d:17:c4:13:17:5a:38:6d:7b:eb: dd:35:48:2d:65:df:9c:ea:b9:3f:23:47:81:ef:34: 14:1f:7d:8d:38:05:6d:7f:e3:a0:72:ef:8c:68:f4: f4:ca:d8:b9:52:eb:cf:95:34:33:7e:da:c5:af:03: f7:d9:e5:21:0f:2d:07:22:de:aa:a7:32:52:8b:a9: 58:ad:a0:3a:e1:20:e5:97:fa:b6:44:42:47:2d:4b: c7:a2:6a:42:82:b3:77:db:03:db:39:5f:2b:5f:43: 94:96:f7:4a:3f:b6:7b:d7:87:73:fa:f7:4e:27:f5: 32:09:68:de:12:fe:09:1e:5c:c6:93:3e:5f:0d:15: 00:a1:34:20:77:0a:ae:cb:b5:96:48:d4:a5:10:8e: 66:18:54:f8:6d:a6:d6:c6:95:75:e3:9d:80:a5:ba: 0b:2c:85:b7:1d:ab:32:43:4b:f6:be:e4:68:b9:92: 30:c8:f2:c8:08:a6:24:94:93:54:0b:01:a8:2a:ff: 51:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:60:61:91:4E:71:E4:59:8D:09:1B:ED:B0:5E:29:CD:95:50:1A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl X509v3 Authority Key Identifier: keyid:78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:cc:51:91:1c:3a:a3:47:9c:55:59:a2:6d:c8:fc:07:de:d5: 8b:cd:f1:40:c1:f2:76:8d:31:27:13:4c:4d:47:bb:3a:e1:b6: 2f:11:3d:fe:99:12:2d:c6:1a:c0:4f:60:30:11:8b:6b:07:f7: 07:23:c4:56:c6:9f:25:e8:8b:08:30:fc:7d:37:23:03:5d:66: 4f:63:2a:96:4d:ca:25:e3:b2:17:e1:86:75:d9:9a:7c:a3:0b: f3:00:01:60:9e:ec:3e:5c:31:ee:c2:c1:e7:3c:7f:b1:23:eb: df:24:b3:47:e5:1e:17:89:1e:30:aa:7e:b2:8d:5f:fe:7e:dc: 71:c8:46:d1:31:07:23:ce:fe:dc:a5:8d:65:74:03:a2:bb:8d: ba:a2:0b:84:9a:5b:83:30:b4:07:e6:42:2c:de:20:f1:7a:9c: 32:1f:fe:04:d7:45:9b:8a:66:7f:d3:51:bb:dd:14:ff:d8:80: a1:ed:6a:80:9c:b7:32:08:7c:8e:30:fd:ef:d8:98:42:74:dd: d9:c4:6b:9b:9f:a9:5a:59:48:72:bd:2c:19:96:85:6d:1a:3b: 0d:a0:bb:a3:f8:83:e2:f1:b9:27:8f:db:6e:0b:2f:ae:95:b2: dd:1d:64:ef:d5:08:d6:d0:ff:68:99:b3:8c:cc:60:4b:7e:49: fd:d9:c7:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE70TNeaNBV3s5ZstqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjMjllMzgtYThkZi00MTVjLWEyOGItYTE0NjVmOWE0 ZDAxMB4XDTI2MDgyNTEzMDAyM1oXDTI2MDgyNzEzMDAwMFowLzEtMCsGA1UEAxMk YjY4NmViYTItNmE4Ni00MzEyLTk4NTAtMTZmNzAwMjk1OWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzCoRFKbHe5M3GCL77MVfbuQCu0p73Jum4Tv 4PydEzB1Hz9skXviZ3TrFHm4ntigEcbfjWfxJxWyDGFBms6SOR0XxBMXWjhte+vd NUgtZd+c6rk/I0eB7zQUH32NOAVtf+Ogcu+MaPT0yti5UuvPlTQzftrFrwP32eUh Dy0HIt6qpzJSi6lYraA64SDll/q2REJHLUvHompCgrN32wPbOV8rX0OUlvdKP7Z7 14dz+vdOJ/UyCWjeEv4JHlzGkz5fDRUAoTQgdwquy7WWSNSlEI5mGFT4babWxpV1 452ApboLLIW3HasyQ0v2vuRouZIwyPLICKYklJNUCwGoKv9RuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMNgYZFOceRZjQkb7bBeKc2VUBrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lOGMy OWUzOC1hOGRmLTQxNWMtYTI4Yi1hMTQ2NWY5YTRkMDEvZThjMjllMzgtYThkZi00 MTVjLWEyOGItYTE0NjVmOWE0ZDAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZThjMjllMzgtYThkZi00MTVjLWEy OGItYTE0NjVmOWE0ZDAxL2U4YzI5ZTM4LWE4ZGYtNDE1Yy1hMjhiLWExNDY1Zjlh NGQwMS5jcmwwHwYDVR0jBBgwFoAUeAe6NOGFy8MpALrpYvOu5kGzMgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lOGMyOWUzOC1hOGRmLTQxNWMtYTI4Yi1hMTQ2 NWY5YTRkMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNzFGRHDqjR5xVWaJtyPwH 3tWLzfFAwfJ2jTEnE0xNR7s64bYvET3+mRItxhrAT2AwEYtrB/cHI8RWxp8l6IsI MPx9NyMDXWZPYyqWTcol47IX4YZ12Zp8owvzAAFgnuw+XDHuwsHnPH+xI+vfJLNH 5R4XiR4wqn6yjV/+ftxxyEbRMQcjzv7cpY1ldAOiu426oguEmluDMLQH5kIs3iDx epwyH/4E10WbimZ/01G73RT/2ICh7WqAnLcyCHyOMP3v2JhCdN3ZxGubn6laWUhy vSwZloVtGjsNoLuj+IPi8bknj9tuCy+ulbLdHWTv1QjW0P9ombOMzGBLfkn92ccy -----END CERTIFICATE-----Generated at Wed Aug 26 13:07:50 2026 by rpki-client