$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.mft File: fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.mft (raw, json) Hash identifier: bA7VxYYulncDGc/uEaH07yYbI3OkGBgg2ppei5EDB40= Subject key identifier: D2:29:64:DD:22:76:A8:09:58:75:2D:87:95:22:EE:19:AE:87:BA:C3 Authority key identifier: 47:BA:AE:CC:ED:22:9C:D5:B6:9E:64:92:39:8E:4D:24:16:73:E8:11 Certificate issuer: /CN=fa588bad-d5a1-4de3-bb59-5ab19df8c1f0 Certificate serial: 010D0C9F4328584F77FA1A55CCC92C558978DBC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.mft Manifest number: 010D0C9F4328584EBD060F0BAF71A6718C33C7A3 Signing time: Sun 11 Oct 2026 17:00:23 +0000 Manifest this update: Sun 11 Oct 2026 17:00:23 +0000 Manifest next update: Tue 13 Oct 2026 17:00:00 +0000 Files and hashes: 1: fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.crl (hash: 5OCrH1NRB+b/vrcwVhsdUYkHQD0bi8wmtSRpzged1lI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:fa:1a:55:cc:c9:2c:55:89:78:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa588bad-d5a1-4de3-bb59-5ab19df8c1f0 Validity Not Before: Oct 11 17:00:23 2026 GMT Not After : Oct 13 17:00:00 2026 GMT Subject: CN=d590cd72-0ee3-41c4-b2cb-cfc1c33f3ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:87:ff:9e:97:5e:b3:f3:0d:1f:04:5a:72:a9: 90:00:30:2f:dc:f5:59:cc:31:47:98:3c:25:71:f1: 98:0c:90:8d:a6:e4:c5:12:6e:ed:0c:52:60:f8:e8: 86:81:63:1d:43:ec:b1:01:fc:82:41:ad:93:9c:fe: cf:89:8a:4d:86:f9:7b:0d:1b:1f:40:29:4a:3c:8f: eb:0d:fc:ff:ed:7f:0a:77:8c:38:d8:a5:e8:2e:51: a6:fe:32:6b:d3:3b:7e:ed:21:53:d0:3c:33:ca:0a: 55:5f:c7:b4:2e:70:f1:38:96:5c:00:57:7d:0a:9b: 27:25:84:ff:b1:4a:4f:a8:39:61:f8:f9:1b:7d:84: e6:20:dc:e7:e9:b1:79:de:36:65:e0:4f:26:8e:df: 37:10:1b:4d:58:ab:1d:d8:62:b7:08:90:d9:84:e0: 08:74:76:a9:75:d8:27:db:d1:df:41:3a:d1:46:2c: 02:b6:49:3e:56:84:d7:f6:3f:78:1a:a0:17:f3:67: 45:40:00:28:fe:55:e8:6e:2f:cc:9f:99:f4:2c:a3: 6a:14:19:14:7a:57:f2:7a:18:29:44:b8:f1:51:5e: c8:96:b6:11:05:7b:d3:26:98:c4:bd:88:b9:25:17: 5b:14:bd:cf:57:c8:9d:ca:46:2f:c9:22:16:6e:e8: a0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:29:64:DD:22:76:A8:09:58:75:2D:87:95:22:EE:19:AE:87:BA:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.crl X509v3 Authority Key Identifier: keyid:47:BA:AE:CC:ED:22:9C:D5:B6:9E:64:92:39:8E:4D:24:16:73:E8:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:ed:d8:1e:68:8d:78:c1:99:fc:e4:6c:20:64:98:9d:c4:3d: 79:fa:5c:4d:da:4d:01:b1:56:88:7f:3c:18:4a:93:33:df:9a: f0:26:f5:24:d8:41:42:57:fc:6b:dd:3c:ca:32:47:1c:eb:a9: 5c:8a:ee:64:7b:05:9d:20:c3:68:3a:9f:0b:91:55:46:d5:6f: 63:a7:9f:64:2d:e3:97:66:76:1d:ec:1e:66:77:01:aa:5c:3e: 2f:68:2a:f3:ae:35:68:36:66:7d:71:f5:12:62:eb:23:3c:55: ff:a4:a5:7b:8a:e9:0e:dc:a0:ae:56:0d:50:f8:62:a0:62:74: 1b:77:32:e5:0b:75:65:fa:bb:7c:72:8d:b4:1b:91:fc:5d:10: 60:d5:b2:ee:29:d4:73:c9:67:a7:dd:3b:5f:c8:6a:d2:43:87: 43:c5:1c:95:ec:0c:97:8b:6b:7e:e2:90:8e:49:81:de:36:58: 1d:b9:78:27:f3:18:07:df:62:86:f8:cd:f4:d5:28:15:1f:48: dd:c2:c1:b2:55:31:d1:78:87:e8:17:9f:3b:67:d9:db:97:e6: 4c:6c:e4:cd:db:5c:b8:c2:7b:43:12:45:5c:e0:26:24:d4:7d: e8:52:9c:21:4c:74:6b:57:13:8e:0a:13:de:56:5d:09:88:13: 38:fc:a6:fc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE93+hpVzMksVYl428AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmE1ODhiYWQtZDVhMS00ZGUzLWJiNTktNWFiMTlkZjhj MWYwMB4XDTI2MTAxMTE3MDAyM1oXDTI2MTAxMzE3MDAwMFowLzEtMCsGA1UEAxMk ZDU5MGNkNzItMGVlMy00MWM0LWIyY2ItY2ZjMWMzM2YzZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYf/npdes/MNHwRacqmQADAv3PVZzDFHmDwl cfGYDJCNpuTFEm7tDFJg+OiGgWMdQ+yxAfyCQa2TnP7PiYpNhvl7DRsfQClKPI/r Dfz/7X8Kd4w42KXoLlGm/jJr0zt+7SFT0DwzygpVX8e0LnDxOJZcAFd9CpsnJYT/ sUpPqDlh+PkbfYTmINzn6bF53jZl4E8mjt83EBtNWKsd2GK3CJDZhOAIdHapddgn 29HfQTrRRiwCtkk+VoTX9j94GqAX82dFQAAo/lXobi/Mn5n0LKNqFBkUelfyehgp RLjxUV7IlrYRBXvTJpjEvYi5JRdbFL3PV8idykYvySIWbuiglQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNIpZN0idqgJWHUth5Ui7hmuh7rDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mYTU4 OGJhZC1kNWExLTRkZTMtYmI1OS01YWIxOWRmOGMxZjAvZmE1ODhiYWQtZDVhMS00 ZGUzLWJiNTktNWFiMTlkZjhjMWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZmE1ODhiYWQtZDVhMS00ZGUzLWJi NTktNWFiMTlkZjhjMWYwL2ZhNTg4YmFkLWQ1YTEtNGRlMy1iYjU5LTVhYjE5ZGY4 YzFmMC5jcmwwHwYDVR0jBBgwFoAUR7quzO0inNW2nmSSOY5NJBZz6BEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9mYTU4OGJhZC1kNWExLTRkZTMtYmI1OS01YWIx OWRmOGMxZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCb7dgeaI14wZn85GwgZJid xD15+lxN2k0BsVaIfzwYSpMz35rwJvUk2EFCV/xr3TzKMkcc66lciu5kewWdIMNo Op8LkVVG1W9jp59kLeOXZnYd7B5mdwGqXD4vaCrzrjVoNmZ9cfUSYusjPFX/pKV7 iukO3KCuVg1Q+GKgYnQbdzLlC3Vl+rt8co20G5H8XRBg1bLuKdRzyWen3TtfyGrS Q4dDxRyV7AyXi2t+4pCOSYHeNlgduXgn8xgH32KG+M301SgVH0jdwsGyVTHReIfo F587Z9nbl+ZMbOTN21y4wntDEkVc4CYk1H3oUpwhTHRrVxOOChPeVl0JiBM4/Kb8 -----END CERTIFICATE-----Generated at Mon Oct 12 15:27:05 2026 by rpki-client