$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft File: 0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft (raw, json) Hash identifier: SUFa/v66cW3DEW/HWlz6mhWY3GQYkSpoMhf8vk+XnI8= Subject key identifier: C1:6F:69:9C:07:EA:AA:B6:15:1E:3F:66:B6:F6:DE:87:18:6E:75:48 Authority key identifier: 37:58:C8:27:DF:A6:58:68:B4:EE:EF:1B:19:AB:13:35:8F:72:1F:12 Certificate issuer: /CN=0a0128b1-e1ee-43f5-b28c-147238fdbf1f Certificate serial: 010D0C9F4328584EE97B6B789D8590B6B0943740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft Manifest number: 010D0C9F4328584073A81AFCD522FA53D685A22E Signing time: Fri 21 Aug 2026 16:00:23 +0000 Manifest this update: Fri 21 Aug 2026 16:00:23 +0000 Manifest next update: Mon 24 Aug 2026 16:00:00 +0000 Files and hashes: 1: 0a0128b1-e1ee-43f5-b28c-147238fdbf1f.crl (hash: MXAZmHaqv3Nvaf1jKj6hRCGXRM+ftOhmzA5/nDm41YY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:7b:6b:78:9d:85:90:b6:b0:94:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a0128b1-e1ee-43f5-b28c-147238fdbf1f Validity Not Before: Aug 21 16:00:23 2026 GMT Not After : Aug 24 16:00:00 2026 GMT Subject: CN=9fde2a4b-cdc4-435b-b62d-8a66992f8b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:aa:e2:78:88:1c:21:f8:38:ce:5a:d2:2e:fe: b5:bf:a3:eb:a3:d5:4c:88:c1:02:d4:d9:b9:4e:b7: 46:38:9c:52:9f:ba:9e:58:89:5a:3a:99:42:d5:99: 88:59:f1:08:15:69:76:6d:92:55:33:b9:75:c5:82: 39:d9:58:2d:67:6e:52:8f:02:7c:4f:34:1b:2c:0a: b0:15:32:62:ea:96:58:04:77:01:fe:74:ce:fe:86: 2c:40:e4:77:2a:2e:69:c8:0b:99:4c:9d:27:d0:5a: 26:2e:bf:e2:18:68:1f:55:d7:df:60:b5:f1:6d:31: 38:e5:b4:20:26:da:cd:2b:7e:69:b4:59:f6:bb:d9: 98:2f:fc:db:72:ed:1e:89:56:8c:b4:eb:ae:70:03: bf:02:e5:4d:53:94:39:e0:2b:2d:a5:4f:12:6c:bc: 83:ea:4c:8d:cf:70:8c:52:70:ee:be:8e:3f:71:2c: 79:1b:8f:13:64:4b:aa:6b:07:9d:ad:7a:8a:a9:9f: 4b:10:37:7c:88:81:bd:51:66:e8:e4:c0:b8:b8:6d: 8b:f2:87:44:08:60:f2:0b:26:f0:1c:c5:cd:ab:65: e5:3f:72:86:2f:ce:2a:bc:15:5d:2a:d9:fc:93:c2: 6a:be:57:e3:37:4c:7c:c4:b3:e4:7d:80:da:92:2d: f3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6F:69:9C:07:EA:AA:B6:15:1E:3F:66:B6:F6:DE:87:18:6E:75:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.crl X509v3 Authority Key Identifier: keyid:37:58:C8:27:DF:A6:58:68:B4:EE:EF:1B:19:AB:13:35:8F:72:1F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:60:3a:0c:7a:f4:73:09:5e:59:fc:71:51:1c:32:d8:9d:fd: 28:cf:2c:fc:df:f5:62:e4:fe:03:99:84:c3:05:2e:9b:e8:9c: dd:6e:0a:4a:59:61:0a:27:02:4a:0b:39:b3:5c:1b:1d:4f:72: ac:87:b1:d5:4d:21:90:75:30:55:b5:e3:13:7d:37:86:27:4b: 1d:7b:8e:88:49:a3:34:2f:a3:e3:ec:07:a8:cb:d2:34:d3:c5: d4:d2:0b:64:d0:e0:d1:10:ff:e5:5e:c1:ff:32:dc:b7:35:ec: 38:97:65:8d:c6:ff:e9:c2:81:1d:a7:af:0e:7e:92:8d:05:0e: 04:1c:d9:89:18:f1:f9:52:1b:04:de:26:6c:ea:0c:41:0a:a8: 42:64:4b:c9:74:89:f6:1d:f2:7b:f8:cb:77:e4:d2:3a:1a:3b: f6:4d:3e:6c:68:5b:ef:ee:e3:c2:b5:83:1b:7c:de:fb:f3:94: 88:51:37:ad:40:45:01:82:9f:c9:7a:8c:fc:66:64:5a:25:cf: f0:b2:bf:1e:94:88:67:35:8e:82:7a:8b:f4:80:ed:9d:f4:69: ff:76:55:ff:ae:a7:bf:b1:54:b0:98:8d:46:8b:13:0e:4a:77: 43:26:31:b8:31:e9:15:84:11:43:39:b1:51:16:d1:71:11:4e: 73:40:48:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7pe2t4nYWQtrCUN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEwMTI4YjEtZTFlZS00M2Y1LWIyOGMtMTQ3MjM4ZmRi ZjFmMB4XDTI2MDgyMTE2MDAyM1oXDTI2MDgyNDE2MDAwMFowLzEtMCsGA1UEAxMk OWZkZTJhNGItY2RjNC00MzViLWI2MmQtOGE2Njk5MmY4YjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAharieIgcIfg4zlrSLv61v6Pro9VMiMEC1Nm5 TrdGOJxSn7qeWIlaOplC1ZmIWfEIFWl2bZJVM7l1xYI52VgtZ25SjwJ8TzQbLAqw FTJi6pZYBHcB/nTO/oYsQOR3Ki5pyAuZTJ0n0FomLr/iGGgfVdffYLXxbTE45bQg JtrNK35ptFn2u9mYL/zbcu0eiVaMtOuucAO/AuVNU5Q54CstpU8SbLyD6kyNz3CM UnDuvo4/cSx5G48TZEuqawedrXqKqZ9LEDd8iIG9UWbo5MC4uG2L8odECGDyCybw HMXNq2XlP3KGL84qvBVdKtn8k8JqvlfjN0x8xLPkfYDaki3zOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMFvaZwH6qq2FR4/Zrb23ocYbnVIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTAx MjhiMS1lMWVlLTQzZjUtYjI4Yy0xNDcyMzhmZGJmMWYvMGEwMTI4YjEtZTFlZS00 M2Y1LWIyOGMtMTQ3MjM4ZmRiZjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGEwMTI4YjEtZTFlZS00M2Y1LWIy OGMtMTQ3MjM4ZmRiZjFmLzBhMDEyOGIxLWUxZWUtNDNmNS1iMjhjLTE0NzIzOGZk YmYxZi5jcmwwHwYDVR0jBBgwFoAUN1jIJ9+mWGi07u8bGasTNY9yHxIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTAxMjhiMS1lMWVlLTQzZjUtYjI4Yy0xNDcy MzhmZGJmMWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdYDoMevRzCV5Z/HFRHDLY nf0ozyz83/Vi5P4DmYTDBS6b6JzdbgpKWWEKJwJKCzmzXBsdT3Ksh7HVTSGQdTBV teMTfTeGJ0sde46ISaM0L6Pj7Aeoy9I008XU0gtk0ODREP/lXsH/Mty3New4l2WN xv/pwoEdp68OfpKNBQ4EHNmJGPH5UhsE3iZs6gxBCqhCZEvJdIn2HfJ7+Mt35NI6 Gjv2TT5saFvv7uPCtYMbfN7785SIUTetQEUBgp/Jeoz8ZmRaJc/wsr8elIhnNY6C eov0gO2d9Gn/dlX/rqe/sVSwmI1GixMOSndDJjG4MekVhBFDObFRFtFxEU5zQEgu -----END CERTIFICATE-----Generated at Sat Aug 22 17:18:41 2026 by rpki-client