$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft File: a8f311de-c6af-4322-a952-b9c622f40e51.mft (raw, json) Hash identifier: NjCBL6d643vdVBqUZrcdoyXobeIRxua9hjluzhF5Ops= Subject key identifier: B1:83:61:0F:4B:B1:44:20:E3:D2:8E:95:46:01:FE:45:1C:3B:98:AF Authority key identifier: 5B:33:AF:7B:E9:7F:AE:2F:15:58:9C:D7:2B:AE:E0:5F:57:47:0A:F5 Certificate issuer: /CN=a8f311de-c6af-4322-a952-b9c622f40e51 Certificate serial: 010D0C9F4328584EE9B6F561D626CD3FAF88AB60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft Manifest number: 010D0C9F4328584073A81B468D491D97A5AB892E Signing time: Fri 21 Aug 2026 18:00:23 +0000 Manifest this update: Fri 21 Aug 2026 18:00:23 +0000 Manifest next update: Mon 24 Aug 2026 18:00:00 +0000 Files and hashes: 1: a8f311de-c6af-4322-a952-b9c622f40e51.crl (hash: HY0Odw3hm8T4TEv/cj8BjKn5a2g8kVnaVjbRgU8rLNY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:b6:f5:61:d6:26:cd:3f:af:88:ab:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f311de-c6af-4322-a952-b9c622f40e51 Validity Not Before: Aug 21 18:00:23 2026 GMT Not After : Aug 24 18:00:00 2026 GMT Subject: CN=bcebaf3f-0177-4035-a01f-a189b5ebd383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:8a:93:0b:d3:20:ab:f8:50:55:73:55:c1: 12:f1:c8:42:a6:00:fa:2f:ca:04:06:cf:1e:aa:89: 8d:10:76:a4:31:7a:be:c6:15:66:35:74:ac:4e:d9: 0d:36:39:f6:32:37:c6:8c:20:fd:c9:25:72:18:79: b1:fe:9f:72:41:a5:f6:38:e8:0e:c2:8a:63:5c:af: ea:ab:7d:d5:b2:0e:8a:26:59:3a:88:00:30:fe:58: 60:63:ef:e5:4a:ee:b1:98:80:23:2b:27:43:c2:54: 92:cb:c1:55:f6:ae:fe:20:60:b9:b8:3e:a4:8a:86: 7b:07:e1:51:0f:b1:5b:2b:54:da:00:e4:ee:67:a4: ca:71:b8:ee:6a:ff:1b:b7:f6:09:37:1b:48:9a:62: e7:21:c8:44:5a:8e:5c:6f:a6:3c:27:fc:d3:0d:7c: b3:ef:e7:81:a9:0a:72:e7:8a:0f:19:66:f4:c4:ad: 44:94:59:23:95:38:8d:9a:a3:04:e0:be:9d:1e:1b: d8:e8:4a:62:ef:ed:b0:60:70:2e:dd:a9:0f:51:ef: 7c:7d:c7:7c:01:80:13:1e:35:9e:23:4e:95:54:79: cb:97:3b:31:ef:b7:7d:1a:54:67:7d:27:32:10:eb: 13:1d:44:80:68:5f:d2:8e:1c:a2:1e:ad:97:4e:6d: 5e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:83:61:0F:4B:B1:44:20:E3:D2:8E:95:46:01:FE:45:1C:3B:98:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.crl X509v3 Authority Key Identifier: keyid:5B:33:AF:7B:E9:7F:AE:2F:15:58:9C:D7:2B:AE:E0:5F:57:47:0A:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:61:b9:51:46:9d:4d:20:5e:35:7b:f6:c8:7c:e4:d6:8f:b9: 02:6d:24:f7:1f:7c:09:63:88:e9:2e:a8:87:8f:52:9c:46:4d: 78:e4:4a:09:6f:6c:c1:27:83:42:e1:13:d8:58:1a:97:14:e9: 45:2c:71:17:9c:a8:41:ef:d6:9f:25:50:ca:d7:ef:b0:09:af: 31:bd:56:0c:87:5d:09:07:59:e9:6d:e5:d2:e6:fd:a6:0f:44: d9:fd:8f:7a:0d:f5:76:f9:79:92:65:ee:65:b3:0f:33:3c:d2: 5a:92:ee:4a:05:8a:44:52:ab:fc:67:9d:16:c4:18:9a:c1:d3: d7:23:80:2d:15:52:57:0c:79:4f:ea:9e:17:60:fd:37:09:b5: f8:1c:8b:a6:bc:44:a0:7b:a3:07:26:37:19:5f:c7:70:c4:88: 40:99:58:a7:f1:be:8d:b1:95:ef:c5:d2:7f:cf:fc:54:8b:61: f3:10:f8:cd:17:0a:6e:36:cf:b8:4f:26:5f:7b:4a:5c:ae:de: 78:86:9f:eb:64:f9:bc:d2:86:5e:b6:4f:af:8f:c1:4d:b0:93: 70:22:83:d4:7d:7d:44:ab:c7:f1:89:7f:87:17:e0:83:e0:ae: 2a:ab:f4:5c:dd:6b:fc:71:73:6d:e9:7b:94:39:18:42:14:9e: 9c:d2:8a:ea -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7ptvVh1ibNP6+Iq2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThmMzExZGUtYzZhZi00MzIyLWE5NTItYjljNjIyZjQw ZTUxMB4XDTI2MDgyMTE4MDAyM1oXDTI2MDgyNDE4MDAwMFowLzEtMCsGA1UEAxMk YmNlYmFmM2YtMDE3Ny00MDM1LWEwMWYtYTE4OWI1ZWJkMzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrWKkwvTIKv4UFVzVcES8chCpgD6L8oEBs8e qomNEHakMXq+xhVmNXSsTtkNNjn2MjfGjCD9ySVyGHmx/p9yQaX2OOgOwopjXK/q q33Vsg6KJlk6iAAw/lhgY+/lSu6xmIAjKydDwlSSy8FV9q7+IGC5uD6kioZ7B+FR D7FbK1TaAOTuZ6TKcbjuav8bt/YJNxtImmLnIchEWo5cb6Y8J/zTDXyz7+eBqQpy 54oPGWb0xK1ElFkjlTiNmqME4L6dHhvY6Epi7+2wYHAu3akPUe98fcd8AYATHjWe I06VVHnLlzsx77d9GlRnfScyEOsTHUSAaF/SjhyiHq2XTm1eXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLGDYQ9LsUQg49KOlUYB/kUcO5ivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOGYz MTFkZS1jNmFmLTQzMjItYTk1Mi1iOWM2MjJmNDBlNTEvYThmMzExZGUtYzZhZi00 MzIyLWE5NTItYjljNjIyZjQwZTUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYThmMzExZGUtYzZhZi00MzIyLWE5 NTItYjljNjIyZjQwZTUxL2E4ZjMxMWRlLWM2YWYtNDMyMi1hOTUyLWI5YzYyMmY0 MGU1MS5jcmwwHwYDVR0jBBgwFoAUWzOve+l/ri8VWJzXK67gX1dHCvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOGYzMTFkZS1jNmFmLTQzMjItYTk1Mi1iOWM2 MjJmNDBlNTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6YblRRp1NIF41e/bIfOTW j7kCbST3H3wJY4jpLqiHj1KcRk145EoJb2zBJ4NC4RPYWBqXFOlFLHEXnKhB79af JVDK1++wCa8xvVYMh10JB1npbeXS5v2mD0TZ/Y96DfV2+XmSZe5lsw8zPNJaku5K BYpEUqv8Z50WxBiawdPXI4AtFVJXDHlP6p4XYP03CbX4HIumvESge6MHJjcZX8dw xIhAmVin8b6NsZXvxdJ/z/xUi2HzEPjNFwpuNs+4TyZfe0pcrt54hp/rZPm80oZe tk+vj8FNsJNwIoPUfX1Eq8fxiX+HF+CD4K4qq/Rc3Wv8cXNt6XuUORhCFJ6c0orq -----END CERTIFICATE-----Generated at Sat Aug 22 17:23:18 2026 by rpki-client