$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe/5171f9e2-3fed-4e38-b77a-52b343e616fe.mft File: 5171f9e2-3fed-4e38-b77a-52b343e616fe.mft (raw, json) Hash identifier: qF4DehGIiaySzZ7hZoehQ+esLEjQJMHmsIdc7oLnwWM= Subject key identifier: 9C:CC:16:84:B7:51:AA:AB:69:98:16:57:DE:04:8F:20:29:4D:A5:E3 Authority key identifier: 0F:5C:6F:22:9D:60:3D:95:03:79:3E:FB:61:26:C9:AB:EC:AE:E5:19 Certificate issuer: /CN=5171f9e2-3fed-4e38-b77a-52b343e616fe Certificate serial: 010D0C9F4328584F99D3A70AF282E5A48D6A08C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe/5171f9e2-3fed-4e38-b77a-52b343e616fe.mft Manifest number: 010D0C9F4328584073A820D2DDD7AF36AA8AA5ED Signing time: Fri 23 Oct 2026 20:00:24 +0000 Manifest this update: Fri 23 Oct 2026 20:00:24 +0000 Manifest next update: Sun 25 Oct 2026 20:00:00 +0000 Files and hashes: 1: 5171f9e2-3fed-4e38-b77a-52b343e616fe.crl (hash: p5+h1UTkuBrQqsxIZlLc+hKVNb1+WU/lHtWIledQteU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe/5171f9e2-3fed-4e38-b77a-52b343e616fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe/5171f9e2-3fed-4e38-b77a-52b343e616fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:d3:a7:0a:f2:82:e5:a4:8d:6a:08:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5171f9e2-3fed-4e38-b77a-52b343e616fe Validity Not Before: Oct 23 20:00:24 2026 GMT Not After : Oct 25 20:00:00 2026 GMT Subject: CN=e8236915-eb94-4ab0-be9e-3f4f005e64ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c9:d5:f8:cd:f8:55:46:b7:01:e7:71:62:6e: 31:5c:ba:4d:34:03:fa:2e:98:74:53:12:b9:d9:72: ed:94:bc:8b:4d:87:ec:76:67:0a:80:20:45:56:78: c5:77:74:53:b1:6b:b4:47:8a:f5:23:4a:50:e0:84: 30:46:db:03:45:11:1b:4d:8d:d4:c9:f5:bb:5e:f0: 9c:55:f0:2f:28:4d:8f:8a:f3:39:5f:67:ae:de:22: e6:8f:71:ef:4a:15:5f:11:10:97:fd:e2:77:05:aa: a8:dc:64:79:37:5b:7e:c0:6f:d5:bd:ec:75:66:cc: 73:d2:5e:02:e2:6d:5e:7f:62:c0:9e:f2:88:9a:10: b4:c3:53:8d:ea:c5:86:1e:a0:1d:c7:0a:db:1d:35: 25:8a:f7:23:2d:d8:39:25:e5:35:8b:91:e0:18:f0: e0:4b:2d:4c:dd:10:52:63:9d:68:11:f7:e6:dd:82: 2b:2d:1c:29:2d:b8:f1:6b:c6:b6:30:59:f5:09:ce: 04:44:e5:89:82:e7:2d:34:20:d4:ea:90:6a:7e:a8: 15:77:d7:06:8b:ca:8e:0c:f6:42:45:9e:05:93:18: ef:d6:27:9d:60:83:2e:c9:11:37:da:b3:f6:a8:62: 03:57:1f:e3:bc:f0:8c:14:09:5a:fd:da:fd:0d:75: 78:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CC:16:84:B7:51:AA:AB:69:98:16:57:DE:04:8F:20:29:4D:A5:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe/5171f9e2-3fed-4e38-b77a-52b343e616fe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe/5171f9e2-3fed-4e38-b77a-52b343e616fe.crl X509v3 Authority Key Identifier: keyid:0F:5C:6F:22:9D:60:3D:95:03:79:3E:FB:61:26:C9:AB:EC:AE:E5:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:90:a7:67:c6:83:ef:f1:1a:98:1c:b7:81:63:42:ed:12:7d: b4:b8:2f:22:0e:41:85:38:a9:38:9c:f0:6e:2a:10:41:10:85: db:33:b6:f2:bd:c7:a2:73:ea:c4:23:ef:57:d9:01:b9:d6:fa: de:0b:72:92:20:79:dd:91:b1:41:b3:81:ac:7b:cd:b2:56:b6: 28:81:dd:45:d7:52:c4:88:27:b7:7f:0b:17:26:1c:93:66:01: 27:28:9d:8d:90:70:a9:48:37:04:c7:4c:e1:82:bb:2c:1e:4e: ec:36:a4:5a:08:b9:0b:81:7a:d1:0c:0b:73:8c:d6:ee:b7:ef: 95:56:ad:06:fa:f1:59:0e:85:d9:d3:89:0f:93:31:4b:df:9d: ee:8b:a5:91:1a:86:1d:ea:de:6e:12:1e:cd:ce:f6:32:a0:34: 5c:fa:93:81:ca:b2:20:6a:b4:bb:82:da:ee:a0:f6:d6:3d:c4: 78:1a:e8:65:64:22:1f:a2:2e:5c:6f:82:66:e0:3d:8a:f1:c6: cf:d0:ad:93:04:26:c5:b6:0c:5f:84:27:be:c5:48:f5:24:88: ed:ed:03:2d:63:12:4d:69:d0:26:71:04:4b:88:b5:73:17:db: 3e:23:bb:88:c7:92:aa:f8:9a:f0:d2:e0:69:c2:be:b2:75:dc: f9:5c:80:06 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+Z06cK8oLlpI1qCMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3MWY5ZTItM2ZlZC00ZTM4LWI3N2EtNTJiMzQzZTYx NmZlMB4XDTI2MTAyMzIwMDAyNFoXDTI2MTAyNTIwMDAwMFowLzEtMCsGA1UEAxMk ZTgyMzY5MTUtZWI5NC00YWIwLWJlOWUtM2Y0ZjAwNWU2NGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsnV+M34VUa3AedxYm4xXLpNNAP6Lph0UxK5 2XLtlLyLTYfsdmcKgCBFVnjFd3RTsWu0R4r1I0pQ4IQwRtsDRREbTY3UyfW7XvCc VfAvKE2PivM5X2eu3iLmj3HvShVfERCX/eJ3Baqo3GR5N1t+wG/Vvex1Zsxz0l4C 4m1ef2LAnvKImhC0w1ON6sWGHqAdxwrbHTUlivcjLdg5JeU1i5HgGPDgSy1M3RBS Y51oEffm3YIrLRwpLbjxa8a2MFn1Cc4EROWJguctNCDU6pBqfqgVd9cGi8qODPZC RZ4Fkxjv1iedYIMuyRE32rP2qGIDVx/jvPCMFAla/dr9DXV4EwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJzMFoS3UaqraZgWV94EjyApTaXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MTcx ZjllMi0zZmVkLTRlMzgtYjc3YS01MmIzNDNlNjE2ZmUvNTE3MWY5ZTItM2ZlZC00 ZTM4LWI3N2EtNTJiMzQzZTYxNmZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTE3MWY5ZTItM2ZlZC00ZTM4LWI3 N2EtNTJiMzQzZTYxNmZlLzUxNzFmOWUyLTNmZWQtNGUzOC1iNzdhLTUyYjM0M2U2 MTZmZS5jcmwwHwYDVR0jBBgwFoAUD1xvIp1gPZUDeT77YSbJq+yu5RkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MTcxZjllMi0zZmVkLTRlMzgtYjc3YS01MmIz NDNlNjE2ZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIkKdnxoPv8RqYHLeBY0Lt En20uC8iDkGFOKk4nPBuKhBBEIXbM7byvceic+rEI+9X2QG51vreC3KSIHndkbFB s4Gse82yVrYogd1F11LEiCe3fwsXJhyTZgEnKJ2NkHCpSDcEx0zhgrssHk7sNqRa CLkLgXrRDAtzjNbut++VVq0G+vFZDoXZ04kPkzFL353ui6WRGoYd6t5uEh7NzvYy oDRc+pOByrIgarS7gtruoPbWPcR4GuhlZCIfoi5cb4Jm4D2K8cbP0K2TBCbFtgxf hCe+xUj1JIjt7QMtYxJNadAmcQRLiLVzF9s+I7uIx5Kq+Jrw0uBpwr6yddz5XIAG -----END CERTIFICATE-----Generated at Sat Oct 24 03:50:50 2026 by rpki-client