$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52ad4e40-188e-440b-bc90-aa9cef5dc1c4/52ad4e40-188e-440b-bc90-aa9cef5dc1c4.mft File: 52ad4e40-188e-440b-bc90-aa9cef5dc1c4.mft (raw, json) Hash identifier: 6dNuN+m0gpCSLoqArHpzmokR8lDdR4fDgrDgIA8EJJ0= Subject key identifier: E9:11:97:4A:02:E5:BB:91:A7:F5:44:3C:33:F1:B9:F6:CF:D3:8B:29 Authority key identifier: 52:A7:C5:8F:82:02:99:51:EC:93:79:31:9B:CB:44:7C:3C:B2:59:F1 Certificate issuer: /CN=52ad4e40-188e-440b-bc90-aa9cef5dc1c4 Certificate serial: 010D0C9F4328584F8EC6AFE49BF972B8259B5A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52ad4e40-188e-440b-bc90-aa9cef5dc1c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52ad4e40-188e-440b-bc90-aa9cef5dc1c4/52ad4e40-188e-440b-bc90-aa9cef5dc1c4.mft Manifest number: 010D0C9F43285849334785274980D8D8F4DF5427 Signing time: Mon 19 Oct 2026 21:00:23 +0000 Manifest this update: Mon 19 Oct 2026 21:00:23 +0000 Manifest next update: Wed 21 Oct 2026 21:00:00 +0000 Files and hashes: 1: 52ad4e40-188e-440b-bc90-aa9cef5dc1c4.crl (hash: STH8Oak9mfJvPAu6GIIzyZfqwT9TwMK2HCrbFOWw1dg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52ad4e40-188e-440b-bc90-aa9cef5dc1c4/52ad4e40-188e-440b-bc90-aa9cef5dc1c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52ad4e40-188e-440b-bc90-aa9cef5dc1c4/52ad4e40-188e-440b-bc90-aa9cef5dc1c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52ad4e40-188e-440b-bc90-aa9cef5dc1c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8e:c6:af:e4:9b:f9:72:b8:25:9b:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ad4e40-188e-440b-bc90-aa9cef5dc1c4 Validity Not Before: Oct 19 21:00:23 2026 GMT Not After : Oct 21 21:00:00 2026 GMT Subject: CN=d5b99a14-3579-4e6c-8070-cb13403eecdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9c:94:96:66:51:08:b1:ae:64:da:fd:49:0f: 6b:0b:62:3f:e9:bc:cc:ec:ea:3c:e9:76:51:d4:d1: 28:fa:0b:fd:00:8e:6b:64:c3:ce:cf:0e:fa:b4:bd: 56:63:f1:e8:31:0e:85:58:16:91:fe:64:fc:f4:84: 8c:a5:a4:70:88:fc:a3:09:73:78:47:59:d2:a3:42: bc:31:16:3b:c1:6e:15:25:58:c9:d1:88:47:22:8b: 66:9d:09:32:84:21:00:e2:8c:07:29:26:74:67:23: 2d:22:5c:90:1c:77:e7:1c:0e:56:ba:7b:a8:2e:f4: 3b:88:e7:44:bb:ca:eb:1d:a5:c1:96:89:c1:f7:7d: 0b:4b:8c:c3:e6:41:21:59:30:bf:a5:a3:35:a5:1d: 0b:02:c5:99:48:e9:8b:99:41:dd:6a:c2:5d:c6:e4: 53:4e:f0:88:f8:4a:6f:52:19:98:83:1b:9b:3e:00: 15:3b:21:2a:42:93:b8:c7:b5:36:41:01:f0:14:2d: a5:7a:0c:60:cb:ab:d4:e9:c2:c7:08:36:a6:6b:8f: c5:2c:cd:f7:c4:4b:6e:86:d4:38:c5:72:81:70:a9: cd:9f:f1:e1:5d:24:90:af:f3:d3:8a:28:29:36:3a: 75:8c:9d:f4:56:f4:8e:d0:f0:08:e5:c8:2a:14:71: c9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:11:97:4A:02:E5:BB:91:A7:F5:44:3C:33:F1:B9:F6:CF:D3:8B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52ad4e40-188e-440b-bc90-aa9cef5dc1c4/52ad4e40-188e-440b-bc90-aa9cef5dc1c4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52ad4e40-188e-440b-bc90-aa9cef5dc1c4/52ad4e40-188e-440b-bc90-aa9cef5dc1c4.crl X509v3 Authority Key Identifier: keyid:52:A7:C5:8F:82:02:99:51:EC:93:79:31:9B:CB:44:7C:3C:B2:59:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52ad4e40-188e-440b-bc90-aa9cef5dc1c4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:bc:19:91:e9:4e:fa:3e:6c:ab:38:14:5c:5f:fd:bb:7d:1b: c5:44:47:2b:5b:4f:15:ab:79:ca:f8:8e:85:7f:3e:c6:d8:4c: 85:f6:e6:1b:a6:66:3b:25:8b:62:52:b9:a0:f7:77:a5:96:56: ef:a6:4e:af:74:7a:b4:9a:d6:74:3d:a5:f9:80:af:c5:f7:03: 18:d8:71:61:7e:79:26:7a:64:2b:8e:cd:6b:ea:f9:16:45:35: dd:33:e5:e5:4b:66:23:3d:44:6d:41:b9:ba:a8:ca:a6:83:af: 4d:cd:95:6b:a5:ea:4a:40:30:b4:2c:0f:76:d9:b7:45:6a:e8: 00:85:dd:ae:54:69:ad:57:96:50:06:98:53:81:56:80:97:bb: 80:32:9d:60:98:54:e3:ec:11:fc:9d:0d:86:b7:a2:54:66:d9: 3f:38:29:1a:d3:f9:68:0c:59:e9:21:d4:3e:45:7b:aa:c7:3e: 99:9e:6d:4f:8b:7e:d0:9c:ab:56:7e:4b:3a:45:c1:a5:78:0a: 45:3e:bc:5a:68:0c:18:a8:c5:c2:19:68:8b:5c:b2:2d:7a:bc: f7:a2:37:3a:51:02:dd:70:19:6b:00:fa:7d:1b:79:b5:ca:0e: 34:93:7e:c6:70:76:9b:8c:9c:34:e2:9b:38:82:4a:ba:a6:b1: d6:fc:bb:94 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+Oxq/km/lyuCWbWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhZDRlNDAtMTg4ZS00NDBiLWJjOTAtYWE5Y2VmNWRj MWM0MB4XDTI2MTAxOTIxMDAyM1oXDTI2MTAyMTIxMDAwMFowLzEtMCsGA1UEAxMk ZDViOTlhMTQtMzU3OS00ZTZjLTgwNzAtY2IxMzQwM2VlY2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5yUlmZRCLGuZNr9SQ9rC2I/6bzM7Oo86XZR 1NEo+gv9AI5rZMPOzw76tL1WY/HoMQ6FWBaR/mT89ISMpaRwiPyjCXN4R1nSo0K8 MRY7wW4VJVjJ0YhHIotmnQkyhCEA4owHKSZ0ZyMtIlyQHHfnHA5WunuoLvQ7iOdE u8rrHaXBlonB930LS4zD5kEhWTC/paM1pR0LAsWZSOmLmUHdasJdxuRTTvCI+Epv UhmYgxubPgAVOyEqQpO4x7U2QQHwFC2legxgy6vU6cLHCDama4/FLM33xEtuhtQ4 xXKBcKnNn/HhXSSQr/PTiigpNjp1jJ30VvSO0PAI5cgqFHHJ9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOkRl0oC5buRp/VEPDPxufbP04spMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmFk NGU0MC0xODhlLTQ0MGItYmM5MC1hYTljZWY1ZGMxYzQvNTJhZDRlNDAtMTg4ZS00 NDBiLWJjOTAtYWE5Y2VmNWRjMWM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJhZDRlNDAtMTg4ZS00NDBiLWJj OTAtYWE5Y2VmNWRjMWM0LzUyYWQ0ZTQwLTE4OGUtNDQwYi1iYzkwLWFhOWNlZjVk YzFjNC5jcmwwHwYDVR0jBBgwFoAUUqfFj4ICmVHsk3kxm8tEfDyyWfEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmFkNGU0MC0xODhlLTQ0MGItYmM5MC1hYTlj ZWY1ZGMxYzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFvBmR6U76PmyrOBRcX/27 fRvFREcrW08Vq3nK+I6Ffz7G2EyF9uYbpmY7JYtiUrmg93elllbvpk6vdHq0mtZ0 PaX5gK/F9wMY2HFhfnkmemQrjs1r6vkWRTXdM+XlS2YjPURtQbm6qMqmg69NzZVr pepKQDC0LA922bdFaugAhd2uVGmtV5ZQBphTgVaAl7uAMp1gmFTj7BH8nQ2Gt6JU Ztk/OCka0/loDFnpIdQ+RXuqxz6Znm1Pi37QnKtWfks6RcGleApFPrxaaAwYqMXC GWiLXLIterz3ojc6UQLdcBlrAPp9G3m1yg40k37GcHabjJw04ps4gkq6prHW/LuU -----END CERTIFICATE-----Generated at Tue Oct 20 18:24:03 2026 by rpki-client