$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9.mft File: cc85547d-fee1-45ca-98af-8f3e6dcf3ae9.mft (raw, json) Hash identifier: apsNRDkGEQrQsL6UHNyAJJ7ZedG2VXUU1bLTzBwfV7k= Subject key identifier: 8A:AF:19:09:51:F2:05:2F:67:F8:26:C0:C3:AA:07:AE:21:4C:85:3D Authority key identifier: 23:52:A7:E8:1B:9D:96:73:41:37:65:B2:9D:AF:56:A4:21:8E:40:33 Certificate issuer: /CN=cc85547d-fee1-45ca-98af-8f3e6dcf3ae9 Certificate serial: 010D0C9F4328584EF340D1AE79AD63AC5D71DE20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9.mft Manifest number: 010D0C9F43285848F6B0E4C880BD791320C34025 Signing time: Tue 25 Aug 2026 04:00:23 +0000 Manifest this update: Tue 25 Aug 2026 04:00:23 +0000 Manifest next update: Thu 27 Aug 2026 04:00:00 +0000 Files and hashes: 1: cc85547d-fee1-45ca-98af-8f3e6dcf3ae9.crl (hash: g6W3kAfXZnMm1yaju0lkLvZ7OhrlhJoTRVJYIiXDOb4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f3:40:d1:ae:79:ad:63:ac:5d:71:de:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc85547d-fee1-45ca-98af-8f3e6dcf3ae9 Validity Not Before: Aug 25 04:00:23 2026 GMT Not After : Aug 27 04:00:00 2026 GMT Subject: CN=d3ce9875-ac08-4d08-a023-483d4b7bf286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ea:73:a5:03:e2:85:45:4d:ba:eb:7d:b6:4c: bf:ba:93:32:5d:a2:d7:d8:ed:50:52:8b:97:48:a1: 01:51:e1:85:72:87:2b:b7:1e:ae:b3:d7:9c:76:2d: 4d:e5:78:df:b1:f5:04:f3:83:49:ed:51:42:78:55: 34:3a:84:10:ab:4a:2b:46:c2:08:c7:5a:cf:8a:a3: 45:eb:bd:53:f2:13:45:48:b8:1c:98:50:74:ca:60: 2f:36:fc:36:88:c4:4e:22:12:2e:cc:d3:b6:48:a6: 08:98:dc:34:6c:27:2a:e2:a1:c4:dc:80:ef:6c:1d: de:76:1d:0d:db:5b:7f:ea:e0:c8:13:d0:28:55:8f: b9:b3:7a:cb:0c:31:f0:6e:23:10:9a:6f:66:7d:67: 2c:96:a0:ea:ca:d4:ee:38:4a:b0:bd:c4:09:0f:d0: 9a:2c:ef:3c:98:84:64:12:8d:5f:6a:70:b9:21:70: 4e:f4:dc:b6:5b:90:49:15:c9:7e:ee:00:cd:17:09: e6:f0:12:3a:77:a0:14:27:50:5f:9f:0c:66:ba:44: cf:be:2a:39:17:9e:7e:07:ed:23:8f:fe:90:49:8d: 95:f6:66:48:e7:68:29:ab:48:44:e4:75:e3:87:28: b2:4f:6f:2c:39:3f:23:57:4f:d0:90:55:64:40:74: 3b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AF:19:09:51:F2:05:2F:67:F8:26:C0:C3:AA:07:AE:21:4C:85:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9.crl X509v3 Authority Key Identifier: keyid:23:52:A7:E8:1B:9D:96:73:41:37:65:B2:9D:AF:56:A4:21:8E:40:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc85547d-fee1-45ca-98af-8f3e6dcf3ae9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:50:b5:03:b9:99:84:b5:9e:1e:f0:5d:f5:00:11:11:00:40: 99:23:32:43:90:d9:16:bf:43:6d:9d:a1:e6:0f:4e:02:f4:6b: 0b:07:d3:72:ff:91:7a:56:e3:ab:8a:b0:05:c5:98:8c:02:f0: d4:eb:47:38:8f:19:3a:3f:91:6e:42:76:0c:d5:1e:68:68:d1: ad:c2:63:b8:c6:4d:34:cf:bb:cd:bf:22:fc:43:6f:d0:4c:98: 34:3a:2b:9f:e0:ad:ea:c4:28:13:3a:cb:08:9e:ba:28:af:20: 83:9c:f6:09:22:77:83:62:d5:95:54:c3:7a:af:42:04:b0:09: 08:12:b4:82:ef:fc:4c:6e:a2:ca:91:2a:6b:b1:21:b0:f8:68: 59:ca:4c:00:27:6c:d6:46:a7:e5:32:b1:ec:25:c3:67:5b:75: 82:07:a3:d5:82:cb:49:9f:00:a4:69:13:66:9f:d7:61:4b:b0: 8b:7d:03:5d:87:94:e4:fc:2f:36:25:e6:77:9a:5d:6d:be:55: 83:4b:18:2b:98:33:a9:82:7e:70:76:85:58:bd:fd:94:7c:9a: f4:e6:89:bd:dc:ce:d2:5f:e2:d7:1e:3f:9e:9a:1c:6a:cc:ff: ff:81:b2:ad:f3:af:0f:0b:50:0b:f0:51:4e:36:44:cf:74:6d: 25:58:04:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7zQNGuea1jrF1x3iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M4NTU0N2QtZmVlMS00NWNhLTk4YWYtOGYzZTZkY2Yz YWU5MB4XDTI2MDgyNTA0MDAyM1oXDTI2MDgyNzA0MDAwMFowLzEtMCsGA1UEAxMk ZDNjZTk4NzUtYWMwOC00ZDA4LWEwMjMtNDgzZDRiN2JmMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+pzpQPihUVNuut9tky/upMyXaLX2O1QUouX SKEBUeGFcocrtx6us9ecdi1N5XjfsfUE84NJ7VFCeFU0OoQQq0orRsIIx1rPiqNF 671T8hNFSLgcmFB0ymAvNvw2iMROIhIuzNO2SKYImNw0bCcq4qHE3IDvbB3edh0N 21t/6uDIE9AoVY+5s3rLDDHwbiMQmm9mfWcslqDqytTuOEqwvcQJD9CaLO88mIRk Eo1fanC5IXBO9Ny2W5BJFcl+7gDNFwnm8BI6d6AUJ1BfnwxmukTPvio5F55+B+0j j/6QSY2V9mZI52gpq0hE5HXjhyiyT28sOT8jV0/QkFVkQHQ7pQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIqvGQlR8gUvZ/gmwMOqB64hTIU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYzg1 NTQ3ZC1mZWUxLTQ1Y2EtOThhZi04ZjNlNmRjZjNhZTkvY2M4NTU0N2QtZmVlMS00 NWNhLTk4YWYtOGYzZTZkY2YzYWU5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2M4NTU0N2QtZmVlMS00NWNhLTk4 YWYtOGYzZTZkY2YzYWU5L2NjODU1NDdkLWZlZTEtNDVjYS05OGFmLThmM2U2ZGNm M2FlOS5jcmwwHwYDVR0jBBgwFoAUI1Kn6BudlnNBN2Wyna9WpCGOQDMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYzg1NTQ3ZC1mZWUxLTQ1Y2EtOThhZi04ZjNl NmRjZjNhZTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+ULUDuZmEtZ4e8F31ABER AECZIzJDkNkWv0NtnaHmD04C9GsLB9Ny/5F6VuOrirAFxZiMAvDU60c4jxk6P5Fu QnYM1R5oaNGtwmO4xk00z7vNvyL8Q2/QTJg0Oiuf4K3qxCgTOssInrooryCDnPYJ IneDYtWVVMN6r0IEsAkIErSC7/xMbqLKkSprsSGw+GhZykwAJ2zWRqflMrHsJcNn W3WCB6PVgstJnwCkaRNmn9dhS7CLfQNdh5Tk/C82JeZ3ml1tvlWDSxgrmDOpgn5w doVYvf2UfJr05om93M7SX+LXHj+emhxqzP//gbKt868PC1AL8FFONkTPdG0lWARE -----END CERTIFICATE-----Generated at Tue Aug 25 15:38:23 2026 by rpki-client