$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft File: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft (raw, json) Hash identifier: p51RIEAc0HKaO1JvnwXtcZKjxAzN5iWm1gYuUW0UYS8= Subject key identifier: 52:FE:0A:7E:1B:9E:6D:65:E8:DD:78:B0:D8:0D:CC:1B:0F:CB:D4:91 Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F4328584F461320E5069CD2DA5E07E780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft Manifest number: 010D0C9F43285844D615D248DD853730ADA3FBD8 Signing time: Wed 23 Sep 2026 20:00:23 +0000 Manifest this update: Wed 23 Sep 2026 20:00:23 +0000 Manifest next update: Fri 25 Sep 2026 20:00:00 +0000 Files and hashes: 1: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl (hash: aftHXeQzQWtO8qal4fu/HmE6aZTkhgwJ6tavcER5W0M=) 2: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (hash: a/96yeMLgtjdQcaPvGtmFUmMteJc9WDC1khgZc9ihl8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:13:20:e5:06:9c:d2:da:5e:07:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: Sep 23 20:00:23 2026 GMT Not After : Sep 25 20:00:00 2026 GMT Subject: CN=5b547ea8-9ce1-4c5b-a615-834b39183179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b9:4a:5f:8a:b8:ef:c2:74:cb:4e:22:29:33: 1f:69:47:70:e0:38:e1:51:fc:0e:9e:45:24:27:32: 3c:d8:ab:64:61:15:ad:cc:68:0d:32:3f:99:fc:0e: 8c:62:33:4f:0d:c4:4c:1d:fb:94:0c:bc:ea:3b:d7: 8f:e9:39:27:c9:20:d1:e5:b5:f6:92:8f:1e:d4:57: bf:4f:9f:6a:61:56:29:69:d8:05:c8:1a:64:c5:fb: 20:78:46:d9:e0:58:a8:20:84:04:df:f5:53:0c:d3: 58:38:b0:4d:4b:1d:79:f9:6d:48:07:3a:e6:dd:22: 0d:10:1c:3b:28:24:fc:c6:08:5e:d7:6e:8f:1c:2c: 00:66:f9:59:ae:58:9c:ba:d3:72:ec:1e:2b:a8:7c: e5:d8:c3:eb:63:aa:fd:38:bb:fd:10:98:3b:32:b6: 92:4a:2f:e5:f4:c4:ed:4e:12:17:64:40:02:28:1c: c2:32:94:e2:e2:ae:80:46:a8:03:0c:8e:3b:d3:b3: 2f:87:51:61:46:e3:42:88:db:6c:17:d8:ef:08:44: 41:c5:ac:17:93:c2:7b:ad:b0:34:2d:55:c7:e4:d7: c7:bd:6f:4d:d4:af:67:c5:71:32:d0:77:76:a1:28: 37:80:8f:e8:74:b5:51:8f:ce:3f:de:e2:4f:2c:48: ad:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FE:0A:7E:1B:9E:6D:65:E8:DD:78:B0:D8:0D:CC:1B:0F:CB:D4:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:15:70:d1:40:a5:fb:16:49:ab:7f:0c:f2:a9:b0:f6:ee:25: a4:09:33:f6:35:b0:87:f1:e9:05:25:e1:77:3d:b5:92:fc:ae: 0b:9e:a5:ba:d6:3e:5e:fd:3d:ea:5c:c6:c3:02:0d:b0:89:b2: 89:ba:c3:40:ef:3c:35:1c:37:11:b6:d4:d3:48:b7:c3:93:43: 44:dc:28:88:5b:de:f0:84:fe:9c:74:86:b9:2d:7b:9a:ba:86: a3:c2:3a:f2:b2:4d:93:01:c7:8c:7c:50:5a:d3:b4:7b:f8:d3: d6:60:50:6f:12:31:8f:bb:7e:e7:18:69:b9:1d:a4:20:36:12: 33:39:c4:b3:42:ec:3a:1d:c8:48:1a:51:70:08:39:d5:96:60: d4:03:19:d3:0d:69:cb:8f:b4:54:15:85:7f:91:bf:aa:58:07: 19:fe:1d:db:34:13:c5:0f:26:9c:22:91:41:59:b4:55:04:6b: c0:87:8b:34:be:79:bb:75:c5:0d:53:50:3e:14:40:7b:b4:89: f7:8a:99:06:54:df:61:88:c0:68:09:d8:43:e5:d7:cb:97:aa: d1:ce:20:2e:6f:1c:24:a5:60:0d:f6:5e:49:1d:85:88:21:75: 33:7a:93:dd:8f:47:24:61:2f:c0:17:d9:45:b6:0c:81:fc:30: 78:9f:b9:a7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9GEyDlBpzS2l4H54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI2MDkyMzIwMDAyM1oXDTI2MDkyNTIwMDAwMFowLzEtMCsGA1UEAxMk NWI1NDdlYTgtOWNlMS00YzViLWE2MTUtODM0YjM5MTgzMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LlKX4q478J0y04iKTMfaUdw4DjhUfwOnkUk JzI82KtkYRWtzGgNMj+Z/A6MYjNPDcRMHfuUDLzqO9eP6TknySDR5bX2ko8e1Fe/ T59qYVYpadgFyBpkxfsgeEbZ4FioIIQE3/VTDNNYOLBNSx15+W1IBzrm3SINEBw7 KCT8xghe126PHCwAZvlZrlicutNy7B4rqHzl2MPrY6r9OLv9EJg7MraSSi/l9MTt ThIXZEACKBzCMpTi4q6ARqgDDI4707Mvh1FhRuNCiNtsF9jvCERBxawXk8J7rbA0 LVXH5NfHvW9N1K9nxXEy0Hd2oSg3gI/odLVRj84/3uJPLEitTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFL+Cn4bnm1l6N14sNgNzBsPy9SRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvM2YyZDM3OGQtMjBlMS00 YjVmLTg1YjktZThjNGNiYTVkNWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATFXDRQKX7FkmrfwzyqbD2 7iWkCTP2NbCH8ekFJeF3PbWS/K4LnqW61j5e/T3qXMbDAg2wibKJusNA7zw1HDcR ttTTSLfDk0NE3CiIW97whP6cdIa5LXuauoajwjrysk2TAceMfFBa07R7+NPWYFBv EjGPu37nGGm5HaQgNhIzOcSzQuw6HchIGlFwCDnVlmDUAxnTDWnLj7RUFYV/kb+q WAcZ/h3bNBPFDyacIpFBWbRVBGvAh4s0vnm7dcUNU1A+FEB7tIn3ipkGVN9hiMBo CdhD5dfLl6rRziAubxwkpWAN9l5JHYWIIXUzepPdj0ckYS/AF9lFtgyB/DB4n7mn -----END CERTIFICATE-----Generated at Thu Sep 24 08:39:46 2026 by rpki-client