$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft File: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft (raw, json) Hash identifier: k59asnd8+GufePWRbf6fG+WToR3RauOtaepBEQENqDA= Subject key identifier: 79:32:1C:4D:F4:B7:44:24:BE:F8:48:E5:5C:64:6E:8A:20:AE:13:C6 Authority key identifier: 84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 Certificate issuer: /CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Certificate serial: 010D0C9F4328584F5B2107719B046EB4EF2CA8A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft Manifest number: 010D0C9F4328584073A8498F3F05E22DFBDA97F8 Signing time: Thu 01 Oct 2026 09:00:24 +0000 Manifest this update: Thu 01 Oct 2026 09:00:24 +0000 Manifest next update: Sun 04 Oct 2026 09:00:00 +0000 Files and hashes: 1: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl (hash: xaOxcHHAngNZyEScJ6vw5iuWTPzuKUyjGZq50jwNnEc=) 2: d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa (hash: iy+InnYs9a7B+u3On53czCqL5/wrwBhs7+FND0SFBUs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:21:07:71:9b:04:6e:b4:ef:2c:a8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Validity Not Before: Oct 1 09:00:24 2026 GMT Not After : Oct 4 09:00:00 2026 GMT Subject: CN=d7bd9b69-35f7-4154-be07-f6a3712abff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:71:67:b5:0c:41:fe:13:aa:1a:98:4b:23: f5:8f:ca:bb:44:40:e5:c9:64:57:6e:ab:f1:00:ad: 9d:18:f4:30:2b:96:ad:32:8b:96:2f:13:de:4e:1f: c3:00:1e:43:84:33:d0:cb:ff:cf:1b:53:ed:0f:81: 8f:4e:c5:91:aa:39:95:f0:97:a7:a9:90:b4:a0:9b: db:9f:42:b5:34:73:88:60:42:23:8e:ea:a3:d5:53: e9:6f:57:6a:cb:5f:34:3a:6c:21:11:a1:06:b1:69: fb:50:13:04:6e:4a:c8:cf:dc:5c:9c:c1:78:b7:7e: 3e:02:ab:d8:d3:95:da:fe:31:88:0c:01:cf:72:8f: 10:66:ac:b6:a5:9e:ee:cb:7b:7f:67:58:87:bc:ae: 28:e6:10:8d:da:a6:56:68:b8:b9:b8:6b:c7:19:3b: 2d:3a:50:8b:c6:f5:f0:d1:ab:ba:61:69:e7:4b:f6: 7f:23:d0:f2:e7:74:1d:52:3f:3b:31:9f:ea:46:ec: b0:bd:c5:d9:f3:ee:e2:9d:29:de:58:83:69:f2:f1: 13:1e:64:24:b5:20:43:ee:05:ad:8e:56:2f:13:9b: 21:7b:35:10:54:eb:c9:25:91:9b:95:ce:d5:f0:82: 35:fb:78:b3:89:df:1f:6b:3f:5f:62:08:25:f5:1c: f9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:32:1C:4D:F4:B7:44:24:BE:F8:48:E5:5C:64:6E:8A:20:AE:13:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl X509v3 Authority Key Identifier: keyid:84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:0d:53:2e:30:71:62:9f:32:af:7d:a7:cc:35:72:28:34:7e: d2:4d:8d:0b:07:dd:f6:f5:f9:ea:72:cf:f5:21:26:c4:36:fb: bc:ce:b6:75:58:1d:67:48:25:d1:49:97:09:06:4f:35:ca:a5: 7e:f5:2b:e2:8d:16:a4:4c:8f:de:3d:0f:2d:d4:bc:6f:4a:bf: bc:58:ed:f2:8a:00:10:07:38:74:8d:82:76:3d:02:53:46:d5: 2e:82:51:ba:41:73:8b:25:33:f2:9c:59:85:26:43:b7:5a:16: 7b:22:f9:40:da:72:9c:29:87:82:24:61:f6:14:83:1c:5d:5d: 9b:5b:d5:7e:31:92:8e:38:e2:87:ab:2a:db:c1:95:2e:b4:52: 55:f9:35:26:5d:8e:e8:d4:93:54:94:57:a9:60:a7:61:9d:1f: a7:76:78:f3:ff:48:79:f9:44:24:62:fb:ab:f6:c3:6d:bf:78: 87:58:cf:9c:57:41:06:49:1c:e1:a1:d8:8d:16:51:ca:b2:84: 44:d2:cb:34:7b:9c:21:fd:46:4f:4f:63:96:89:0e:0f:c8:5d: 44:fe:f7:0f:cf:25:8d:7f:85:3e:86:04:5a:c2:53:9d:cd:a5: 76:f9:fb:02:24:bf:b9:93:86:e0:17:c4:19:9b:34:8f:ea:1a: d7:3c:90:41 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9bIQdxmwRutO8sqKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjOGU5Y2ItODhlZS00NTVlLWIwMTItMWIxYWJmY2E3 MmFiMB4XDTI2MTAwMTA5MDAyNFoXDTI2MTAwNDA5MDAwMFowLzEtMCsGA1UEAxMk ZDdiZDliNjktMzVmNy00MTU0LWJlMDctZjZhMzcxMmFiZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+5xZ7UMQf4TqhqYSyP1j8q7REDlyWRXbqvx AK2dGPQwK5atMouWLxPeTh/DAB5DhDPQy//PG1PtD4GPTsWRqjmV8JenqZC0oJvb n0K1NHOIYEIjjuqj1VPpb1dqy180OmwhEaEGsWn7UBMEbkrIz9xcnMF4t34+AqvY 05Xa/jGIDAHPco8QZqy2pZ7uy3t/Z1iHvK4o5hCN2qZWaLi5uGvHGTstOlCLxvXw 0au6YWnnS/Z/I9Dy53QdUj87MZ/qRuywvcXZ8+7inSneWINp8vETHmQktSBD7gWt jlYvE5shezUQVOvJJZGblc7V8II1+3izid8faz9fYggl9Rz5GwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHkyHE30t0QkvvhI5VxkboogrhPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4 ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFhYmZjYTcyYWIvM2JjOGU5Y2ItODhlZS00 NTVlLWIwMTItMWIxYWJmY2E3MmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjOGU5Y2ItODhlZS00NTVlLWIw MTItMWIxYWJmY2E3MmFiLzNiYzhlOWNiLTg4ZWUtNDU1ZS1iMDEyLTFiMWFiZmNh NzJhYi5jcmwwHwYDVR0jBBgwFoAUhK1pleXH9BRmIMjHaJa6x1IXDRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFh YmZjYTcyYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCkDVMuMHFinzKvfafMNXIo NH7STY0LB9329fnqcs/1ISbENvu8zrZ1WB1nSCXRSZcJBk81yqV+9SvijRakTI/e PQ8t1LxvSr+8WO3yigAQBzh0jYJ2PQJTRtUuglG6QXOLJTPynFmFJkO3WhZ7IvlA 2nKcKYeCJGH2FIMcXV2bW9V+MZKOOOKHqyrbwZUutFJV+TUmXY7o1JNUlFepYKdh nR+ndnjz/0h5+UQkYvur9sNtv3iHWM+cV0EGSRzhodiNFlHKsoRE0ss0e5wh/UZP T2OWiQ4PyF1E/vcPzyWNf4U+hgRawlOdzaV2+fsCJL+5k4bgF8QZmzSP6hrXPJBB -----END CERTIFICATE-----Generated at Thu Oct 1 15:20:18 2026 by rpki-client