$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.mft File: ca3bedc6-e937-4195-9e25-d048122e2f60.mft (raw, json) Hash identifier: Gr/00ZTYVoM2GeO6FMioRxY3NAhzhgwTS2SS4BrK41c= Subject key identifier: F5:FC:C4:D7:03:AD:04:0E:8B:44:46:3A:C9:6D:AE:01:3B:A4:40:48 Authority key identifier: AB:2C:FD:17:8D:D9:EE:A8:16:10:19:82:D1:00:56:11:0C:28:75:AF Certificate issuer: /CN=ca3bedc6-e937-4195-9e25-d048122e2f60 Certificate serial: 010D0C9F4328584F4848EF60D3755F675F075460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.mft Manifest number: 010D0C9F4328584EF48D509EA2D0EC5C04694C21 Signing time: Thu 24 Sep 2026 15:00:23 +0000 Manifest this update: Thu 24 Sep 2026 15:00:23 +0000 Manifest next update: Sun 27 Sep 2026 15:00:00 +0000 Files and hashes: 1: 1f2a718c-3fa0-3b4d-988f-830f68d52e72.roa (hash: B/FpYklFl8TA6wcCjia3zhSUaNQMI1/NP/nkChoOySQ=) 2: 8bb572f6-47a7-3ca3-977d-d0a0b13d273f.roa (hash: 9HPnwTiaW9SfIdkSsfs9GJXsMGJRw7jJZ8KUmPRQepM=) 3: 9af30d6e-07ee-3462-80f0-bd8ecaad51ce.roa (hash: LkPamfN64+vswIQcEJYj2RbsMMQTn+r+orhKQrWWD6Y=) 4: ca3bedc6-e937-4195-9e25-d048122e2f60.crl (hash: 2MP1PhhRlYhantzLNyY/hlmIxNQRL1+0EkH/cXpEb5E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:48:ef:60:d3:75:5f:67:5f:07:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3bedc6-e937-4195-9e25-d048122e2f60 Validity Not Before: Sep 24 15:00:23 2026 GMT Not After : Sep 27 15:00:00 2026 GMT Subject: CN=b98a62d8-df45-41b9-947f-70274a75b94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1b:3c:81:35:83:7d:ed:4e:ec:e4:24:b5:e8: 76:6b:5f:94:6f:7c:af:26:94:21:17:c3:16:4e:21: cf:1d:ab:1c:2d:05:8d:20:89:95:9c:ee:00:00:9d: 26:42:fc:60:43:2f:1d:bc:d4:79:04:53:97:72:c2: 63:35:d0:1e:4a:05:fa:a7:53:23:b5:83:1a:67:17: d2:fd:0b:9e:75:21:1c:21:ed:ae:74:c5:c3:27:f3: ea:7a:6b:46:74:66:7d:71:a8:a1:b5:9d:92:31:2d: e5:d3:71:fd:35:e3:fb:74:65:4c:ed:10:19:7a:94: 71:e0:1e:8d:a3:16:11:31:77:6e:c6:7c:54:3a:a0: c1:ef:ba:95:ce:78:27:8d:47:13:09:1c:4d:b1:31: 7d:2e:6e:89:6c:c7:b2:bc:75:3b:7d:ae:98:22:c6: ef:55:66:94:f4:b0:eb:85:99:4b:c5:89:ac:7b:93: 77:75:cc:90:37:4a:f4:b7:f4:bc:12:b8:c7:e6:49: 87:e5:94:2a:de:47:4d:dc:1e:d4:23:a9:79:ea:70: 0e:a0:4d:bb:f5:2e:cc:66:80:6c:37:28:1c:5f:20: 35:01:b0:75:e6:e3:cb:77:cb:3b:eb:fe:1d:2e:2a: 1d:af:1f:c8:60:df:23:90:39:8a:c4:6a:6d:a3:8b: 0f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FC:C4:D7:03:AD:04:0E:8B:44:46:3A:C9:6D:AE:01:3B:A4:40:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.crl X509v3 Authority Key Identifier: keyid:AB:2C:FD:17:8D:D9:EE:A8:16:10:19:82:D1:00:56:11:0C:28:75:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:95:34:72:90:81:ce:b8:f0:d2:fb:e1:ff:58:11:48:7f:80: 5e:cf:a8:26:d2:f1:0c:90:17:0e:1d:5f:80:a3:86:8a:0d:eb: 79:74:73:50:5a:43:54:40:ce:c7:3d:e2:7d:e8:9b:d1:cd:85: 2d:5f:4b:c0:91:4c:68:8a:9b:ff:c1:47:49:44:a9:a3:0f:d3: e7:6b:43:24:36:4a:7e:94:f7:92:4d:a3:0e:2a:a4:ca:ac:b8: 5f:76:56:3e:0d:6b:1d:cc:91:32:90:8a:a7:8b:55:d1:b5:86: 86:53:0f:3d:7c:6b:70:94:6a:36:5f:0a:8b:cc:f2:03:5e:ed: 92:40:19:c1:7b:06:8b:fb:7c:20:be:80:dc:29:6c:92:ad:7a: 3e:56:d1:d4:72:7b:c5:c7:08:ae:75:52:51:63:ac:39:9a:36: 88:ce:be:65:77:76:2b:72:70:0c:f6:3d:11:0e:65:a5:d9:ed: 55:98:53:c1:fa:bf:98:bc:46:d5:fe:ac:0b:da:c5:4c:94:c7: a4:fd:e8:23:b2:81:9a:7b:46:f1:6a:3f:9d:1a:f9:ea:01:e6: 9d:0b:c2:bc:11:c2:45:8c:3e:6d:b6:8d:0f:43:02:ad:97:6b: ec:d2:d2:65:ee:34:5d:f6:e0:f6:d9:50:85:0b:50:fd:c4:6a: c1:75:93:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9ISO9g03VfZ18HVGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EzYmVkYzYtZTkzNy00MTk1LTllMjUtZDA0ODEyMmUy ZjYwMB4XDTI2MDkyNDE1MDAyM1oXDTI2MDkyNzE1MDAwMFowLzEtMCsGA1UEAxMk Yjk4YTYyZDgtZGY0NS00MWI5LTk0N2YtNzAyNzRhNzViOTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBs8gTWDfe1O7OQkteh2a1+Ub3yvJpQhF8MW TiHPHascLQWNIImVnO4AAJ0mQvxgQy8dvNR5BFOXcsJjNdAeSgX6p1MjtYMaZxfS /QuedSEcIe2udMXDJ/PqemtGdGZ9caihtZ2SMS3l03H9NeP7dGVM7RAZepRx4B6N oxYRMXduxnxUOqDB77qVzngnjUcTCRxNsTF9Lm6JbMeyvHU7fa6YIsbvVWaU9LDr hZlLxYmse5N3dcyQN0r0t/S8ErjH5kmH5ZQq3kdN3B7UI6l56nAOoE279S7MZoBs NygcXyA1AbB15uPLd8s76/4dLiodrx/IYN8jkDmKxGpto4sPpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPX8xNcDrQQOi0RGOsltrgE7pEBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9jYTNi ZWRjNi1lOTM3LTQxOTUtOWUyNS1kMDQ4MTIyZTJmNjAvY2EzYmVkYzYtZTkzNy00 MTk1LTllMjUtZDA0ODEyMmUyZjYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvY2EzYmVkYzYtZTkzNy00MTk1LTll MjUtZDA0ODEyMmUyZjYwL2NhM2JlZGM2LWU5MzctNDE5NS05ZTI1LWQwNDgxMjJl MmY2MC5jcmwwHwYDVR0jBBgwFoAUqyz9F43Z7qgWEBmC0QBWEQwoda8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9jYTNiZWRjNi1lOTM3LTQxOTUtOWUyNS1kMDQ4 MTIyZTJmNjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWlTRykIHOuPDS++H/WBFI f4Bez6gm0vEMkBcOHV+Ao4aKDet5dHNQWkNUQM7HPeJ96JvRzYUtX0vAkUxoipv/ wUdJRKmjD9Pna0MkNkp+lPeSTaMOKqTKrLhfdlY+DWsdzJEykIqni1XRtYaGUw89 fGtwlGo2XwqLzPIDXu2SQBnBewaL+3wgvoDcKWySrXo+VtHUcnvFxwiudVJRY6w5 mjaIzr5ld3YrcnAM9j0RDmWl2e1VmFPB+r+YvEbV/qwL2sVMlMek/egjsoGae0bx aj+dGvnqAeadC8K8EcJFjD5tto0PQwKtl2vs0tJl7jRd9uD22VCFC1D9xGrBdZOD -----END CERTIFICATE-----Generated at Fri Sep 25 04:47:20 2026 by rpki-client