$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft File: 3b24522b-8239-4bb9-9845-1e01e28aa452.mft (raw, json) Hash identifier: lJOW+TE1vBjzY6tavzFRLxuI3WAPoZmqsWNYG/pCwZA= Subject key identifier: 34:3B:29:6D:88:58:5A:D9:EE:DD:AE:DC:C6:B1:6C:6D:CF:DC:20:14 Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Certificate serial: 010D0C9F4328584F515BA445190BBF3EFDD23780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft Manifest number: 010D0C9F43285846097092BB96E608752D6F721D Signing time: Sun 27 Sep 2026 21:00:23 +0000 Manifest this update: Sun 27 Sep 2026 21:00:23 +0000 Manifest next update: Tue 29 Sep 2026 21:00:00 +0000 Files and hashes: 1: 3b24522b-8239-4bb9-9845-1e01e28aa452.crl (hash: TaAV3LXG375dzP7AT4jWKJYsEqBCAlklc3nxokb4AWE=) 2: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (hash: GDqWgQuM895izEEunxIilJS85vjzhXKA5lsW2+jFqok=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:5b:a4:45:19:0b:bf:3e:fd:d2:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Validity Not Before: Sep 27 21:00:23 2026 GMT Not After : Sep 29 21:00:00 2026 GMT Subject: CN=8e8f2e18-9f00-4878-a843-33270379636e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c0:75:82:37:ec:f4:88:cc:f6:0b:55:a2:7d: 98:e2:a2:84:f0:75:b1:ac:c7:95:b2:be:8c:9a:16: fe:87:05:be:f1:39:55:68:c6:34:1f:2c:18:87:77: 9f:58:93:44:81:5e:75:01:c6:96:61:1f:46:83:66: 72:6c:67:13:01:29:3e:45:84:7f:53:ae:a0:61:bd: ff:37:4f:b5:f1:d6:36:3b:07:72:1d:c7:94:0a:6a: be:70:97:b1:de:3c:b4:4d:2e:8b:df:15:18:15:bb: 87:91:94:09:cd:46:37:bb:5a:e0:d7:6e:00:32:ae: fa:bb:83:53:ff:75:fc:64:f5:60:5c:94:3f:38:66: a7:93:9c:77:60:24:1d:d4:3a:fb:2e:6d:26:e5:e4: d5:ab:5e:45:d9:1e:21:72:ac:53:dc:b9:51:ce:04: 92:4e:88:c4:91:32:5f:b8:15:7c:a9:7b:2c:58:80: 0c:44:a8:8f:02:4a:4e:7f:51:6c:15:6d:97:29:2f: dd:40:b3:07:6c:25:32:f3:89:19:36:28:dd:37:fe: 1c:e0:a5:b2:ae:17:fa:8c:cd:a0:ce:b9:29:90:20: e8:1d:58:9c:1f:32:29:cd:ea:2b:bc:89:f9:30:2c: 1c:e2:15:1e:02:c7:79:d3:81:79:9f:1a:c4:a6:48: f1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3B:29:6D:88:58:5A:D9:EE:DD:AE:DC:C6:B1:6C:6D:CF:DC:20:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl X509v3 Authority Key Identifier: keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b6:e5:e5:38:44:3e:de:74:03:98:f6:07:b4:3a:5a:03:9f: 6f:f8:05:bf:b0:76:c1:b4:30:ce:41:4b:9a:be:56:99:ac:99: 26:72:fd:7f:ba:a9:a7:ae:e3:a6:71:0b:78:8f:a6:06:2d:b2: 33:91:b7:a4:79:42:9a:fa:28:1e:0e:e4:53:d1:29:97:e3:33: c1:d8:97:01:e6:6c:71:f0:51:ad:65:1d:7f:9e:e6:0d:1f:36: bc:35:0b:40:26:8e:9f:cc:0d:0e:e9:c6:40:e8:e2:9a:c5:ab: 7a:59:0e:84:d7:d1:64:18:0c:85:43:37:2c:81:05:9a:e4:e9: c8:a1:fd:19:b9:7b:8b:69:0e:2c:bd:55:c8:98:45:e4:bd:9c: 67:0e:d8:55:9c:09:58:37:d3:ac:7a:34:7f:ea:9b:ad:cd:35: 09:1b:4e:33:74:4d:bd:9f:e9:7e:f5:8d:d9:e1:05:4c:e5:16: 25:f0:4a:cc:96:94:f9:21:85:ba:af:c3:d2:b8:6a:7e:8c:ad: 3d:cd:5c:50:58:8a:28:e6:c8:40:d2:08:0a:1b:30:bc:72:8c: 78:bc:e7:87:e6:6f:d1:58:c6:7f:ea:6e:fa:39:dc:dd:05:8c: ad:fb:9a:9c:4e:80:00:ba:44:9e:6d:75:75:ba:aa:7d:17:67: 59:9c:53:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9RW6RFGQu/Pv3SN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFh NDUyMB4XDTI2MDkyNzIxMDAyM1oXDTI2MDkyOTIxMDAwMFowLzEtMCsGA1UEAxMk OGU4ZjJlMTgtOWYwMC00ODc4LWE4NDMtMzMyNzAzNzk2MzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcB1gjfs9IjM9gtVon2Y4qKE8HWxrMeVsr6M mhb+hwW+8TlVaMY0HywYh3efWJNEgV51AcaWYR9Gg2ZybGcTASk+RYR/U66gYb3/ N0+18dY2OwdyHceUCmq+cJex3jy0TS6L3xUYFbuHkZQJzUY3u1rg124AMq76u4NT /3X8ZPVgXJQ/OGank5x3YCQd1Dr7Lm0m5eTVq15F2R4hcqxT3LlRzgSSTojEkTJf uBV8qXssWIAMRKiPAkpOf1FsFW2XKS/dQLMHbCUy84kZNijdN/4c4KWyrhf6jM2g zrkpkCDoHVicHzIpzeorvIn5MCwc4hUeAsd504F5nxrEpkjxQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDQ7KW2IWFrZ7t2u3MaxbG3P3CAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjI0 NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvM2IyNDUyMmItODIzOS00 YmI5LTk4NDUtMWUwMWUyOGFhNDUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2IyNDUyMmItODIzOS00YmI5LTk4 NDUtMWUwMWUyOGFhNDUyLzNiMjQ1MjJiLTgyMzktNGJiOS05ODQ1LTFlMDFlMjhh YTQ1Mi5jcmwwHwYDVR0jBBgwFoAUoAL1aNmuD2MRURVEAh0dW/5OsNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAx ZTI4YWE0NTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3tuXlOEQ+3nQDmPYHtDpa A59v+AW/sHbBtDDOQUuavlaZrJkmcv1/uqmnruOmcQt4j6YGLbIzkbekeUKa+ige DuRT0SmX4zPB2JcB5mxx8FGtZR1/nuYNHza8NQtAJo6fzA0O6cZA6OKaxat6WQ6E 19FkGAyFQzcsgQWa5OnIof0ZuXuLaQ4svVXImEXkvZxnDthVnAlYN9OsejR/6put zTUJG04zdE29n+l+9Y3Z4QVM5RYl8ErMlpT5IYW6r8PSuGp+jK09zVxQWIoo5shA 0ggKGzC8cox4vOeH5m/RWMZ/6m76OdzdBYyt+5qcToAAukSebXV1uqp9F2dZnFPo -----END CERTIFICATE-----Generated at Mon Sep 28 20:58:31 2026 by rpki-client