$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/3b8b33e0-517e-41cb-b3e3-00af3defc90b.mft File: 3b8b33e0-517e-41cb-b3e3-00af3defc90b.mft (raw, json) Hash identifier: /KB8QeEAWw3Nbl9uL1J1re13SZ4nFxsJKYegIXW35jY= Subject key identifier: 26:C6:43:39:2E:99:98:4B:4B:D3:7C:F8:33:E8:E9:C9:F6:C9:46:90 Authority key identifier: BC:32:2A:02:6C:EB:43:9C:43:AF:C1:25:62:9F:AC:CA:38:1B:D8:C9 Certificate issuer: /CN=3b8b33e0-517e-41cb-b3e3-00af3defc90b Certificate serial: 010D0C9F4328584F44CB864E29AA8059B7EDE540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/3b8b33e0-517e-41cb-b3e3-00af3defc90b.mft Manifest number: 010D0C9F4328584C20DC28CE9EE704F253B42769 Signing time: Wed 23 Sep 2026 09:00:23 +0000 Manifest this update: Wed 23 Sep 2026 09:00:23 +0000 Manifest next update: Sat 26 Sep 2026 09:00:00 +0000 Files and hashes: 1: 31b65189-8eb2-3493-9618-10fee67e4d35.roa (hash: 1ORxarkuWkfyjYm5ItxWmDG/Sl18q1FusRppzr9aLMk=) 2: 3b8b33e0-517e-41cb-b3e3-00af3defc90b.crl (hash: O7TwWOzzakHPeieST5vyng/Z8fSC9odfTOmeMbZaT6s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/3b8b33e0-517e-41cb-b3e3-00af3defc90b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/3b8b33e0-517e-41cb-b3e3-00af3defc90b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:44:cb:86:4e:29:aa:80:59:b7:ed:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b8b33e0-517e-41cb-b3e3-00af3defc90b Validity Not Before: Sep 23 09:00:23 2026 GMT Not After : Sep 26 09:00:00 2026 GMT Subject: CN=98eb98ef-41dd-4f6c-8a19-8fe0498b261f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:b9:52:a5:60:4e:4c:11:60:ed:87:12:70: 24:ec:82:65:04:ba:c1:4f:86:cd:83:ef:82:a3:8a: d0:f6:5d:db:48:1e:82:d0:e2:a7:13:60:1d:bb:49: 5f:bd:a1:fc:49:fe:8e:56:c5:51:19:d4:52:a3:c4: aa:b5:ba:53:1a:46:72:47:ef:0c:e9:bb:b4:d3:54: 36:c5:d0:ca:eb:16:ba:7f:78:85:29:61:1c:47:f2: a7:23:23:b4:13:81:0f:34:64:73:40:1c:01:ac:0d: b8:be:97:be:88:d6:9e:08:5b:70:25:87:c1:43:df: 0d:00:5b:d2:1b:8a:ba:91:cf:8b:13:91:5d:ad:8a: 3a:d4:31:cd:5f:29:01:34:99:01:3a:a5:91:d1:12: e5:ad:01:20:64:c1:0f:9b:98:c1:e3:fa:c2:1e:c4: 20:80:47:1e:bd:4e:26:6e:82:ea:c5:16:5c:26:ba: 31:ef:53:7e:71:22:61:5a:9c:4a:32:9f:69:64:59: ff:2d:4a:5d:32:29:a4:36:e2:d1:1f:31:35:c2:62: 6a:c1:2f:6b:45:28:f0:d8:7f:a8:38:35:be:51:f6: 20:8c:ad:d3:ef:8a:6e:6e:72:e2:32:93:e2:9c:ea: a2:ba:51:71:a7:89:3f:22:24:ec:5b:a4:78:1b:78: 43:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C6:43:39:2E:99:98:4B:4B:D3:7C:F8:33:E8:E9:C9:F6:C9:46:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/3b8b33e0-517e-41cb-b3e3-00af3defc90b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/3b8b33e0-517e-41cb-b3e3-00af3defc90b.crl X509v3 Authority Key Identifier: keyid:BC:32:2A:02:6C:EB:43:9C:43:AF:C1:25:62:9F:AC:CA:38:1B:D8:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:47:15:a2:ac:96:60:f0:fd:40:c9:94:b7:b2:5b:26:75:04: 70:fd:d5:49:54:53:68:e6:e9:99:ad:47:eb:03:66:43:2d:31: 02:f2:95:f6:f2:9b:c4:71:d2:6f:22:9a:a4:c6:ad:c9:15:ba: fe:4d:d6:a4:7e:bb:62:6d:17:30:00:09:df:fd:cd:95:48:38: 54:4c:4a:b8:ee:69:43:ab:18:59:0b:dc:da:a7:4d:44:90:da: 2c:84:3d:b8:dd:ce:64:88:12:5d:68:19:02:2a:37:5f:e0:dd: 03:5f:7b:5b:b5:9d:03:03:07:ea:4e:c9:32:37:8b:56:07:de: 6e:80:3d:6b:99:0c:0d:d1:7c:5b:d8:14:03:10:c6:11:e7:f3: d1:88:ec:88:b3:4e:6b:b4:fb:ab:47:70:5a:7d:de:76:dc:f8: ef:d2:7e:e6:13:ed:d4:59:ec:c9:92:b2:d5:2b:c9:f7:36:bf: 48:1a:1b:83:08:96:da:6b:a3:14:4b:62:b1:66:5a:6f:f0:7c: 9b:7e:e0:05:b3:f9:d2:73:f7:73:d1:12:26:ee:a9:8d:31:de: a7:32:b4:35:73:51:e1:4e:73:2c:ea:fc:62:cd:29:41:3a:bd: 68:cf:45:7c:ff:05:08:84:ec:16:a8:74:20:4a:e4:6a:70:84: 96:9e:0f:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Ey4ZOKaqAWbft5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4YjMzZTAtNTE3ZS00MWNiLWIzZTMtMDBhZjNkZWZj OTBiMB4XDTI2MDkyMzA5MDAyM1oXDTI2MDkyNjA5MDAwMFowLzEtMCsGA1UEAxMk OThlYjk4ZWYtNDFkZC00ZjZjLThhMTktOGZlMDQ5OGIyNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fe5UqVgTkwRYO2HEnAk7IJlBLrBT4bNg++C o4rQ9l3bSB6C0OKnE2Adu0lfvaH8Sf6OVsVRGdRSo8SqtbpTGkZyR+8M6bu001Q2 xdDK6xa6f3iFKWEcR/KnIyO0E4EPNGRzQBwBrA24vpe+iNaeCFtwJYfBQ98NAFvS G4q6kc+LE5FdrYo61DHNXykBNJkBOqWR0RLlrQEgZMEPm5jB4/rCHsQggEcevU4m boLqxRZcJrox71N+cSJhWpxKMp9pZFn/LUpdMimkNuLRHzE1wmJqwS9rRSjw2H+o ODW+UfYgjK3T74pubnLiMpPinOqiulFxp4k/IiTsW6R4G3hD7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCbGQzkumZhLS9N8+DPo6cn2yUaQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zYjhi MzNlMC01MTdlLTQxY2ItYjNlMy0wMGFmM2RlZmM5MGIvM2I4YjMzZTAtNTE3ZS00 MWNiLWIzZTMtMDBhZjNkZWZjOTBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvM2I4YjMzZTAtNTE3ZS00MWNiLWIz ZTMtMDBhZjNkZWZjOTBiLzNiOGIzM2UwLTUxN2UtNDFjYi1iM2UzLTAwYWYzZGVm YzkwYi5jcmwwHwYDVR0jBBgwFoAUvDIqAmzrQ5xDr8ElYp+syjgb2MkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zYjhiMzNlMC01MTdlLTQxY2ItYjNlMy0wMGFm M2RlZmM5MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSRxWirJZg8P1AyZS3slsm dQRw/dVJVFNo5umZrUfrA2ZDLTEC8pX28pvEcdJvIpqkxq3JFbr+TdakfrtibRcw AAnf/c2VSDhUTEq47mlDqxhZC9zap01EkNoshD243c5kiBJdaBkCKjdf4N0DX3tb tZ0DAwfqTskyN4tWB95ugD1rmQwN0Xxb2BQDEMYR5/PRiOyIs05rtPurR3Bafd52 3Pjv0n7mE+3UWezJkrLVK8n3Nr9IGhuDCJbaa6MUS2KxZlpv8HybfuAFs/nSc/dz 0RIm7qmNMd6nMrQ1c1HhTnMs6vxizSlBOr1oz0V8/wUIhOwWqHQgSuRqcISWng8C -----END CERTIFICATE-----Generated at Wed Sep 23 22:34:19 2026 by rpki-client