$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft File: 3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft (raw, json) Hash identifier: HsR4A5SZBRIiD/ARgUpuixFAtrzOIuYFKOtovL45x3w= Subject key identifier: CD:01:5C:CD:CD:D8:C6:83:BA:C5:E9:DC:8D:55:AC:59:8A:1F:CB:B4 Authority key identifier: 0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4 Certificate issuer: /CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8 Certificate serial: 010D0C9F4328584F50A8FE21CF0E78E24E603700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft Manifest number: 010D0C9F43285841AEEEC2DA3330E6DFE2D5A526 Signing time: Sun 27 Sep 2026 15:00:23 +0000 Manifest this update: Sun 27 Sep 2026 15:00:23 +0000 Manifest next update: Wed 30 Sep 2026 15:00:00 +0000 Files and hashes: 1: 1f084892-5814-39ba-a891-eef84ae95748.roa (hash: VOWIozAmZaic7ZSKpVAcr3fAklCVfwjRWpcF2mYlkr8=) 2: 1f9999a6-d808-39d4-8d54-071e396efd7c.roa (hash: EAiR5Xd9iApJ3TUrW0HR+cbHMxkH0MSoX+wemrZEb7Q=) 3: 3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl (hash: q6LEbz0nv+S2CHW+V8Gr1kdS3OTHs12af6ageUzGEbU=) 4: 42a224d2-3205-3f19-92d3-d4f7cc416310.roa (hash: ubbH6u0Gjhrd+NHkGalxTAWPi58SzsbE7x/YAJnAEB8=) 5: 4c614fa4-86b6-3d9f-847a-8c621d670b67.roa (hash: VQFDUx0JWQrlnZJxwOrOltKnVVJZv+ENREvc7psD+ig=) 6: a630cce2-93d9-3356-bc79-894d2e85733e.roa (hash: S3Bhfr8dm9Vf1iNB3bw2y4Mzu3TC3vvpLk23WGl/O0o=) 7: dff59291-b5c9-3e59-b7d5-550a9ded0ade.roa (hash: QLzOuvTiUNQE0YPiJA6EkHBDoj67uIuCiYCWF/Xqyx0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:a8:fe:21:cf:0e:78:e2:4e:60:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8 Validity Not Before: Sep 27 15:00:23 2026 GMT Not After : Sep 30 15:00:00 2026 GMT Subject: CN=77db04ff-a277-4f0c-90b4-6e9b4378bfc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2d:a3:4c:d9:7d:1d:db:d7:25:6f:aa:e0:16: 62:eb:09:3f:85:d7:ed:0c:6d:3c:38:f8:39:76:fe: a0:ff:15:5b:c1:98:90:5c:f6:e1:33:35:c8:2c:b4: 04:19:dd:56:64:fe:59:04:51:e0:0a:60:3c:06:4d: f9:0e:cc:f1:6e:20:d8:65:a6:da:93:a5:12:6f:6b: 95:f2:01:a5:14:83:72:56:be:88:4a:be:b3:a2:49: a8:90:e3:86:bc:f4:ab:a0:2d:66:e0:fa:b3:5a:a0: b5:00:e5:ee:be:2b:7a:d9:29:ef:db:94:f9:01:74: c3:be:f7:a6:3e:b8:6a:9d:82:28:29:13:e3:8a:88: ae:14:d7:4e:cc:b2:fe:9c:1f:f9:25:08:52:02:2c: 5c:d0:e6:f4:57:4d:5d:bb:16:76:ae:2d:b9:01:06: 2d:7b:f9:56:51:8e:c2:e6:50:ab:f5:b4:cf:83:95: 60:b7:38:18:a9:d7:33:13:e5:4c:29:a1:e9:0e:51: 6a:c2:a0:60:81:4e:b1:a8:ec:7b:0f:e0:fc:22:e5: 82:47:ec:1d:ff:02:aa:8e:8d:0a:43:b0:d1:44:84: 05:b8:0d:54:e2:7c:cc:66:57:c4:70:b8:cc:8e:12: be:94:86:84:05:ce:50:19:95:1c:0c:cb:39:2f:d1: eb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:01:5C:CD:CD:D8:C6:83:BA:C5:E9:DC:8D:55:AC:59:8A:1F:CB:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl X509v3 Authority Key Identifier: keyid:0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e7:19:3c:ea:8c:47:85:1c:e8:c9:6a:af:ff:09:ae:3a:9a: e2:b2:fa:b7:a2:92:c0:3c:95:ff:a4:30:96:5e:24:b5:13:0c: fb:cb:c7:1e:56:06:cf:b8:46:ff:a9:9b:ce:99:f0:d9:44:7c: 1b:7c:ea:21:72:94:94:50:a1:9e:7f:7e:42:b9:69:9d:16:8e: c5:5a:ba:dc:8c:8d:de:73:80:3f:e8:78:3a:2b:f1:4b:9e:58: e7:60:c2:9c:49:50:8e:ce:9a:1f:72:b6:7b:ad:00:3f:ee:98: 20:a5:0c:5c:aa:65:b9:f6:0c:64:50:db:94:7a:30:b6:53:05: fb:9b:dd:7c:be:5c:28:55:f7:bf:53:3f:52:7b:01:ed:c7:62: ca:02:19:1f:00:ca:dd:94:3b:49:4f:13:67:79:af:41:42:8d: 0f:ad:7c:c5:d7:ea:c7:10:39:d6:1e:d9:83:e6:4d:1e:39:2f: b1:ee:9c:4a:7d:76:3b:a0:f9:ad:93:9c:82:da:fb:18:c5:60: d0:c3:13:69:81:c3:24:f5:11:29:cf:3b:95:be:97:37:ad:fa: e7:c5:b7:85:a0:e4:50:39:28:f5:72:e2:01:c7:32:55:0a:cc: a4:a5:93:11:7b:e0:fb:bd:f7:56:23:ba:42:8c:51:a5:b8:d9: a1:75:02:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9QqP4hzw544k5gNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5ZGY5YjQtNmY3My00M2M4LWFhY2MtNGQwNjhhODJj NWQ4MB4XDTI2MDkyNzE1MDAyM1oXDTI2MDkzMDE1MDAwMFowLzEtMCsGA1UEAxMk NzdkYjA0ZmYtYTI3Ny00ZjBjLTkwYjQtNmU5YjQzNzhiZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC2jTNl9HdvXJW+q4BZi6wk/hdftDG08OPg5 dv6g/xVbwZiQXPbhMzXILLQEGd1WZP5ZBFHgCmA8Bk35DszxbiDYZabak6USb2uV 8gGlFINyVr6ISr6zokmokOOGvPSroC1m4PqzWqC1AOXuvit62Snv25T5AXTDvvem PrhqnYIoKRPjioiuFNdOzLL+nB/5JQhSAixc0Ob0V01duxZ2ri25AQYte/lWUY7C 5lCr9bTPg5VgtzgYqdczE+VMKaHpDlFqwqBggU6xqOx7D+D8IuWCR+wd/wKqjo0K Q7DRRIQFuA1U4nzMZlfEcLjMjhK+lIaEBc5QGZUcDMs5L9Hr2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM0BXM3N2MaDusXp3I1VrFmKH8u0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDlk ZjliNC02ZjczLTQzYzgtYWFjYy00ZDA2OGE4MmM1ZDgvM2Q5ZGY5YjQtNmY3My00 M2M4LWFhY2MtNGQwNjhhODJjNWQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2Q5ZGY5YjQtNmY3My00M2M4LWFh Y2MtNGQwNjhhODJjNWQ4LzNkOWRmOWI0LTZmNzMtNDNjOC1hYWNjLTRkMDY4YTgy YzVkOC5jcmwwHwYDVR0jBBgwFoAUDVIzEr60YauI1fFIz7wBLC22X8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDlkZjliNC02ZjczLTQzYzgtYWFjYy00ZDA2 OGE4MmM1ZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCl5xk86oxHhRzoyWqv/wmu Oprisvq3opLAPJX/pDCWXiS1Ewz7y8ceVgbPuEb/qZvOmfDZRHwbfOohcpSUUKGe f35CuWmdFo7FWrrcjI3ec4A/6Hg6K/FLnljnYMKcSVCOzpofcrZ7rQA/7pggpQxc qmW59gxkUNuUejC2UwX7m918vlwoVfe/Uz9SewHtx2LKAhkfAMrdlDtJTxNnea9B Qo0PrXzF1+rHEDnWHtmD5k0eOS+x7pxKfXY7oPmtk5yC2vsYxWDQwxNpgcMk9REp zzuVvpc3rfrnxbeFoORQOSj1cuIBxzJVCsykpZMRe+D7vfdWI7pCjFGluNmhdQL7 -----END CERTIFICATE-----Generated at Sun Sep 27 21:09:45 2026 by rpki-client