$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft File: 3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft (raw, json) Hash identifier: 7sA+tvMgPwUKt2tlrkRkDR4jIOaLYffd3veCzM23oXo= Subject key identifier: F1:DC:15:6F:64:BD:02:7F:2B:ED:2E:61:D2:2E:A2:74:66:29:61:AC Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584F45D79003B3DE4FAAF0EE8780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft Manifest number: 010D0C9F43285848DEA6AA7962B2F4D6BC028D78 Signing time: Wed 23 Sep 2026 18:00:22 +0000 Manifest this update: Wed 23 Sep 2026 18:00:22 +0000 Manifest next update: Fri 25 Sep 2026 18:00:00 +0000 Files and hashes: 1: 1f5fab24-6ae3-369a-845b-2b5879489f6a.roa (hash: 1VzgTiryJ4i3c1Fg4sxZTXRkKLAYV0svyD7+cfQAMzI=) 2: 3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl (hash: ku2BbFuFUkoJDIIsh3GlGaNl675yMPPsAkRW/FgCQyg=) 3: 5f3dcef5-0406-33ce-8673-8f04413c8cba.roa (hash: ChneQB6VxLyqHy3H4h7FycGbH51KGHD3y+pQGIVmITQ=) 4: a98d5494-4572-385b-afc9-1ffafc221b11.roa (hash: gTUq/mMwCDAWu+gWyIhETQkFdXpRniX/6NFbAwncoTA=) 5: ce971edc-2b71-3b67-be96-0924eca1252b.asa (hash: oe5taR7qmmEB8uKu20odEKxWIGUqwVMz9BvdH0e1Pws=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:d7:90:03:b3:de:4f:aa:f0:ee:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Sep 23 18:00:22 2026 GMT Not After : Sep 25 18:00:00 2026 GMT Subject: CN=9a568fff-322e-4d79-9f39-58cb1b5325d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:eb:a7:fa:16:c5:bb:8c:b8:89:2c:6a:2b:16: e1:8b:90:45:f5:29:90:7c:b9:a8:21:37:c1:15:63: cf:eb:0f:21:d0:5c:c9:ab:d6:e6:b1:41:1c:e8:2e: 0d:70:e4:de:b4:49:db:0b:7a:85:7d:df:39:e8:3f: 8d:f1:ed:c5:74:f7:e7:5c:03:e7:eb:c0:db:57:52: fc:4c:ce:ba:3d:8d:4f:4d:38:fc:97:29:3d:d8:c2: 2c:f6:e1:b6:53:41:59:32:b9:70:8d:74:c9:75:f2: 0c:7b:5d:dd:58:9a:5d:12:a2:53:56:cd:80:64:33: b7:0e:17:ee:a6:49:cc:1a:6f:f9:2c:6c:55:27:b5: a2:91:c2:ab:c9:1f:23:eb:27:95:e3:85:f8:92:76: 80:1f:04:96:3f:e2:f0:a0:5a:44:92:c6:71:35:2f: d3:99:3b:45:af:5a:82:01:22:0f:8b:e4:af:09:6b: 02:36:cc:f8:14:47:17:74:ea:67:d8:14:4d:3a:c1: 0f:a2:da:fe:2a:77:97:31:1a:1f:8d:06:14:aa:ab: 1d:1d:a1:40:a3:54:89:b1:c8:7f:61:15:6b:a4:d7: 8d:35:4e:19:51:52:24:54:c3:f1:98:c3:ea:54:7a: 24:f5:62:4d:c2:68:b5:0f:95:62:ed:c3:c7:20:c3: e6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DC:15:6F:64:BD:02:7F:2B:ED:2E:61:D2:2E:A2:74:66:29:61:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e5:42:85:6c:84:bb:d7:27:5f:ea:34:94:b1:db:d7:bf:a2: 73:7f:26:30:f5:0a:5c:cf:a0:f8:09:c3:55:64:9a:37:b9:d7: bf:6c:89:ee:18:86:f2:a9:a6:6c:42:a1:07:e1:31:b5:d1:0b: 2e:af:02:ca:c8:ef:94:86:9e:eb:76:71:03:7d:66:58:4e:8a: 90:ef:0f:5c:87:78:6e:cc:e9:90:9c:68:bb:40:f4:c9:3f:3a: e8:19:53:6d:d2:a1:4c:8e:7b:2d:a9:47:f4:22:38:d5:8e:aa: 3a:7d:01:72:be:8e:0b:63:d8:3b:38:a3:56:f2:df:a1:d9:12: 86:a7:e4:05:5d:dc:77:09:0e:74:84:bf:0d:9e:4c:dd:18:ba: 64:63:45:62:e6:6c:a6:f2:ec:9b:98:92:c6:b0:67:6e:be:7d: d9:4f:ed:db:e3:37:fc:e4:0d:18:2c:45:13:fb:09:ee:55:a3: dc:e4:5c:b7:04:95:66:ac:60:32:9c:62:80:4c:ab:7e:c9:d2: 6e:2c:13:8f:e0:68:6e:a7:7c:c3:e2:39:2d:8b:a6:08:3b:6a: 4d:55:2e:40:3b:6d:f9:01:61:0b:9d:dd:54:0b:ed:b6:58:a4: 1f:04:08:bb:6f:bf:f5:23:99:6f:14:17:7c:d4:9a:c3:d7:34: ea:5b:64:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9F15ADs95PqvDuh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI2MDkyMzE4MDAyMloXDTI2MDkyNTE4MDAwMFowLzEtMCsGA1UEAxMk OWE1NjhmZmYtMzIyZS00ZDc5LTlmMzktNThjYjFiNTMyNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+un+hbFu4y4iSxqKxbhi5BF9SmQfLmoITfB FWPP6w8h0FzJq9bmsUEc6C4NcOTetEnbC3qFfd856D+N8e3FdPfnXAPn68DbV1L8 TM66PY1PTTj8lyk92MIs9uG2U0FZMrlwjXTJdfIMe13dWJpdEqJTVs2AZDO3Dhfu pknMGm/5LGxVJ7WikcKryR8j6yeV44X4knaAHwSWP+LwoFpEksZxNS/TmTtFr1qC ASIPi+SvCWsCNsz4FEcXdOpn2BRNOsEPotr+KneXMRofjQYUqqsdHaFAo1SJsch/ YRVrpNeNNU4ZUVIkVMPxmMPqVHok9WJNwmi1D5Vi7cPHIMPmgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPHcFW9kvQJ/K+0uYdIuonRmKWGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvMzY4OWI5Y2UtMDg5ZC00 MTM3LWIxNGQtN2U0Y2QxNWU1M2E1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZ5UKFbIS71ydf6jSUsdvX v6JzfyYw9Qpcz6D4CcNVZJo3ude/bInuGIbyqaZsQqEH4TG10QsurwLKyO+Uhp7r dnEDfWZYToqQ7w9ch3huzOmQnGi7QPTJPzroGVNt0qFMjnstqUf0IjjVjqo6fQFy vo4LY9g7OKNW8t+h2RKGp+QFXdx3CQ50hL8NnkzdGLpkY0Vi5mym8uybmJLGsGdu vn3ZT+3b4zf85A0YLEUT+wnuVaPc5Fy3BJVmrGAynGKATKt+ydJuLBOP4Ghup3zD 4jkti6YIO2pNVS5AO235AWELnd1UC+22WKQfBAi7b7/1I5lvFBd81JrD1zTqW2Tn -----END CERTIFICATE-----Generated at Thu Sep 24 00:08:05 2026 by rpki-client