$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft File: 3e9fb25a-438f-4e1d-a136-5c878d065c24.mft (raw, json) Hash identifier: 1Gc4C9rzsi+Mdml+ACuy5mkOH8RS3nDD3wuywBHIL2U= Subject key identifier: 35:93:3C:23:D1:0A:F1:51:48:75:20:ED:6A:BC:96:E2:F2:1C:86:AA Authority key identifier: D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04 Certificate issuer: /CN=3e9fb25a-438f-4e1d-a136-5c878d065c24 Certificate serial: 010D0C9F4328584F461325669771049922C91400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft Manifest number: 010D0C9F432858488B7B09E7C4EF76CBED14D3D8 Signing time: Wed 23 Sep 2026 20:00:23 +0000 Manifest this update: Wed 23 Sep 2026 20:00:23 +0000 Manifest next update: Fri 25 Sep 2026 20:00:00 +0000 Files and hashes: 1: 3e9fb25a-438f-4e1d-a136-5c878d065c24.crl (hash: KYfhGyXmNoGYaR47iXwKhXaMGuOwSO5DhzuTqcKc08k=) 2: 58dadb05-4845-3a41-9b2f-663a09e0cfff.roa (hash: GUxb+dVuQYPhTnTQxC8WUIc8N0E95pcLJaMphLmlojY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:13:25:66:97:71:04:99:22:c9:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9fb25a-438f-4e1d-a136-5c878d065c24 Validity Not Before: Sep 23 20:00:23 2026 GMT Not After : Sep 25 20:00:00 2026 GMT Subject: CN=05957e5f-5332-4fdc-83d0-bb841d34c7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:57:5a:61:da:e3:0b:c9:cf:07:ab:7f:b7:10: 80:fc:f8:fd:aa:f0:49:db:1e:5f:28:f6:bc:09:e3: fb:eb:00:fb:3b:df:1c:a2:97:f2:60:f2:d8:d4:8d: 4a:ed:79:8b:08:b6:48:fe:48:e9:94:a2:db:94:45: 62:b9:67:42:9e:29:90:a0:58:79:ba:53:4c:82:e2: 1a:0e:94:f6:ac:3d:ad:35:ea:04:92:48:13:9c:98: d5:c3:d8:a4:e0:4d:06:ec:55:50:59:da:e0:62:66: d4:8f:78:36:ef:da:69:b4:0f:05:3c:05:3a:a1:8f: 62:24:b7:f4:25:8d:40:96:8a:7b:55:94:d6:cd:f0: f5:9c:26:ea:87:3c:c3:12:63:16:ba:c1:d2:c1:ef: 58:cb:6d:92:65:d5:99:b2:b2:96:bf:83:4d:52:c1: 14:f3:5b:9a:1e:2d:de:75:a5:31:fa:97:9a:26:71: 22:88:ee:60:c9:d3:3d:81:2c:ba:01:d8:e9:34:d2: 06:1d:4d:6e:5a:e9:2d:0c:31:49:14:25:71:e1:56: 4b:38:c2:3c:d9:d5:b1:ab:99:89:19:79:9a:62:4a: 8a:77:c7:16:93:2c:7c:92:f2:58:38:f1:6c:b5:9a: 81:e0:25:e6:e3:55:d2:0d:c8:78:36:3a:df:d8:45: aa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:93:3C:23:D1:0A:F1:51:48:75:20:ED:6A:BC:96:E2:F2:1C:86:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl X509v3 Authority Key Identifier: keyid:D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9c:75:57:f9:00:67:b0:9a:8e:0a:66:30:c0:2f:cd:0d:2d: a5:f4:2f:dc:b8:7e:24:a6:47:06:37:bc:e2:01:b3:67:92:19: 6c:bc:a1:fa:41:1a:82:12:43:2a:d7:43:1e:0f:e7:36:61:9b: 2f:7e:44:99:38:71:7b:6f:ad:65:51:db:a9:df:b0:47:00:1f: 42:57:16:97:17:d3:c6:9f:a3:cf:44:46:00:0d:d6:cb:0f:b5: f6:29:7f:49:ab:50:7e:f0:3d:4e:f0:1d:3d:85:cc:f0:76:a7: 26:fa:0a:b8:07:d6:70:b2:51:7d:56:d0:7b:80:c1:a5:9d:f9: ba:86:8f:18:79:15:49:f6:fd:05:d5:bb:f0:ab:5a:77:83:aa: 4f:e4:29:c5:d8:f3:71:40:32:de:30:0b:84:6e:0c:5c:64:54: ac:09:62:39:3c:c5:65:97:1d:09:20:c5:ad:bb:a3:7b:e8:4b: 8f:b5:fe:27:3e:61:6e:e7:ab:36:8e:98:fb:24:db:ca:59:26: 6d:92:6c:74:69:6c:b8:03:92:ec:70:45:52:49:14:2d:8b:c0: 59:b9:8b:e9:da:ad:14:76:83:5a:c1:df:6e:3d:25:f9:c1:c0: d2:07:44:a3:32:1f:3e:22:f4:43:44:41:8d:e0:4f:bd:22:c0: f0:a5:d0:cd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9GEyVml3EEmSLJFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U5ZmIyNWEtNDM4Zi00ZTFkLWExMzYtNWM4NzhkMDY1 YzI0MB4XDTI2MDkyMzIwMDAyM1oXDTI2MDkyNTIwMDAwMFowLzEtMCsGA1UEAxMk MDU5NTdlNWYtNTMzMi00ZmRjLTgzZDAtYmI4NDFkMzRjN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjldaYdrjC8nPB6t/txCA/Pj9qvBJ2x5fKPa8 CeP76wD7O98copfyYPLY1I1K7XmLCLZI/kjplKLblEViuWdCnimQoFh5ulNMguIa DpT2rD2tNeoEkkgTnJjVw9ik4E0G7FVQWdrgYmbUj3g279pptA8FPAU6oY9iJLf0 JY1Alop7VZTWzfD1nCbqhzzDEmMWusHSwe9Yy22SZdWZsrKWv4NNUsEU81uaHi3e daUx+peaJnEiiO5gydM9gSy6AdjpNNIGHU1uWuktDDFJFCVx4VZLOMI82dWxq5mJ GXmaYkqKd8cWkyx8kvJYOPFstZqB4CXm41XSDch4Njrf2EWq4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDWTPCPRCvFRSHUg7Wq8luLyHIaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zZTlm YjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3OGQwNjVjMjQvM2U5ZmIyNWEtNDM4Zi00 ZTFkLWExMzYtNWM4NzhkMDY1YzI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2U5ZmIyNWEtNDM4Zi00ZTFkLWEx MzYtNWM4NzhkMDY1YzI0LzNlOWZiMjVhLTQzOGYtNGUxZC1hMTM2LTVjODc4ZDA2 NWMyNC5jcmwwHwYDVR0jBBgwFoAU0w52saMVmAH+L59D/FFDCjr66gQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zZTlmYjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3 OGQwNjVjMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsnHVX+QBnsJqOCmYwwC/N DS2l9C/cuH4kpkcGN7ziAbNnkhlsvKH6QRqCEkMq10MeD+c2YZsvfkSZOHF7b61l Udup37BHAB9CVxaXF9PGn6PPREYADdbLD7X2KX9Jq1B+8D1O8B09hczwdqcm+gq4 B9ZwslF9VtB7gMGlnfm6ho8YeRVJ9v0F1bvwq1p3g6pP5CnF2PNxQDLeMAuEbgxc ZFSsCWI5PMVllx0JIMWtu6N76EuPtf4nPmFu56s2jpj7JNvKWSZtkmx0aWy4A5Ls cEVSSRQti8BZuYvp2q0UdoNawd9uPSX5wcDSB0SjMh8+IvRDREGN4E+9IsDwpdDN -----END CERTIFICATE-----Generated at Thu Sep 24 06:03:40 2026 by rpki-client