$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft File: 3dd67fc2-5423-4bf8-a727-d7838049cda2.mft (raw, json) Hash identifier: 2Hqvb+xQln0cLVtGGUVc2/nBzWPU1yE7VTRi63WSsXs= Subject key identifier: 91:69:57:2A:46:1C:CB:7F:17:7A:E2:E2:A6:07:E0:5C:0E:F1:4D:E9 Authority key identifier: 26:A6:B8:75:A8:31:6E:CA:C6:CC:42:0B:9A:C7:BA:D0:B7:BE:A0:42 Certificate issuer: /CN=3dd67fc2-5423-4bf8-a727-d7838049cda2 Certificate serial: 010D0C9F4328584FD6E55FAC59EE954A13B79100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft Manifest number: 010D0C9F4328584F2F742811BE40664C9DFD86BD Signing time: Sat 14 Nov 2026 17:00:23 +0000 Manifest this update: Sat 14 Nov 2026 17:00:23 +0000 Manifest next update: Tue 17 Nov 2026 17:00:00 +0000 Files and hashes: 1: 3dd67fc2-5423-4bf8-a727-d7838049cda2.crl (hash: R61HIjoL9cgZWrBnNgGSE/9BkjXzcMJxRE/BuPjAzsk=) 2: dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer (hash: MIZSN5bl2tkXBwdaoQ8nefmUUbINqBePNWrXGT/f9Wc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d6:e5:5f:ac:59:ee:95:4a:13:b7:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dd67fc2-5423-4bf8-a727-d7838049cda2 Validity Not Before: Nov 14 17:00:23 2026 GMT Not After : Nov 17 17:00:00 2026 GMT Subject: CN=1fb17534-7782-4817-8765-5198eb2ac3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:b5:69:e7:58:93:1d:7e:bf:64:32:93:cf: 5e:47:2c:bc:98:32:6c:40:0c:af:8a:b8:7f:e9:a5: e4:b3:c8:54:1f:c0:c1:6f:66:af:57:98:90:95:88: 8c:5d:03:f0:ae:14:1d:fe:10:eb:d3:29:d8:f3:9b: f8:d9:be:40:2d:e6:02:ed:0f:82:bb:0c:e2:84:98: fa:90:21:7a:bf:c2:1f:e9:23:fd:28:73:e8:8c:5f: 5d:e4:0b:7b:2e:cf:0e:47:aa:65:01:f1:07:98:f3: 6e:54:f1:fb:22:05:00:fc:d5:aa:e8:4b:11:48:c3: f0:59:3b:7b:da:35:e2:b5:64:e5:0b:b3:20:01:d3: 23:39:bb:87:38:4b:fa:53:9b:c7:c7:0d:ad:15:01: fe:a0:9c:f3:cf:d3:cd:d1:30:d1:2a:87:49:01:1b: ce:ab:56:4e:cf:7e:17:22:56:84:07:c6:2f:2d:66: 79:1b:54:14:d6:6b:9d:2d:c6:ab:67:fa:87:69:3a: 99:b1:b1:55:ff:ab:ec:ef:2b:35:29:92:f5:d9:06: 3b:6d:f7:d6:a3:44:17:f8:ac:de:e9:5a:4a:80:80: be:7a:4f:ef:a7:8f:84:3c:2e:26:01:4a:18:2b:19: 5d:de:01:7d:87:47:09:84:e6:e3:ca:21:1a:c7:c1: fe:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:69:57:2A:46:1C:CB:7F:17:7A:E2:E2:A6:07:E0:5C:0E:F1:4D:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl X509v3 Authority Key Identifier: keyid:26:A6:B8:75:A8:31:6E:CA:C6:CC:42:0B:9A:C7:BA:D0:B7:BE:A0:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:8e:48:97:d3:0f:19:7d:c8:86:8a:a2:16:1c:12:12:ec:a4: cc:8f:54:be:04:fd:26:da:2f:38:45:31:17:aa:7d:ae:a7:d9: 22:0c:d9:3a:d3:d3:41:e6:84:97:b0:2e:8b:e7:9f:f1:c8:22: a2:bc:dd:31:38:0a:85:d1:04:b1:19:f0:5b:38:12:e7:3d:8e: e5:15:6a:90:81:90:02:61:3b:79:7d:a5:62:43:4b:cc:28:8c: d9:f9:50:16:ed:35:af:65:6d:32:2e:d3:79:52:cc:71:36:74: cd:13:99:ff:5b:68:be:4d:ed:57:57:2e:35:e0:c9:50:11:f6: 45:cd:c9:4d:d3:10:66:96:21:c5:4a:12:9b:93:e7:1e:36:2e: 95:0f:18:c5:ee:23:7e:99:b1:9a:22:0c:73:8e:ed:05:11:fa: da:c0:e2:18:4c:e9:ad:9c:d8:19:d1:10:7e:56:dd:19:e0:50: 31:bf:2c:41:87:96:48:37:fd:c4:e3:1d:33:40:81:03:9e:97: 1e:42:ac:64:b5:26:21:b9:d8:5d:26:2a:36:73:36:fc:20:a7: a5:9c:0c:2f:1f:3c:fb:1d:c7:3f:81:01:df:e1:4e:e6:a7:ce: 69:0d:1f:d3:62:26:5d:b8:95:e6:13:49:1a:15:34:52:35:c8: aa:a4:9a:dc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/W5V+sWe6VShO3kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RkNjdmYzItNTQyMy00YmY4LWE3MjctZDc4MzgwNDlj ZGEyMB4XDTI2MTExNDE3MDAyM1oXDTI2MTExNzE3MDAwMFowLzEtMCsGA1UEAxMk MWZiMTc1MzQtNzc4Mi00ODE3LTg3NjUtNTE5OGViMmFjM2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriy1aedYkx1+v2Qyk89eRyy8mDJsQAyvirh/ 6aXks8hUH8DBb2avV5iQlYiMXQPwrhQd/hDr0ynY85v42b5ALeYC7Q+CuwzihJj6 kCF6v8If6SP9KHPojF9d5At7Ls8OR6plAfEHmPNuVPH7IgUA/NWq6EsRSMPwWTt7 2jXitWTlC7MgAdMjObuHOEv6U5vHxw2tFQH+oJzzz9PN0TDRKodJARvOq1ZOz34X IlaEB8YvLWZ5G1QU1mudLcarZ/qHaTqZsbFV/6vs7ys1KZL12QY7bffWo0QX+Kze 6VpKgIC+ek/vp4+EPC4mAUoYKxld3gF9h0cJhObjyiEax8H+6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJFpVypGHMt/F3ri4qYH4FwO8U3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2 N2ZjMi01NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvM2RkNjdmYzItNTQyMy00 YmY4LWE3MjctZDc4MzgwNDljZGEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2RkNjdmYzItNTQyMy00YmY4LWE3 MjctZDc4MzgwNDljZGEyLzNkZDY3ZmMyLTU0MjMtNGJmOC1hNzI3LWQ3ODM4MDQ5 Y2RhMi5jcmwwHwYDVR0jBBgwFoAUJqa4dagxbsrGzEILmse60Le+oEIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2N2ZjMi01NDIzLTRiZjgtYTcyNy1kNzgz ODA0OWNkYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHjkiX0w8ZfciGiqIWHBIS 7KTMj1S+BP0m2i84RTEXqn2up9kiDNk609NB5oSXsC6L55/xyCKivN0xOAqF0QSx GfBbOBLnPY7lFWqQgZACYTt5faViQ0vMKIzZ+VAW7TWvZW0yLtN5UsxxNnTNE5n/ W2i+Te1XVy414MlQEfZFzclN0xBmliHFShKbk+ceNi6VDxjF7iN+mbGaIgxzju0F EfrawOIYTOmtnNgZ0RB+Vt0Z4FAxvyxBh5ZIN/3E4x0zQIEDnpceQqxktSYhudhd Jio2czb8IKelnAwvHzz7Hcc/gQHf4U7mp85pDR/TYiZduJXmE0kaFTRSNciqpJrc -----END CERTIFICATE-----Generated at Sun Nov 15 14:57:50 2026 by rpki-client