$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3720f4aa-0347-4fbd-ad6b-420d575f5d9f/3720f4aa-0347-4fbd-ad6b-420d575f5d9f.mft File: 3720f4aa-0347-4fbd-ad6b-420d575f5d9f.mft (raw, json) Hash identifier: moPBPz5TvCbDf0Z5EyAKarIbCMtZrixIbODFz+jkCbg= Subject key identifier: BE:2D:DF:3B:4C:9D:11:E8:A9:60:46:F1:24:96:66:E1:D1:D3:C7:DA Authority key identifier: 0A:AC:CD:7C:20:B5:DF:A2:79:F2:4F:A0:93:F2:13:10:9E:7E:A2:3A Certificate issuer: /CN=3720f4aa-0347-4fbd-ad6b-420d575f5d9f Certificate serial: 010D0C9F4328584FB25EE7C40D2D92691559CA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3720f4aa-0347-4fbd-ad6b-420d575f5d9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3720f4aa-0347-4fbd-ad6b-420d575f5d9f/3720f4aa-0347-4fbd-ad6b-420d575f5d9f.mft Manifest number: 010D0C9F4328584F9682EE7702DDBB64CB50FA8A Signing time: Sun 01 Nov 2026 15:00:25 +0000 Manifest this update: Sun 01 Nov 2026 15:00:25 +0000 Manifest next update: Wed 04 Nov 2026 15:00:00 +0000 Files and hashes: 1: 3720f4aa-0347-4fbd-ad6b-420d575f5d9f.crl (hash: c0iDE9Tfo03wDIsPLGYHHuGO/2hubTcdo76JeBBDlu0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3720f4aa-0347-4fbd-ad6b-420d575f5d9f/3720f4aa-0347-4fbd-ad6b-420d575f5d9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3720f4aa-0347-4fbd-ad6b-420d575f5d9f/3720f4aa-0347-4fbd-ad6b-420d575f5d9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3720f4aa-0347-4fbd-ad6b-420d575f5d9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:5e:e7:c4:0d:2d:92:69:15:59:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3720f4aa-0347-4fbd-ad6b-420d575f5d9f Validity Not Before: Nov 1 15:00:25 2026 GMT Not After : Nov 4 15:00:00 2026 GMT Subject: CN=aab5e187-cc2a-411b-a681-f119efabcb37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1f:a8:53:11:31:98:de:a1:ba:a0:d7:a2:99: a5:d8:73:4b:a2:7e:01:11:bd:13:4c:51:f8:62:55: ac:cc:7c:cf:ce:51:88:ad:80:e8:76:e0:c2:56:72: f6:65:89:be:d4:8b:a2:dd:9c:18:79:bc:ad:95:75: 26:ae:9f:f9:28:64:4c:8b:87:38:0c:93:f6:f5:bf: c2:b4:9d:2c:99:be:73:a5:ca:87:41:4a:c5:39:b6: e4:65:98:32:0c:ff:d7:42:b5:11:68:ca:d3:11:4d: 5b:8d:05:da:ed:28:ef:46:90:96:ad:41:ef:39:3d: e4:77:e7:9f:27:22:9e:18:a8:d4:b1:da:b3:a9:d1: 07:6a:c0:1d:f9:73:11:3d:68:f1:e0:33:1a:42:0b: 0e:b3:45:ae:b3:b8:44:2b:c3:ec:68:95:64:9f:57: b5:a3:94:74:d8:bd:dd:65:de:20:17:dd:05:81:00: 3b:90:2a:e7:73:e5:ae:6a:34:3f:0b:d9:89:3a:35: 22:9c:10:ed:1b:3a:0c:c3:d0:3a:73:a7:c2:c0:25: 6a:3f:55:6f:a5:bb:39:ca:c3:f3:34:32:64:45:58: 8e:dd:a2:b7:d6:d6:aa:f0:8f:1b:dd:23:80:35:43: 4f:1c:0e:db:1f:1a:8b:1e:01:be:11:8c:86:06:be: 37:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2D:DF:3B:4C:9D:11:E8:A9:60:46:F1:24:96:66:E1:D1:D3:C7:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3720f4aa-0347-4fbd-ad6b-420d575f5d9f/3720f4aa-0347-4fbd-ad6b-420d575f5d9f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3720f4aa-0347-4fbd-ad6b-420d575f5d9f/3720f4aa-0347-4fbd-ad6b-420d575f5d9f.crl X509v3 Authority Key Identifier: keyid:0A:AC:CD:7C:20:B5:DF:A2:79:F2:4F:A0:93:F2:13:10:9E:7E:A2:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3720f4aa-0347-4fbd-ad6b-420d575f5d9f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:99:d9:96:74:e5:7f:d6:04:b8:54:ee:7e:6e:0a:05:29:27: 6a:f6:99:71:c8:ae:20:cf:6d:79:53:73:3f:e6:69:cd:9e:fe: 16:33:9e:c1:e8:d1:a6:87:da:21:7f:a1:ac:66:e8:ff:0a:4d: b2:a6:0f:43:13:02:19:57:05:d1:b0:dd:b8:d2:d8:8a:84:d4: f8:f3:4b:57:c8:66:eb:34:a0:08:c8:86:0c:61:e4:3b:da:61: c7:e1:8b:44:1c:26:d4:92:05:3f:7f:d3:75:46:19:7d:32:d8: e1:0e:72:ef:ca:e3:b1:77:9e:07:57:44:c3:9d:d3:1d:2c:27: 6e:ba:eb:96:6f:4b:5b:4f:4f:43:5e:bc:62:62:db:ad:f6:0b: ad:b9:46:8c:3e:4a:1f:11:46:ea:19:ef:16:99:61:9e:00:df: a5:f9:f1:25:2f:c6:1f:a2:23:19:b6:af:33:91:7c:76:9b:01: 8d:04:49:10:fc:13:dc:0d:04:c2:98:da:51:b3:e5:ae:99:ba: 81:49:b5:e1:0e:cc:2a:fa:32:10:30:b9:4e:86:6f:83:65:37: 71:bf:1a:e6:65:e7:fe:66:b4:51:07:67:38:a5:0d:e1:f5:26: f6:2e:8a:eb:f0:de:54:c4:42:6c:cc:d0:1c:f7:36:29:3d:e2: d2:56:d2:3a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+yXufEDS2SaRVZygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcyMGY0YWEtMDM0Ny00ZmJkLWFkNmItNDIwZDU3NWY1 ZDlmMB4XDTI2MTEwMTE1MDAyNVoXDTI2MTEwNDE1MDAwMFowLzEtMCsGA1UEAxMk YWFiNWUxODctY2MyYS00MTFiLWE2ODEtZjExOWVmYWJjYjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB+oUxExmN6huqDXopml2HNLon4BEb0TTFH4 YlWszHzPzlGIrYDoduDCVnL2ZYm+1Iui3ZwYebytlXUmrp/5KGRMi4c4DJP29b/C tJ0smb5zpcqHQUrFObbkZZgyDP/XQrURaMrTEU1bjQXa7SjvRpCWrUHvOT3kd+ef JyKeGKjUsdqzqdEHasAd+XMRPWjx4DMaQgsOs0Wus7hEK8PsaJVkn1e1o5R02L3d Zd4gF90FgQA7kCrnc+WuajQ/C9mJOjUinBDtGzoMw9A6c6fCwCVqP1Vvpbs5ysPz NDJkRViO3aK31taq8I8b3SOANUNPHA7bHxqLHgG+EYyGBr439wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL4t3ztMnRHoqWBG8SSWZuHR08faMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zNzIw ZjRhYS0wMzQ3LTRmYmQtYWQ2Yi00MjBkNTc1ZjVkOWYvMzcyMGY0YWEtMDM0Ny00 ZmJkLWFkNmItNDIwZDU3NWY1ZDlmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzcyMGY0YWEtMDM0Ny00ZmJkLWFk NmItNDIwZDU3NWY1ZDlmLzM3MjBmNGFhLTAzNDctNGZiZC1hZDZiLTQyMGQ1NzVm NWQ5Zi5jcmwwHwYDVR0jBBgwFoAUCqzNfCC136J58k+gk/ITEJ5+ojowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zNzIwZjRhYS0wMzQ3LTRmYmQtYWQ2Yi00MjBk NTc1ZjVkOWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+mdmWdOV/1gS4VO5+bgoF KSdq9plxyK4gz215U3M/5mnNnv4WM57B6NGmh9ohf6GsZuj/Ck2ypg9DEwIZVwXR sN240tiKhNT480tXyGbrNKAIyIYMYeQ72mHH4YtEHCbUkgU/f9N1Rhl9MtjhDnLv yuOxd54HV0TDndMdLCduuuuWb0tbT09DXrxiYtut9gutuUaMPkofEUbqGe8WmWGe AN+l+fElL8YfoiMZtq8zkXx2mwGNBEkQ/BPcDQTCmNpRs+WumbqBSbXhDswq+jIQ MLlOhm+DZTdxvxrmZef+ZrRRB2c4pQ3h9Sb2Lorr8N5UxEJszNAc9zYpPeLSVtI6 -----END CERTIFICATE-----Generated at Mon Nov 2 15:24:03 2026 by rpki-client