$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.mft File: 3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.mft (raw, json) Hash identifier: 17/qnYOMXv2qLB9Gr1HbM0goOm55+8pvXdRRNtlzgU0= Subject key identifier: 3F:FA:2B:75:73:20:1E:F1:30:81:C1:2A:66:F3:6E:AC:C9:36:29:9B Authority key identifier: CE:04:33:09:CA:13:55:30:CB:8E:7E:93:C8:41:FC:57:75:8F:AE:0A Certificate issuer: /CN=3f5f9855-5e8e-495a-9caa-dee2f22bdbc6 Certificate serial: 010D0C9F4328584F1125DEBDBD72EB36CACF3B15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.mft Manifest number: 010D0C9F4328584DABE5F1A2D934428EAEB72563 Signing time: Fri 04 Sep 2026 21:00:22 +0000 Manifest this update: Fri 04 Sep 2026 21:00:22 +0000 Manifest next update: Mon 07 Sep 2026 21:00:00 +0000 Files and hashes: 1: 3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.crl (hash: sALiRQSuiS8X+FkHHlifowHXIcS9/9BtIsXlHnONQAk=) 2: 47b62995-603b-3eae-94f2-7bfa22b27145.roa (hash: QXYdgx/AxrtxCA2zyC8fWrov7CFh/qbsPlNQGMR6Io4=) 3: 80c574ba-2db3-36e1-9b1a-9fca3475e4d0.roa (hash: mQd9+QpJ4s66KgHLNNspQqO7FNNYf44Bltd7U+/xzRU=) 4: 8ef476d3-edc2-3506-81f5-1587e7fa2787.roa (hash: x+nzt1RZO45v3S2XNMkyhf/Hpvck6P3/ME+dzRHAMgc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:25:de:bd:bd:72:eb:36:ca:cf:3b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f5f9855-5e8e-495a-9caa-dee2f22bdbc6 Validity Not Before: Sep 4 21:00:22 2026 GMT Not After : Sep 7 21:00:00 2026 GMT Subject: CN=a5e1ffe9-7bd7-4346-8b41-621199afa635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:da:78:f0:9f:8e:c2:d3:3e:59:1f:61:c6: 09:8c:05:d5:12:4d:04:3a:71:8c:fd:6e:55:85:13: 68:c4:0c:60:26:5c:4b:5b:7e:e3:10:de:81:31:70: 27:60:f9:f2:e9:ee:fe:1c:0a:93:9c:92:24:95:90: a8:13:8d:37:f5:15:f2:b7:1d:6b:85:32:52:52:db: 75:57:fe:07:2f:83:c7:31:98:9e:2e:d0:4d:40:59: a0:0a:61:cc:02:0d:c2:d9:bc:ca:45:89:e5:59:41: 25:23:1a:03:56:9d:90:9d:92:58:1c:77:f7:3d:5a: 5c:bf:53:9f:1c:af:2b:e9:8f:4e:a9:37:a4:e6:a8: a7:a3:2f:bc:5f:e0:7c:47:09:f9:67:47:88:3d:2f: bc:47:46:99:c2:82:df:b4:47:55:5e:13:68:2c:bc: 8f:d5:8a:b3:08:09:2e:e8:34:4c:0b:53:00:1f:ef: f8:29:fe:ab:80:8c:d8:81:f4:c8:fe:f6:f7:56:c5: f7:44:4f:ac:75:cc:94:38:c8:ab:d1:da:e7:94:8a: 1e:8d:e6:99:08:36:4b:af:80:72:9c:09:b1:cf:d4: a2:fc:3b:10:b6:d7:de:d4:c0:0c:ed:f1:f2:e7:55: 8e:d2:8a:5b:59:ab:75:50:53:54:77:6d:d2:b8:e3: 7e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FA:2B:75:73:20:1E:F1:30:81:C1:2A:66:F3:6E:AC:C9:36:29:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.crl X509v3 Authority Key Identifier: keyid:CE:04:33:09:CA:13:55:30:CB:8E:7E:93:C8:41:FC:57:75:8F:AE:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e2:31:b4:aa:3c:a8:68:b7:b4:0d:5a:b0:0c:36:30:1b:d6: 3c:bc:6e:36:27:79:bf:f6:3c:1a:7b:4c:ba:67:3e:21:9b:e8: 19:4f:75:8b:40:7a:36:11:8c:9f:db:53:8c:ee:93:8b:21:28: b4:14:dc:3a:ae:30:39:62:45:cc:15:81:7d:3a:fc:5c:7c:b0: e8:34:9a:2e:86:0d:3f:5d:0a:f1:b8:fd:17:6a:65:9f:c9:24: ae:8a:ea:3f:ad:bb:74:56:89:4a:e9:cb:7c:01:97:44:8f:31: 2c:36:b7:80:2f:44:35:2e:c3:d8:0d:e0:a8:b7:18:5c:e1:76: 83:56:2d:a3:51:3e:72:5b:68:13:d5:b0:32:02:b6:0d:97:c7: f1:5f:bf:f8:21:df:bb:b1:5f:a7:c7:8f:be:51:76:ef:a8:76: 3d:43:a3:21:d6:79:9b:19:18:e1:68:ba:fb:bc:18:86:50:01: 73:ba:57:05:2f:0d:01:18:57:68:34:d0:d3:37:a3:ad:b4:6d: 00:af:df:c5:33:04:eb:5b:15:02:6c:ce:ed:12:c6:aa:9e:df: 35:8d:1f:89:eb:4d:21:d6:42:23:26:8f:9b:2f:fe:3c:e2:35: 10:71:73:f4:d9:92:61:54:f2:a8:c9:2a:92:fe:18:89:a7:b7: d3:27:51:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8RJd69vXLrNsrPOxUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y1Zjk4NTUtNWU4ZS00OTVhLTljYWEtZGVlMmYyMmJk YmM2MB4XDTI2MDkwNDIxMDAyMloXDTI2MDkwNzIxMDAwMFowLzEtMCsGA1UEAxMk YTVlMWZmZTktN2JkNy00MzQ2LThiNDEtNjIxMTk5YWZhNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIzaePCfjsLTPlkfYcYJjAXVEk0EOnGM/W5V hRNoxAxgJlxLW37jEN6BMXAnYPny6e7+HAqTnJIklZCoE4039RXytx1rhTJSUtt1 V/4HL4PHMZieLtBNQFmgCmHMAg3C2bzKRYnlWUElIxoDVp2QnZJYHHf3PVpcv1Of HK8r6Y9OqTek5qinoy+8X+B8Rwn5Z0eIPS+8R0aZwoLftEdVXhNoLLyP1YqzCAku 6DRMC1MAH+/4Kf6rgIzYgfTI/vb3VsX3RE+sdcyUOMir0drnlIoejeaZCDZLr4By nAmxz9Si/DsQttfe1MAM7fHy51WO0opbWat1UFNUd23SuON+kwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD/6K3VzIB7xMIHBKmbzbqzJNimbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zZjVm OTg1NS01ZThlLTQ5NWEtOWNhYS1kZWUyZjIyYmRiYzYvM2Y1Zjk4NTUtNWU4ZS00 OTVhLTljYWEtZGVlMmYyMmJkYmM2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2Y1Zjk4NTUtNWU4ZS00OTVhLTlj YWEtZGVlMmYyMmJkYmM2LzNmNWY5ODU1LTVlOGUtNDk1YS05Y2FhLWRlZTJmMjJi ZGJjNi5jcmwwHwYDVR0jBBgwFoAUzgQzCcoTVTDLjn6TyEH8V3WPrgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zZjVmOTg1NS01ZThlLTQ5NWEtOWNhYS1kZWUy ZjIyYmRiYzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAE4jG0qjyoaLe0DVqwDDYw G9Y8vG42J3m/9jwae0y6Zz4hm+gZT3WLQHo2EYyf21OM7pOLISi0FNw6rjA5YkXM FYF9OvxcfLDoNJouhg0/XQrxuP0XamWfySSuiuo/rbt0VolK6ct8AZdEjzEsNreA L0Q1LsPYDeCotxhc4XaDVi2jUT5yW2gT1bAyArYNl8fxX7/4Id+7sV+nx4++UXbv qHY9Q6Mh1nmbGRjhaLr7vBiGUAFzulcFLw0BGFdoNNDTN6OttG0Ar9/FMwTrWxUC bM7tEsaqnt81jR+J600h1kIjJo+bL/484jUQcXP02ZJhVPKoySqS/hiJp7fTJ1Fv -----END CERTIFICATE-----Generated at Sat Sep 5 00:41:02 2026 by rpki-client