$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft File: 3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft (raw, json) Hash identifier: RdU8ZDidnU3ETo0lekSFFKouWteNSbQ00M+F/uJL2Rs= Subject key identifier: DC:EA:01:B3:7A:64:A6:C7:A9:07:2F:82:6B:54:3F:D1:D3:BF:1A:4F Authority key identifier: AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 Certificate issuer: /CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Certificate serial: 010D0C9F4328584EF4E1C1BB93C66222FF886E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft Manifest number: 010D0C9F4328584C48E9F1D11FEB13CE220B09FB Signing time: Tue 25 Aug 2026 18:00:24 +0000 Manifest this update: Tue 25 Aug 2026 18:00:24 +0000 Manifest next update: Thu 27 Aug 2026 18:00:00 +0000 Files and hashes: 1: 3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl (hash: /8F8YB6dP8QpN4YAQgbrBZf1zZ6jbU6B7lXviUiJGhI=) 2: e29fdbab-728b-37f3-b45b-55800fd076b4.roa (hash: EMnsc4ENfIgxXcQQN73TCDJJgB7D2SOVUWOt4W3NWN8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:e1:c1:bb:93:c6:62:22:ff:88:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Validity Not Before: Aug 25 18:00:24 2026 GMT Not After : Aug 27 18:00:00 2026 GMT Subject: CN=3eef2f6e-936d-400f-830e-8ffdf5784712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9b:a1:c9:79:99:18:d9:3c:eb:f6:a7:f2:76: cc:48:60:9f:34:d0:0d:b5:70:4b:25:47:63:60:c2: 86:04:d3:ae:ea:c8:53:3e:e1:5d:3b:24:8b:61:e4: 33:58:de:c9:52:d5:4e:5c:a7:37:fd:d5:94:5d:95: ac:77:65:b6:16:63:9e:c8:fc:4e:5d:61:47:3c:c1: 59:04:b3:40:e8:a7:09:c4:3b:7b:87:44:e5:99:9a: 29:f1:9b:b8:4b:87:c5:1c:38:b4:0d:6d:b5:aa:56: 29:90:e6:e6:b5:c1:52:c2:7d:0a:6c:8f:b2:d7:20: 62:00:3a:ef:ad:d8:2f:d4:96:56:14:cf:18:25:28: 9f:9b:07:6a:fc:5b:63:a5:5c:08:87:97:2d:96:45: d2:06:90:2c:2e:74:5c:cd:40:36:35:bb:5d:21:fd: e1:d0:45:98:e3:93:2a:6c:17:db:a9:dc:ec:91:bf: 0b:e1:c1:80:1a:60:c3:fc:d9:87:44:61:2f:e7:18: 20:5c:84:49:fa:6d:61:ad:df:63:90:98:9a:da:7b: 1c:90:79:1d:02:20:ee:6d:6c:ec:24:ec:97:7d:68: be:72:09:8d:45:62:12:1a:b9:8f:15:d6:4a:34:1d: ce:25:94:d3:9f:91:bd:bb:17:e3:2f:ac:7d:48:4e: 37:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EA:01:B3:7A:64:A6:C7:A9:07:2F:82:6B:54:3F:D1:D3:BF:1A:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl X509v3 Authority Key Identifier: keyid:AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f2:5c:79:b2:97:57:3f:63:0d:74:f8:17:9a:f3:30:92:89: 40:70:9b:5b:2f:eb:9d:97:77:fd:df:31:f4:a0:0c:55:2f:4e: 4f:94:8a:42:13:e1:b6:62:b0:68:fc:b8:69:55:74:0a:2f:0c: 28:e4:ea:af:9c:9b:e1:f0:1f:1d:79:f3:cb:33:ec:3a:6f:84: f4:6f:99:af:1c:6d:8d:5a:3e:97:68:02:66:84:7f:83:1e:db: a7:d7:1f:25:32:d4:53:09:35:d2:2d:e5:3f:a3:52:af:d3:d8: 03:82:3f:46:8d:28:9f:37:6f:c8:c6:1f:45:3f:cf:4f:91:53: 8d:e0:d8:62:62:b3:b3:ae:3a:9d:fe:cd:e7:61:03:ab:65:d2: 4e:85:f2:d3:aa:00:31:58:7c:c8:13:39:a2:5a:ee:90:fa:7f: 55:13:7b:aa:b9:6a:38:6b:82:ec:2b:a4:f9:9a:46:20:45:82: ed:66:c2:4b:92:f2:b6:84:ce:57:6c:a7:1c:29:f1:5e:fe:e6: ce:11:ad:dc:93:7c:22:c1:e9:36:85:17:f5:4c:a8:cf:ca:c3: 10:a3:55:59:c0:6a:fd:56:d1:ff:44:49:78:3f:ac:27:12:19: 09:2f:69:c7:2b:98:a4:1d:b9:4e:db:af:f3:64:3f:62:b4:56: 5e:80:52:23 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE704cG7k8ZiIv+IbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E1YTJiMWMtOWFkMy00NDk2LWJjZmMtMzIyOTc0YWNj ZDMyMB4XDTI2MDgyNTE4MDAyNFoXDTI2MDgyNzE4MDAwMFowLzEtMCsGA1UEAxMk M2VlZjJmNmUtOTM2ZC00MDBmLTgzMGUtOGZmZGY1Nzg0NzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipuhyXmZGNk86/an8nbMSGCfNNANtXBLJUdj YMKGBNOu6shTPuFdOySLYeQzWN7JUtVOXKc3/dWUXZWsd2W2FmOeyPxOXWFHPMFZ BLNA6KcJxDt7h0TlmZop8Zu4S4fFHDi0DW21qlYpkObmtcFSwn0KbI+y1yBiADrv rdgv1JZWFM8YJSifmwdq/FtjpVwIh5ctlkXSBpAsLnRczUA2NbtdIf3h0EWY45Mq bBfbqdzskb8L4cGAGmDD/NmHRGEv5xggXIRJ+m1hrd9jkJia2nsckHkdAiDubWzs JOyXfWi+cgmNRWISGrmPFdZKNB3OJZTTn5G9uxfjL6x9SE43cwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNzqAbN6ZKbHqQcvgmtUP9HTvxpPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVh MmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5NzRhY2NkMzIvM2E1YTJiMWMtOWFkMy00 NDk2LWJjZmMtMzIyOTc0YWNjZDMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E1YTJiMWMtOWFkMy00NDk2LWJj ZmMtMzIyOTc0YWNjZDMyLzNhNWEyYjFjLTlhZDMtNDQ5Ni1iY2ZjLTMyMjk3NGFj Y2QzMi5jcmwwHwYDVR0jBBgwFoAUq5H9SDN6a76xr6/S08y6t5sWNyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVhMmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5 NzRhY2NkMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAs8lx5spdXP2MNdPgXmvMw kolAcJtbL+udl3f93zH0oAxVL05PlIpCE+G2YrBo/LhpVXQKLwwo5OqvnJvh8B8d efPLM+w6b4T0b5mvHG2NWj6XaAJmhH+DHtun1x8lMtRTCTXSLeU/o1Kv09gDgj9G jSifN2/Ixh9FP89PkVON4NhiYrOzrjqd/s3nYQOrZdJOhfLTqgAxWHzIEzmiWu6Q +n9VE3uquWo4a4LsK6T5mkYgRYLtZsJLkvK2hM5XbKccKfFe/ubOEa3ck3wiwek2 hRf1TKjPysMQo1VZwGr9VtH/REl4P6wnEhkJL2nHK5ikHblO26/zZD9itFZegFIj -----END CERTIFICATE-----Generated at Wed Aug 26 13:09:42 2026 by rpki-client