$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft File: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft (raw, json) Hash identifier: XBcyo5/VZ9WksI4lQUp59ibnVYCVdrePoDAlFqN9Clo= Subject key identifier: 4C:50:D3:B4:F6:C5:38:FA:8D:7E:B1:B9:BB:20:69:FB:FC:D3:62:C4 Authority key identifier: 84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 Certificate issuer: /CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Certificate serial: 010D0C9F4328584EF6A0609EB96ECCE23D06FC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft Manifest number: 010D0C9F4328584073A8498F3F05E22DFBDA97D2 Signing time: Wed 26 Aug 2026 09:00:23 +0000 Manifest this update: Wed 26 Aug 2026 09:00:23 +0000 Manifest next update: Sat 29 Aug 2026 09:00:00 +0000 Files and hashes: 1: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl (hash: H3esIuBsDRyE2ITHg67P4wT8bhO9PlkWB/9SDY+Kn40=) 2: d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa (hash: MuRLkP6JDdMyZqFOwMkVkwjVeKlkEUNyehbsyo6f0Ng=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f6:a0:60:9e:b9:6e:cc:e2:3d:06:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Validity Not Before: Aug 26 09:00:23 2026 GMT Not After : Aug 29 09:00:00 2026 GMT Subject: CN=8d248683-6827-427e-af33-73261e4f83bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c0:f4:c3:5a:5a:c8:7d:36:13:7b:7c:54:c4: 63:7c:94:25:9c:be:d1:ff:ae:1d:7d:ad:43:68:a9: 24:68:14:b5:fd:86:66:a6:4a:69:a7:58:3e:f9:99: db:84:3f:4c:14:5f:e0:34:99:6f:30:64:fe:de:97: d3:bd:1a:12:6f:c1:22:db:63:85:c4:20:64:4c:e6: e2:8c:d4:79:fb:d6:48:21:f9:be:c9:dd:f1:36:5a: c6:f5:28:57:04:4c:22:5d:87:d2:04:d5:68:7c:1f: a1:6d:46:14:a8:cc:bd:a8:26:bf:69:47:d5:d0:1c: bd:3b:69:8b:04:7f:06:80:54:38:61:35:cf:f3:50: f5:8f:00:37:8c:51:8d:00:af:e7:24:f8:b2:61:e5: 1d:ab:57:42:70:9d:5c:0c:26:fb:a0:fc:6d:39:e3: 53:4e:5f:6c:f1:76:85:f9:13:c7:b9:65:ff:c1:58: f8:4e:dd:01:c0:1f:14:eb:13:c3:95:66:36:b6:bc: 57:42:7d:05:2e:d3:21:19:c0:1b:2a:18:41:f7:8e: a7:bc:df:87:a1:e7:69:63:a5:55:d0:5b:e6:d9:b9: da:b2:3f:6e:6c:fa:d8:d4:25:7f:63:65:a7:46:00: 2a:05:2a:e8:5c:47:ee:b5:62:91:cc:2c:17:40:4a: 1a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:50:D3:B4:F6:C5:38:FA:8D:7E:B1:B9:BB:20:69:FB:FC:D3:62:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl X509v3 Authority Key Identifier: keyid:84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:72:fe:2e:c1:e9:37:9b:91:84:d4:e0:b5:27:50:97:1b:e0: a8:8b:f7:27:c3:f5:b6:ec:ca:82:9f:40:c8:93:13:ca:3c:ae: f1:5c:12:78:a3:dc:b5:b7:db:45:a1:d9:fb:b5:ef:ee:53:56: ae:48:5b:08:a6:70:8c:8a:c3:8a:d0:f2:c7:35:45:38:59:d3: d2:bc:a0:c0:3b:a2:2e:77:52:4b:8c:49:03:ee:ab:db:6e:ef: e3:12:6d:80:42:a9:86:52:59:25:98:bf:69:e0:2c:2a:24:3f: ce:68:85:39:15:d4:86:1b:95:88:0f:2f:68:85:6e:37:11:4e: e6:74:9d:09:7d:5f:8c:0a:31:e3:94:03:e4:0e:74:c0:33:2b: 7f:4d:19:6f:d4:ba:f0:b6:1e:3d:38:cc:aa:4f:48:6b:41:22: f1:75:a6:ac:34:3a:9d:dd:6a:21:7b:fd:47:82:96:30:7f:eb: e0:ce:83:73:a2:71:c1:a1:da:ad:78:65:e7:bd:9b:e7:f2:dc: ab:38:8a:c3:87:7a:18:a4:a8:04:cd:08:0a:a9:5d:91:e3:86: f4:d3:02:54:d4:c9:04:c6:48:c2:66:ef:f1:5a:7c:41:c3:e4: ae:64:98:2d:14:bf:d6:fc:17:9e:22:36:94:23:73:64:92:4a: e8:c8:90:49 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE72oGCeuW7M4j0G/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjOGU5Y2ItODhlZS00NTVlLWIwMTItMWIxYWJmY2E3 MmFiMB4XDTI2MDgyNjA5MDAyM1oXDTI2MDgyOTA5MDAwMFowLzEtMCsGA1UEAxMk OGQyNDg2ODMtNjgyNy00MjdlLWFmMzMtNzMyNjFlNGY4M2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8D0w1payH02E3t8VMRjfJQlnL7R/64dfa1D aKkkaBS1/YZmpkppp1g++ZnbhD9MFF/gNJlvMGT+3pfTvRoSb8Ei22OFxCBkTObi jNR5+9ZIIfm+yd3xNlrG9ShXBEwiXYfSBNVofB+hbUYUqMy9qCa/aUfV0By9O2mL BH8GgFQ4YTXP81D1jwA3jFGNAK/nJPiyYeUdq1dCcJ1cDCb7oPxtOeNTTl9s8XaF +RPHuWX/wVj4Tt0BwB8U6xPDlWY2trxXQn0FLtMhGcAbKhhB946nvN+HoedpY6VV 0Fvm2bnasj9ubPrY1CV/Y2WnRgAqBSroXEfutWKRzCwXQEoaCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFExQ07T2xTj6jX6xubsgafv802LEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4 ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFhYmZjYTcyYWIvM2JjOGU5Y2ItODhlZS00 NTVlLWIwMTItMWIxYWJmY2E3MmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjOGU5Y2ItODhlZS00NTVlLWIw MTItMWIxYWJmY2E3MmFiLzNiYzhlOWNiLTg4ZWUtNDU1ZS1iMDEyLTFiMWFiZmNh NzJhYi5jcmwwHwYDVR0jBBgwFoAUhK1pleXH9BRmIMjHaJa6x1IXDRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFh YmZjYTcyYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGcv4uwek3m5GE1OC1J1CX G+Coi/cnw/W27MqCn0DIkxPKPK7xXBJ4o9y1t9tFodn7te/uU1auSFsIpnCMisOK 0PLHNUU4WdPSvKDAO6Iud1JLjEkD7qvbbu/jEm2AQqmGUlklmL9p4CwqJD/OaIU5 FdSGG5WIDy9ohW43EU7mdJ0JfV+MCjHjlAPkDnTAMyt/TRlv1Lrwth49OMyqT0hr QSLxdaasNDqd3Wohe/1HgpYwf+vgzoNzonHBodqteGXnvZvn8tyrOIrDh3oYpKgE zQgKqV2R44b00wJU1MkExkjCZu/xWnxBw+SuZJgtFL/W/BeeIjaUI3NkkkroyJBJ -----END CERTIFICATE-----Generated at Wed Aug 26 22:36:24 2026 by rpki-client