$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft File: 3b24522b-8239-4bb9-9845-1e01e28aa452.mft (raw, json) Hash identifier: 4tWIFc3TAWthMVqyKIT3A0311Z8sCjiMFndS1i+M1I4= Subject key identifier: 4A:63:C2:37:20:9D:01:3B:C6:26:4F:86:59:D4:BD:EA:A8:45:B9:E8 Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Certificate serial: 010D0C9F4328584F277B6339327A3B8A01EF11C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft Manifest number: 010D0C9F43285846097092BB96E608752D6F720D Signing time: Sat 12 Sep 2026 21:00:23 +0000 Manifest this update: Sat 12 Sep 2026 21:00:23 +0000 Manifest next update: Tue 15 Sep 2026 21:00:00 +0000 Files and hashes: 1: 3b24522b-8239-4bb9-9845-1e01e28aa452.crl (hash: 5YcRwefKwk5z7KQemrnlx4ufdzKH3TAH6hcua7hqgq0=) 2: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (hash: QCMX0FI7PBnV2dOlJSIDgsN5ejzrWmQgOpj3L7NujzU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:7b:63:39:32:7a:3b:8a:01:ef:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Validity Not Before: Sep 12 21:00:23 2026 GMT Not After : Sep 15 21:00:00 2026 GMT Subject: CN=7617ddc0-2210-4204-a480-e3a8b839d54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:8c:ef:a3:94:fb:75:40:17:51:29:01:fe: 47:cf:d1:75:70:57:cd:4d:f7:a8:06:4b:2d:c2:e5: d4:98:6e:b3:50:36:49:4a:04:38:80:89:5a:27:4a: 10:6f:7d:55:30:cb:1d:c5:51:8f:f8:f8:70:af:2a: 70:f0:8b:e4:52:1b:90:5a:f7:e8:cf:04:cc:2a:df: 9a:ba:d8:ac:42:93:85:15:42:54:4a:0a:05:0f:da: 2b:dc:ed:dc:05:62:c1:96:1b:b8:2b:0e:63:b0:22: ff:49:f6:b9:a0:e5:58:6e:96:59:8e:a8:17:f1:7e: b3:14:2b:a3:e2:3f:cd:ab:a4:1b:37:43:c2:02:17: 38:82:4d:c8:53:13:29:50:51:5f:bc:99:50:e1:6a: 23:dc:0b:c1:e6:d6:b0:62:0d:c9:03:95:ed:8f:ea: cd:7f:8e:c0:35:60:32:ee:2b:d5:a6:6e:69:8d:35: fc:1f:09:71:31:cb:50:e7:4b:f0:f9:61:1d:ad:50: bc:dd:df:55:60:85:2b:24:32:a5:16:2e:79:91:10: 4a:06:1d:22:5b:a6:41:0f:8f:10:d2:05:b6:3c:db: fe:f8:a0:cb:80:54:b4:ef:d6:0c:a6:f4:68:2d:d8: 88:2e:c9:54:f0:72:c9:91:a9:b5:c5:0d:94:13:7a: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:63:C2:37:20:9D:01:3B:C6:26:4F:86:59:D4:BD:EA:A8:45:B9:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl X509v3 Authority Key Identifier: keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:28:94:38:b5:86:bd:8c:82:8d:db:2a:26:ac:37:a9:4f:6d: fb:fd:45:b3:8f:1b:49:19:08:82:e2:55:74:b4:4b:88:39:5f: 8b:cb:49:a8:68:95:0a:c2:c2:c2:7c:b7:e3:12:ef:90:6f:bc: 7a:6e:ac:a1:35:f0:ef:c2:d8:a0:45:8a:08:26:19:ab:ad:16: eb:a8:14:05:1c:27:2d:14:bc:43:91:3d:51:2d:1c:ac:e5:a6: 85:a5:7a:7a:05:c6:ae:31:61:e0:b8:20:cf:51:77:22:ce:65: e2:69:52:01:fa:b8:da:d6:9d:6a:68:d3:f9:a6:b8:7a:b0:cd: fd:26:35:b4:d6:2e:58:f3:17:04:ee:85:97:46:42:2d:a2:c6: fd:58:d3:ee:be:0e:92:d1:ac:03:99:38:a6:35:68:49:cd:7f: 51:a1:b4:18:be:68:6f:7c:af:62:ef:67:89:10:4c:f9:0e:7f: 96:da:3a:df:79:b4:45:79:4e:9e:99:e1:af:ed:cd:b0:a4:a3: c8:57:b3:60:bd:07:ed:49:91:37:7d:fd:f1:b7:44:66:33:a6: a1:ff:1d:98:9a:6d:1d:e5:1a:b7:65:2e:ef:da:03:43:3e:bb: c4:e8:30:c9:07:5d:ad:6c:ff:f6:35:68:7a:82:18:c6:97:bd: 47:76:89:12 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8ne2M5Mno7igHvEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFh NDUyMB4XDTI2MDkxMjIxMDAyM1oXDTI2MDkxNTIxMDAwMFowLzEtMCsGA1UEAxMk NzYxN2RkYzAtMjIxMC00MjA0LWE0ODAtZTNhOGI4MzlkNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3KM76OU+3VAF1EpAf5Hz9F1cFfNTfeoBkst wuXUmG6zUDZJSgQ4gIlaJ0oQb31VMMsdxVGP+Phwrypw8IvkUhuQWvfozwTMKt+a utisQpOFFUJUSgoFD9or3O3cBWLBlhu4Kw5jsCL/Sfa5oOVYbpZZjqgX8X6zFCuj 4j/Nq6QbN0PCAhc4gk3IUxMpUFFfvJlQ4Woj3AvB5tawYg3JA5Xtj+rNf47ANWAy 7ivVpm5pjTX8HwlxMctQ50vw+WEdrVC83d9VYIUrJDKlFi55kRBKBh0iW6ZBD48Q 0gW2PNv++KDLgFS079YMpvRoLdiILslU8HLJkam1xQ2UE3qvlwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEpjwjcgnQE7xiZPhlnUveqoRbnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjI0 NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvM2IyNDUyMmItODIzOS00 YmI5LTk4NDUtMWUwMWUyOGFhNDUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2IyNDUyMmItODIzOS00YmI5LTk4 NDUtMWUwMWUyOGFhNDUyLzNiMjQ1MjJiLTgyMzktNGJiOS05ODQ1LTFlMDFlMjhh YTQ1Mi5jcmwwHwYDVR0jBBgwFoAUoAL1aNmuD2MRURVEAh0dW/5OsNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAx ZTI4YWE0NTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAKJQ4tYa9jIKN2yomrDep T237/UWzjxtJGQiC4lV0tEuIOV+Ly0moaJUKwsLCfLfjEu+Qb7x6bqyhNfDvwtig RYoIJhmrrRbrqBQFHCctFLxDkT1RLRys5aaFpXp6BcauMWHguCDPUXcizmXiaVIB +rja1p1qaNP5prh6sM39JjW01i5Y8xcE7oWXRkItosb9WNPuvg6S0awDmTimNWhJ zX9RobQYvmhvfK9i72eJEEz5Dn+W2jrfebRFeU6emeGv7c2wpKPIV7NgvQftSZE3 ff3xt0RmM6ah/x2Ymm0d5Rq3ZS7v2gNDPrvE6DDJB12tbP/2NWh6ghjGl71HdokS -----END CERTIFICATE-----Generated at Sun Sep 13 10:26:39 2026 by rpki-client