$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft File: 3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft (raw, json) Hash identifier: 8H4qxpCbVA2/N013MW1jIjOWdhzY9dFYCniiuKheFkc= Subject key identifier: 00:3B:20:2F:55:10:13:53:76:49:E4:49:A4:C4:E4:3E:CB:67:DE:46 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584F4E37A7AD4D1CE4D8F065D9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft Manifest number: 010D0C9F43285848DEA6AA7962B2F4D6BC028D7B Signing time: Sat 26 Sep 2026 18:00:24 +0000 Manifest this update: Sat 26 Sep 2026 18:00:24 +0000 Manifest next update: Tue 29 Sep 2026 18:00:00 +0000 Files and hashes: 1: 1f5fab24-6ae3-369a-845b-2b5879489f6a.roa (hash: 1VzgTiryJ4i3c1Fg4sxZTXRkKLAYV0svyD7+cfQAMzI=) 2: 3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl (hash: LVdgFycuUuUmd0DCIAYm9x1zrogrI9oOUHYd9Xq3xJY=) 3: 5f3dcef5-0406-33ce-8673-8f04413c8cba.roa (hash: ChneQB6VxLyqHy3H4h7FycGbH51KGHD3y+pQGIVmITQ=) 4: a98d5494-4572-385b-afc9-1ffafc221b11.roa (hash: gTUq/mMwCDAWu+gWyIhETQkFdXpRniX/6NFbAwncoTA=) 5: ce971edc-2b71-3b67-be96-0924eca1252b.asa (hash: oe5taR7qmmEB8uKu20odEKxWIGUqwVMz9BvdH0e1Pws=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4e:37:a7:ad:4d:1c:e4:d8:f0:65:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Sep 26 18:00:24 2026 GMT Not After : Sep 29 18:00:00 2026 GMT Subject: CN=33adaaee-0dbb-4f87-8742-74a6e82fd367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:37:fe:7a:5e:14:e6:a6:c7:d3:3b:d6:67:8e: 80:4f:af:ca:0d:16:a6:14:bb:36:58:a3:ed:28:24: fc:0a:bc:3c:82:c2:2b:cb:2a:c1:ea:ef:05:d6:21: 8b:fb:64:9e:9c:c6:59:36:09:4c:57:a3:ae:29:eb: 92:58:a5:92:05:d0:b8:2f:ea:3e:37:6b:71:e8:81: 06:d7:17:df:b8:ee:ee:e4:57:ed:4c:e7:48:70:65: c1:9c:00:30:30:b8:88:34:06:93:d6:99:01:a5:c1: 34:8e:a8:f3:01:52:37:51:72:c8:1b:50:c2:24:3b: 76:3a:0b:61:0b:6a:47:f9:f6:12:23:42:04:db:bc: e1:6a:1e:10:72:19:ea:0d:a0:c2:05:7b:f8:3d:a9: 09:49:7b:a5:22:c5:bf:9d:57:5e:da:b2:9a:96:f8: 38:1b:e0:31:78:e2:8d:73:f7:12:8e:5e:3c:3f:53: 80:dd:64:5e:ca:b5:1a:66:ee:97:c9:33:e9:cd:21: 66:38:6b:86:4d:00:e2:63:e9:32:b6:b7:9c:c1:23: aa:65:d4:8c:25:9f:58:56:21:86:35:e4:65:ab:55: fe:50:22:6a:ba:f2:55:9a:0b:0b:c6:d5:e3:01:fe: 8c:d2:e7:8e:3b:ce:58:85:4d:ef:37:69:6b:98:2c: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3B:20:2F:55:10:13:53:76:49:E4:49:A4:C4:E4:3E:CB:67:DE:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b5:1c:42:7e:fa:5c:c1:f7:5a:e8:6d:4e:1b:eb:48:57:97: fc:20:0b:7d:7c:f0:db:d9:20:b2:0a:5f:b0:17:ff:f5:d4:3c: 7b:fa:ef:f9:11:25:fa:3a:d6:43:2d:b6:c0:e3:ae:37:61:ee: 07:91:72:98:b9:43:9c:e5:2f:89:66:84:ee:e5:fb:c2:55:6c: 59:09:96:88:1b:da:e2:42:4f:50:16:0f:c5:0b:e6:a7:21:ac: ce:e9:0a:49:a2:d4:10:60:8d:57:44:49:40:28:b4:a6:73:f1: ad:8b:6d:0e:e8:4d:b7:63:f8:b9:e8:15:2b:be:be:3c:51:09: f5:d3:29:b2:6d:e6:77:fc:e8:ed:25:7e:66:d7:75:22:2a:a7: bb:8b:07:01:fc:94:27:12:bb:15:01:4a:76:f8:0f:75:23:7b: 37:2a:e8:0c:25:9d:1a:87:f5:ee:dd:d9:90:0a:d1:e4:32:0d: 2c:37:d9:8b:0c:1d:28:fd:c8:8e:dc:ff:b2:89:51:e2:69:32: 75:54:02:e8:6b:66:94:0a:dc:c8:73:6b:f0:c3:85:aa:b3:11: 28:20:ba:c0:e9:62:5b:1f:bf:5f:c5:c4:80:9c:70:33:5e:b5: 60:84:0c:c4:ac:92:45:92:bd:76:1a:6f:cc:30:77:f2:d1:77: ff:d1:36:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9ON6etTRzk2PBl2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI2MDkyNjE4MDAyNFoXDTI2MDkyOTE4MDAwMFowLzEtMCsGA1UEAxMk MzNhZGFhZWUtMGRiYi00Zjg3LTg3NDItNzRhNmU4MmZkMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Df+el4U5qbH0zvWZ46AT6/KDRamFLs2WKPt KCT8Crw8gsIryyrB6u8F1iGL+2SenMZZNglMV6OuKeuSWKWSBdC4L+o+N2tx6IEG 1xffuO7u5FftTOdIcGXBnAAwMLiINAaT1pkBpcE0jqjzAVI3UXLIG1DCJDt2Ogth C2pH+fYSI0IE27zhah4QchnqDaDCBXv4PakJSXulIsW/nVde2rKalvg4G+AxeOKN c/cSjl48P1OA3WReyrUaZu6XyTPpzSFmOGuGTQDiY+kytrecwSOqZdSMJZ9YViGG NeRlq1X+UCJquvJVmgsLxtXjAf6M0ueOO85YhU3vN2lrmCwJYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAA7IC9VEBNTdknkSaTE5D7LZ95GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvMzY4OWI5Y2UtMDg5ZC00 MTM3LWIxNGQtN2U0Y2QxNWU1M2E1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARtRxCfvpcwfda6G1OG+tI V5f8IAt9fPDb2SCyCl+wF//11Dx7+u/5ESX6OtZDLbbA4643Ye4HkXKYuUOc5S+J ZoTu5fvCVWxZCZaIG9riQk9QFg/FC+anIazO6QpJotQQYI1XRElAKLSmc/Gti20O 6E23Y/i56BUrvr48UQn10ymybeZ3/OjtJX5m13UiKqe7iwcB/JQnErsVAUp2+A91 I3s3KugMJZ0ah/Xu3dmQCtHkMg0sN9mLDB0o/ciO3P+yiVHiaTJ1VALoa2aUCtzI c2vww4WqsxEoILrA6WJbH79fxcSAnHAzXrVghAzErJJFkr12Gm/MMHfy0Xf/0TZY -----END CERTIFICATE-----Generated at Sun Sep 27 16:26:38 2026 by rpki-client