$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft File: 3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft (raw, json) Hash identifier: qPpNTJPcpnnWj17e7XJfrCROZgzrY1lrQMVTwAK1LPs= Subject key identifier: 30:CF:9E:A4:87:CC:83:B6:B4:07:13:86:9A:4A:71:0D:6A:5F:BA:86 Authority key identifier: 3F:62:FB:9C:A9:3B:51:F9:79:81:6B:83:4C:96:AD:8B:12:2B:48:AF Certificate issuer: /CN=3cb9bd40-c7d5-4787-b35a-bde5e711565a Certificate serial: 010D0C9F4328584F4BA878444B62400D71F2D580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft Manifest number: 010D0C9F4328584073A8264A8C6A0A73B1393E11 Signing time: Fri 25 Sep 2026 20:00:23 +0000 Manifest this update: Fri 25 Sep 2026 20:00:23 +0000 Manifest next update: Sun 27 Sep 2026 20:00:00 +0000 Files and hashes: 1: 3cb9bd40-c7d5-4787-b35a-bde5e711565a.crl (hash: vbj6y1N6FWAONhfaItoC06SshPcSh/ktkO8LfbSj824=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:a8:78:44:4b:62:40:0d:71:f2:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb9bd40-c7d5-4787-b35a-bde5e711565a Validity Not Before: Sep 25 20:00:23 2026 GMT Not After : Sep 27 20:00:00 2026 GMT Subject: CN=23a5ebcc-8475-43b2-bad2-f2641e4e9fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:43:28:d2:bb:0d:4a:27:00:4d:12:4b:a8:f5: 79:33:37:fa:87:bd:41:61:e9:b1:fa:e0:d7:c0:90: 5e:a5:88:a9:72:e0:be:ac:0e:21:e8:cd:b6:12:f2: f4:5c:ee:dd:08:90:69:71:8b:4a:68:80:60:5e:b9: 54:4b:7d:f2:e0:5e:3a:1e:0b:54:e0:b2:8f:2e:88: bd:c7:59:4a:5d:05:ba:20:a2:54:02:da:3f:15:e0: 52:a7:a6:d0:a5:00:3c:6f:0e:b4:fc:55:4d:bd:f1: 99:b0:67:70:11:90:0e:0a:87:d8:20:f8:c2:04:44: 91:0b:f3:77:57:ba:a4:5b:2f:d8:d0:ea:d3:7d:55: 89:97:fd:aa:02:a4:8b:d9:98:30:d2:6d:36:cf:d7: e2:eb:98:8c:91:fb:c2:36:4f:6f:0f:7e:e3:7c:b1: a0:61:cf:e8:36:df:46:92:44:6d:3f:a1:64:54:c4: 3c:be:77:b2:2d:99:c6:4d:20:ea:2a:6c:3d:70:c3: d5:17:c0:30:44:f4:ae:ca:7e:e1:47:cd:2c:45:37: 60:2f:5d:85:66:ba:1b:36:b5:17:a7:ed:f3:a6:78: e7:0a:43:71:3d:69:38:f6:7e:c3:00:4d:39:8a:b8: da:b8:92:42:6a:0d:e6:d6:75:45:77:5f:53:e9:42: 9a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CF:9E:A4:87:CC:83:B6:B4:07:13:86:9A:4A:71:0D:6A:5F:BA:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.crl X509v3 Authority Key Identifier: keyid:3F:62:FB:9C:A9:3B:51:F9:79:81:6B:83:4C:96:AD:8B:12:2B:48:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:69:9c:87:ae:90:9a:cc:3b:b7:0d:2d:33:64:7e:8d:1b:d4: 5c:71:35:bc:bd:91:d9:af:f6:ba:3f:f1:b0:ec:ca:a1:ed:0b: 0c:4a:58:a6:d0:9e:80:17:f1:8c:d6:bb:41:7a:64:16:e4:12: c9:f8:b8:78:af:65:57:31:18:7d:0a:a2:92:7a:2b:89:fe:2f: fb:2c:34:ce:53:47:ba:ff:20:d5:b7:7c:bd:f8:68:2a:a5:30: c1:33:07:8c:11:5e:2f:a9:43:81:58:95:0e:48:f6:6f:d1:a1: 80:3d:96:e7:fd:33:70:7d:1a:34:98:0b:ce:1f:b5:2c:7f:a3: ff:36:b0:a1:54:62:52:05:2c:2f:3c:5d:6e:d5:fd:77:d7:06: cf:9b:32:32:38:68:83:07:74:8b:3f:10:30:ce:06:82:67:67: d4:a8:54:a8:3a:ae:8a:c4:cf:88:a5:90:49:d1:b0:30:11:d3: cf:e3:4a:a1:56:ef:c1:e3:99:c3:0c:31:c0:b8:b6:60:be:58: 39:2d:9a:3c:c1:d0:85:2c:dc:62:c0:35:8e:bc:5b:05:b2:f1: 81:c8:b1:18:6c:ad:ae:25:83:9c:d0:4b:db:fd:e7:5f:2c:c4: d9:58:51:ca:73:4c:bd:19:79:b0:e7:1d:54:c5:42:49:ad:7f: b6:16:c7:6e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9LqHhES2JADXHy1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NiOWJkNDAtYzdkNS00Nzg3LWIzNWEtYmRlNWU3MTE1 NjVhMB4XDTI2MDkyNTIwMDAyM1oXDTI2MDkyNzIwMDAwMFowLzEtMCsGA1UEAxMk MjNhNWViY2MtODQ3NS00M2IyLWJhZDItZjI2NDFlNGU5ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0Mo0rsNSicATRJLqPV5Mzf6h71BYemx+uDX wJBepYipcuC+rA4h6M22EvL0XO7dCJBpcYtKaIBgXrlUS33y4F46HgtU4LKPLoi9 x1lKXQW6IKJUAto/FeBSp6bQpQA8bw60/FVNvfGZsGdwEZAOCofYIPjCBESRC/N3 V7qkWy/Y0OrTfVWJl/2qAqSL2Zgw0m02z9fi65iMkfvCNk9vD37jfLGgYc/oNt9G kkRtP6FkVMQ8vneyLZnGTSDqKmw9cMPVF8AwRPSuyn7hR80sRTdgL12FZrobNrUX p+3zpnjnCkNxPWk49n7DAE05irjauJJCag3m1nVFd19T6UKaiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDDPnqSHzIO2tAcThppKcQ1qX7qGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zY2I5 YmQ0MC1jN2Q1LTQ3ODctYjM1YS1iZGU1ZTcxMTU2NWEvM2NiOWJkNDAtYzdkNS00 Nzg3LWIzNWEtYmRlNWU3MTE1NjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2NiOWJkNDAtYzdkNS00Nzg3LWIz NWEtYmRlNWU3MTE1NjVhLzNjYjliZDQwLWM3ZDUtNDc4Ny1iMzVhLWJkZTVlNzEx NTY1YS5jcmwwHwYDVR0jBBgwFoAUP2L7nKk7Ufl5gWuDTJatixIrSK8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zY2I5YmQ0MC1jN2Q1LTQ3ODctYjM1YS1iZGU1 ZTcxMTU2NWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTaZyHrpCazDu3DS0zZH6N G9RccTW8vZHZr/a6P/Gw7Mqh7QsMSlim0J6AF/GM1rtBemQW5BLJ+Lh4r2VXMRh9 CqKSeiuJ/i/7LDTOU0e6/yDVt3y9+GgqpTDBMweMEV4vqUOBWJUOSPZv0aGAPZbn /TNwfRo0mAvOH7Usf6P/NrChVGJSBSwvPF1u1f131wbPmzIyOGiDB3SLPxAwzgaC Z2fUqFSoOq6KxM+IpZBJ0bAwEdPP40qhVu/B45nDDDHAuLZgvlg5LZo8wdCFLNxi wDWOvFsFsvGByLEYbK2uJYOc0Evb/edfLMTZWFHKc0y9GXmw5x1UxUJJrX+2Fsdu -----END CERTIFICATE-----Generated at Sat Sep 26 21:35:23 2026 by rpki-client