$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft File: 3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft (raw, json) Hash identifier: gZT9XgVVne0GR94moYk4HtU77WpDcxLWHynUR1DKGhU= Subject key identifier: A4:DB:7E:62:AB:1B:A2:66:62:2D:CC:93:05:FA:85:C4:37:0D:69:84 Authority key identifier: 74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 Certificate issuer: /CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Certificate serial: 010D0C9F4328584F3CA70E988C8374CDBA9B8B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft Manifest number: 010D0C9F43285848CAD46AE0F159F81573C6FA21 Signing time: Sun 20 Sep 2026 11:00:22 +0000 Manifest this update: Sun 20 Sep 2026 11:00:22 +0000 Manifest next update: Tue 22 Sep 2026 11:00:00 +0000 Files and hashes: 1: 3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl (hash: lNHA7BDZtjzh5mvwVs7tF2Io7Dxp3em/wqaqCCEVtOo=) 2: cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa (hash: XwUkWpbgyMe8WDvZlX86WkUOMgIojOdDmgtrg5abaOo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:a7:0e:98:8c:83:74:cd:ba:9b:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Validity Not Before: Sep 20 11:00:22 2026 GMT Not After : Sep 22 11:00:00 2026 GMT Subject: CN=a0022350-99e2-4502-a08e-7460f4380577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:58:d5:74:a7:75:88:ea:e3:9e:d4:4b:dd:31: 01:1c:e3:be:0b:c3:da:b7:56:ea:8a:ae:29:ce:c7: 2e:70:35:00:8f:fb:6d:95:59:9b:27:b0:a3:02:b0: d3:58:a0:8e:03:88:29:d6:48:2d:10:14:d6:4c:16: 44:64:c7:b3:9e:44:94:87:29:52:6d:07:71:4e:e6: db:e6:00:0e:ac:05:85:2d:a0:3d:7b:21:1b:e3:e7: 13:c7:82:7c:11:b9:f2:0e:09:61:f0:cd:d9:8f:fe: 41:69:8c:45:a7:d6:46:4c:ae:6d:f4:c7:9b:83:fd: 8d:d7:22:56:c7:42:39:df:38:5a:4c:6b:6a:eb:6b: 09:00:9e:f6:93:5f:a0:7a:2f:3b:c3:86:b5:69:33: 14:8e:e7:9d:78:4e:15:e6:d3:46:7d:72:a4:af:7a: 93:b9:41:1c:76:10:5f:4f:f9:f5:0a:82:2d:f7:e0: 50:9f:fc:74:be:a6:5e:4c:d2:d8:6f:ee:16:bf:f3: 86:85:95:c9:af:95:a9:c1:12:97:55:99:1b:1a:9c: ec:b4:23:cb:00:79:06:1a:a5:d6:9e:b2:3d:39:59: 26:f5:8b:29:da:8e:2c:2e:64:e0:ce:7e:28:1e:5e: a2:0f:ea:4e:6e:60:09:6a:02:2a:c2:a9:cb:1d:b8: 76:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DB:7E:62:AB:1B:A2:66:62:2D:CC:93:05:FA:85:C4:37:0D:69:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl X509v3 Authority Key Identifier: keyid:74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:12:2c:8b:93:8a:2d:0b:70:a1:66:c0:64:12:fd:4f:0f:9d: 00:9a:91:0d:14:cd:b3:b0:68:6b:65:87:91:8c:e8:9a:65:b6: 78:b3:81:06:14:33:66:cd:48:26:30:e6:8d:af:c9:74:43:f3: 3e:9b:92:82:b0:ea:a5:0d:51:1f:c9:36:9f:44:9f:58:e9:74: 2b:3e:ff:2b:b4:28:83:70:4a:b2:8f:ca:ce:e0:17:c9:18:33: 42:af:74:94:73:49:79:85:55:eb:88:ba:c2:d5:de:aa:bd:54: 95:c3:7c:ff:a3:31:b8:7f:46:ef:fd:48:9c:5b:36:d8:71:60: 47:e6:07:0a:63:a6:34:5e:e6:e5:d0:ad:8c:a4:71:c8:8f:c7: 3f:d1:9a:11:bc:6c:d3:e1:f7:4b:c4:24:8b:7e:13:b8:e1:89: fa:be:20:b9:b7:4c:44:1f:80:de:e7:6b:39:e5:f6:8f:37:92: 95:e8:fe:17:b2:de:80:91:e1:cc:27:09:38:13:86:99:7c:2c: b4:bb:3a:ed:a6:98:d6:3d:73:b8:27:3e:f4:6e:d3:94:91:b2: d8:08:da:32:9e:b0:7f:0a:90:96:b9:30:20:66:83:a4:bb:9d: 1e:92:cb:7c:90:58:e8:b0:28:37:e9:b4:25:e8:dc:1c:1d:7b: af:f8:6e:cc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE88pw6YjIN0zbqbiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2OGMyMTktOGU3MS00MTUxLThkNWMtZDUwNGZkMTJi NWZiMB4XDTI2MDkyMDExMDAyMloXDTI2MDkyMjExMDAwMFowLzEtMCsGA1UEAxMk YTAwMjIzNTAtOTllMi00NTAyLWEwOGUtNzQ2MGY0MzgwNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFjVdKd1iOrjntRL3TEBHOO+C8Pat1bqiq4p zscucDUAj/ttlVmbJ7CjArDTWKCOA4gp1kgtEBTWTBZEZMeznkSUhylSbQdxTubb 5gAOrAWFLaA9eyEb4+cTx4J8EbnyDglh8M3Zj/5BaYxFp9ZGTK5t9Mebg/2N1yJW x0I53zhaTGtq62sJAJ72k1+gei87w4a1aTMUjuedeE4V5tNGfXKkr3qTuUEcdhBf T/n1CoIt9+BQn/x0vqZeTNLYb+4Wv/OGhZXJr5WpwRKXVZkbGpzstCPLAHkGGqXW nrI9OVkm9Ysp2o4sLmTgzn4oHl6iD+pObmAJagIqwqnLHbh2lQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKTbfmKrG6JmYi3MkwX6hcQ3DWmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYzY4 YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0ZmQxMmI1ZmIvM2M2OGMyMTktOGU3MS00 MTUxLThkNWMtZDUwNGZkMTJiNWZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2M2OGMyMTktOGU3MS00MTUxLThk NWMtZDUwNGZkMTJiNWZiLzNjNjhjMjE5LThlNzEtNDE1MS04ZDVjLWQ1MDRmZDEy YjVmYi5jcmwwHwYDVR0jBBgwFoAUdGY0HBQ2LZSV3PdtiT6NIp7XSSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYzY4YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0 ZmQxMmI1ZmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDXEiyLk4otC3ChZsBkEv1P D50AmpENFM2zsGhrZYeRjOiaZbZ4s4EGFDNmzUgmMOaNr8l0Q/M+m5KCsOqlDVEf yTafRJ9Y6XQrPv8rtCiDcEqyj8rO4BfJGDNCr3SUc0l5hVXriLrC1d6qvVSVw3z/ ozG4f0bv/UicWzbYcWBH5gcKY6Y0Xubl0K2MpHHIj8c/0ZoRvGzT4fdLxCSLfhO4 4Yn6viC5t0xEH4De52s55faPN5KV6P4Xst6AkeHMJwk4E4aZfCy0uzrtppjWPXO4 Jz70btOUkbLYCNoynrB/CpCWuTAgZoOku50ekst8kFjosCg36bQl6NwcHXuv+G7M -----END CERTIFICATE-----Generated at Sun Sep 20 19:29:18 2026 by rpki-client