$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: 78IQE+DYfHU79C+NwYhCMYuRxGlxBdw4iaq32kZibbY= Subject key identifier: 25:A8:6D:06:CC:C9:7D:B7:34:26:C7:25:53:95:C2:47:A9:A8:CE:C8 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584F3B062756CB6E70E6B1562F08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD079B4E Signing time: Sat 19 Sep 2026 21:00:22 +0000 Manifest this update: Sat 19 Sep 2026 21:00:22 +0000 Manifest next update: Tue 22 Sep 2026 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: 8qgiaC2xsUw0fI/n1Bngfpm/LpoHvdm9r//gyzRqOR0=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: 8cWGGEnBqB2bEY5EY4ao3gO1kHZtU4IBcdEtqNcU2Zs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:06:27:56:cb:6e:70:e6:b1:56:2f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Sep 19 21:00:22 2026 GMT Not After : Sep 22 21:00:00 2026 GMT Subject: CN=14fbf6e5-75bd-45f6-827c-67dbd23993a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:ab:4a:3f:82:32:f0:ca:88:86:eb:ca:a5: 92:8e:87:3c:1f:c1:7c:16:b2:f5:17:91:dc:e4:ac: 79:fe:bf:2a:99:c0:8d:d9:95:7b:2a:ad:52:75:2c: 92:e1:8d:d4:3e:13:b4:a9:17:4d:91:0b:8b:6d:78: 49:f4:d6:da:a9:a8:f7:df:a2:49:2f:29:1c:f5:45: a2:e2:e5:48:44:3c:e4:ef:10:dc:1a:92:4b:de:6f: 34:e7:65:52:02:bb:f8:d7:eb:e2:49:9e:8c:9f:34: 77:be:a3:b8:33:fd:47:43:a6:56:17:a2:35:0d:25: 6a:20:ad:be:2c:ab:17:1b:f8:a8:bf:48:d3:8e:20: f9:ee:54:4f:1f:6a:3a:b3:be:40:45:71:f3:0d:bf: 5f:84:71:ed:65:11:a4:97:12:f3:c7:63:03:46:eb: 57:ff:e4:4f:6a:be:22:0d:86:da:bf:1f:af:1a:0f: 44:78:66:79:fa:fd:c7:a3:cd:db:a0:8b:08:58:2d: fe:e0:44:1b:b2:b3:67:29:62:7b:4f:e2:43:34:4f: c7:84:31:49:cc:4c:32:7b:74:4a:b0:af:df:a6:21: 3b:c5:43:92:92:ea:ee:d3:55:f9:00:2f:94:f7:80: 60:bb:8c:7e:c1:c3:cb:19:a8:eb:83:78:f0:45:5c: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A8:6D:06:CC:C9:7D:B7:34:26:C7:25:53:95:C2:47:A9:A8:CE:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:09:79:f4:1e:cb:99:14:a3:94:4c:04:4b:65:b8:6e:aa:cc: 63:12:ba:4d:61:78:d7:b9:0e:9e:5b:04:3b:f2:d0:38:40:0e: 86:59:c2:ad:5b:6f:20:2e:95:00:0e:3e:f0:4a:31:e3:0a:57: 54:86:de:28:6b:cd:19:31:4b:36:6d:81:13:71:95:27:f1:2a: 04:e4:02:2a:af:b2:d6:0b:00:36:32:07:5d:6a:ad:e1:e9:2d: 6a:10:e3:23:40:87:c7:94:31:6a:fb:83:7f:7b:a0:7d:5e:c0: e7:2d:83:ce:0b:34:f9:30:29:cb:d0:0d:09:87:63:36:59:f1: 40:a0:89:6f:6e:c4:06:7d:56:3a:25:51:0c:14:9f:b2:18:1e: 7e:d2:f2:36:88:85:db:06:75:62:b6:a4:5a:e7:58:3a:b9:ff: c2:35:5f:c0:e1:01:c6:eb:95:ce:d9:a0:c6:38:a3:36:19:5f: 09:b2:b8:6a:f2:9e:54:76:66:bf:d3:98:ca:cc:23:e7:cd:22: 45:03:1e:bc:12:78:de:55:18:4d:a7:79:65:88:bd:57:93:e4: 6d:5c:77:21:f6:2f:7a:12:b9:02:0f:20:0d:3a:8c:11:33:fd: 96:af:ba:eb:4a:c6:1d:d8:86:94:ac:a3:96:05:b2:2d:a5:02: 0f:1f:67:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE87BidWy25w5rFWLwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI2MDkxOTIxMDAyMloXDTI2MDkyMjIxMDAwMFowLzEtMCsGA1UEAxMk MTRmYmY2ZTUtNzViZC00NWY2LTgyN2MtNjdkYmQyMzk5M2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfGrSj+CMvDKiIbryqWSjoc8H8F8FrL1F5Hc 5Kx5/r8qmcCN2ZV7Kq1SdSyS4Y3UPhO0qRdNkQuLbXhJ9Nbaqaj336JJLykc9UWi 4uVIRDzk7xDcGpJL3m8052VSArv41+viSZ6MnzR3vqO4M/1HQ6ZWF6I1DSVqIK2+ LKsXG/iov0jTjiD57lRPH2o6s75ARXHzDb9fhHHtZRGklxLzx2MDRutX/+RPar4i DYbavx+vGg9EeGZ5+v3Ho83boIsIWC3+4EQbsrNnKWJ7T+JDNE/HhDFJzEwye3RK sK/fpiE7xUOSkuru01X5AC+U94Bgu4x+wcPLGajrg3jwRVzjMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCWobQbMyX23NCbHJVOVwkepqM7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7CXn0HsuZFKOUTARLZbhu qsxjErpNYXjXuQ6eWwQ78tA4QA6GWcKtW28gLpUADj7wSjHjCldUht4oa80ZMUs2 bYETcZUn8SoE5AIqr7LWCwA2Mgddaq3h6S1qEOMjQIfHlDFq+4N/e6B9XsDnLYPO CzT5MCnL0A0Jh2M2WfFAoIlvbsQGfVY6JVEMFJ+yGB5+0vI2iIXbBnVitqRa51g6 uf/CNV/A4QHG65XO2aDGOKM2GV8Jsrhq8p5Udma/05jKzCPnzSJFAx68EnjeVRhN p3lliL1Xk+RtXHch9i96ErkCDyANOowRM/2Wr7rrSsYd2IaUrKOWBbItpQIPH2eo -----END CERTIFICATE-----Generated at Sun Sep 20 14:54:29 2026 by rpki-client