$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft File: 3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft (raw, json) Hash identifier: aiDx7leI9ynuhzi1B1A/SGvjlPaAq3DJ+FKSXphEECs= Subject key identifier: 27:E5:7D:D8:92:76:CE:09:34:FF:BD:72:38:6F:6A:56:B9:19:C4:3C Authority key identifier: 33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D Certificate issuer: /CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Certificate serial: 010D0C9F4328584F4EAEBCC965960577855D3880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft Manifest number: 010D0C9F4328584073A8285CBADCAB24D8E6D168 Signing time: Sat 26 Sep 2026 22:00:23 +0000 Manifest this update: Sat 26 Sep 2026 22:00:23 +0000 Manifest next update: Tue 29 Sep 2026 22:00:00 +0000 Files and hashes: 1: 3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl (hash: vj4KO75FXAi2fWpPEiEtaYVS0UYEsw0/SJR5jHFb5zk=) 2: 48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa (hash: HUPP0ybVok2WvbCNoFJe+z6swkYMk5WktPQZhrKYZy0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4e:ae:bc:c9:65:96:05:77:85:5d:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Validity Not Before: Sep 26 22:00:23 2026 GMT Not After : Sep 29 22:00:00 2026 GMT Subject: CN=a2449722-e589-4799-8f12-962c03c7efcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2a:a2:f4:0e:70:a2:e0:a8:45:9e:25:c2:b3: e2:fa:ca:da:c6:aa:52:e2:e8:f7:2e:25:b8:b0:62: 08:c9:49:68:26:2c:71:92:44:9f:a4:8c:5a:35:a2: 5b:4f:f0:67:7b:83:f7:a4:8f:6d:0a:f5:7f:1e:05: 7f:98:fb:b3:42:db:88:02:dc:90:b1:92:8a:2d:22: f1:43:0f:36:4b:a2:3e:f4:33:77:b4:49:fb:b0:df: c7:8c:2e:fb:15:03:a5:4e:92:59:3d:ea:a9:f3:d4: a7:70:72:03:21:ed:2e:af:64:4e:0f:de:00:74:c0: 33:21:3f:d6:35:0a:69:94:59:72:1c:c5:50:41:7b: f0:bb:45:99:2a:f0:5c:9b:77:08:fb:fc:01:80:20: 3b:a4:b8:bd:11:5d:05:eb:3f:af:25:b6:63:23:ae: 28:06:85:c8:86:6f:e6:40:94:f8:89:d5:66:8b:e5: 9c:3b:1e:ce:a5:ee:63:2c:b6:c2:51:d0:85:d8:d6: 08:cb:7f:ec:bd:af:90:1d:ae:c0:93:69:9b:b5:8f: a9:3a:70:40:a9:dd:37:20:ba:46:ae:20:37:0e:71: bd:de:dd:94:47:65:3a:6d:e0:9b:b0:0b:52:df:92: 1e:94:c8:9d:23:d7:0b:fd:e5:b0:67:40:27:20:e9: 95:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E5:7D:D8:92:76:CE:09:34:FF:BD:72:38:6F:6A:56:B9:19:C4:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl X509v3 Authority Key Identifier: keyid:33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4f:f9:36:8e:a0:a5:1b:c6:a1:16:cc:b9:3f:f9:86:1c:f2: aa:67:3d:bf:88:33:06:e1:0d:c1:94:73:e6:c7:96:87:a9:cf: 7a:5a:af:55:ea:80:26:74:c1:c2:7e:a2:a6:88:c5:b9:5a:fb: a4:f3:4a:cf:aa:6c:1c:a8:c1:97:b1:43:2d:ad:c9:00:aa:fb: 1f:bc:22:21:14:ec:c8:2e:df:16:30:ed:3e:69:fe:c0:ad:29: 0f:5b:14:0a:22:b4:ba:79:2a:4c:af:ed:78:a8:2b:a4:ef:e5: af:da:a4:68:5b:5d:8a:17:34:bd:d6:a3:0c:c0:50:38:a2:fe: 13:4f:f8:b6:13:a7:58:8c:21:e7:d8:68:db:1a:5b:72:78:2f: 34:af:39:0a:34:6f:0b:31:02:f6:cc:7a:ec:10:ee:ff:4d:88: 21:ef:77:dc:c7:2f:fa:b7:18:29:0f:40:a8:4a:a1:63:66:5d: bf:d8:c0:25:68:da:ab:ba:ed:a0:15:9e:dd:ca:40:e9:86:89: 17:8e:0f:61:9a:c9:01:3f:1f:5f:01:ce:48:0c:7d:ce:d0:75: a3:4b:79:f1:b5:fc:67:1a:31:e8:78:37:c1:00:96:9d:fc:fc: bd:15:fd:d7:87:df:d2:b8:98:68:2b:9c:b4:13:2e:dc:1f:02: 7e:5a:a8:04 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9OrrzJZZYFd4VdOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiMDZiMTAtMWQwMy00ZmE5LWIyMmMtYmI5ODU5MDMx M2QzMB4XDTI2MDkyNjIyMDAyM1oXDTI2MDkyOTIyMDAwMFowLzEtMCsGA1UEAxMk YTI0NDk3MjItZTU4OS00Nzk5LThmMTItOTYyYzAzYzdlZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iqi9A5wouCoRZ4lwrPi+sraxqpS4uj3LiW4 sGIIyUloJixxkkSfpIxaNaJbT/Bne4P3pI9tCvV/HgV/mPuzQtuIAtyQsZKKLSLx Qw82S6I+9DN3tEn7sN/HjC77FQOlTpJZPeqp89SncHIDIe0ur2ROD94AdMAzIT/W NQpplFlyHMVQQXvwu0WZKvBcm3cI+/wBgCA7pLi9EV0F6z+vJbZjI64oBoXIhm/m QJT4idVmi+WcOx7Ope5jLLbCUdCF2NYIy3/sva+QHa7Ak2mbtY+pOnBAqd03ILpG riA3DnG93t2UR2U6beCbsAtS35IelMidI9cL/eWwZ0AnIOmVrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCflfdiSds4JNP+9cjhvala5GcQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIw NmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4NTkwMzEzZDMvM2FiMDZiMTAtMWQwMy00 ZmE5LWIyMmMtYmI5ODU5MDMxM2QzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2FiMDZiMTAtMWQwMy00ZmE5LWIy MmMtYmI5ODU5MDMxM2QzLzNhYjA2YjEwLTFkMDMtNGZhOS1iMjJjLWJiOTg1OTAz MTNkMy5jcmwwHwYDVR0jBBgwFoAUM9navDEI1arP7bG7RQkiDwAcxU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIwNmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4 NTkwMzEzZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXT/k2jqClG8ahFsy5P/mG HPKqZz2/iDMG4Q3BlHPmx5aHqc96Wq9V6oAmdMHCfqKmiMW5Wvuk80rPqmwcqMGX sUMtrckAqvsfvCIhFOzILt8WMO0+af7ArSkPWxQKIrS6eSpMr+14qCuk7+Wv2qRo W12KFzS91qMMwFA4ov4TT/i2E6dYjCHn2GjbGltyeC80rzkKNG8LMQL2zHrsEO7/ TYgh73fcxy/6txgpD0CoSqFjZl2/2MAlaNqruu2gFZ7dykDphokXjg9hmskBPx9f Ac5IDH3O0HWjS3nxtfxnGjHoeDfBAJad/Py9Ff3Xh9/SuJhoK5y0Ey7cHwJ+WqgE -----END CERTIFICATE-----Generated at Sun Sep 27 08:49:31 2026 by rpki-client