$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft File: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft (raw, json) Hash identifier: +Wu32LYB1SM20c3B3V4UO/kih+Nz59TN3CTttlqbLQU= Subject key identifier: C1:1B:95:D2:F2:C0:75:01:49:1D:0F:7E:82:5E:11:1E:6D:C5:E7:7E Authority key identifier: 84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 Certificate issuer: /CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Certificate serial: 010D0C9F4328584F4200DBAB680F0200EBE5B280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft Manifest number: 010D0C9F4328584073A8498F3F05E22DFBDA97EE Signing time: Tue 22 Sep 2026 09:00:23 +0000 Manifest this update: Tue 22 Sep 2026 09:00:23 +0000 Manifest next update: Thu 24 Sep 2026 09:00:00 +0000 Files and hashes: 1: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl (hash: AK2bJb0RNF27fV8ZBqO+tL7dhohciUsAAoM52VIMLts=) 2: d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa (hash: iy+InnYs9a7B+u3On53czCqL5/wrwBhs7+FND0SFBUs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:00:db:ab:68:0f:02:00:eb:e5:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Validity Not Before: Sep 22 09:00:23 2026 GMT Not After : Sep 24 09:00:00 2026 GMT Subject: CN=851a6d35-c59c-4516-9ab9-7ede6e23fc37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:2f:c7:1a:9d:2a:94:05:3e:d2:61:39:e0: 33:3c:71:c9:ea:84:27:68:02:92:91:00:70:81:97: 8c:8e:de:be:ae:9b:0c:65:98:c3:88:73:b3:18:79: 3c:ef:f9:79:ba:26:d8:3a:31:a5:b9:77:ac:96:96: 6b:3c:7d:ec:17:3a:17:43:68:f7:b1:bc:94:b0:80: e0:b0:0d:ea:a5:95:13:5b:56:e2:3a:64:bc:6a:b0: a9:ae:4d:5f:ae:14:53:02:ac:3c:12:33:eb:33:a2: 58:2d:26:27:9c:16:44:0f:1e:16:41:a5:2a:c8:f6: a6:25:c0:83:c5:4f:7b:12:41:5a:69:f7:dc:57:d4: a1:a7:ec:0d:a4:b8:e4:5b:7d:3e:0d:15:b0:f6:d3: ca:d2:91:d4:39:75:e9:a0:02:e1:44:bc:62:a1:17: ce:e6:2d:be:4e:ac:73:18:02:73:f2:a5:12:17:92: 82:00:83:d4:6a:77:6d:4c:3a:11:52:3c:5e:81:f7: de:6e:d5:39:be:a7:cd:a3:4e:98:75:b8:c5:1a:e0: 34:23:18:f8:c2:72:5a:48:df:28:b0:a8:9a:68:66: 03:ca:7c:91:ec:c2:80:60:65:e2:46:04:89:79:88: 03:c5:be:80:8c:bb:78:37:ff:0c:e2:5f:a6:51:2c: e8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1B:95:D2:F2:C0:75:01:49:1D:0F:7E:82:5E:11:1E:6D:C5:E7:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl X509v3 Authority Key Identifier: keyid:84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:76:9e:86:7a:d0:9d:78:5f:b8:d5:bc:5b:cb:a8:79:76:9c: be:17:d6:71:8a:ba:ee:c3:6a:7c:3a:ec:9b:f1:d6:35:89:00: 73:c1:f7:05:79:4b:1e:66:e4:7b:57:c8:9b:dd:82:99:27:77: 5f:9c:e8:0c:f2:53:ba:92:76:f8:26:67:a7:eb:de:c8:1c:9b: 18:f4:7f:90:80:1f:2c:a8:65:f3:30:42:30:0c:5a:29:56:5f: 81:30:46:70:6e:ba:d4:08:03:fa:7b:09:38:03:47:64:a0:b4: a5:0a:a5:a8:10:82:09:27:ee:6a:e9:35:9a:a2:c0:b0:fb:0a: 79:f0:5a:8f:fd:b2:90:f9:2f:18:f3:df:78:77:42:32:b7:f2: 86:fa:1a:29:67:cf:ba:3c:c1:51:05:a2:d5:b1:08:96:d8:84: 5a:77:ef:59:d8:14:94:96:55:ce:e3:9b:f0:5c:94:2d:b3:e2: aa:89:a2:b2:93:46:b8:3f:e2:98:a0:9b:12:33:05:42:07:4b: 3c:54:00:06:a5:c9:43:f5:74:b0:9f:13:ce:59:29:54:01:b7: 14:c4:d1:ad:06:6c:fe:29:14:f8:93:65:dd:f0:15:8b:53:31: 80:78:eb:f6:b5:4d:d1:8d:bc:39:2d:80:21:1c:f0:6c:ab:11: 4e:d3:c3:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9CANuraA8CAOvlsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjOGU5Y2ItODhlZS00NTVlLWIwMTItMWIxYWJmY2E3 MmFiMB4XDTI2MDkyMjA5MDAyM1oXDTI2MDkyNDA5MDAwMFowLzEtMCsGA1UEAxMk ODUxYTZkMzUtYzU5Yy00NTE2LTlhYjktN2VkZTZlMjNmYzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplIvxxqdKpQFPtJhOeAzPHHJ6oQnaAKSkQBw gZeMjt6+rpsMZZjDiHOzGHk87/l5uibYOjGluXeslpZrPH3sFzoXQ2j3sbyUsIDg sA3qpZUTW1biOmS8arCprk1frhRTAqw8EjPrM6JYLSYnnBZEDx4WQaUqyPamJcCD xU97EkFaaffcV9Shp+wNpLjkW30+DRWw9tPK0pHUOXXpoALhRLxioRfO5i2+Tqxz GAJz8qUSF5KCAIPUandtTDoRUjxegffebtU5vqfNo06YdbjFGuA0Ixj4wnJaSN8o sKiaaGYDynyR7MKAYGXiRgSJeYgDxb6AjLt4N/8M4l+mUSzoLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMEbldLywHUBSR0PfoJeER5txed+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4 ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFhYmZjYTcyYWIvM2JjOGU5Y2ItODhlZS00 NTVlLWIwMTItMWIxYWJmY2E3MmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjOGU5Y2ItODhlZS00NTVlLWIw MTItMWIxYWJmY2E3MmFiLzNiYzhlOWNiLTg4ZWUtNDU1ZS1iMDEyLTFiMWFiZmNh NzJhYi5jcmwwHwYDVR0jBBgwFoAUhK1pleXH9BRmIMjHaJa6x1IXDRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFh YmZjYTcyYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC/dp6GetCdeF+41bxby6h5 dpy+F9Zxirruw2p8Ouyb8dY1iQBzwfcFeUseZuR7V8ib3YKZJ3dfnOgM8lO6knb4 Jmen697IHJsY9H+QgB8sqGXzMEIwDFopVl+BMEZwbrrUCAP6ewk4A0dkoLSlCqWo EIIJJ+5q6TWaosCw+wp58FqP/bKQ+S8Y8994d0Iyt/KG+hopZ8+6PMFRBaLVsQiW 2IRad+9Z2BSUllXO45vwXJQts+KqiaKyk0a4P+KYoJsSMwVCB0s8VAAGpclD9XSw nxPOWSlUAbcUxNGtBmz+KRT4k2Xd8BWLUzGAeOv2tU3Rjbw5LYAhHPBsqxFO08P0 -----END CERTIFICATE-----Generated at Tue Sep 22 17:23:01 2026 by rpki-client