$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft File: 5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft (raw, json) Hash identifier: cHio8xD96KvD9SopYJAzgtWCeeGGlbxWrsseDU7vn9E= Subject key identifier: 47:3F:5D:47:4B:58:02:CD:AB:5B:84:8E:35:FB:86:B6:5E:C5:78:DA Authority key identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 Certificate issuer: /CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Certificate serial: 010D0C9F4328584F3FE8D985ABEED000050EC800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft Manifest number: 010D0C9F43285848DE6E17CAE5012D9C33EA3FC5 Signing time: Mon 21 Sep 2026 15:00:25 +0000 Manifest this update: Mon 21 Sep 2026 15:00:25 +0000 Manifest next update: Wed 23 Sep 2026 15:00:00 +0000 Files and hashes: 1: 0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa (hash: w+e88LP/aO2ToQew3NPh2WBgRZ5PMNMq9WjyK20cxdM=) 2: 5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl (hash: saXN3IgeSQyTYKKtkAIDaMrlTNztbsuTTOK8+1zFDpA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:e8:d9:85:ab:ee:d0:00:05:0e:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Validity Not Before: Sep 21 15:00:25 2026 GMT Not After : Sep 23 15:00:00 2026 GMT Subject: CN=93df7f4c-1d33-41bc-aa09-e9069b2676bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:85:15:44:33:23:d2:96:6f:93:5a:aa:54:a1: 78:82:53:6c:4c:71:bc:b4:b0:c6:e1:4b:8b:51:09: 89:51:b0:a9:10:30:76:c9:76:a1:f2:f1:f7:68:c3: 08:c5:ec:32:69:c2:d6:21:77:4c:9f:47:0c:9f:14: 9b:94:56:92:e5:4a:a6:72:68:0b:f9:7d:59:a4:18: 34:df:27:5a:7f:c5:f3:21:de:1c:f6:84:18:c8:10: 24:00:2e:21:7e:da:dc:ab:46:d4:8d:3d:85:b0:94: f3:de:d9:1a:9c:b3:a0:fe:2e:be:38:83:97:5f:3d: f0:4e:d7:98:6b:ba:9e:d3:0c:19:82:1e:e3:f9:9e: 47:e5:3c:36:98:c0:f5:cc:87:be:18:91:e2:8d:86: 9e:da:be:a1:c2:71:e7:e0:4a:0a:c2:91:49:42:47: 30:00:b2:cf:35:95:4e:c5:91:b1:c5:23:4b:c9:7c: a4:c0:ad:69:29:1c:f6:6f:2a:a3:b1:8f:b6:db:a9: 7d:2d:e9:31:e4:b3:b6:0c:7f:20:00:26:5d:aa:51: f5:2e:17:29:14:ef:62:dd:fa:e4:b8:88:c2:e5:2d: 92:1d:c4:38:45:33:bd:b8:1e:0a:56:e8:4e:f3:af: 48:ff:eb:f1:02:74:d7:b4:39:a5:d3:3a:4f:38:03: 23:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3F:5D:47:4B:58:02:CD:AB:5B:84:8E:35:FB:86:B6:5E:C5:78:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl X509v3 Authority Key Identifier: keyid:49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:da:c5:7d:d1:a0:79:c6:06:a8:ee:5f:7b:6b:43:76:cc:0b: 38:d0:20:09:3b:30:fc:5e:95:08:85:91:65:75:9c:3a:7f:f8: ed:f5:a0:8b:8b:22:43:91:ec:1d:ed:f1:1f:7d:4c:18:0f:c7: a4:ad:b7:9f:29:19:8f:1d:91:13:84:e8:29:14:f2:bc:a4:42: a5:1c:fb:ba:03:95:e5:75:08:fb:8e:38:7c:21:c5:6b:7a:20: bc:8d:08:3b:4c:ed:0f:52:36:18:2d:f1:90:50:74:fc:12:ef: 0a:81:96:91:e4:36:c3:98:68:25:80:46:d4:81:ff:cc:7c:3a: 18:9a:0c:2e:bd:21:63:82:2c:5b:06:40:01:0a:66:58:6c:41: 99:21:11:e1:a5:23:1b:97:1c:48:01:f7:c9:bf:e1:95:b5:ef: a6:52:f1:60:a0:94:10:91:38:7a:38:67:cf:9c:a0:fe:7e:f6: 08:a5:7b:22:06:f8:7d:fd:41:08:e6:b9:6c:46:de:59:b5:09: 47:c8:96:13:ed:86:46:f1:4a:5d:8e:a8:fb:8d:08:bf:e9:27: ea:b1:4d:06:3f:fd:82:9b:86:66:73:09:4f:e9:98:70:7b:2f: 29:d7:41:31:74:c4:62:89:df:2d:a7:fa:d4:9c:fe:5b:99:3e: d5:d7:f3:ff -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8/6NmFq+7QAAUOyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYzZmJhZTAtYWQ2Zi00ZDI3LWJhYmMtZDJjNmFlMTFh MmNiMB4XDTI2MDkyMTE1MDAyNVoXDTI2MDkyMzE1MDAwMFowLzEtMCsGA1UEAxMk OTNkZjdmNGMtMWQzMy00MWJjLWFhMDktZTkwNjliMjY3NmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4UVRDMj0pZvk1qqVKF4glNsTHG8tLDG4UuL UQmJUbCpEDB2yXah8vH3aMMIxewyacLWIXdMn0cMnxSblFaS5UqmcmgL+X1ZpBg0 3ydaf8XzId4c9oQYyBAkAC4hftrcq0bUjT2FsJTz3tkanLOg/i6+OIOXXz3wTteY a7qe0wwZgh7j+Z5H5Tw2mMD1zIe+GJHijYae2r6hwnHn4EoKwpFJQkcwALLPNZVO xZGxxSNLyXykwK1pKRz2byqjsY+226l9Lekx5LO2DH8gACZdqlH1LhcpFO9i3frk uIjC5S2SHcQ4RTO9uB4KVuhO869I/+vxAnTXtDml0zpPOAMjyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEc/XUdLWALNq1uEjjX7hrZexXjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNm YmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2YWUxMWEyY2IvNWYzZmJhZTAtYWQ2Zi00 ZDI3LWJhYmMtZDJjNmFlMTFhMmNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWYzZmJhZTAtYWQ2Zi00ZDI3LWJh YmMtZDJjNmFlMTFhMmNiLzVmM2ZiYWUwLWFkNmYtNGQyNy1iYWJjLWQyYzZhZTEx YTJjYi5jcmwwHwYDVR0jBBgwFoAUSbDUUzV5ZOgQDYjaiPi3ItJX42MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNmYmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2 YWUxMWEyY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB82sV90aB5xgao7l97a0N2 zAs40CAJOzD8XpUIhZFldZw6f/jt9aCLiyJDkewd7fEffUwYD8ekrbefKRmPHZET hOgpFPK8pEKlHPu6A5XldQj7jjh8IcVreiC8jQg7TO0PUjYYLfGQUHT8Eu8KgZaR 5DbDmGglgEbUgf/MfDoYmgwuvSFjgixbBkABCmZYbEGZIRHhpSMblxxIAffJv+GV te+mUvFgoJQQkTh6OGfPnKD+fvYIpXsiBvh9/UEI5rlsRt5ZtQlHyJYT7YZG8Upd jqj7jQi/6SfqsU0GP/2Cm4ZmcwlP6Zhwey8p10ExdMRiid8tp/rUnP5bmT7V1/P/ -----END CERTIFICATE-----Generated at Tue Sep 22 08:36:56 2026 by rpki-client