$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft File: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft (raw, json) Hash identifier: J3Qk9zTQ2pI87Vm9xwRPCfe7/2rivlDvsGzOzMAJG/Y= Subject key identifier: 21:98:DD:3F:BD:AE:DA:E3:BB:C6:56:A3:6B:65:03:2C:A1:56:8B:32 Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584F3EA14BE47B66FF8A8BB5A880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft Manifest number: 010D0C9F4328584073A83CCF3B74A2EBFF56452C Signing time: Mon 21 Sep 2026 04:00:23 +0000 Manifest this update: Mon 21 Sep 2026 04:00:23 +0000 Manifest next update: Thu 24 Sep 2026 04:00:00 +0000 Files and hashes: 1: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (hash: sXUU+Dp37nOJejpDnTfU5q6m1DOgR37RFdbAD4fDnO4=) 2: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl (hash: DsOXJHeyFClLJMxdqk1rSN89SvKsSxhr3Amy30GBqio=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:a1:4b:e4:7b:66:ff:8a:8b:b5:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Sep 21 04:00:23 2026 GMT Not After : Sep 24 04:00:00 2026 GMT Subject: CN=d059d68a-d13c-4af9-9df4-e0277464ad0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1a:9e:db:16:62:d3:86:55:a5:ce:30:e4:00: 3d:03:23:c6:a9:25:d8:c7:6d:6c:43:00:c8:54:7a: 40:3a:4b:2d:3b:41:7b:cd:b9:c5:f6:19:0a:9b:53: 91:5e:26:e6:e1:52:cb:f2:f4:dd:0c:15:89:aa:4d: e6:aa:48:fa:6a:9d:ee:e5:0d:bc:4e:2e:b5:2d:5e: 2e:9a:c3:13:f8:10:c3:74:ac:9f:44:63:54:84:20: eb:f8:76:5b:59:81:d6:9e:b3:53:99:aa:b1:dc:c4: 33:fa:bd:fe:ef:7d:e3:8c:bb:11:29:08:4d:8c:7d: 30:34:bc:81:8a:b6:4c:24:76:d9:8d:ab:b8:86:fa: cb:4d:29:66:ba:d3:b7:a1:80:fc:07:00:b7:b8:f1: 07:9c:cd:b2:94:12:12:f6:a5:fa:63:93:3e:67:f1: ca:cd:d0:1f:8a:2b:b1:ca:6b:ad:bf:31:af:bf:19: 98:87:bf:ab:95:d6:f7:f5:da:84:d3:07:81:ab:75: 65:1d:2f:7c:02:2b:d7:d3:81:7f:11:9c:5e:12:98: b8:dc:d3:34:f8:18:18:e2:46:f2:31:63:69:b8:56: 98:e7:40:c4:e4:33:9d:60:3f:64:e6:f9:33:1c:2b: c7:bf:0b:d8:e0:fe:cf:a7:01:0d:d1:b2:23:f2:1f: 6e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:98:DD:3F:BD:AE:DA:E3:BB:C6:56:A3:6B:65:03:2C:A1:56:8B:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6a:f2:46:bf:5c:c8:31:41:c3:7a:36:ee:9b:b8:3b:20:d8: 5e:c0:a8:01:d2:ec:26:3a:58:9d:e1:df:c9:c5:76:3c:84:e9: 19:34:24:3b:b3:55:f4:10:36:42:03:ed:03:67:32:3f:51:bc: 97:ed:3b:f5:1c:9e:c6:ef:ab:1a:53:8d:c3:26:75:29:9c:18: d0:c0:23:3c:a6:59:5c:9d:08:5c:a3:0b:58:fe:4b:09:e2:15: 3f:c6:1d:b1:77:7a:f6:87:ef:c3:4e:f9:00:b8:27:5d:22:57: ce:f5:0a:c3:7a:e0:b5:f2:63:3e:23:e7:c3:ac:65:cd:86:c5: ea:4c:f4:04:31:9b:8e:e3:cf:01:40:7a:ad:15:3d:63:08:bc: 7c:b4:06:42:a8:62:a9:8d:60:76:40:54:f6:a9:c3:74:ca:c6: 29:67:1b:fe:0f:30:7c:85:4f:90:6d:d4:52:73:08:f2:95:d4: e1:5c:f4:c6:0a:fa:1a:04:38:ed:ac:0c:92:69:67:fe:da:5f: 22:a0:6d:79:fd:c5:0b:20:6d:91:81:58:9e:64:63:8c:6a:89: 0b:aa:0c:1f:4a:82:0a:a0:a9:5a:a7:79:54:27:38:de:53:e3: 4d:c7:08:92:ff:3f:b2:3f:67:a5:34:5a:5e:8f:34:b6:60:0a: d4:c4:df:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8+oUvke2b/iou1qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI2MDkyMTA0MDAyM1oXDTI2MDkyNDA0MDAwMFowLzEtMCsGA1UEAxMk ZDA1OWQ2OGEtZDEzYy00YWY5LTlkZjQtZTAyNzc0NjRhZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rqe2xZi04ZVpc4w5AA9AyPGqSXYx21sQwDI VHpAOkstO0F7zbnF9hkKm1ORXibm4VLL8vTdDBWJqk3mqkj6ap3u5Q28Ti61LV4u msMT+BDDdKyfRGNUhCDr+HZbWYHWnrNTmaqx3MQz+r3+733jjLsRKQhNjH0wNLyB irZMJHbZjau4hvrLTSlmutO3oYD8BwC3uPEHnM2ylBIS9qX6Y5M+Z/HKzdAfiiux ymutvzGvvxmYh7+rldb39dqE0weBq3VlHS98AivX04F/EZxeEpi43NM0+BgY4kby MWNpuFaY50DE5DOdYD9k5vkzHCvHvwvY4P7PpwEN0bIj8h9uBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCGY3T+9rtrju8ZWo2tlAyyhVosyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvZDNjMWU0N2YtMmJkOS00 ZTQyLWE5NTAtMGY4MWU0NWNkNDYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4avJGv1zIMUHDejbum7g7 INhewKgB0uwmOlid4d/JxXY8hOkZNCQ7s1X0EDZCA+0DZzI/UbyX7Tv1HJ7G76sa U43DJnUpnBjQwCM8pllcnQhcowtY/ksJ4hU/xh2xd3r2h+/DTvkAuCddIlfO9QrD euC18mM+I+fDrGXNhsXqTPQEMZuO488BQHqtFT1jCLx8tAZCqGKpjWB2QFT2qcN0 ysYpZxv+DzB8hU+QbdRScwjyldThXPTGCvoaBDjtrAySaWf+2l8ioG15/cULIG2R gVieZGOMaokLqgwfSoIKoKlap3lUJzjeU+NNxwiS/z+yP2elNFpejzS2YArUxN8U -----END CERTIFICATE-----Generated at Mon Sep 21 11:43:44 2026 by rpki-client