$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft File: 3e752e0d-0e22-47d1-a147-151d170def2d.mft (raw, json) Hash identifier: xjnnJNA13bbO1h2WsUnEtyAuVGnTUX5pI3gPS09IviY= Subject key identifier: A7:75:04:BE:A1:DF:C2:C6:98:64:20:EB:B6:86:82:EB:04:75:08:F7 Authority key identifier: 8B:B4:53:36:F7:37:42:D8:50:F2:23:DC:1F:47:1B:D9:89:CD:9A:A3 Certificate issuer: /CN=3e752e0d-0e22-47d1-a147-151d170def2d Certificate serial: 010D0C9F4328584F402465AB5FF3255FAD34B380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft Manifest number: 010D0C9F4328584338DCA9666A635BF04CCCE94F Signing time: Mon 21 Sep 2026 17:00:22 +0000 Manifest this update: Mon 21 Sep 2026 17:00:22 +0000 Manifest next update: Wed 23 Sep 2026 17:00:00 +0000 Files and hashes: 1: 3e752e0d-0e22-47d1-a147-151d170def2d.crl (hash: dBI5narHhO3EVDIX6y9tKiELux8q0RpvjZk+CIoRuFI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:24:65:ab:5f:f3:25:5f:ad:34:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e752e0d-0e22-47d1-a147-151d170def2d Validity Not Before: Sep 21 17:00:22 2026 GMT Not After : Sep 23 17:00:00 2026 GMT Subject: CN=cbc36098-4bdc-498c-a0c8-34b82fa06184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:6e:13:ac:06:cc:f2:d1:69:d2:2d:4f:c4: 02:04:0f:da:c8:4b:bb:db:b4:d2:db:5f:58:14:83: 2a:0d:39:8c:b9:1c:e0:4a:0d:1a:e7:38:87:e5:41: 8b:8b:39:17:9a:f1:02:4f:a9:9f:98:12:df:37:0e: 44:e9:f7:f3:36:5f:1e:4c:41:74:9f:0e:63:b0:c9: 47:ad:99:b0:5c:e7:42:73:2f:ee:e2:05:c7:a6:4e: 93:da:70:90:79:d6:91:d8:45:88:92:59:89:33:9e: 53:09:ec:af:e1:9d:ea:9c:33:17:36:91:e1:0b:19: 20:34:7c:66:f6:6f:bf:99:67:b8:02:80:4a:4f:d1: f8:81:87:cb:cb:c1:97:0a:3e:5a:43:5a:c9:de:e9: a0:3c:5b:0d:95:fa:a2:de:4a:c9:e6:a1:76:49:7f: 71:56:71:8e:a0:db:a7:84:55:cc:63:f2:e9:cc:3c: 51:cf:66:74:6d:4c:ae:4d:84:86:21:03:c6:91:a3: d0:37:5b:c6:ff:c8:50:63:65:ab:13:fa:ed:00:3d: 8b:83:19:20:36:41:36:d7:21:82:f2:bf:8e:95:3a: 9a:ba:d3:97:d5:b8:51:0b:39:42:3e:f7:6c:0f:e3: 47:ae:1a:c3:97:3a:6e:fc:99:f0:70:f1:98:e7:ff: f7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:75:04:BE:A1:DF:C2:C6:98:64:20:EB:B6:86:82:EB:04:75:08:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.crl X509v3 Authority Key Identifier: keyid:8B:B4:53:36:F7:37:42:D8:50:F2:23:DC:1F:47:1B:D9:89:CD:9A:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e5:d5:0e:ed:7e:1f:96:4c:bb:eb:30:fd:ef:2f:3a:bf:9d: 0e:1b:99:3c:44:45:32:44:89:ad:4b:f1:c6:75:b0:d1:2f:e9: cd:d2:b1:3c:98:f0:81:62:b2:5a:58:42:39:13:49:8a:ce:aa: 75:77:30:2f:9c:20:de:27:f0:68:f6:8b:67:19:30:09:d5:38: ea:2c:e1:e6:34:d5:f5:75:15:f7:61:4e:6d:55:e6:de:50:9f: c3:b6:4c:bb:81:a5:17:ba:fe:58:f1:e1:06:91:b6:5a:b6:35: 42:f6:05:8f:e8:0d:08:15:80:c7:bb:d0:90:4c:5b:38:09:16: 5c:13:1b:89:d7:e4:e0:a3:76:c3:a8:01:15:26:55:18:68:10: af:a9:94:5a:85:9a:69:af:e3:b2:76:a8:5c:d5:18:55:61:56: aa:e1:04:2b:01:32:2d:ba:5a:5f:8c:a0:28:00:07:ca:0b:b1: e6:a3:c3:aa:47:c0:85:cb:e2:ee:3b:ad:21:f1:93:78:c5:92: e3:d8:f1:fc:16:c3:b9:d4:be:e1:4c:66:01:dd:38:14:e1:06: fb:4a:3f:6a:28:a4:82:d1:c5:54:99:71:ae:5a:c2:59:20:bc: 61:54:23:f0:4f:79:44:fa:a0:dc:93:b4:6d:80:85:5d:60:47: 9b:ed:35:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9AJGWrX/MlX600s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U3NTJlMGQtMGUyMi00N2QxLWExNDctMTUxZDE3MGRl ZjJkMB4XDTI2MDkyMTE3MDAyMloXDTI2MDkyMzE3MDAwMFowLzEtMCsGA1UEAxMk Y2JjMzYwOTgtNGJkYy00OThjLWEwYzgtMzRiODJmYTA2MTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJBuE6wGzPLRadItT8QCBA/ayEu727TS219Y FIMqDTmMuRzgSg0a5ziH5UGLizkXmvECT6mfmBLfNw5E6ffzNl8eTEF0nw5jsMlH rZmwXOdCcy/u4gXHpk6T2nCQedaR2EWIklmJM55TCeyv4Z3qnDMXNpHhCxkgNHxm 9m+/mWe4AoBKT9H4gYfLy8GXCj5aQ1rJ3umgPFsNlfqi3krJ5qF2SX9xVnGOoNun hFXMY/LpzDxRz2Z0bUyuTYSGIQPGkaPQN1vG/8hQY2WrE/rtAD2LgxkgNkE21yGC 8r+OlTqautOX1bhRCzlCPvdsD+NHrhrDlzpu/JnwcPGY5//3IQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKd1BL6h38LGmGQg67aGgusEdQj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZTc1 MmUwZC0wZTIyLTQ3ZDEtYTE0Ny0xNTFkMTcwZGVmMmQvM2U3NTJlMGQtMGUyMi00 N2QxLWExNDctMTUxZDE3MGRlZjJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2U3NTJlMGQtMGUyMi00N2QxLWEx NDctMTUxZDE3MGRlZjJkLzNlNzUyZTBkLTBlMjItNDdkMS1hMTQ3LTE1MWQxNzBk ZWYyZC5jcmwwHwYDVR0jBBgwFoAUi7RTNvc3QthQ8iPcH0cb2YnNmqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZTc1MmUwZC0wZTIyLTQ3ZDEtYTE0Ny0xNTFk MTcwZGVmMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBf5dUO7X4flky76zD97y86 v50OG5k8REUyRImtS/HGdbDRL+nN0rE8mPCBYrJaWEI5E0mKzqp1dzAvnCDeJ/Bo 9otnGTAJ1TjqLOHmNNX1dRX3YU5tVebeUJ/Dtky7gaUXuv5Y8eEGkbZatjVC9gWP 6A0IFYDHu9CQTFs4CRZcExuJ1+Tgo3bDqAEVJlUYaBCvqZRahZppr+Oydqhc1RhV YVaq4QQrATItulpfjKAoAAfKC7Hmo8OqR8CFy+LuO60h8ZN4xZLj2PH8FsO51L7h TGYB3TgU4Qb7Sj9qKKSC0cVUmXGuWsJZILxhVCPwT3lE+qDck7RtgIVdYEeb7TX7 -----END CERTIFICATE-----Generated at Tue Sep 22 17:22:40 2026 by rpki-client