$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft File: 32f4e84a-4abf-4422-8d26-57083e3e17cd.mft (raw, json) Hash identifier: hs2JlWhuf770tUKZPFuJ8k9eH+0yrRgv3QXT4uD3g/s= Subject key identifier: 2C:E6:D6:75:E3:3F:6E:13:E4:2E:25:35:79:89:CA:5A:1B:C7:EC:64 Authority key identifier: 5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3 Certificate issuer: /CN=32f4e84a-4abf-4422-8d26-57083e3e17cd Certificate serial: 010D0C9F4328584F3FCB0F6F479160A559B07600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft Manifest number: 010D0C9F43285847015292E43AF8658719E68707 Signing time: Mon 21 Sep 2026 14:00:22 +0000 Manifest this update: Mon 21 Sep 2026 14:00:22 +0000 Manifest next update: Thu 24 Sep 2026 14:00:00 +0000 Files and hashes: 1: 32f4e84a-4abf-4422-8d26-57083e3e17cd.crl (hash: Dt5UUpEtcwPFG8jHEKV0uKNqBvpdtMEQ8mmF1upwqsc=) 2: ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa (hash: A1yKz10oCqXeXXuLq9IxrpBvOKI+Qy9wSEnJOH2990Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:cb:0f:6f:47:91:60:a5:59:b0:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f4e84a-4abf-4422-8d26-57083e3e17cd Validity Not Before: Sep 21 14:00:22 2026 GMT Not After : Sep 24 14:00:00 2026 GMT Subject: CN=684fded1-bdb2-449d-b4fe-f12b0ec1399c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6a:d7:7c:9e:f9:06:93:aa:ad:b6:8c:b4:31: ea:b8:df:05:76:82:ee:db:5b:3f:84:4a:34:8b:26: c6:98:3a:88:1e:12:27:15:e6:ae:fe:12:c3:1d:53: d7:dc:12:06:ab:27:e4:30:4c:14:f7:92:e2:7c:80: 19:1f:f4:fa:21:01:fd:3c:f0:f8:e1:60:7c:d3:b4: b7:b0:57:14:ad:e3:ed:e4:d0:8b:2d:00:fa:cf:c7: 36:15:da:b0:1f:2a:7c:12:be:84:df:fb:74:98:97: ae:a3:25:df:96:57:47:58:85:13:f4:a2:57:77:86: 58:3b:95:11:ad:d6:16:6d:d4:fd:c4:02:4e:39:2f: bd:6e:49:1a:da:5b:9e:b0:1b:f5:55:09:d0:75:f4: 70:a7:60:7f:bb:81:d2:25:e7:7e:86:b5:d2:1a:dd: 91:04:af:4f:3b:d8:8e:c9:8e:c4:28:e9:f4:10:c7: 34:7a:48:2f:41:09:d1:3e:3b:a0:7b:38:5a:9e:38: d1:13:6f:5d:18:a8:92:ed:15:f9:ac:f9:67:f3:32: f6:14:73:25:3c:48:11:6e:fb:d3:3b:de:43:cc:0d: f5:19:cf:48:13:2a:3c:2b:1a:17:c7:39:19:b8:72: 63:75:df:ba:59:a6:00:7d:3d:4d:92:67:40:d5:8b: 5a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E6:D6:75:E3:3F:6E:13:E4:2E:25:35:79:89:CA:5A:1B:C7:EC:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl X509v3 Authority Key Identifier: keyid:5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5a:58:0f:56:d2:9b:5d:4f:a3:14:d2:15:9b:03:4f:88:62: 27:8a:0e:eb:ce:8c:9c:b0:50:30:ad:08:32:a3:c2:39:f2:8e: a2:7d:3f:ac:9f:af:2b:f7:4a:67:df:fc:74:98:94:90:a8:d3: e5:4f:00:93:0c:1b:ae:84:60:2a:13:92:85:06:ad:61:29:7f: 4c:89:dd:21:bb:8c:c1:3b:9a:a6:07:6e:8e:16:e7:ae:bc:63: 5b:05:a5:1c:92:c4:08:6d:8e:57:71:bb:ca:6d:6b:e2:cd:32: b4:64:c4:73:4f:40:ab:80:b5:6c:c6:81:95:4f:e5:6b:55:7f: 0b:f7:ff:a9:81:5d:b2:f5:4b:72:e9:db:fb:e1:10:96:2a:bb: d1:65:cc:10:f3:a5:69:e3:d2:56:ca:2e:5b:82:20:ab:1e:98: a6:c8:78:aa:d7:35:5d:1d:85:3b:54:67:39:2d:be:8c:0e:d5: 34:5c:a4:82:93:8d:9b:6b:60:f3:1c:0c:eb:64:a0:5c:23:e6: c1:e2:40:fb:e8:26:7e:95:3c:8e:ce:b7:13:58:c7:12:10:33: 63:b6:ff:4f:ba:93:91:fa:a1:e6:43:8d:0c:75:f8:4f:20:2c: a6:fd:76:82:0b:0d:b4:0e:9e:7f:3f:b2:3f:e3:2c:48:f6:3e: c5:1c:fd:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8/yw9vR5FgpVmwdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmNGU4NGEtNGFiZi00NDIyLThkMjYtNTcwODNlM2Ux N2NkMB4XDTI2MDkyMTE0MDAyMloXDTI2MDkyNDE0MDAwMFowLzEtMCsGA1UEAxMk Njg0ZmRlZDEtYmRiMi00NDlkLWI0ZmUtZjEyYjBlYzEzOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32rXfJ75BpOqrbaMtDHquN8FdoLu21s/hEo0 iybGmDqIHhInFeau/hLDHVPX3BIGqyfkMEwU95LifIAZH/T6IQH9PPD44WB807S3 sFcUrePt5NCLLQD6z8c2FdqwHyp8Er6E3/t0mJeuoyXflldHWIUT9KJXd4ZYO5UR rdYWbdT9xAJOOS+9bkka2luesBv1VQnQdfRwp2B/u4HSJed+hrXSGt2RBK9PO9iO yY7EKOn0EMc0ekgvQQnRPjugezhanjjRE29dGKiS7RX5rPln8zL2FHMlPEgRbvvT O95DzA31Gc9IEyo8KxoXxzkZuHJjdd+6WaYAfT1NkmdA1YtaIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCzm1nXjP24T5C4lNXmJylobx+xkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMmY0 ZTg0YS00YWJmLTQ0MjItOGQyNi01NzA4M2UzZTE3Y2QvMzJmNGU4NGEtNGFiZi00 NDIyLThkMjYtNTcwODNlM2UxN2NkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzJmNGU4NGEtNGFiZi00NDIyLThk MjYtNTcwODNlM2UxN2NkLzMyZjRlODRhLTRhYmYtNDQyMi04ZDI2LTU3MDgzZTNl MTdjZC5jcmwwHwYDVR0jBBgwFoAUW6uHkmFiU8gEFTo/2CsWSVihrqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMmY0ZTg0YS00YWJmLTQ0MjItOGQyNi01NzA4 M2UzZTE3Y2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJWlgPVtKbXU+jFNIVmwNP iGInig7rzoycsFAwrQgyo8I58o6ifT+sn68r90pn3/x0mJSQqNPlTwCTDBuuhGAq E5KFBq1hKX9Mid0hu4zBO5qmB26OFueuvGNbBaUcksQIbY5XcbvKbWvizTK0ZMRz T0CrgLVsxoGVT+VrVX8L9/+pgV2y9Uty6dv74RCWKrvRZcwQ86Vp49JWyi5bgiCr HpimyHiq1zVdHYU7VGc5Lb6MDtU0XKSCk42ba2DzHAzrZKBcI+bB4kD76CZ+lTyO zrcTWMcSEDNjtv9PupOR+qHmQ40MdfhPICym/XaCCw20Dp5/P7I/4yxI9j7FHP3D -----END CERTIFICATE-----Generated at Mon Sep 21 20:11:35 2026 by rpki-client