$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft File: 3be7133e-7e46-4fc6-9410-e18bafb885d8.mft (raw, json) Hash identifier: Xq9tV6jgIt+jm1LESAITt+i7iFHvzWCp1tmuN0mT3ws= Subject key identifier: 90:3B:CA:98:1C:B6:39:50:52:62:25:1F:5E:53:4B:C2:3D:7B:F0:EE Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Certificate serial: 010D0C9F4328584F3F71B773F150F48BAD102040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft Manifest number: 010D0C9F4328584356E47ADE33A7F975BBDBCBDF Signing time: Mon 21 Sep 2026 11:00:22 +0000 Manifest this update: Mon 21 Sep 2026 11:00:22 +0000 Manifest next update: Thu 24 Sep 2026 11:00:00 +0000 Files and hashes: 1: 3be7133e-7e46-4fc6-9410-e18bafb885d8.crl (hash: oIkRTdFDJth5/hAqCtNLKJpF2MPYa/YIClH+Ol3JQQE=) 2: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (hash: D1ofdaxnwkrSc40M53g8cnuVkeIEgEw3d9lmw+c4NzQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:71:b7:73:f1:50:f4:8b:ad:10:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Validity Not Before: Sep 21 11:00:22 2026 GMT Not After : Sep 24 11:00:00 2026 GMT Subject: CN=34b2d098-03f5-416e-8f55-7d5fb6c09fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:23:52:40:c0:9d:c5:0c:b8:46:2c:e0:e4:2c: 21:0d:f0:e8:64:f1:8f:9c:21:17:e4:d6:08:38:f5: 2a:1e:8c:20:fb:79:41:13:e0:00:e0:45:f8:23:cb: f2:91:51:31:ab:20:4b:68:db:c9:26:57:aa:06:f3: 7c:31:01:7b:7a:3b:6b:c8:9e:60:ef:5e:c8:c0:fe: 35:13:f5:b6:a2:48:0f:4c:01:76:3a:4c:a2:8b:9d: e6:6f:c2:7b:0a:89:16:b0:18:7a:29:7c:1a:e8:59: d9:36:5d:57:26:b2:d5:fa:e3:bc:93:04:90:c8:6b: f4:24:0a:3a:d1:9e:7e:ff:c4:33:40:43:e7:4b:af: c2:a1:c2:ee:a3:fe:59:ba:6e:01:90:28:4d:82:5e: a4:a5:bc:58:3c:4d:41:27:bd:9f:60:2b:29:21:84: d3:3e:2d:c6:52:d0:87:44:37:2e:db:88:be:c6:d4: b8:26:28:c3:c3:64:e2:2e:32:04:5f:ac:b0:d0:74: f7:3a:81:03:a3:15:75:71:e5:14:34:41:bb:07:f9: c1:34:0c:f0:b3:a9:81:5c:78:aa:ad:64:e8:59:3a: 7d:d4:99:c6:57:af:0d:a4:be:c5:2c:77:ca:bb:d5: ae:3e:bf:65:1f:22:90:13:0b:60:10:a8:87:21:c6: e0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3B:CA:98:1C:B6:39:50:52:62:25:1F:5E:53:4B:C2:3D:7B:F0:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl X509v3 Authority Key Identifier: keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:48:eb:5f:fd:5a:48:5a:60:85:5a:e2:94:5f:57:35:6a:ea: 2d:45:7f:67:d4:f5:2d:bd:61:ce:c9:39:9c:2a:87:d0:57:f7: d7:28:f8:ad:9e:ac:d6:ad:73:66:2f:eb:f5:5c:7c:8e:81:13: 15:ed:92:5e:65:64:80:d9:4f:14:29:ba:ce:97:20:90:89:be: 0a:52:b9:75:1f:2d:81:5f:09:12:e5:fb:0b:d3:53:c1:ad:b5: 04:7c:59:d6:fd:89:65:77:4b:ad:41:05:aa:5b:21:23:ec:78: f5:b2:24:ba:e0:d8:69:41:8b:7a:57:0c:50:d2:ee:b8:42:d8: eb:94:30:b1:e0:85:6d:0b:e1:49:02:23:9b:5c:ba:0a:df:ec: 6e:82:2b:f8:a8:ff:81:47:cc:24:d8:dd:6e:bc:4c:54:0e:c3: 2c:30:15:fa:91:3c:60:ad:9a:9e:1f:ad:21:bb:5e:e5:52:3e: 09:a6:f4:74:63:9c:cd:e9:d5:5e:be:ff:a8:4a:3b:45:9c:f0: b7:c5:58:ef:c2:61:d4:16:d4:ba:27:20:fb:d3:16:6d:18:48: 23:67:64:86:01:19:61:ec:3b:bb:36:07:de:61:56:50:c2:29: 81:47:be:c9:2b:65:78:d9:93:62:f8:f6:ef:fa:0c:84:8e:b9: 54:3b:1c:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8/cbdz8VD0i60QIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4 NWQ4MB4XDTI2MDkyMTExMDAyMloXDTI2MDkyNDExMDAwMFowLzEtMCsGA1UEAxMk MzRiMmQwOTgtMDNmNS00MTZlLThmNTUtN2Q1ZmI2YzA5ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCNSQMCdxQy4Rizg5CwhDfDoZPGPnCEX5NYI OPUqHowg+3lBE+AA4EX4I8vykVExqyBLaNvJJleqBvN8MQF7ejtryJ5g717IwP41 E/W2okgPTAF2Okyii53mb8J7CokWsBh6KXwa6FnZNl1XJrLV+uO8kwSQyGv0JAo6 0Z5+/8QzQEPnS6/CocLuo/5Zum4BkChNgl6kpbxYPE1BJ72fYCspIYTTPi3GUtCH RDcu24i+xtS4JijDw2TiLjIEX6yw0HT3OoEDoxV1ceUUNEG7B/nBNAzws6mBXHiq rWToWTp91JnGV68NpL7FLHfKu9WuPr9lHyKQEwtgEKiHIcbgPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJA7ypgctjlQUmIlH15TS8I9e/DuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3 MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvM2JlNzEzM2UtN2U0Ni00 ZmM2LTk0MTAtZTE4YmFmYjg4NWQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2JlNzEzM2UtN2U0Ni00ZmM2LTk0 MTAtZTE4YmFmYjg4NWQ4LzNiZTcxMzNlLTdlNDYtNGZjNi05NDEwLWUxOGJhZmI4 ODVkOC5jcmwwHwYDVR0jBBgwFoAUG80FAxLr/NeS1v6quZZp+g1ssMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThi YWZiODg1ZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwSOtf/VpIWmCFWuKUX1c1 auotRX9n1PUtvWHOyTmcKofQV/fXKPitnqzWrXNmL+v1XHyOgRMV7ZJeZWSA2U8U KbrOlyCQib4KUrl1Hy2BXwkS5fsL01PBrbUEfFnW/Ylld0utQQWqWyEj7Hj1siS6 4NhpQYt6VwxQ0u64QtjrlDCx4IVtC+FJAiObXLoK3+xugiv4qP+BR8wk2N1uvExU DsMsMBX6kTxgrZqeH60hu17lUj4JpvR0Y5zN6dVevv+oSjtFnPC3xVjvwmHUFtS6 JyD70xZtGEgjZ2SGARlh7Du7NgfeYVZQwimBR77JK2V42ZNi+Pbv+gyEjrlUOxxm -----END CERTIFICATE-----Generated at Tue Sep 22 10:28:46 2026 by rpki-client