$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft File: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft (raw, json) Hash identifier: nqoDvA8cou1xUUS+B10jPH+jdKTYFGv/C2vy8d1lkFM= Subject key identifier: D2:18:7E:A9:B6:91:15:43:08:C4:6D:45:4B:1C:6F:DF:5B:22:E8:76 Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 Certificate issuer: /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Certificate serial: 010D0C9F4328584F3DD0D3655CC6DA3ECFEC1400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft Manifest number: 010D0C9F43285849DA9CE5EFC966AA9E1974D211 Signing time: Sun 20 Sep 2026 21:00:23 +0000 Manifest this update: Sun 20 Sep 2026 21:00:23 +0000 Manifest next update: Wed 23 Sep 2026 21:00:00 +0000 Files and hashes: 1: 2e73e149-085f-345e-acd0-10867059c3f9.roa (hash: wi50np2LyzvTDPcEMZBIG+6yZ/3ACIjWHc1SdY6oMMc=) 2: 389cc261-cf0d-329f-ad46-5a405e8a611e.roa (hash: vGzzt8Gw7LnN+PzYRY0wt2AtQh4OspewdQjypwlsNMQ=) 3: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl (hash: ASwU5d2PyEbM+dkw7NDOfMEwLvX/+TwNTBMWJ+JkOBY=) 4: fbbba54b-950b-302b-a65a-9cf427e72454.roa (hash: pEpZcuyGke6XfTR/NYfzL0oXfPq/ed5WXM4ExZJ2WuY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3d:d0:d3:65:5c:c6:da:3e:cf:ec:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Validity Not Before: Sep 20 21:00:23 2026 GMT Not After : Sep 23 21:00:00 2026 GMT Subject: CN=a392316d-2550-4ba0-84ba-eb19c3fdc3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:64:24:bf:40:eb:0b:90:a6:2e:43:dc:16: d7:7b:16:eb:16:69:69:b1:21:49:71:18:9f:58:3b: 3d:3e:51:db:8b:f7:16:6a:94:74:b5:1e:dc:c8:e6: 7c:62:5b:d1:f1:48:ba:95:e1:1f:a4:37:a5:c3:33: 4b:e4:1f:26:2b:71:6c:a0:58:20:25:07:bf:65:c6: bb:93:c3:00:e8:90:50:36:b1:1e:55:bd:ae:00:28: 1e:e3:7f:54:25:4c:9e:ab:ba:4f:6b:37:00:41:20: cb:0a:11:5f:9c:44:4a:a2:75:44:25:7a:f2:fe:0e: 3f:5f:2c:95:51:71:a4:a4:7f:43:3b:19:a2:4d:27: fd:cc:6d:32:11:ef:21:46:97:b7:1d:08:5c:10:dc: 1f:bb:d6:29:cf:33:ba:b8:6f:48:80:22:6e:4c:3d: 88:91:25:fa:85:e0:68:7b:26:02:a0:0b:e8:87:ef: 9a:a4:1a:ca:39:16:56:0f:fd:f4:66:4f:ff:98:bd: 08:b5:e4:fe:7a:0b:ba:2a:25:a3:53:5e:f2:4e:71: 1a:92:c5:bd:82:6a:4b:e0:16:f4:6c:60:9d:33:12: 47:60:64:b3:39:bc:76:c9:7c:56:fe:a1:aa:0c:9f: 3e:77:29:07:1d:82:96:67:30:53:08:d0:5c:cf:8b: 45:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:18:7E:A9:B6:91:15:43:08:C4:6D:45:4B:1C:6F:DF:5B:22:E8:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl X509v3 Authority Key Identifier: keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:cb:37:3a:06:bb:47:55:c1:bb:4b:c2:18:ee:bd:3a:40:4b: 4e:47:38:7d:96:6c:ba:83:7c:65:06:87:8b:64:29:fb:07:0a: 6c:e1:67:23:83:f6:18:54:41:de:a7:17:79:3c:ed:f8:4b:3e: 3e:c3:dd:c2:70:a9:fb:3d:07:61:35:a3:22:75:e3:f0:e9:fd: 43:0f:e5:44:d6:82:36:b4:cb:fc:3e:b2:ef:99:7c:ef:6a:37: ca:ab:71:fd:dc:12:59:24:40:1a:61:a4:94:d3:d7:2d:60:84: 0f:79:94:a2:ef:ba:c3:f2:2e:04:18:bb:35:03:fa:f5:ac:0b: d8:81:15:b2:38:43:f2:d8:0a:41:65:39:87:c7:8a:b4:04:4d: 14:dc:43:68:95:25:81:7d:72:eb:05:7f:59:ed:eb:4f:08:95: 49:b4:c1:3a:0a:fd:83:8e:c8:0f:2b:d0:c8:27:ae:ce:22:ba: d5:0c:b2:65:72:1a:4a:ee:0d:22:e2:3b:23:48:37:65:2f:f1: 45:f3:8b:7b:f6:7f:52:2f:6e:94:47:ef:9e:ef:bd:63:7f:b9: 7a:cd:7b:2a:d6:bc:63:41:2b:89:47:e9:59:04:59:dd:d2:ae: ce:ce:d8:32:1f:0f:49:c7:4c:e7:71:0a:1e:08:71:85:3a:bb: bf:57:ae:65 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE890NNlXMbaPs/sFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M4YTk3MWYtZDdkYy00ZTk1LWJjNmUtYTBkYjE1Zjgw YTg0MB4XDTI2MDkyMDIxMDAyM1oXDTI2MDkyMzIxMDAwMFowLzEtMCsGA1UEAxMk YTM5MjMxNmQtMjU1MC00YmEwLTg0YmEtZWIxOWMzZmRjM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFdkJL9A6wuQpi5D3BbXexbrFmlpsSFJcRif WDs9PlHbi/cWapR0tR7cyOZ8YlvR8Ui6leEfpDelwzNL5B8mK3FsoFggJQe/Zca7 k8MA6JBQNrEeVb2uACge439UJUyeq7pPazcAQSDLChFfnERKonVEJXry/g4/XyyV UXGkpH9DOxmiTSf9zG0yEe8hRpe3HQhcENwfu9YpzzO6uG9IgCJuTD2IkSX6heBo eyYCoAvoh++apBrKORZWD/30Zk//mL0IteT+egu6KiWjU17yTnEaksW9gmpL4Bb0 bGCdMxJHYGSzObx2yXxW/qGqDJ8+dykHHYKWZzBTCNBcz4tFzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNIYfqm2kRVDCMRtRUscb99bIuh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhh OTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVmODBhODQvM2M4YTk3MWYtZDdkYy00 ZTk1LWJjNmUtYTBkYjE1ZjgwYTg0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2M4YTk3MWYtZDdkYy00ZTk1LWJj NmUtYTBkYjE1ZjgwYTg0LzNjOGE5NzFmLWQ3ZGMtNGU5NS1iYzZlLWEwZGIxNWY4 MGE4NC5jcmwwHwYDVR0jBBgwFoAUufpX3ttk7SBqXo1BLS6GNNdjSxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRi MTVmODBhODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDyzc6BrtHVcG7S8IY7r06 QEtORzh9lmy6g3xlBoeLZCn7Bwps4Wcjg/YYVEHepxd5PO34Sz4+w93CcKn7PQdh NaMidePw6f1DD+VE1oI2tMv8PrLvmXzvajfKq3H93BJZJEAaYaSU09ctYIQPeZSi 77rD8i4EGLs1A/r1rAvYgRWyOEPy2ApBZTmHx4q0BE0U3ENolSWBfXLrBX9Z7etP CJVJtME6Cv2DjsgPK9DIJ67OIrrVDLJlchpK7g0i4jsjSDdlL/FF84t79n9SL26U R++e771jf7l6zXsq1rxjQSuJR+lZBFnd0q7OztgyHw9Jx0zncQoeCHGFOru/V65l -----END CERTIFICATE-----Generated at Mon Sep 21 09:56:18 2026 by rpki-client