$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a/bb3284d3-a17b-4378-aea1-31a6dc7f667a.mft File: bb3284d3-a17b-4378-aea1-31a6dc7f667a.mft (raw, json) Hash identifier: /3n8L3OIy9o1c0ZlYbZglKuYc3mP6zdJoxDH84Zt/z8= Subject key identifier: 3D:7A:A3:E6:A4:9C:DD:FC:7B:8F:35:14:27:8B:0B:40:A0:60:8C:DB Authority key identifier: 8C:2E:F3:E6:21:56:CF:6F:67:AD:52:7B:02:B9:9B:3D:12:5B:DA:39 Certificate issuer: /CN=bb3284d3-a17b-4378-aea1-31a6dc7f667a Certificate serial: 010D0C9F4328584F74F3D5D1D68005AA47FE9100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a/bb3284d3-a17b-4378-aea1-31a6dc7f667a.mft Manifest number: 010D0C9F432858496795E3313ACFC671FE1F10AB Signing time: Sat 10 Oct 2026 15:00:25 +0000 Manifest this update: Sat 10 Oct 2026 15:00:25 +0000 Manifest next update: Mon 12 Oct 2026 15:00:00 +0000 Files and hashes: 1: bb3284d3-a17b-4378-aea1-31a6dc7f667a.crl (hash: 03HpB4ngbGNSpJdoPTqcxwx6Qmy7C0vGRyBd5m85jLg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a/bb3284d3-a17b-4378-aea1-31a6dc7f667a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a/bb3284d3-a17b-4378-aea1-31a6dc7f667a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:f3:d5:d1:d6:80:05:aa:47:fe:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb3284d3-a17b-4378-aea1-31a6dc7f667a Validity Not Before: Oct 10 15:00:25 2026 GMT Not After : Oct 12 15:00:00 2026 GMT Subject: CN=1cb3ad74-1659-4ac0-8e35-8a2b6f3fdbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:7f:9f:9f:2e:a8:72:bf:0f:a0:2d:64:70: 94:84:42:4e:3f:79:3b:8c:45:70:d4:a0:3f:6f:d8: e9:1a:71:34:76:14:bd:34:36:0d:cb:64:ba:a4:46: 03:cb:98:e8:ed:b0:b9:ad:8f:cb:a2:6a:01:e5:69: c1:04:b2:a4:24:39:d9:d6:08:05:dc:5f:69:9b:f3: 20:30:96:e7:6b:dc:fc:bb:a4:17:56:1c:d2:25:01: 0f:b7:21:c7:f4:5c:ea:ec:b1:be:64:b8:60:51:ab: e5:7c:f8:6f:d5:2c:09:70:af:a3:87:9f:4a:6d:d1: 90:54:37:ce:7a:22:12:11:1c:b6:7f:bb:d2:16:54: 07:0c:46:ee:bb:4d:e7:85:e9:c6:f6:fb:99:81:48: 1d:aa:be:20:82:56:2b:ff:5c:a0:88:18:4a:cc:a2: 16:8a:68:3c:01:b9:a9:23:44:d0:d0:f7:a3:32:b9: 8c:b3:76:07:10:92:ac:22:ef:1e:4c:3b:57:74:f4: bd:85:c3:1d:f7:1f:69:41:74:6e:b6:a8:18:b0:85: 4d:64:ae:a6:3e:79:ba:f6:37:10:2c:a8:ab:f5:0c: 37:8a:d8:18:04:2b:fe:66:c8:dd:41:e6:f1:08:cc: e8:da:a8:81:50:61:78:83:82:a8:a9:5e:0c:78:01: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7A:A3:E6:A4:9C:DD:FC:7B:8F:35:14:27:8B:0B:40:A0:60:8C:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a/bb3284d3-a17b-4378-aea1-31a6dc7f667a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a/bb3284d3-a17b-4378-aea1-31a6dc7f667a.crl X509v3 Authority Key Identifier: keyid:8C:2E:F3:E6:21:56:CF:6F:67:AD:52:7B:02:B9:9B:3D:12:5B:DA:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bb3284d3-a17b-4378-aea1-31a6dc7f667a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:d0:f9:85:98:88:27:47:1f:14:c6:56:68:87:05:77:be:57: 94:bd:61:83:5b:b0:fb:6c:69:3d:47:37:52:c6:2d:15:8c:0f: 35:ca:43:a7:ff:46:c5:de:c6:a5:6f:1d:39:6c:55:eb:a2:c5: 1f:7b:5d:e0:4c:34:88:40:fd:44:9d:09:88:48:05:5c:cb:d2: 79:e4:3d:b6:28:a7:2c:fd:be:73:e1:8f:c7:0f:d4:e9:22:b3: 2a:79:94:59:94:47:a3:c2:6f:77:9f:c2:29:81:37:cb:77:2e: 7c:b1:53:a4:89:9b:ae:68:67:58:13:8e:0f:d1:bf:a6:6b:e5: 5a:4e:c9:eb:65:21:f6:11:dc:bd:80:13:a3:55:05:61:22:68: 90:45:d3:28:2e:44:78:c6:d2:a3:ca:e8:f9:80:f4:eb:db:3e: fa:74:ed:f6:21:26:e3:4b:00:9b:2b:16:b4:43:31:80:eb:bb: b1:7b:d4:45:b9:a4:f2:b9:28:81:c6:da:56:0c:1a:ef:9c:4c: 46:24:1c:bb:15:5f:75:40:97:bb:2c:9b:d8:c4:be:fd:bd:b1: 5a:0a:42:02:c5:3e:15:b7:8d:3b:01:7f:3a:71:84:62:57:56: ae:6a:e9:1e:aa:9b:6a:13:f2:18:0b:b4:7c:8b:16:56:9e:05: fc:72:02:b8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9089XR1oAFqkf+kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzMjg0ZDMtYTE3Yi00Mzc4LWFlYTEtMzFhNmRjN2Y2 NjdhMB4XDTI2MTAxMDE1MDAyNVoXDTI2MTAxMjE1MDAwMFowLzEtMCsGA1UEAxMk MWNiM2FkNzQtMTY1OS00YWMwLThlMzUtOGEyYjZmM2ZkYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorV/n58uqHK/D6AtZHCUhEJOP3k7jEVw1KA/ b9jpGnE0dhS9NDYNy2S6pEYDy5jo7bC5rY/LomoB5WnBBLKkJDnZ1ggF3F9pm/Mg MJbna9z8u6QXVhzSJQEPtyHH9Fzq7LG+ZLhgUavlfPhv1SwJcK+jh59KbdGQVDfO eiISERy2f7vSFlQHDEbuu03nhenG9vuZgUgdqr4gglYr/1ygiBhKzKIWimg8Abmp I0TQ0PejMrmMs3YHEJKsIu8eTDtXdPS9hcMd9x9pQXRutqgYsIVNZK6mPnm69jcQ LKir9Qw3itgYBCv+ZsjdQebxCMzo2qiBUGF4g4KoqV4MeAE46wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD16o+aknN38e481FCeLC0CgYIzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYjMy ODRkMy1hMTdiLTQzNzgtYWVhMS0zMWE2ZGM3ZjY2N2EvYmIzMjg0ZDMtYTE3Yi00 Mzc4LWFlYTEtMzFhNmRjN2Y2NjdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmIzMjg0ZDMtYTE3Yi00Mzc4LWFl YTEtMzFhNmRjN2Y2NjdhL2JiMzI4NGQzLWExN2ItNDM3OC1hZWExLTMxYTZkYzdm NjY3YS5jcmwwHwYDVR0jBBgwFoAUjC7z5iFWz29nrVJ7ArmbPRJb2jkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYjMyODRkMy1hMTdiLTQzNzgtYWVhMS0zMWE2 ZGM3ZjY2N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDD0PmFmIgnRx8UxlZohwV3 vleUvWGDW7D7bGk9RzdSxi0VjA81ykOn/0bF3salbx05bFXrosUfe13gTDSIQP1E nQmISAVcy9J55D22KKcs/b5z4Y/HD9TpIrMqeZRZlEejwm93n8IpgTfLdy58sVOk iZuuaGdYE44P0b+ma+VaTsnrZSH2Edy9gBOjVQVhImiQRdMoLkR4xtKjyuj5gPTr 2z76dO32ISbjSwCbKxa0QzGA67uxe9RFuaTyuSiBxtpWDBrvnExGJBy7FV91QJe7 LJvYxL79vbFaCkICxT4Vt407AX86cYRiV1auaukeqptqE/IYC7R8ixZWngX8cgK4 -----END CERTIFICATE-----Generated at Sun Oct 11 07:51:20 2026 by rpki-client