$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft File: 3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft (raw, json) Hash identifier: XfVPKhi+Z4obewb45qu1SSJXQNqSwIvXmB4iqKOt7u4= Subject key identifier: 3F:95:04:54:91:89:E0:CB:18:0A:F5:D7:24:83:04:00:74:71:C0:E4 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584F3D777DE4D15F35FFFA298F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft Manifest number: 010D0C9F43285848DEA6AA7962B2F4D6BC028D75 Signing time: Sun 20 Sep 2026 18:00:23 +0000 Manifest this update: Sun 20 Sep 2026 18:00:23 +0000 Manifest next update: Wed 23 Sep 2026 18:00:00 +0000 Files and hashes: 1: 1f5fab24-6ae3-369a-845b-2b5879489f6a.roa (hash: 1VzgTiryJ4i3c1Fg4sxZTXRkKLAYV0svyD7+cfQAMzI=) 2: 3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl (hash: 3tVdu7Ovee7mbvbRrWKE6RPsaZtGwkTYgwn3XVYNg4g=) 3: 5f3dcef5-0406-33ce-8673-8f04413c8cba.roa (hash: ChneQB6VxLyqHy3H4h7FycGbH51KGHD3y+pQGIVmITQ=) 4: a98d5494-4572-385b-afc9-1ffafc221b11.roa (hash: gTUq/mMwCDAWu+gWyIhETQkFdXpRniX/6NFbAwncoTA=) 5: ce971edc-2b71-3b67-be96-0924eca1252b.asa (hash: oe5taR7qmmEB8uKu20odEKxWIGUqwVMz9BvdH0e1Pws=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3d:77:7d:e4:d1:5f:35:ff:fa:29:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Sep 20 18:00:23 2026 GMT Not After : Sep 23 18:00:00 2026 GMT Subject: CN=9ba39a3d-c449-40be-a223-f42006da9421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:b3:33:4d:2c:56:b1:ec:ad:fa:f0:07:8a: e3:af:b2:5c:ce:24:4a:31:58:c4:e1:64:40:5e:ab: ed:25:d1:f7:ad:6b:19:4a:d9:de:3e:a4:51:26:12: 7b:f0:67:5f:5d:f3:b6:6f:c3:bf:fc:ab:d4:d0:ec: 00:56:60:f6:29:6f:08:ac:d0:72:42:55:6d:a0:bb: 1d:81:5b:2f:ed:6c:31:99:17:49:03:47:29:90:3d: e0:f8:8d:97:28:a3:70:65:02:67:f1:dc:bc:e4:ee: 4c:60:e4:b7:ad:f2:4f:9b:b8:17:98:ec:54:4a:f4: f3:af:a6:31:ff:3f:8c:6b:a2:3a:b4:7d:f8:77:16: 8e:b1:39:6c:10:1d:9f:f7:04:66:7b:4f:2a:00:91: 3e:b0:ae:b8:00:db:52:ab:3c:f3:ea:4c:22:b4:a4: 70:0f:d3:d0:a0:04:eb:f7:db:a1:0e:de:2e:8e:99: 13:4e:a7:5a:6f:18:f0:87:bc:ad:2e:30:8e:1d:ca: 8c:73:2d:84:ec:f5:06:a2:0d:34:fa:e8:6c:0f:0c: a1:15:a1:4e:04:b7:c5:17:ed:0f:7e:6a:9f:7f:ac: 31:1c:11:2a:72:b8:a7:4f:68:1c:d2:de:df:6e:c6: 6f:b2:8b:63:24:9d:0c:fb:c4:73:41:30:0b:3a:85: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:95:04:54:91:89:E0:CB:18:0A:F5:D7:24:83:04:00:74:71:C0:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:0d:fb:c7:5a:9f:22:6b:fe:6c:9c:16:6d:bf:84:d0:68:a9: ba:71:5a:09:10:cf:6d:34:91:1b:b5:67:90:f8:c7:31:55:ca: fa:5e:de:a3:99:e6:d1:f8:5b:9c:c2:52:92:ef:b9:68:e1:34: 42:e0:ec:ca:18:af:2d:3b:4a:54:ac:ea:88:19:29:b6:6a:e2: 3b:62:0b:10:2c:63:12:28:e4:ff:38:d0:d8:c8:7f:81:fb:60: a4:ba:35:8f:97:b7:79:e2:a1:ae:3d:7a:71:e5:34:fe:8c:93: 5a:e3:f8:34:c3:6a:45:ed:58:4a:6f:34:d1:25:27:46:34:05: e2:d4:3b:5f:14:2f:80:c2:7f:70:b7:5e:26:00:6e:18:c5:40: 6c:95:5f:18:99:5f:fc:5d:50:60:ef:08:81:d3:aa:f7:b4:71: bf:03:f3:79:c0:96:10:4f:99:60:79:7d:82:6b:37:c7:a7:ff: b0:6e:25:3e:1f:53:99:a5:11:10:41:97:ab:ca:d0:51:f6:33: 8f:03:ce:41:da:c7:8a:a0:03:ab:62:5c:20:7a:a3:d9:86:52: 3d:77:67:f8:19:85:cf:a3:66:c3:0c:bf:11:6b:c7:f2:57:42: ee:d0:2f:50:17:29:e9:52:50:98:81:70:ac:a5:1a:a2:af:45: db:72:a5:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE89d33k0V81//opj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI2MDkyMDE4MDAyM1oXDTI2MDkyMzE4MDAwMFowLzEtMCsGA1UEAxMk OWJhMzlhM2QtYzQ0OS00MGJlLWEyMjMtZjQyMDA2ZGE5NDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpGzM00sVrHsrfrwB4rjr7JcziRKMVjE4WRA XqvtJdH3rWsZStnePqRRJhJ78GdfXfO2b8O//KvU0OwAVmD2KW8IrNByQlVtoLsd gVsv7WwxmRdJA0cpkD3g+I2XKKNwZQJn8dy85O5MYOS3rfJPm7gXmOxUSvTzr6Yx /z+Ma6I6tH34dxaOsTlsEB2f9wRme08qAJE+sK64ANtSqzzz6kwitKRwD9PQoATr 99uhDt4ujpkTTqdabxjwh7ytLjCOHcqMcy2E7PUGog00+uhsDwyhFaFOBLfFF+0P fmqff6wxHBEqcrinT2gc0t7fbsZvsotjJJ0M+8RzQTALOoVHZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD+VBFSRieDLGAr11ySDBAB0ccDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvMzY4OWI5Y2UtMDg5ZC00 MTM3LWIxNGQtN2U0Y2QxNWU1M2E1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyDfvHWp8ia/5snBZtv4TQ aKm6cVoJEM9tNJEbtWeQ+McxVcr6Xt6jmebR+FucwlKS77lo4TRC4OzKGK8tO0pU rOqIGSm2auI7YgsQLGMSKOT/ONDYyH+B+2CkujWPl7d54qGuPXpx5TT+jJNa4/g0 w2pF7VhKbzTRJSdGNAXi1DtfFC+Awn9wt14mAG4YxUBslV8YmV/8XVBg7wiB06r3 tHG/A/N5wJYQT5lgeX2CazfHp/+wbiU+H1OZpREQQZerytBR9jOPA85B2seKoAOr YlwgeqPZhlI9d2f4GYXPo2bDDL8Ra8fyV0Lu0C9QFynpUlCYgXCspRqir0XbcqX0 -----END CERTIFICATE-----Generated at Mon Sep 21 13:25:24 2026 by rpki-client