$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft File: 3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft (raw, json) Hash identifier: Bl5bQt86+Z+uxESqVQln5/g/itKrydmp6jRcTBGNioo= Subject key identifier: 46:61:F6:9A:D2:52:56:BA:F4:34:D8:CC:E5:F2:20:89:39:EA:02:A7 Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F Certificate issuer: /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Certificate serial: 010D0C9F4328584F3D1E347870456041162B8680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft Manifest number: 010D0C9F432858480A52F9CC8E966E7AFF5A7C04 Signing time: Sun 20 Sep 2026 15:00:23 +0000 Manifest this update: Sun 20 Sep 2026 15:00:23 +0000 Manifest next update: Wed 23 Sep 2026 15:00:00 +0000 Files and hashes: 1: 3742509e-2411-38d0-abe6-6cdf13605db9.roa (hash: X509N3uCATTkq+hFXK0xclUuQcnqu9Be/985yckJcTw=) 2: 3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl (hash: BedR2FO7QplVSDwD6UPQs417f3IvRNz+ejFnOHnFp6g=) 3: 481ae520-6967-3ac1-8b79-c8677bf7adfa.roa (hash: GAhLAlnQtmNTFg7+juIRzrFTbOy1wCGb4rlsRz0VCyA=) 4: c2a2cad0-ce13-34a4-8e45-12517bc8090f.roa (hash: nxnsEEOis9uEuRGviloTevPlMKzfSQet75Rp1ahr0yQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3d:1e:34:78:70:45:60:41:16:2b:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Validity Not Before: Sep 20 15:00:23 2026 GMT Not After : Sep 23 15:00:00 2026 GMT Subject: CN=6f72c88e-ac64-4264-b007-b9f009aa73ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:68:82:82:2b:35:1f:5c:cc:9b:d0:8e:07:fe: 06:21:1c:a4:8f:6e:4a:fc:79:6f:2f:11:d2:08:1d: 40:1b:c7:0e:82:3e:c2:2f:cf:d1:b2:35:0d:db:22: 01:a4:b8:79:7e:22:42:11:fe:b2:50:c6:a0:48:a3: a8:9c:05:27:ec:68:ce:f2:ff:03:c1:a0:70:bf:ca: 9c:d2:ec:c8:2f:57:4e:f4:cf:8c:48:c0:e2:ad:83: ba:00:9d:6b:39:49:3c:7a:ce:bf:3b:86:ea:f8:95: 5d:7b:06:d9:d8:a4:14:c0:7b:d7:52:ce:19:9e:97: da:2e:ef:b8:3e:64:28:1c:87:93:dc:02:20:27:cb: 03:1b:78:aa:39:b3:f0:4c:b3:f4:c2:c8:53:16:d2: 81:a7:4c:f2:70:99:94:ef:11:8f:a5:b0:f0:7c:06: cd:b1:22:27:4e:87:fc:0f:0e:d4:aa:f4:d4:48:d0: 50:fe:74:f3:e4:93:2f:c9:0b:3e:10:dc:f3:4f:bf: 73:58:96:7f:8b:e4:37:54:6a:ba:6f:8e:98:e1:60: 8d:33:cd:a5:8f:04:07:e6:ea:30:26:8d:13:1b:73: d3:a7:26:a6:aa:18:e8:d7:80:e6:2b:a1:6f:40:b9: 5c:ec:83:ae:3c:01:01:b1:50:c5:92:64:4e:0f:c0: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:61:F6:9A:D2:52:56:BA:F4:34:D8:CC:E5:F2:20:89:39:EA:02:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl X509v3 Authority Key Identifier: keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:ae:ad:4e:56:96:90:e3:7e:bc:bd:03:3a:fb:0a:8a:3d:24: 1c:86:15:4e:b2:1d:e2:1f:15:ed:e5:41:c7:09:07:3c:42:59: 70:1e:25:a5:f8:8e:ec:5f:b4:0c:85:fb:45:22:3e:f0:95:c5: 26:89:98:40:40:84:c0:95:65:e2:05:35:73:54:b0:2f:a9:a4: 32:b8:ac:1a:02:4c:8d:92:ac:30:92:13:fc:97:52:79:c8:46: b9:3b:ee:79:e6:b6:f9:93:07:96:25:6c:c7:ca:76:0a:f1:0c: 52:15:4d:e0:e2:86:1c:d3:a4:3c:0b:81:e7:94:c9:3a:92:91: 46:37:f4:af:3d:30:2e:b6:47:84:49:7b:14:85:7c:15:5e:9c: 43:48:47:56:e6:09:36:4f:62:b8:6e:79:a7:10:7a:d9:33:89: 07:a0:e7:17:b9:b0:bc:93:c2:03:0a:b7:2f:4d:cc:68:42:2d: fc:88:17:6a:92:97:cf:e6:7a:1c:a0:e4:37:f2:d7:9e:5a:8d: a8:6f:c4:0f:a1:c8:61:7f:38:96:c6:2a:f2:c0:38:b5:3b:a1: bb:32:47:32:ed:54:69:cc:d1:90:eb:e0:2a:9d:e4:84:34:6c: f5:a5:cc:13:53:f6:62:86:7f:b7:4b:c1:d2:7d:43:b7:33:3a: a8:4e:a8:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE89HjR4cEVgQRYrhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5NTlhYmEtZWY2OS00YTU2LWFhNmItMWNhMWZhNWFm M2EwMB4XDTI2MDkyMDE1MDAyM1oXDTI2MDkyMzE1MDAwMFowLzEtMCsGA1UEAxMk NmY3MmM4OGUtYWM2NC00MjY0LWIwMDctYjlmMDA5YWE3M2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGiCgis1H1zMm9COB/4GIRykj25K/HlvLxHS CB1AG8cOgj7CL8/RsjUN2yIBpLh5fiJCEf6yUMagSKOonAUn7GjO8v8DwaBwv8qc 0uzIL1dO9M+MSMDirYO6AJ1rOUk8es6/O4bq+JVdewbZ2KQUwHvXUs4ZnpfaLu+4 PmQoHIeT3AIgJ8sDG3iqObPwTLP0wshTFtKBp0zycJmU7xGPpbDwfAbNsSInTof8 Dw7UqvTUSNBQ/nTz5JMvyQs+ENzzT79zWJZ/i+Q3VGq6b46Y4WCNM82ljwQH5uow Jo0TG3PTpyamqhjo14DmK6FvQLlc7IOuPAEBsVDFkmROD8DukQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEZh9prSUla69DTYzOXyIIk56gKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1 OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1YWYzYTAvM2E5NTlhYmEtZWY2OS00 YTU2LWFhNmItMWNhMWZhNWFmM2EwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2E5NTlhYmEtZWY2OS00YTU2LWFh NmItMWNhMWZhNWFmM2EwLzNhOTU5YWJhLWVmNjktNGE1Ni1hYTZiLTFjYTFmYTVh ZjNhMC5jcmwwHwYDVR0jBBgwFoAUGh9aapRds4UKQVOCNFyUClT0Oi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2Ex ZmE1YWYzYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCjrq1OVpaQ4368vQM6+wqK PSQchhVOsh3iHxXt5UHHCQc8QllwHiWl+I7sX7QMhftFIj7wlcUmiZhAQITAlWXi BTVzVLAvqaQyuKwaAkyNkqwwkhP8l1J5yEa5O+555rb5kweWJWzHynYK8QxSFU3g 4oYc06Q8C4HnlMk6kpFGN/SvPTAutkeESXsUhXwVXpxDSEdW5gk2T2K4bnmnEHrZ M4kHoOcXubC8k8IDCrcvTcxoQi38iBdqkpfP5nocoOQ38teeWo2ob8QPochhfziW xirywDi1O6G7Mkcy7VRpzNGQ6+AqneSENGz1pcwTU/Zihn+3S8HSfUO3MzqoTqhe -----END CERTIFICATE-----Generated at Mon Sep 21 15:59:20 2026 by rpki-client