$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft File: 3e9fb25a-438f-4e1d-a136-5c878d065c24.mft (raw, json) Hash identifier: BCQNZlsosTlTAI71oa6p3o3LbCTqMLtwYmjD/v6L4bk= Subject key identifier: 82:A0:67:BC:8C:74:B3:36:85:9F:01:7D:B6:E5:2E:A2:B6:E7:FD:71 Authority key identifier: D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04 Certificate issuer: /CN=3e9fb25a-438f-4e1d-a136-5c878d065c24 Certificate serial: 010D0C9F4328584F407DC57FB342445B070CD220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft Manifest number: 010D0C9F432858488B7B09E7C4EF76CBED14D3D6 Signing time: Mon 21 Sep 2026 20:00:23 +0000 Manifest this update: Mon 21 Sep 2026 20:00:23 +0000 Manifest next update: Wed 23 Sep 2026 20:00:00 +0000 Files and hashes: 1: 3e9fb25a-438f-4e1d-a136-5c878d065c24.crl (hash: ty95BIOo7wqTeow0YFbSQ8wk8Z3f5Wp+C+W8bnlPDGQ=) 2: 58dadb05-4845-3a41-9b2f-663a09e0cfff.roa (hash: GUxb+dVuQYPhTnTQxC8WUIc8N0E95pcLJaMphLmlojY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:7d:c5:7f:b3:42:44:5b:07:0c:d2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9fb25a-438f-4e1d-a136-5c878d065c24 Validity Not Before: Sep 21 20:00:23 2026 GMT Not After : Sep 23 20:00:00 2026 GMT Subject: CN=40f7302b-892f-4595-b9fd-8ae290fe0335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:37:52:93:29:2f:0a:c3:28:64:34:49:73:ab: ec:49:5d:75:d4:d4:ab:9e:bf:df:ff:fb:b8:27:db: 06:ae:f8:50:8b:d4:17:2d:cb:af:fc:8e:85:ce:2c: dd:ca:45:cb:16:08:ed:30:3b:fc:cc:2e:7e:1c:f6: f7:26:90:1d:c3:e1:c8:bb:6f:88:bd:57:8b:fe:17: 93:2d:e1:fc:65:71:d9:de:9b:4b:1a:71:e3:92:b7: a3:53:45:e9:97:9a:7f:40:97:a9:ad:d2:24:73:1d: a3:60:c7:a8:46:cc:7e:c7:01:ad:3f:8f:32:e6:47: 82:72:b6:f1:b5:3e:ae:b3:b9:5e:81:22:26:14:7a: b5:86:74:01:47:48:f8:cb:b1:be:2d:be:d5:fb:31: 59:8e:97:76:e1:87:8a:ff:b4:30:85:fb:f9:42:4c: 29:3e:a3:bc:bc:87:8b:b1:9a:e6:1d:5c:a8:35:77: 08:37:7c:04:73:44:40:e2:de:ce:ef:c4:3d:67:21: 7e:bc:dd:66:e9:30:5c:93:b6:c4:17:21:78:ca:1b: b8:ff:80:72:51:dc:93:bd:c2:65:eb:39:bd:78:31: d9:28:4a:9b:79:41:32:38:3c:4d:04:05:bb:43:c9: e8:5a:df:b3:26:0f:b6:08:8a:08:37:85:53:75:7a: 7d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A0:67:BC:8C:74:B3:36:85:9F:01:7D:B6:E5:2E:A2:B6:E7:FD:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl X509v3 Authority Key Identifier: keyid:D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c0:e5:34:23:17:4f:be:32:17:1b:8f:49:0e:95:be:3a:0b: 4f:c0:2d:da:cd:68:fa:89:0e:0b:1e:5c:7e:7f:a0:56:71:1e: ee:2c:9d:df:52:02:b7:5a:b6:10:e9:f3:5d:bc:ee:70:00:51: 98:b6:9a:c1:0c:43:1d:a6:b8:ec:97:98:64:af:60:da:d5:32: 23:d9:ec:42:39:52:91:37:80:c3:8b:ca:dc:1d:e5:48:5e:b0: 57:47:59:b2:0e:06:d7:ff:97:35:c6:59:57:2f:57:0a:1a:44: 3c:ae:5f:4b:06:22:9c:63:df:55:88:b6:a4:f1:22:1b:f3:d5: ea:76:3d:3d:41:4c:c8:3b:ad:d6:35:72:40:94:f1:21:26:f5: 76:44:2c:52:0c:6f:2d:2a:fd:93:5d:b8:00:3b:81:0a:60:7b: 0f:1d:40:eb:9c:6e:c1:66:37:e4:5e:a0:9e:f7:b6:66:f2:1f: 53:93:36:dd:54:4d:87:8e:63:6c:d2:9a:57:14:4b:25:8d:d5: ec:73:d2:43:f8:ba:06:55:37:6e:90:de:8e:8c:c8:5a:7f:28: 37:8e:fd:b8:66:66:7e:05:eb:f8:26:ea:bd:3e:72:e4:0b:ef: e4:20:e9:a8:fc:5d:ee:d2:11:51:65:65:08:30:50:e6:be:9f: 8d:d2:3c:aa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9AfcV/s0JEWwcM0iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U5ZmIyNWEtNDM4Zi00ZTFkLWExMzYtNWM4NzhkMDY1 YzI0MB4XDTI2MDkyMTIwMDAyM1oXDTI2MDkyMzIwMDAwMFowLzEtMCsGA1UEAxMk NDBmNzMwMmItODkyZi00NTk1LWI5ZmQtOGFlMjkwZmUwMzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDdSkykvCsMoZDRJc6vsSV111NSrnr/f//u4 J9sGrvhQi9QXLcuv/I6FzizdykXLFgjtMDv8zC5+HPb3JpAdw+HIu2+IvVeL/heT LeH8ZXHZ3ptLGnHjkrejU0Xpl5p/QJeprdIkcx2jYMeoRsx+xwGtP48y5keCcrbx tT6us7legSImFHq1hnQBR0j4y7G+Lb7V+zFZjpd24YeK/7Qwhfv5QkwpPqO8vIeL sZrmHVyoNXcIN3wEc0RA4t7O78Q9ZyF+vN1m6TBck7bEFyF4yhu4/4ByUdyTvcJl 6zm9eDHZKEqbeUEyODxNBAW7Q8noWt+zJg+2CIoIN4VTdXp9lwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIKgZ7yMdLM2hZ8BfbblLqK25/1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zZTlm YjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3OGQwNjVjMjQvM2U5ZmIyNWEtNDM4Zi00 ZTFkLWExMzYtNWM4NzhkMDY1YzI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2U5ZmIyNWEtNDM4Zi00ZTFkLWEx MzYtNWM4NzhkMDY1YzI0LzNlOWZiMjVhLTQzOGYtNGUxZC1hMTM2LTVjODc4ZDA2 NWMyNC5jcmwwHwYDVR0jBBgwFoAU0w52saMVmAH+L59D/FFDCjr66gQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zZTlmYjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3 OGQwNjVjMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqwOU0IxdPvjIXG49JDpW+ OgtPwC3azWj6iQ4LHlx+f6BWcR7uLJ3fUgK3WrYQ6fNdvO5wAFGYtprBDEMdprjs l5hkr2Da1TIj2exCOVKRN4DDi8rcHeVIXrBXR1myDgbX/5c1xllXL1cKGkQ8rl9L BiKcY99ViLak8SIb89Xqdj09QUzIO63WNXJAlPEhJvV2RCxSDG8tKv2TXbgAO4EK YHsPHUDrnG7BZjfkXqCe97Zm8h9TkzbdVE2HjmNs0ppXFEsljdXsc9JD+LoGVTdu kN6OjMhafyg3jv24ZmZ+Bev4Juq9PnLkC+/kIOmo/F3u0hFRZWUIMFDmvp+N0jyq -----END CERTIFICATE-----Generated at Tue Sep 22 19:27:19 2026 by rpki-client