$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.mft File: ca3bedc6-e937-4195-9e25-d048122e2f60.mft (raw, json) Hash identifier: 829J0xySOS3FMXNz15zdmkNy9KT31gcIKBzmDEwa2rU= Subject key identifier: C3:4C:61:28:9D:E0:AF:68:6D:18:6F:BC:2B:91:93:A7:D8:0C:68:E8 Authority key identifier: AB:2C:FD:17:8D:D9:EE:A8:16:10:19:82:D1:00:56:11:0C:28:75:AF Certificate issuer: /CN=ca3bedc6-e937-4195-9e25-d048122e2f60 Certificate serial: 010D0C9F4328584FD97481DC71D63622B77424C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.mft Manifest number: 010D0C9F4328584EF48D509EA2D0EC5C04694C57 Signing time: Sun 15 Nov 2026 15:00:23 +0000 Manifest this update: Sun 15 Nov 2026 15:00:23 +0000 Manifest next update: Wed 18 Nov 2026 15:00:00 +0000 Files and hashes: 1: 1f2a718c-3fa0-3b4d-988f-830f68d52e72.roa (hash: mOzTBf/6izPQY9fmcEn8wE+tKiz9a/PUAwI1k1GXG0o=) 2: 8bb572f6-47a7-3ca3-977d-d0a0b13d273f.roa (hash: f581cyiUp6dyD1ctnUVPWQuFJb40qDv4xDIzZCAt/ec=) 3: 9af30d6e-07ee-3462-80f0-bd8ecaad51ce.roa (hash: reiyzmuMCQuLuvHWZ9CxJjzSAJEcfDJkoqcxVWwKzFk=) 4: ca3bedc6-e937-4195-9e25-d048122e2f60.crl (hash: NvgTns7D/IcUC//9w+vLDmk2+XacU4Ze3OcMfyRYVpI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d9:74:81:dc:71:d6:36:22:b7:74:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3bedc6-e937-4195-9e25-d048122e2f60 Validity Not Before: Nov 15 15:00:23 2026 GMT Not After : Nov 18 15:00:00 2026 GMT Subject: CN=9bc16894-c9f0-4a73-982f-e350c47dc14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c3:53:07:e5:c9:99:42:5b:13:87:e6:9b:66: 9f:25:99:66:f2:ad:f8:c3:53:68:3f:48:a1:6f:1c: 1b:f0:83:84:64:a7:f2:05:94:51:cd:45:3b:e7:66: 67:ca:64:b9:9e:23:e6:91:ff:c3:4d:90:a4:96:f9: c8:0c:2e:06:2c:4c:dc:7e:79:70:da:51:e2:5f:ad: ca:78:57:87:97:59:c6:45:d0:b4:26:40:7b:52:c9: 9e:b7:47:e9:cb:50:ad:e2:b6:61:f1:71:63:cc:99: 3b:40:12:0d:ab:2f:71:1b:84:f2:68:f7:98:d5:28: ea:91:4a:8c:02:06:8d:38:49:25:0a:aa:2c:65:e5: 9d:ec:01:72:dd:f4:62:cd:c7:31:33:be:72:64:92: 2f:63:9e:29:b0:c0:8b:27:76:1a:1f:e7:6e:2a:40: 2c:ae:41:0d:e5:91:66:9f:52:a0:8b:c2:55:63:4b: 32:73:ed:50:dd:cd:ca:b4:62:d4:b8:bc:2d:b0:49: 22:28:4f:05:c0:dc:0d:99:2e:19:c8:62:23:b9:12: e0:1d:3d:79:2e:ef:9d:92:ed:37:8c:82:ab:d6:73: 67:61:72:ae:39:c5:24:e3:7d:a1:8c:49:c3:8a:0c: 54:e0:7f:fd:0a:d3:c8:89:f2:2c:e8:f5:f3:88:b9: 93:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4C:61:28:9D:E0:AF:68:6D:18:6F:BC:2B:91:93:A7:D8:0C:68:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.crl X509v3 Authority Key Identifier: keyid:AB:2C:FD:17:8D:D9:EE:A8:16:10:19:82:D1:00:56:11:0C:28:75:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:20:5a:97:cf:a3:c5:83:80:3b:d8:3d:5f:f4:fe:f3:f5:b9: 3e:26:77:06:02:5f:73:6e:11:8f:83:36:87:49:c7:0a:75:50: 80:00:57:9c:0a:6f:6a:68:92:e0:c6:ae:af:8c:17:85:bf:47: 8f:7d:08:4e:92:b5:7b:5e:80:86:c8:ec:82:47:c1:d5:e4:e2: 5a:6a:3d:dd:59:8e:3c:97:83:99:4c:f4:62:eb:27:2f:13:44: 01:04:4f:70:62:98:5d:39:a1:05:fd:21:e3:65:ae:92:53:34: 90:40:a4:d8:90:55:33:88:41:d8:25:01:d2:25:d6:df:fc:96: bf:e3:f4:f5:9f:e0:e4:53:a6:8e:b1:66:e2:66:23:ee:8d:8e: 9e:00:29:6a:d7:bb:2d:cb:90:27:e8:6e:30:0f:4e:56:a6:6c: 6e:36:ad:7b:dd:ad:0a:d6:77:49:83:7e:76:54:5e:b0:91:3b: eb:a4:30:b6:0d:ac:11:bc:e2:c6:94:5a:aa:88:d0:0c:0d:bf: c0:9b:db:8c:8b:10:72:41:cd:dc:67:90:91:0d:38:38:f0:60: f7:d3:53:fb:f3:c7:4b:36:c4:cd:19:53:28:38:14:ba:46:da: 5d:07:ed:3b:2a:10:80:b8:3b:93:4d:8a:6e:92:dd:85:a8:27: 57:5a:61:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/ZdIHccdY2Ird0JMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EzYmVkYzYtZTkzNy00MTk1LTllMjUtZDA0ODEyMmUy ZjYwMB4XDTI2MTExNTE1MDAyM1oXDTI2MTExODE1MDAwMFowLzEtMCsGA1UEAxMk OWJjMTY4OTQtYzlmMC00YTczLTk4MmYtZTM1MGM0N2RjMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsNTB+XJmUJbE4fmm2afJZlm8q34w1NoP0ih bxwb8IOEZKfyBZRRzUU752ZnymS5niPmkf/DTZCklvnIDC4GLEzcfnlw2lHiX63K eFeHl1nGRdC0JkB7Usmet0fpy1Ct4rZh8XFjzJk7QBINqy9xG4TyaPeY1SjqkUqM AgaNOEklCqosZeWd7AFy3fRizccxM75yZJIvY54psMCLJ3YaH+duKkAsrkEN5ZFm n1Kgi8JVY0syc+1Q3c3KtGLUuLwtsEkiKE8FwNwNmS4ZyGIjuRLgHT15Lu+dku03 jIKr1nNnYXKuOcUk432hjEnDigxU4H/9CtPIifIs6PXziLmTMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMNMYSid4K9obRhvvCuRk6fYDGjoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9jYTNi ZWRjNi1lOTM3LTQxOTUtOWUyNS1kMDQ4MTIyZTJmNjAvY2EzYmVkYzYtZTkzNy00 MTk1LTllMjUtZDA0ODEyMmUyZjYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvY2EzYmVkYzYtZTkzNy00MTk1LTll MjUtZDA0ODEyMmUyZjYwL2NhM2JlZGM2LWU5MzctNDE5NS05ZTI1LWQwNDgxMjJl MmY2MC5jcmwwHwYDVR0jBBgwFoAUqyz9F43Z7qgWEBmC0QBWEQwoda8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9jYTNiZWRjNi1lOTM3LTQxOTUtOWUyNS1kMDQ4 MTIyZTJmNjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUIFqXz6PFg4A72D1f9P7z 9bk+JncGAl9zbhGPgzaHSccKdVCAAFecCm9qaJLgxq6vjBeFv0ePfQhOkrV7XoCG yOyCR8HV5OJaaj3dWY48l4OZTPRi6ycvE0QBBE9wYphdOaEF/SHjZa6SUzSQQKTY kFUziEHYJQHSJdbf/Ja/4/T1n+DkU6aOsWbiZiPujY6eAClq17sty5An6G4wD05W pmxuNq173a0K1ndJg352VF6wkTvrpDC2DawRvOLGlFqqiNAMDb/Am9uMixByQc3c Z5CRDTg48GD301P788dLNsTNGVMoOBS6RtpdB+07KhCAuDuTTYpukt2FqCdXWmER -----END CERTIFICATE-----Generated at Sun Nov 15 21:47:20 2026 by rpki-client