$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: cDL7g1soBvDzJqxGNP3tHCqty1MVDP6M6qlKomZ83Vw= Subject key identifier: AB:E3:30:04:8B:26:99:39:EF:28:00:16:BB:24:41:3C:F4:BC:B7:C4 Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584D4BD6D82F57FE843465935EE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B610B Signing time: Thu 26 Mar 2026 12:00:03 +0000 Manifest this update: Thu 26 Mar 2026 12:00:03 +0000 Manifest next update: Sat 28 Mar 2026 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: 3M9sRBZkHNyD1PXlk9ozItr19PZWmrqICVfcNjA6w3g=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: ek8o+Bx+mxUQQy+VM4h2ATRj3U0ydQ/L1LGlLjnoYCc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:d6:d8:2f:57:fe:84:34:65:93:5e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Mar 26 12:00:03 2026 GMT Not After : Mar 28 12:00:00 2026 GMT Subject: CN=0a9a6c45-b8a2-415b-a759-8d4cef88ccc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:df:84:5b:02:17:72:cb:76:db:c4:1c:b8: b8:47:0b:42:98:04:bc:16:9c:66:4f:c0:d4:01:ab: b5:eb:08:8c:b5:a1:d4:25:fa:11:3d:8f:82:d4:ab: 8e:e9:3a:db:e4:31:b6:ff:89:ff:0a:ab:87:78:8e: 83:b4:24:47:28:f0:17:5c:40:8a:3b:c2:8f:7c:a2: d4:a3:0e:a0:61:2c:cb:a8:76:fd:13:f3:14:dd:0c: 76:d5:60:ff:50:cd:9b:1b:30:97:55:72:56:fd:43: dc:92:49:bd:ca:7b:a5:4f:d2:de:40:98:86:da:05: e0:b2:85:4e:e0:3c:20:65:e8:79:60:be:dc:75:d2: e0:36:48:ca:3f:5d:c1:bc:f8:d6:3d:98:fa:52:e9: 50:ff:75:cd:56:38:a7:8b:4e:3a:81:6e:9e:88:e1: e4:95:07:d6:88:22:c6:f7:03:28:03:49:41:7f:c4: 6a:a4:c3:32:16:36:5f:b0:f9:a5:51:ab:09:9e:80: 31:7f:66:00:a4:10:34:0e:39:99:14:ef:97:82:bd: d2:5b:1f:b4:cd:dd:87:d7:1a:42:de:10:76:c7:90: aa:7b:1e:c0:77:05:58:13:f1:63:98:93:cd:0b:a2: 3f:5e:15:10:97:90:dd:b1:42:28:04:11:a0:44:8a: 82:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E3:30:04:8B:26:99:39:EF:28:00:16:BB:24:41:3C:F4:BC:B7:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:68:30:3f:13:97:4a:8b:92:b0:9a:8e:9a:44:ee:04:9b:7d: f6:5a:24:bd:fe:6c:06:48:c2:5d:36:48:db:49:55:f1:a2:e5: 82:3b:69:30:40:23:f5:0c:b8:49:0d:a5:22:3b:d4:8d:8a:84: 26:7e:99:a7:c1:6f:ad:05:b8:47:be:bb:3d:11:ee:d0:95:89: 04:d4:e9:02:ed:24:9e:de:d6:3e:02:4c:94:e6:cf:f1:32:98: 77:a4:3d:43:1e:12:9f:57:cd:be:f7:be:bd:cb:64:18:7e:d8: 06:51:91:9d:fd:6e:43:7d:ae:70:df:51:58:56:70:44:f3:c6: 7b:54:07:63:87:af:da:7b:c2:01:e3:de:5f:53:16:55:56:03: 3c:54:29:3a:7c:89:85:c6:38:9c:67:4e:f3:7f:27:bc:00:7a: c7:9c:3b:98:63:b9:90:01:df:5d:00:60:c5:d7:3c:fd:40:6d: a7:7a:31:0e:d5:4a:45:45:e8:cf:4a:a2:7e:9e:12:78:d8:47: d3:45:a9:b4:92:37:9c:f0:65:68:e6:39:e2:3a:9b:77:a5:60: 15:84:25:a4:11:64:5d:ef:1e:8d:07:29:26:4f:7d:ca:c2:3f: c4:e5:26:19:32:4e:06:db:fd:f1:48:a4:05:41:15:db:08:7d: 6d:95:92:86 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1L1tgvV/6ENGWTXuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI2MDMyNjEyMDAwM1oXDTI2MDMyODEyMDAwMFowLzEtMCsGA1UEAxMk MGE5YTZjNDUtYjhhMi00MTViLWE3NTktOGQ0Y2VmODhjY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzHfhFsCF3LLdtvEHLi4RwtCmAS8FpxmT8DU Aau16wiMtaHUJfoRPY+C1KuO6Trb5DG2/4n/CquHeI6DtCRHKPAXXECKO8KPfKLU ow6gYSzLqHb9E/MU3Qx21WD/UM2bGzCXVXJW/UPckkm9ynulT9LeQJiG2gXgsoVO 4DwgZeh5YL7cddLgNkjKP13BvPjWPZj6UulQ/3XNVjini046gW6eiOHklQfWiCLG 9wMoA0lBf8RqpMMyFjZfsPmlUasJnoAxf2YApBA0DjmZFO+Xgr3SWx+0zd2H1xpC 3hB2x5Cqex7AdwVYE/FjmJPNC6I/XhUQl5DdsUIoBBGgRIqC2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKvjMASLJpk57ygAFrskQTz0vLfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC9aDA/E5dKi5Kwmo6aRO4E m332WiS9/mwGSMJdNkjbSVXxouWCO2kwQCP1DLhJDaUiO9SNioQmfpmnwW+tBbhH vrs9Ee7QlYkE1OkC7SSe3tY+AkyU5s/xMph3pD1DHhKfV82+9769y2QYftgGUZGd /W5Dfa5w31FYVnBE88Z7VAdjh6/ae8IB495fUxZVVgM8VCk6fImFxjicZ07zfye8 AHrHnDuYY7mQAd9dAGDF1zz9QG2nejEO1UpFRejPSqJ+nhJ42EfTRam0kjec8GVo 5jniOpt3pWAVhCWkEWRd7x6NBykmT33Kwj/E5SYZMk4G2/3xSKQFQRXbCH1tlZKG -----END CERTIFICATE-----Generated at Thu Mar 26 18:36:08 2026 by rpki-client