$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: jgVMyINtBmDIXtT+CrXbMwlEotfPXBqCOA2aIjTNLz4= Subject key identifier: 6A:0C:5F:97:EF:69:92:25:95:5E:31:C4:B8:01:9B:47:F3:8B:E4:8D Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584F749A86039578D1AB4A261700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B61D6 Signing time: Sat 10 Oct 2026 12:00:23 +0000 Manifest this update: Sat 10 Oct 2026 12:00:23 +0000 Manifest next update: Mon 12 Oct 2026 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: LzFAReVuX4/ZxJlltM5BaSdcAdExy2aVJUFeDcEJjQo=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: 3Rx7NTFfARhIugFEK1mmkaTaBiwwbhzATrl3Hhv2WX4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:9a:86:03:95:78:d1:ab:4a:26:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Oct 10 12:00:23 2026 GMT Not After : Oct 12 12:00:00 2026 GMT Subject: CN=30f1581c-a994-496b-a6f1-d60f928d1eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d7:39:76:4a:2a:d2:b7:8f:a6:52:50:71:a7: 5d:76:e7:67:9f:30:12:a2:51:64:db:8c:6b:23:2a: db:02:55:14:20:b3:66:f6:42:82:ac:83:ca:67:62: 81:4d:7c:93:2c:43:01:3f:ac:a6:f8:d6:f3:bb:ca: 55:8f:42:30:02:ff:f8:0f:b6:5b:8c:03:fd:af:9c: 8c:44:84:b7:55:96:5b:0a:62:56:02:b4:1e:18:36: 8e:3f:bd:46:c9:6d:3b:ae:e7:19:aa:ba:af:61:56: fb:71:f1:8c:d7:88:15:50:81:fe:84:e1:56:86:d1: 16:ff:33:5e:a0:16:bf:96:19:74:95:9f:5c:ff:30: 7c:de:45:61:f5:ae:19:50:31:35:d8:27:5a:46:f5: 6e:c5:ef:58:4b:b3:f2:4c:8b:d3:5f:eb:d9:1c:c6: 3f:32:77:03:9a:4a:f9:a1:c9:7c:a8:9f:c7:16:70: 48:47:61:bb:17:7f:ff:f4:25:c1:0d:91:7a:d0:f7: 21:d2:20:12:50:3f:45:b2:25:d5:04:33:84:f4:8d: 31:16:8a:9c:cc:a9:d6:43:19:40:6b:38:28:1d:d9: 97:2e:19:6c:13:a5:e1:d1:11:6b:99:3e:03:a1:5f: 5c:b0:e1:3b:7c:9e:4c:bf:ef:1c:3c:54:3e:01:a0: b0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0C:5F:97:EF:69:92:25:95:5E:31:C4:B8:01:9B:47:F3:8B:E4:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:de:bb:8f:fe:a1:8a:82:a8:f7:45:f5:99:f4:73:d4:67:3d: 1f:d9:2d:67:40:07:a5:1b:ed:88:aa:a4:81:fe:62:1e:f2:5c: c1:53:8a:94:46:74:ca:a3:fd:79:ef:d1:ae:04:b2:15:92:90: 6d:5f:1f:46:03:13:3e:e4:2f:72:af:41:b5:2f:8e:5c:48:fa: 0d:c1:e6:cd:e8:3d:90:2e:a0:2a:5b:12:a2:df:79:b4:2c:87: bb:0a:1a:7a:48:e8:41:b2:79:80:f6:f9:ec:83:19:b3:72:05: 4e:fb:b9:08:ed:f4:ed:a0:d7:a9:39:b5:6e:d2:78:d9:c9:98: 32:5d:d0:44:49:fa:05:04:03:03:23:71:27:ee:fc:e4:ab:10: 3e:a6:4d:5a:71:c4:55:0b:e9:e6:4f:2f:a4:51:62:8c:89:ef: ca:8a:e5:43:b8:59:c8:d5:a4:96:44:51:d0:27:19:36:86:5c: 45:f0:ac:7a:7b:ad:be:5c:fa:d2:ff:d9:c8:af:5c:78:94:d8: 8e:7a:b4:3f:d6:3c:bd:46:b9:6d:91:a8:c6:73:1d:f6:7d:47: c7:0c:c6:37:51:43:b9:f6:58:a9:30:d9:8b:21:a0:21:4c:4d: 5c:d9:66:25:a7:d5:ae:22:41:e0:67:02:6f:4c:01:0c:9b:d2: 7f:5d:da:ed -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE90moYDlXjRq0omFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI2MTAxMDEyMDAyM1oXDTI2MTAxMjEyMDAwMFowLzEtMCsGA1UEAxMk MzBmMTU4MWMtYTk5NC00OTZiLWE2ZjEtZDYwZjkyOGQxZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdc5dkoq0rePplJQcadddudnnzASolFk24xr IyrbAlUUILNm9kKCrIPKZ2KBTXyTLEMBP6ym+Nbzu8pVj0IwAv/4D7ZbjAP9r5yM RIS3VZZbCmJWArQeGDaOP71GyW07rucZqrqvYVb7cfGM14gVUIH+hOFWhtEW/zNe oBa/lhl0lZ9c/zB83kVh9a4ZUDE12CdaRvVuxe9YS7PyTIvTX+vZHMY/MncDmkr5 ocl8qJ/HFnBIR2G7F3//9CXBDZF60Pch0iASUD9FsiXVBDOE9I0xFoqczKnWQxlA azgoHdmXLhlsE6Xh0RFrmT4DoV9csOE7fJ5Mv+8cPFQ+AaCwnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGoMX5fvaZIllV4xxLgBm0fzi+SNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCY3ruP/qGKgqj3RfWZ9HPU Zz0f2S1nQAelG+2IqqSB/mIe8lzBU4qURnTKo/1579GuBLIVkpBtXx9GAxM+5C9y r0G1L45cSPoNwebN6D2QLqAqWxKi33m0LIe7Chp6SOhBsnmA9vnsgxmzcgVO+7kI 7fTtoNepObVu0njZyZgyXdBESfoFBAMDI3En7vzkqxA+pk1accRVC+nmTy+kUWKM ie/KiuVDuFnI1aSWRFHQJxk2hlxF8Kx6e62+XPrS/9nIr1x4lNiOerQ/1jy9Rrlt kajGcx32fUfHDMY3UUO59lipMNmLIaAhTE1c2WYlp9WuIkHgZwJvTAEMm9J/Xdrt -----END CERTIFICATE-----Generated at Sun Oct 11 11:22:24 2026 by rpki-client