$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: TPgey4RjB+1BQrrPswkSV/T7CTQOnz04dOQeeqbGA1A= Subject key identifier: F2:50:7D:CA:FB:C4:E4:15:D7:B9:D7:1F:63:BF:87:AF:10:B1:5D:6F Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584DCF0D022B00E55B6124557A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B613A Signing time: Tue 12 May 2026 12:00:03 +0000 Manifest this update: Tue 12 May 2026 12:00:03 +0000 Manifest next update: Fri 15 May 2026 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: 3M9sRBZkHNyD1PXlk9ozItr19PZWmrqICVfcNjA6w3g=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: pYow3Zy+YEeaYaKMt1F52PsSkPkJCEBpDUzlCDlO0fY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:0d:02:2b:00:e5:5b:61:24:55:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: May 12 12:00:03 2026 GMT Not After : May 15 12:00:00 2026 GMT Subject: CN=5c3bc035-7b79-4d28-a6e5-94a1cc13e2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:c3:df:23:28:82:b3:cb:c8:22:41:fc:3b: d4:bb:9a:6d:c1:be:40:1a:87:d9:95:c3:c1:6a:b1: 4c:9b:f2:d7:b0:e1:31:cc:ed:30:c1:f2:5f:f9:55: 15:d3:ea:84:88:4c:fd:c1:64:af:13:7f:8a:28:00: e1:ca:7b:b8:30:e1:9e:5a:4a:12:c3:d1:36:2d:17: 26:d0:86:fc:3d:32:ed:cb:07:99:af:07:82:7a:b2: 85:37:2a:3d:96:ba:fd:8c:e2:25:d5:1a:bb:1a:65: d2:79:a1:72:8c:8f:91:8f:08:9b:66:72:73:83:45: 29:d6:d6:4b:6e:49:9b:b6:05:1a:7c:ab:42:2c:15: 7a:0f:03:a7:b3:ba:18:ec:50:a7:82:75:fb:67:3e: ea:44:97:a7:89:9f:c8:4b:c3:19:48:a6:9a:28:9a: da:ba:cb:83:8b:73:40:ad:a0:89:0c:62:d8:a1:46: e3:83:f9:ca:6b:48:a8:d2:74:4f:19:5c:b7:08:e6: 94:49:4f:f0:c8:25:f4:0d:6d:22:58:79:88:a1:88: 9c:a4:89:6e:c7:b3:13:0d:7b:75:4e:c1:5c:fd:c8: 3a:44:ff:12:6a:16:32:8a:f2:ad:d5:bc:b7:b8:38: 5b:3c:34:cf:70:37:ea:9b:34:6e:ba:8c:1f:b5:0e: f2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:50:7D:CA:FB:C4:E4:15:D7:B9:D7:1F:63:BF:87:AF:10:B1:5D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:11:be:73:2f:43:ab:3a:59:25:b1:f8:64:a6:62:20:33:92: 59:ce:24:5f:9b:48:b1:7f:1d:1b:ac:d1:38:eb:66:f2:c1:37: 00:ac:93:23:f4:65:fb:9d:10:8f:6a:4a:1d:6d:e7:3f:78:8a: b3:38:95:6b:65:b1:ac:8d:e3:d9:c9:f9:0b:87:d3:58:ed:57: 93:41:a1:a0:57:5b:a7:2f:a3:31:05:72:84:ed:a5:e7:f7:a1: c7:4e:30:36:40:1a:bf:0b:19:c8:41:fd:dd:ad:cc:3b:97:2e: 70:5e:1c:2f:44:15:fa:b2:54:17:a6:0c:28:73:6a:01:d0:0a: 56:3f:12:ed:39:ec:23:0d:1c:3a:d7:14:0c:a8:65:8f:40:bb: 4e:1b:a4:88:88:d9:e6:10:18:f7:2d:2f:52:e0:36:e2:eb:27: f2:cb:2d:f4:77:c2:b5:e2:01:64:46:bd:e0:a8:b4:49:0a:b5: 07:d9:29:b3:1b:a7:67:ee:d0:eb:e1:44:23:91:f1:73:cf:6e: 60:f1:b1:1a:31:41:36:d6:f9:93:82:8c:e3:df:44:7c:1f:13: be:1d:20:15:56:f6:f4:2a:23:f7:95:52:d4:cd:f5:14:48:91: 39:e6:71:56:04:54:10:11:a5:21:c6:ce:27:bf:c8:a6:53:d4: ca:f0:b7:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PDQIrAOVbYSRVegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI2MDUxMjEyMDAwM1oXDTI2MDUxNTEyMDAwMFowLzEtMCsGA1UEAxMk NWMzYmMwMzUtN2I3OS00ZDI4LWE2ZTUtOTRhMWNjMTNlMmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX7D3yMogrPLyCJB/DvUu5ptwb5AGofZlcPB arFMm/LXsOExzO0wwfJf+VUV0+qEiEz9wWSvE3+KKADhynu4MOGeWkoSw9E2LRcm 0Ib8PTLtyweZrweCerKFNyo9lrr9jOIl1Rq7GmXSeaFyjI+RjwibZnJzg0Up1tZL bkmbtgUafKtCLBV6DwOns7oY7FCngnX7Zz7qRJeniZ/IS8MZSKaaKJrausuDi3NA raCJDGLYoUbjg/nKa0io0nRPGVy3COaUSU/wyCX0DW0iWHmIoYicpIlux7MTDXt1 TsFc/cg6RP8SahYyivKt1by3uDhbPDTPcDfqmzRuuowftQ7ySwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPJQfcr7xOQV17nXH2O/h68QsV1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+Eb5zL0OrOlklsfhkpmIg M5JZziRfm0ixfx0brNE462bywTcArJMj9GX7nRCPakodbec/eIqzOJVrZbGsjePZ yfkLh9NY7VeTQaGgV1unL6MxBXKE7aXn96HHTjA2QBq/CxnIQf3drcw7ly5wXhwv RBX6slQXpgwoc2oB0ApWPxLtOewjDRw61xQMqGWPQLtOG6SIiNnmEBj3LS9S4Dbi 6yfyyy30d8K14gFkRr3gqLRJCrUH2SmzG6dn7tDr4UQjkfFzz25g8bEaMUE21vmT gozj30R8HxO+HSAVVvb0KiP3lVLUzfUUSJE55nFWBFQQEaUhxs4nv8imU9TK8Lci -----END CERTIFICATE-----Generated at Wed May 13 14:45:06 2026 by rpki-client