$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/38e5faa8-b7d1-4835-a5a0-b17158745b3e.mft File: 38e5faa8-b7d1-4835-a5a0-b17158745b3e.mft (raw, json) Hash identifier: QtrGXZf2Z2vRZ/w75RFY7kgCAb73u31zk92PV1fbXxM= Subject key identifier: 39:7F:BA:81:87:A3:B5:A3:EC:1F:34:52:FE:A8:E5:BA:54:13:8A:50 Authority key identifier: 87:E8:DE:48:38:97:AE:AF:1A:F8:10:69:1B:1C:A7:9F:CD:DC:FD:DC Certificate issuer: /CN=38e5faa8-b7d1-4835-a5a0-b17158745b3e Certificate serial: 010D0C9F4328584F8EE477CB017F37A77C637920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/38e5faa8-b7d1-4835-a5a0-b17158745b3e.mft Manifest number: 010D0C9F4328584F75D9235D707FDC19FEBE7F09 Signing time: Mon 19 Oct 2026 22:00:24 +0000 Manifest this update: Mon 19 Oct 2026 22:00:24 +0000 Manifest next update: Wed 21 Oct 2026 22:00:00 +0000 Files and hashes: 1: 1a489783-c59d-345c-9f9f-a611b9f72a2e.roa (hash: g1ixeTF05fwc0belyw0R9HOSGgLMRVH7Z2zU3KBT8zU=) 2: 38e5faa8-b7d1-4835-a5a0-b17158745b3e.crl (hash: jrP85PUSSLsDBsB5hSrdG6A0oVdun5m+FwZVIb6Cb7w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/38e5faa8-b7d1-4835-a5a0-b17158745b3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/38e5faa8-b7d1-4835-a5a0-b17158745b3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8e:e4:77:cb:01:7f:37:a7:7c:63:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e5faa8-b7d1-4835-a5a0-b17158745b3e Validity Not Before: Oct 19 22:00:24 2026 GMT Not After : Oct 21 22:00:00 2026 GMT Subject: CN=c63b09ff-d8a5-4dbe-aeda-6e5208c6a9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:71:af:4b:5f:c1:27:f4:3d:4f:68:97:1c: 66:87:35:33:48:bb:19:89:6e:f7:7e:6f:ea:03:e9: 17:b1:c6:c0:50:14:8a:bf:2c:3b:cc:f8:7c:34:40: 36:58:3a:70:ec:60:f5:2b:18:88:71:5c:3e:a3:02: fc:f4:9a:70:f2:62:6c:b9:f3:71:11:c8:c0:6d:9b: 92:72:30:45:dd:98:4a:e6:29:46:b7:1d:eb:88:10: 83:d6:f0:f5:e5:c8:b4:44:a3:de:93:a5:2d:12:b6: fd:c6:b9:36:40:3a:7c:17:5e:5d:02:44:f8:bd:13: 19:9b:dd:e9:68:04:6b:16:0a:1c:fd:c2:3e:67:f9: 01:eb:14:45:ef:35:60:e9:05:d0:89:57:61:2a:2e: 2b:dc:c9:ef:5f:50:e0:e8:24:50:89:b4:83:a5:41: 32:0a:6a:f3:9b:f9:16:70:d6:b7:26:3b:b8:63:50: 77:a8:0b:22:82:c5:de:4d:fc:53:4f:f4:99:c5:80: 39:a1:ee:83:23:d4:65:87:d5:66:af:99:18:b5:c5: ad:d8:d8:67:c9:9f:b5:23:11:1e:47:4b:16:1e:fd: 9e:a7:a2:fe:e3:ce:29:75:ef:19:7d:77:63:6c:8f: aa:77:46:df:36:45:df:c0:25:0c:54:a3:19:5a:c9: 45:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7F:BA:81:87:A3:B5:A3:EC:1F:34:52:FE:A8:E5:BA:54:13:8A:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/38e5faa8-b7d1-4835-a5a0-b17158745b3e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/38e5faa8-b7d1-4835-a5a0-b17158745b3e.crl X509v3 Authority Key Identifier: keyid:87:E8:DE:48:38:97:AE:AF:1A:F8:10:69:1B:1C:A7:9F:CD:DC:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:5d:2b:ec:03:b5:86:31:ab:84:41:d0:16:07:fa:38:15:8c: 5d:b9:ca:e9:e7:a5:1b:f4:3f:b2:c3:56:27:5c:50:e2:25:c8: c7:17:06:31:30:ec:fe:fe:21:0f:b9:a6:e1:3f:30:12:38:4d: d3:59:ac:78:67:24:e8:88:cf:7f:6f:2d:8a:72:62:1c:6b:d8: 97:0b:33:d2:68:34:f3:02:cc:f6:1a:25:30:a2:de:f6:d3:11: 9f:96:40:80:ab:16:d4:9a:b3:06:b6:ab:5b:0e:ed:f2:29:2e: 5e:7d:7e:6b:9c:19:cb:55:8e:0b:cd:2a:05:7b:3b:08:1d:bd: 6a:6e:a7:86:62:b7:4d:bc:70:5b:9e:a5:e9:5a:14:c8:05:66: 92:6d:c6:10:aa:b9:b8:67:bd:2f:d8:f0:3f:7e:44:2f:14:82: 6c:b1:78:74:e2:50:98:73:29:d3:b7:51:c0:28:a6:2f:90:8f: 65:af:71:45:e5:3d:6d:53:4b:f8:73:8c:85:27:26:5e:92:62: c0:e3:73:8e:2d:85:0e:88:5b:45:d9:4b:1a:f5:90:2b:ec:c7: 16:73:1e:a0:73:f5:20:5d:71:66:7a:33:ac:f9:44:cb:72:62: 58:a6:00:da:64:05:64:73:f5:1a:5f:fc:a8:0d:ff:1a:af:ac: b0:9a:e5:54 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+O5HfLAX83p3xjeSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNWZhYTgtYjdkMS00ODM1LWE1YTAtYjE3MTU4NzQ1 YjNlMB4XDTI2MTAxOTIyMDAyNFoXDTI2MTAyMTIyMDAwMFowLzEtMCsGA1UEAxMk YzYzYjA5ZmYtZDhhNS00ZGJlLWFlZGEtNmU1MjA4YzZhOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxlxr0tfwSf0PU9olxxmhzUzSLsZiW73fm/q A+kXscbAUBSKvyw7zPh8NEA2WDpw7GD1KxiIcVw+owL89Jpw8mJsufNxEcjAbZuS cjBF3ZhK5ilGtx3riBCD1vD15ci0RKPek6UtErb9xrk2QDp8F15dAkT4vRMZm93p aARrFgoc/cI+Z/kB6xRF7zVg6QXQiVdhKi4r3MnvX1Dg6CRQibSDpUEyCmrzm/kW cNa3Jju4Y1B3qAsigsXeTfxTT/SZxYA5oe6DI9Rlh9Vmr5kYtcWt2NhnyZ+1IxEe R0sWHv2ep6L+484pde8ZfXdjbI+qd0bfNkXfwCUMVKMZWslFawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDl/uoGHo7Wj7B80Uv6o5bpUE4pQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zOGU1 ZmFhOC1iN2QxLTQ4MzUtYTVhMC1iMTcxNTg3NDViM2UvMzhlNWZhYTgtYjdkMS00 ODM1LWE1YTAtYjE3MTU4NzQ1YjNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzhlNWZhYTgtYjdkMS00ODM1LWE1 YTAtYjE3MTU4NzQ1YjNlLzM4ZTVmYWE4LWI3ZDEtNDgzNS1hNWEwLWIxNzE1ODc0 NWIzZS5jcmwwHwYDVR0jBBgwFoAUh+jeSDiXrq8a+BBpGxynn83c/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zOGU1ZmFhOC1iN2QxLTQ4MzUtYTVhMC1iMTcx NTg3NDViM2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBXSvsA7WGMauEQdAWB/o4 FYxducrp56Ub9D+yw1YnXFDiJcjHFwYxMOz+/iEPuabhPzASOE3TWax4ZyToiM9/ by2KcmIca9iXCzPSaDTzAsz2GiUwot720xGflkCAqxbUmrMGtqtbDu3yKS5efX5r nBnLVY4LzSoFezsIHb1qbqeGYrdNvHBbnqXpWhTIBWaSbcYQqrm4Z70v2PA/fkQv FIJssXh04lCYcynTt1HAKKYvkI9lr3FF5T1tU0v4c4yFJyZekmLA43OOLYUOiFtF 2Usa9ZAr7McWcx6gc/UgXXFmejOs+UTLcmJYpgDaZAVkc/UaX/yoDf8ar6ywmuVU -----END CERTIFICATE-----Generated at Tue Oct 20 19:29:39 2026 by rpki-client