$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft File: 3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft (raw, json) Hash identifier: Vw3rhFUuL5IPiGbF0qDLl5v6Cs3A0iMOOxs2aPia8Uk= Subject key identifier: 94:DF:2D:08:44:1D:18:8F:89:E9:69:CE:7E:64:F3:43:12:32:9A:1D Authority key identifier: 33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D Certificate issuer: /CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Certificate serial: 010D0C9F4328584F72F99F4DAD5FC009EFDDC540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft Manifest number: 010D0C9F4328584073A8285CBADCAB24D8E6D175 Signing time: Fri 09 Oct 2026 22:00:23 +0000 Manifest this update: Fri 09 Oct 2026 22:00:23 +0000 Manifest next update: Sun 11 Oct 2026 22:00:00 +0000 Files and hashes: 1: 3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl (hash: KU9P+XauUEfMPOtPx480H0dxBc3jcNUnT/Nyqs0nRHw=) 2: 48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa (hash: HUPP0ybVok2WvbCNoFJe+z6swkYMk5WktPQZhrKYZy0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:f9:9f:4d:ad:5f:c0:09:ef:dd:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Validity Not Before: Oct 9 22:00:23 2026 GMT Not After : Oct 11 22:00:00 2026 GMT Subject: CN=7d8dac90-240e-4a82-9460-85210b6dac74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:97:61:ed:38:63:8f:a4:2d:64:27:21:27:b3: b1:a2:5c:19:98:d1:6e:0c:dd:84:4f:30:6c:9f:28: 03:7a:d8:ed:64:e6:af:1a:61:2b:f2:04:83:96:b1: d1:79:dd:66:77:b7:26:14:32:83:51:90:03:c0:1f: 26:c7:90:8a:32:06:23:4d:ac:da:4b:61:e4:19:27: f4:fb:a5:3c:20:19:2c:47:a2:e4:30:0a:45:6d:33: f5:86:2e:9b:8d:01:35:a1:5e:87:c7:c2:55:58:9d: 32:8b:1f:54:4b:09:f4:9a:99:13:5b:7e:9e:60:37: 3a:c3:fe:af:12:d1:3c:d1:a8:25:41:79:f3:a0:ff: 28:78:cf:05:de:fe:9d:41:93:b9:62:01:38:e2:a1: 91:e3:a4:fd:ea:f1:a4:f1:f4:5c:1c:84:e5:06:28: 9e:b1:99:4e:0b:12:b5:ad:1e:31:ed:9b:44:5e:8e: ad:48:c8:d4:07:67:ac:46:c0:06:70:6e:9a:66:68: dd:70:5b:1d:be:10:25:4f:4b:45:b7:cf:d9:04:e6: 46:3d:dd:be:fe:b0:09:96:78:5a:56:30:31:51:fd: 42:74:78:90:0d:08:a6:f2:0c:25:ce:80:9f:e2:93: dd:74:1e:16:0d:28:a8:88:7c:d6:98:63:1b:97:b4: 9e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DF:2D:08:44:1D:18:8F:89:E9:69:CE:7E:64:F3:43:12:32:9A:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl X509v3 Authority Key Identifier: keyid:33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:8b:45:c7:01:ca:d1:35:de:ca:28:e3:ac:d6:b8:95:b0:f6: 62:d3:f9:80:c9:ab:9b:52:28:d1:6e:7c:18:ad:1a:77:b2:3f: 27:9f:ef:90:86:00:a6:46:89:6d:f5:d7:dd:49:98:4b:89:82: 82:9b:0f:0b:49:aa:a9:31:7f:95:5f:b9:c8:5a:f1:f5:f5:65: 45:2a:e7:b3:f6:91:e3:dd:7f:80:45:4f:ac:3e:33:b5:24:87: 01:ea:ad:c6:94:61:f1:c2:36:1f:f1:3b:e6:b4:26:56:f5:49: b4:53:ba:12:18:4b:aa:8e:39:fc:14:be:15:4f:97:fb:16:ce: a4:57:df:ec:f9:a0:9e:7b:fb:ae:6c:28:78:fc:2d:fa:62:b7: 0b:ec:85:ad:21:f6:5c:c9:15:36:fa:6f:4c:94:39:40:85:f1: 11:ea:51:80:b0:25:2b:36:a5:c9:11:3d:f8:ff:3a:01:dd:6b: f8:40:97:85:a7:20:17:c1:08:5e:cd:de:08:44:4c:68:78:9c: 12:1a:29:ec:33:f0:89:14:8b:ce:c0:20:62:ea:97:3b:73:0b: ad:98:1e:8e:36:60:9a:f1:bf:82:1f:62:ad:e3:3f:cd:aa:e0: 43:e0:44:ce:09:58:bc:47:db:88:8f:6d:38:e6:be:d8:ca:59: 17:c8:67:16 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9y+Z9NrV/ACe/dxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiMDZiMTAtMWQwMy00ZmE5LWIyMmMtYmI5ODU5MDMx M2QzMB4XDTI2MTAwOTIyMDAyM1oXDTI2MTAxMTIyMDAwMFowLzEtMCsGA1UEAxMk N2Q4ZGFjOTAtMjQwZS00YTgyLTk0NjAtODUyMTBiNmRhYzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5dh7Thjj6QtZCchJ7OxolwZmNFuDN2ETzBs nygDetjtZOavGmEr8gSDlrHRed1md7cmFDKDUZADwB8mx5CKMgYjTazaS2HkGSf0 +6U8IBksR6LkMApFbTP1hi6bjQE1oV6Hx8JVWJ0yix9USwn0mpkTW36eYDc6w/6v EtE80aglQXnzoP8oeM8F3v6dQZO5YgE44qGR46T96vGk8fRcHITlBiiesZlOCxK1 rR4x7ZtEXo6tSMjUB2esRsAGcG6aZmjdcFsdvhAlT0tFt8/ZBOZGPd2+/rAJlnha VjAxUf1CdHiQDQim8gwlzoCf4pPddB4WDSioiHzWmGMbl7SeFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJTfLQhEHRiPielpzn5k80MSMpodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIw NmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4NTkwMzEzZDMvM2FiMDZiMTAtMWQwMy00 ZmE5LWIyMmMtYmI5ODU5MDMxM2QzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2FiMDZiMTAtMWQwMy00ZmE5LWIy MmMtYmI5ODU5MDMxM2QzLzNhYjA2YjEwLTFkMDMtNGZhOS1iMjJjLWJiOTg1OTAz MTNkMy5jcmwwHwYDVR0jBBgwFoAUM9navDEI1arP7bG7RQkiDwAcxU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIwNmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4 NTkwMzEzZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC7i0XHAcrRNd7KKOOs1riV sPZi0/mAyaubUijRbnwYrRp3sj8nn++QhgCmRolt9dfdSZhLiYKCmw8LSaqpMX+V X7nIWvH19WVFKuez9pHj3X+ARU+sPjO1JIcB6q3GlGHxwjYf8TvmtCZW9Um0U7oS GEuqjjn8FL4VT5f7Fs6kV9/s+aCee/uubCh4/C36YrcL7IWtIfZcyRU2+m9MlDlA hfER6lGAsCUrNqXJET34/zoB3Wv4QJeFpyAXwQhezd4IRExoeJwSGinsM/CJFIvO wCBi6pc7cwutmB6ONmCa8b+CH2Kt4z/NquBD4ETOCVi8R9uIj2045r7YylkXyGcW -----END CERTIFICATE-----Generated at Sat Oct 10 21:26:46 2026 by rpki-client