$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft File: a3398dc1-de03-4844-957b-e882d7878ae2.mft (raw, json) Hash identifier: lCn5RnQXi7071zSKqPlnaylNXhWv12Ok+M+rqL2MX7o= Subject key identifier: D3:7B:4D:9D:55:E3:D7:A3:B4:41:C6:16:A8:23:88:2C:18:02:00:B0 Authority key identifier: 42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52 Certificate issuer: /CN=a3398dc1-de03-4844-957b-e882d7878ae2 Certificate serial: 010D0C9F4328584F76EE1413E9080E26E1121F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft Manifest number: 010D0C9F4328584073A8471614A6B3775D4E4702 Signing time: Sun 11 Oct 2026 08:00:25 +0000 Manifest this update: Sun 11 Oct 2026 08:00:25 +0000 Manifest next update: Wed 14 Oct 2026 08:00:00 +0000 Files and hashes: 1: 74fe514f-f282-3fdf-b82d-5a7c858132a2.roa (hash: mAx5sl1qWOItFupxhXDU1nJ+UEMfNXRsnaLvbQf7rOg=) 2: a3398dc1-de03-4844-957b-e882d7878ae2.crl (hash: AuyLUmKqLC87vJYo3BAbBzO/wR618hdFS7XfYP4kyQc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:ee:14:13:e9:08:0e:26:e1:12:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3398dc1-de03-4844-957b-e882d7878ae2 Validity Not Before: Oct 11 08:00:25 2026 GMT Not After : Oct 14 08:00:00 2026 GMT Subject: CN=3631ca24-4cee-4fe7-9bf3-5b8cab41db81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b7:f0:a5:a7:12:cf:06:4e:df:55:04:c2:ec: fe:98:3e:5d:23:76:0d:53:30:56:92:a4:19:5d:cc: 95:9d:66:31:62:c2:27:f4:ae:28:38:eb:90:a4:8c: 84:ac:96:e9:52:13:c9:12:03:45:bd:bd:2f:2f:ef: 02:4a:b2:3e:37:bb:2a:04:31:10:53:64:30:72:04: cc:3e:37:e2:33:68:bc:97:d3:de:1b:fe:f3:62:27: 2a:53:b5:69:00:cb:4f:2f:90:6c:4d:ac:d9:d4:1c: 6d:0f:f6:3e:42:f5:1f:c8:de:17:3f:d8:b6:42:2b: 7f:5c:b2:c1:db:e5:7b:f9:98:94:44:ee:97:c9:68: e4:be:b4:c3:41:6e:8a:77:58:c4:de:28:d5:e3:e9: 22:a7:27:9e:c2:31:a1:96:30:24:c3:96:14:e5:8a: 7f:c3:83:ff:cb:33:98:d2:32:7d:eb:54:67:f1:20: d9:a6:ea:04:4c:af:80:e2:5f:79:80:01:72:88:05: a3:30:0f:d9:5d:98:69:7e:df:6e:01:d6:c7:3b:9e: d9:9b:b3:18:5b:d6:9b:2e:65:50:c4:39:1d:57:53: dd:05:68:a1:83:14:f8:f8:db:1a:60:15:8a:93:ca: fd:7c:27:1b:d8:07:2b:66:10:31:d0:dc:2b:90:60: c1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7B:4D:9D:55:E3:D7:A3:B4:41:C6:16:A8:23:88:2C:18:02:00:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl X509v3 Authority Key Identifier: keyid:42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b1:b1:7e:8e:9f:b7:48:11:f3:79:b5:1a:3b:21:a2:21:0b: c5:ba:c6:fe:66:c8:56:3e:61:83:56:41:5e:10:58:14:02:33: d3:2e:28:16:4c:93:eb:30:01:4b:3a:f2:f2:1f:5c:2e:50:3a: 6a:0b:10:39:49:fd:c3:07:93:b3:a0:3a:b0:0a:68:a1:49:fa: c7:5a:39:a8:5d:c1:77:81:18:52:e0:78:92:73:66:b2:82:5e: c1:78:d4:36:fb:0b:0d:86:57:4a:16:5c:03:53:c3:01:89:55: c1:5c:41:a3:27:e4:3e:d4:8b:26:a2:72:07:c9:f2:2a:5d:7c: 86:fc:94:64:a5:c4:1d:2f:3e:74:9b:9f:0a:b1:46:89:10:b3: 78:df:a3:41:50:43:86:63:2b:3b:42:50:86:46:da:3a:67:ab: ae:47:55:66:46:5d:cf:b0:05:13:86:93:b8:a0:04:b5:17:41: ef:9b:02:a8:ae:55:1b:f9:c1:46:2c:9a:a7:84:81:03:77:dc: 5b:f9:f2:9e:f8:22:6d:83:91:1d:a6:1d:f9:b8:c9:45:40:c6: c2:5a:32:90:0c:20:f0:41:04:0b:40:6e:8c:5a:09:78:06:31: 93:3b:d8:0c:55:60:11:06:e1:36:2d:6c:ae:1e:8c:53:c4:aa: 77:74:ed:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE927hQT6QgOJuESH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMzOThkYzEtZGUwMy00ODQ0LTk1N2ItZTg4MmQ3ODc4 YWUyMB4XDTI2MTAxMTA4MDAyNVoXDTI2MTAxNDA4MDAwMFowLzEtMCsGA1UEAxMk MzYzMWNhMjQtNGNlZS00ZmU3LTliZjMtNWI4Y2FiNDFkYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbfwpacSzwZO31UEwuz+mD5dI3YNUzBWkqQZ XcyVnWYxYsIn9K4oOOuQpIyErJbpUhPJEgNFvb0vL+8CSrI+N7sqBDEQU2QwcgTM PjfiM2i8l9PeG/7zYicqU7VpAMtPL5BsTazZ1BxtD/Y+QvUfyN4XP9i2Qit/XLLB 2+V7+ZiURO6XyWjkvrTDQW6Kd1jE3ijV4+kipyeewjGhljAkw5YU5Yp/w4P/yzOY 0jJ961Rn8SDZpuoETK+A4l95gAFyiAWjMA/ZXZhpft9uAdbHO57Zm7MYW9abLmVQ xDkdV1PdBWihgxT4+NsaYBWKk8r9fCcb2AcrZhAx0NwrkGDBMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNN7TZ1V49ejtEHGFqgjiCwYAgCwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMzM5 OGRjMS1kZTAzLTQ4NDQtOTU3Yi1lODgyZDc4NzhhZTIvYTMzOThkYzEtZGUwMy00 ODQ0LTk1N2ItZTg4MmQ3ODc4YWUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTMzOThkYzEtZGUwMy00ODQ0LTk1 N2ItZTg4MmQ3ODc4YWUyL2EzMzk4ZGMxLWRlMDMtNDg0NC05NTdiLWU4ODJkNzg3 OGFlMi5jcmwwHwYDVR0jBBgwFoAUQsWSHiqKBr11agIi3c4wpqvZXVIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMzM5OGRjMS1kZTAzLTQ4NDQtOTU3Yi1lODgy ZDc4NzhhZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZsbF+jp+3SBHzebUaOyGi IQvFusb+ZshWPmGDVkFeEFgUAjPTLigWTJPrMAFLOvLyH1wuUDpqCxA5Sf3DB5Oz oDqwCmihSfrHWjmoXcF3gRhS4HiSc2aygl7BeNQ2+wsNhldKFlwDU8MBiVXBXEGj J+Q+1IsmonIHyfIqXXyG/JRkpcQdLz50m58KsUaJELN436NBUEOGYys7QlCGRto6 Z6uuR1VmRl3PsAUThpO4oAS1F0HvmwKorlUb+cFGLJqnhIEDd9xb+fKe+CJtg5Ed ph35uMlFQMbCWjKQDCDwQQQLQG6MWgl4BjGTO9gMVWARBuE2LWyuHoxTxKp3dO3F -----END CERTIFICATE-----Generated at Mon Oct 12 04:23:44 2026 by rpki-client