$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a3235a85-44fd-4442-9a84-88cb0572fdd4/a3235a85-44fd-4442-9a84-88cb0572fdd4.mft File: a3235a85-44fd-4442-9a84-88cb0572fdd4.mft (raw, json) Hash identifier: hkvNnyqHgdjkFvSZYJN+qemgCvAyfTUOW67rFODm5lw= Subject key identifier: 41:42:87:71:FB:75:0E:C1:E4:33:31:A6:2E:10:16:3B:1D:2B:3F:8E Authority key identifier: BE:EC:3E:1B:6F:BF:B8:58:66:52:DC:CC:6D:E2:9B:AF:62:47:F4:9B Certificate issuer: /CN=a3235a85-44fd-4442-9a84-88cb0572fdd4 Certificate serial: 010D0C9F4328584FAD743E4A18F78BEE39787A9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a3235a85-44fd-4442-9a84-88cb0572fdd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a3235a85-44fd-4442-9a84-88cb0572fdd4/a3235a85-44fd-4442-9a84-88cb0572fdd4.mft Manifest number: 010D0C9F4328584FAD743E77AC673F6FFCB81201 Signing time: Fri 30 Oct 2026 20:44:23 +0000 Manifest this update: Fri 30 Oct 2026 20:44:23 +0000 Manifest next update: Mon 02 Nov 2026 20:00:00 +0000 Files and hashes: 1: a3235a85-44fd-4442-9a84-88cb0572fdd4.crl (hash: EqiyGLy+BhBH8G55hf2Q1RsC9oSgYmFmZ4aj6cbs9Po=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a3235a85-44fd-4442-9a84-88cb0572fdd4/a3235a85-44fd-4442-9a84-88cb0572fdd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a3235a85-44fd-4442-9a84-88cb0572fdd4/a3235a85-44fd-4442-9a84-88cb0572fdd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a3235a85-44fd-4442-9a84-88cb0572fdd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ad:74:3e:4a:18:f7:8b:ee:39:78:7a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3235a85-44fd-4442-9a84-88cb0572fdd4 Validity Not Before: Oct 30 20:44:23 2026 GMT Not After : Nov 2 20:00:00 2026 GMT Subject: CN=a017664f-9fd1-4d64-8cfa-6e71f6259387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d6:04:b6:dc:3a:f7:6c:8f:97:37:88:0c:c4: 35:4d:a5:78:f5:21:41:4e:6f:95:c3:dc:f4:15:f9: 12:23:a6:30:9b:71:ab:21:4f:84:2f:34:c1:2e:2b: f2:f3:79:bb:0d:4f:ea:b7:0a:b6:cb:a6:39:26:ca: 18:29:aa:5a:2a:6f:67:1c:2e:50:2d:81:ff:9f:90: e1:0e:63:5a:1f:b9:0c:3e:da:89:e1:8d:44:d4:91: 56:ee:46:5a:07:8e:f5:07:17:9d:bb:8c:08:51:4d: 09:7b:92:00:bd:15:47:75:e0:20:2a:db:af:06:aa: dd:a1:57:0a:d7:56:ac:32:ce:ac:d2:89:2a:55:58: 44:0c:43:da:c7:8d:20:9a:96:c7:8b:52:d3:22:9d: e9:fb:07:af:38:e0:b5:43:14:35:80:a3:78:fe:3d: 42:d2:58:8c:9c:cf:29:2a:b4:a4:e5:0c:36:9b:c9: 15:af:dd:54:b9:a1:8e:2b:9d:f4:00:fd:5f:c4:de: 4d:fd:e4:5e:45:f4:57:c0:f2:38:a9:d6:3d:58:4f: 6e:aa:e4:45:c2:5c:d1:b8:5c:31:b4:fe:cc:4b:ac: c0:e0:e7:87:1d:04:c8:e5:c2:ea:e0:99:c8:72:e0: 60:83:a5:40:c7:a0:e4:f3:eb:1c:42:fb:32:4a:88: f3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:42:87:71:FB:75:0E:C1:E4:33:31:A6:2E:10:16:3B:1D:2B:3F:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a3235a85-44fd-4442-9a84-88cb0572fdd4/a3235a85-44fd-4442-9a84-88cb0572fdd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a3235a85-44fd-4442-9a84-88cb0572fdd4/a3235a85-44fd-4442-9a84-88cb0572fdd4.crl X509v3 Authority Key Identifier: keyid:BE:EC:3E:1B:6F:BF:B8:58:66:52:DC:CC:6D:E2:9B:AF:62:47:F4:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a3235a85-44fd-4442-9a84-88cb0572fdd4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:19:21:07:26:8f:11:6b:6d:d6:4c:6f:44:3c:b3:84:4c:97: 53:1d:91:bf:bb:ff:93:35:f1:ce:f6:31:4a:68:85:6a:8f:51: a4:67:b0:19:e7:20:d2:05:3f:6e:bd:af:78:29:73:8f:bd:c8: c5:18:71:08:10:7d:29:d1:c7:28:52:f4:04:07:a4:3d:a7:4c: 1c:28:ea:5c:92:db:e4:e6:ad:1e:ec:8e:56:ca:7e:dc:90:8f: f4:02:31:c4:7b:67:c0:f4:84:ac:6c:b6:ac:58:2e:fe:1b:c7: b1:c6:81:e8:0b:29:7f:ce:97:83:00:b6:4b:4f:3f:59:56:fb: e2:e9:72:1f:df:d7:4c:24:f5:40:41:e1:eb:0b:82:ca:32:dc: 44:85:90:dc:d6:02:3f:5d:4b:88:90:bc:62:bc:d6:56:af:da: 2f:12:d6:40:57:7e:7a:f7:b0:c7:55:be:a3:6e:d6:e7:0c:29: e6:ab:0b:79:de:d4:fd:7b:0f:cd:26:64:0a:f6:6e:61:af:63: 77:40:06:f5:2c:80:3e:12:08:af:e2:00:43:58:d2:c3:f2:f2: eb:7d:6d:72:79:12:ac:90:76:aa:a4:90:33:4d:7b:ae:00:c4: f3:3d:a0:d4:b9:ce:92:c6:a9:28:96:99:33:39:01:ad:0d:c9: 43:c8:7d:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+tdD5KGPeL7jl4epwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyMzVhODUtNDRmZC00NDQyLTlhODQtODhjYjA1NzJm ZGQ0MB4XDTI2MTAzMDIwNDQyM1oXDTI2MTEwMjIwMDAwMFowLzEtMCsGA1UEAxMk YTAxNzY2NGYtOWZkMS00ZDY0LThjZmEtNmU3MWY2MjU5Mzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NYEttw692yPlzeIDMQ1TaV49SFBTm+Vw9z0 FfkSI6Ywm3GrIU+ELzTBLivy83m7DU/qtwq2y6Y5JsoYKapaKm9nHC5QLYH/n5Dh DmNaH7kMPtqJ4Y1E1JFW7kZaB471Bxedu4wIUU0Je5IAvRVHdeAgKtuvBqrdoVcK 11asMs6s0okqVVhEDEPax40gmpbHi1LTIp3p+wevOOC1QxQ1gKN4/j1C0liMnM8p KrSk5Qw2m8kVr91UuaGOK530AP1fxN5N/eReRfRXwPI4qdY9WE9uquRFwlzRuFwx tP7MS6zA4OeHHQTI5cLq4JnIcuBgg6VAx6Dk8+scQvsySojzoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEFCh3H7dQ7B5DMxpi4QFjsdKz+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hMzIz NWE4NS00NGZkLTQ0NDItOWE4NC04OGNiMDU3MmZkZDQvYTMyMzVhODUtNDRmZC00 NDQyLTlhODQtODhjYjA1NzJmZGQ0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzc1MjZhMC1m ZTRlLTQ3NDEtYjM5Yi0zMjMzNTNhMWViZjIvYTMyMzVhODUtNDRmZC00NDQyLTlh ODQtODhjYjA1NzJmZGQ0L2EzMjM1YTg1LTQ0ZmQtNDQ0Mi05YTg0LTg4Y2IwNTcy ZmRkNC5jcmwwHwYDVR0jBBgwFoAUvuw+G2+/uFhmUtzMbeKbr2JH9JswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0 MS1iMzliLTMyMzM1M2ExZWJmMi9hMzIzNWE4NS00NGZkLTQ0NDItOWE4NC04OGNi MDU3MmZkZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwGSEHJo8Ra23WTG9EPLOE TJdTHZG/u/+TNfHO9jFKaIVqj1GkZ7AZ5yDSBT9uva94KXOPvcjFGHEIEH0p0cco UvQEB6Q9p0wcKOpcktvk5q0e7I5Wyn7ckI/0AjHEe2fA9ISsbLasWC7+G8exxoHo Cyl/zpeDALZLTz9ZVvvi6XIf39dMJPVAQeHrC4LKMtxEhZDc1gI/XUuIkLxivNZW r9ovEtZAV35697DHVb6jbtbnDCnmqwt53tT9ew/NJmQK9m5hr2N3QAb1LIA+Egiv 4gBDWNLD8vLrfW1yeRKskHaqpJAzTXuuAMTzPaDUuc6SxqkolpkzOQGtDclDyH2R -----END CERTIFICATE-----Generated at Sun Nov 1 14:37:18 2026 by rpki-client