$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: u1cHPqQW6+4XMJqn25NnFlCXdsPx+yNBJNyUG9V1o2o= Subject key identifier: 1E:54:54:3F:5A:62:5B:79:D6:13:2F:E5:D2:64:1E:81:5C:DE:13:DA Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584EF6F9B78509E6B4C244891200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B61A8 Signing time: Wed 26 Aug 2026 12:00:23 +0000 Manifest this update: Wed 26 Aug 2026 12:00:23 +0000 Manifest next update: Sat 29 Aug 2026 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: B0sQxwxs9m8Qyd/bJfQ0X/BnyqzR07+x+LgDwRd/C+c=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: PnK3g19XJOjsgpwchNlZwzrHywlPJtXL4bFe6ggQaaY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f6:f9:b7:85:09:e6:b4:c2:44:89:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Aug 26 12:00:23 2026 GMT Not After : Aug 29 12:00:00 2026 GMT Subject: CN=a0f5e62b-04f1-494b-9b43-d3b20e4f06e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:77:cc:6f:80:fe:03:57:dd:e0:02:4e:5e:4c: 3f:37:c2:a8:a8:37:9f:1a:9d:60:25:24:bb:0f:34: b6:38:42:68:80:8f:66:71:34:ff:c6:82:ef:d5:43: 05:46:9b:a9:84:2c:cc:20:b4:10:2b:54:37:f1:b7: 91:9e:e9:6b:0e:6c:bf:bb:ad:07:58:92:02:ad:c3: 3d:31:73:90:e1:03:21:cf:80:26:be:18:40:5f:2c: d6:33:5d:51:5b:09:df:a0:a8:c9:c2:17:c1:a5:21: 26:90:be:0a:57:a2:77:9a:b6:61:40:3d:75:7d:f5: cc:54:82:00:21:75:13:db:dc:56:ab:f5:a5:41:b3: 1f:56:0a:57:70:08:04:e2:59:d8:75:76:96:eb:1b: 56:0a:95:95:20:12:f7:a0:a6:2b:68:22:57:b7:05: 89:05:b9:e6:e7:9d:3c:00:c5:38:4f:7d:c5:05:77: 61:ef:cd:53:55:99:d1:b9:12:2c:3f:94:46:67:38: fd:bc:9e:6a:32:d0:47:02:cb:45:e3:b6:de:44:45: dc:fd:1f:a8:77:70:26:16:f4:09:8b:a1:4c:86:dc: e2:50:bb:c1:16:53:bf:ad:d2:cd:ff:4d:6e:28:60: 5f:b5:06:6b:ef:88:e4:ba:6c:a1:fe:2c:cc:5f:34: 0f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:54:54:3F:5A:62:5B:79:D6:13:2F:E5:D2:64:1E:81:5C:DE:13:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:42:52:24:f4:b4:80:7e:c6:29:26:2c:d0:e4:6f:87:cf:45: 71:c8:e7:f4:fd:b8:6e:05:38:1d:f3:11:f5:ce:8b:d4:6d:94: 8e:b5:34:67:cc:ba:96:54:26:50:59:dd:ca:f5:76:a8:2f:42: 7d:15:f3:9c:0a:2d:ee:42:f2:92:32:a2:24:48:65:c2:e7:dd: d1:5d:e2:13:d2:4e:28:54:78:34:c0:f8:d6:c7:ec:78:78:d4: 19:ee:77:03:26:6c:32:69:5e:a6:12:fe:2b:aa:15:c9:7a:08: 27:7e:39:8b:78:0a:77:df:81:2d:20:7f:da:d6:d5:0d:34:ad: 1a:7f:74:4f:c6:c3:0d:4e:69:83:9c:42:f9:4b:38:f7:41:34: 34:dc:a7:a8:f0:75:48:e6:3f:35:4c:1c:fd:3d:c0:be:42:e5: 53:2c:76:22:bb:89:4f:f7:98:e4:f3:37:5b:9f:ca:da:d8:7b: f7:c6:2e:8c:52:37:8e:29:ea:18:29:2c:44:7a:22:05:14:17: 11:ad:c0:79:54:98:36:6f:6d:34:f9:e7:d7:83:61:34:af:41: 0a:1d:2d:b6:da:5b:8f:8e:fd:e6:08:be:c2:63:9c:57:6d:93: 9f:bc:f1:34:83:30:c0:4f:23:16:cc:f6:be:c5:43:2d:4d:36: be:02:93:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE72+beFCea0wkSJEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI2MDgyNjEyMDAyM1oXDTI2MDgyOTEyMDAwMFowLzEtMCsGA1UEAxMk YTBmNWU2MmItMDRmMS00OTRiLTliNDMtZDNiMjBlNGYwNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXfMb4D+A1fd4AJOXkw/N8KoqDefGp1gJSS7 DzS2OEJogI9mcTT/xoLv1UMFRpuphCzMILQQK1Q38beRnulrDmy/u60HWJICrcM9 MXOQ4QMhz4AmvhhAXyzWM11RWwnfoKjJwhfBpSEmkL4KV6J3mrZhQD11ffXMVIIA IXUT29xWq/WlQbMfVgpXcAgE4lnYdXaW6xtWCpWVIBL3oKYraCJXtwWJBbnm5508 AMU4T33FBXdh781TVZnRuRIsP5RGZzj9vJ5qMtBHAstF47beREXc/R+od3AmFvQJ i6FMhtziULvBFlO/rdLN/01uKGBftQZr74jkumyh/izMXzQP+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB5UVD9aYlt51hMv5dJkHoFc3hPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJQlIk9LSAfsYpJizQ5G+H z0VxyOf0/bhuBTgd8xH1zovUbZSOtTRnzLqWVCZQWd3K9XaoL0J9FfOcCi3uQvKS MqIkSGXC593RXeIT0k4oVHg0wPjWx+x4eNQZ7ncDJmwyaV6mEv4rqhXJeggnfjmL eAp334EtIH/a1tUNNK0af3RPxsMNTmmDnEL5Szj3QTQ03Keo8HVI5j81TBz9PcC+ QuVTLHYiu4lP95jk8zdbn8ra2Hv3xi6MUjeOKeoYKSxEeiIFFBcRrcB5VJg2b200 +efXg2E0r0EKHS222luPjv3mCL7CY5xXbZOfvPE0gzDATyMWzPa+xUMtTTa+ApOW -----END CERTIFICATE-----Generated at Wed Aug 26 20:28:36 2026 by rpki-client