$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: fL4SC9udSKunXUYdUrJD9Ietkmt9f5dOOGA7LN0fm34= Subject key identifier: 25:FD:9A:46:4B:74:4F:D3:54:62:AE:6F:C1:33:A6:CD:F8:2A:F8:C0 Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584FA2C8B2C8239F93576E2C7080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B61E7 Signing time: Tue 27 Oct 2026 01:00:25 +0000 Manifest this update: Tue 27 Oct 2026 01:00:25 +0000 Manifest next update: Wed 28 Oct 2026 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: LzFAReVuX4/ZxJlltM5BaSdcAdExy2aVJUFeDcEJjQo=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: 6Ef3vWf0ND9CGRWERKM691/YDUIPV0AxM3k/9MkFGaE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:b2:c8:23:9f:93:57:6e:2c:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Oct 27 01:00:25 2026 GMT Not After : Oct 28 12:00:00 2026 GMT Subject: CN=27a34b05-ebe7-46ee-916c-11bddd731922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:90:3f:34:e2:25:82:4b:86:47:92:2d:9d: 49:1d:fd:fd:38:9b:46:ac:9c:3c:99:4b:9c:94:bf: 52:65:8e:f8:a4:63:d8:12:8f:42:4e:bb:d3:85:f2: f3:03:4f:0c:3b:2e:d5:1a:51:76:85:14:37:c2:2f: a0:39:f6:83:5a:4e:a2:b6:9b:c5:4f:ed:b4:da:b1: 08:c4:a2:c2:c8:41:5a:a4:b5:e5:7b:b1:af:88:f6: 5d:a0:66:45:a2:2f:7f:2d:73:30:4b:6d:e7:8d:36: 5b:0c:12:ee:2e:99:ad:e1:0e:2a:ec:20:d6:4f:de: 98:f0:f6:10:cc:17:c6:2a:b5:4f:08:03:49:04:75: 06:a1:cc:df:32:c3:2f:d0:df:11:bb:f2:ef:de:e4: 26:b6:4b:3c:c8:5b:2a:4f:09:63:81:a7:ba:22:4b: c0:ed:da:60:d6:57:61:69:b8:0d:b9:82:93:8d:e8: 5d:36:65:8b:68:15:18:09:ce:08:4f:00:f9:7d:21: 98:0f:ad:fd:52:64:d7:70:e6:1a:65:59:23:fb:e1: 2d:4a:06:ec:da:0c:c6:e4:a1:a7:95:f4:16:d6:9b: d3:ed:9e:38:2e:02:92:39:f4:94:00:36:0b:58:c8: a5:18:af:46:5a:28:9c:3b:59:03:08:71:00:71:16: 84:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FD:9A:46:4B:74:4F:D3:54:62:AE:6F:C1:33:A6:CD:F8:2A:F8:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f1:20:bf:84:bd:d6:28:78:6d:72:93:63:d0:47:a4:37:0a: 94:aa:2e:80:df:ee:8f:41:b9:ac:a5:98:2f:d0:22:5d:69:1b: 11:4a:f9:f3:e2:bc:6f:bf:40:95:b1:59:22:5f:9e:40:04:a8: 3a:ce:a5:23:05:af:c7:3e:b6:d7:1c:89:0f:99:f1:52:8a:9d: 0c:db:78:df:05:db:fc:96:59:63:b4:12:db:75:f9:b9:1c:b8: 20:98:72:d0:bb:f8:bf:99:0f:9a:3c:a8:7a:1d:f7:51:b5:4c: 61:5f:8d:79:19:0b:11:6f:69:dc:06:2c:35:e5:29:8c:7a:41: e2:14:58:11:35:73:3d:3f:ea:78:49:5b:bb:96:64:28:5a:2e: 65:4c:74:ed:ed:12:b8:95:ce:3f:19:2f:7b:69:59:6d:5b:3a: db:f0:f8:c1:4a:b7:ba:8d:72:85:b2:77:d2:f6:05:7d:a2:d1: 87:61:8d:f5:b7:9c:d1:b0:f9:20:f0:f8:5a:9e:c1:4c:d5:7b: 00:36:2b:d8:eb:4e:8d:ff:c5:7a:28:08:d1:8b:fc:c6:b1:98: 1b:b2:62:c4:00:b3:5d:85:c5:a4:5c:58:f0:27:89:ea:af:83: ae:ed:b7:04:e2:aa:0d:a0:c2:72:21:67:c5:8a:5a:98:d8:83: ce:cf:2d:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+iyLLII5+TV24scIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI2MTAyNzAxMDAyNVoXDTI2MTAyODEyMDAwMFowLzEtMCsGA1UEAxMk MjdhMzRiMDUtZWJlNy00NmVlLTkxNmMtMTFiZGRkNzMxOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqmQPzTiJYJLhkeSLZ1JHf39OJtGrJw8mUuc lL9SZY74pGPYEo9CTrvThfLzA08MOy7VGlF2hRQ3wi+gOfaDWk6itpvFT+202rEI xKLCyEFapLXle7GviPZdoGZFoi9/LXMwS23njTZbDBLuLpmt4Q4q7CDWT96Y8PYQ zBfGKrVPCANJBHUGoczfMsMv0N8Ru/Lv3uQmtks8yFsqTwljgae6IkvA7dpg1ldh abgNuYKTjehdNmWLaBUYCc4ITwD5fSGYD639UmTXcOYaZVkj++EtSgbs2gzG5KGn lfQW1pvT7Z44LgKSOfSUADYLWMilGK9GWiicO1kDCHEAcRaESwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCX9mkZLdE/TVGKub8Ezps34KvjAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBE8SC/hL3WKHhtcpNj0Eek NwqUqi6A3+6PQbmspZgv0CJdaRsRSvnz4rxvv0CVsVkiX55ABKg6zqUjBa/HPrbX HIkPmfFSip0M23jfBdv8llljtBLbdfm5HLggmHLQu/i/mQ+aPKh6HfdRtUxhX415 GQsRb2ncBiw15SmMekHiFFgRNXM9P+p4SVu7lmQoWi5lTHTt7RK4lc4/GS97aVlt Wzrb8PjBSre6jXKFsnfS9gV9otGHYY31t5zRsPkg8PhansFM1XsANivY606N/8V6 KAjRi/zGsZgbsmLEALNdhcWkXFjwJ4nqr4Ou7bcE4qoNoMJyIWfFilqY2IPOzy0I -----END CERTIFICATE-----Generated at Tue Oct 27 15:11:02 2026 by rpki-client