$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: nKxLcifrNMHSDhGzMZ9awvJnFQU739dhwlNIG6Ts+PA= Subject key identifier: 6D:86:0E:1A:00:37:EB:05:ED:42:B8:D1:61:6B:BC:62:B3:F2:E4:9A Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584D83AC88F089B73D2E46C37280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B611F Signing time: Wed 15 Apr 2026 12:00:03 +0000 Manifest this update: Wed 15 Apr 2026 12:00:03 +0000 Manifest next update: Fri 17 Apr 2026 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: 3M9sRBZkHNyD1PXlk9ozItr19PZWmrqICVfcNjA6w3g=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: ohINdLXNkiXFisQIuLSztcN0xxeEq688KnKVhQZuNro=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ac:88:f0:89:b7:3d:2e:46:c3:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Apr 15 12:00:03 2026 GMT Not After : Apr 17 12:00:00 2026 GMT Subject: CN=cd889cb6-f28a-4a8a-a8bf-ef647f5a1d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:de:d2:6c:e9:be:2d:a0:c5:4f:62:5a:63: b6:97:c2:f9:55:62:aa:55:b7:e6:43:da:4a:1e:c0: c0:84:2f:cf:8e:0a:6a:a4:02:ce:9e:d6:b7:75:70: 95:b7:50:7c:e2:01:a4:a8:b7:f8:ac:cb:8c:01:41: fc:82:32:c3:cb:eb:b5:d4:4e:cd:c9:42:03:15:57: 8f:31:57:f1:ee:01:7b:8a:c1:b0:7a:56:7b:78:77: 10:94:19:ec:78:d1:ef:a3:fd:fd:eb:8b:27:a7:82: 80:95:6b:9c:55:f8:b3:e1:df:66:1a:39:b7:ea:a7: 45:21:7b:e5:72:3c:b1:d5:42:ba:96:56:c0:b8:90: 91:44:e1:ac:a0:2f:40:ce:6f:bf:f5:d4:b4:20:1f: 76:6f:03:70:13:bf:b5:47:af:c6:90:e8:e9:fc:6e: b7:aa:a4:c4:fb:0f:ef:dd:94:59:08:4e:61:78:b2: 96:01:06:ac:2c:c4:39:e0:c8:d0:ee:7c:4f:61:f4: a2:c7:fa:e4:b8:7c:55:ab:14:59:96:06:b5:93:a6: da:98:78:0d:0f:9c:55:29:77:58:8c:40:9e:dd:8d: 82:d2:26:de:ae:75:0d:e8:2d:05:9c:46:f4:ca:ec: 08:49:82:e0:54:e0:dc:dd:b4:bc:51:9a:84:f2:b6: f6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:86:0E:1A:00:37:EB:05:ED:42:B8:D1:61:6B:BC:62:B3:F2:E4:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:9d:64:ae:23:6a:dd:e7:1b:37:24:d8:60:c8:6a:fa:ad:34: 59:0d:f9:24:92:66:cd:7c:eb:55:60:53:33:bc:56:3b:a9:f5: 4d:77:b2:8e:b7:30:60:de:8b:74:bc:2f:8e:a0:d0:50:92:93: 51:9b:f5:46:c8:5a:e7:97:81:df:07:c5:f8:0e:c3:88:eb:c3: 6d:3b:7e:e2:7c:d6:8c:5f:8a:e0:47:d3:8b:47:1a:d4:de:0b: c0:c4:a7:9f:e4:59:7f:be:63:ee:0f:b5:22:b9:df:30:85:2a: 79:fb:2d:cc:97:2e:9c:a9:c6:10:99:fa:5a:29:37:81:9b:17: b4:e0:9b:9d:25:aa:bd:c1:e1:3a:4d:88:42:65:3f:31:73:91: 5f:74:41:1e:bc:06:3b:89:53:73:05:47:54:b4:04:95:4b:33: e7:44:ef:47:6c:ec:de:0b:4b:d0:f2:6d:a8:ae:75:92:43:ab: ab:b9:f6:42:ab:0e:a8:e2:95:dd:f6:16:d5:26:80:5a:03:3a: d0:e7:4f:30:42:14:69:d7:8d:ab:02:18:1f:8f:04:86:b9:13: 60:0e:5a:76:27:bb:e5:bc:2c:38:05:c1:b0:7c:d7:15:45:b1: 2c:44:02:c8:48:e4:f9:47:17:68:eb:05:44:1c:af:af:83:fb: e1:64:10:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2DrIjwibc9LkbDcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI2MDQxNTEyMDAwM1oXDTI2MDQxNzEyMDAwMFowLzEtMCsGA1UEAxMk Y2Q4ODljYjYtZjI4YS00YThhLWE4YmYtZWY2NDdmNWExZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS3e0mzpvi2gxU9iWmO2l8L5VWKqVbfmQ9pK HsDAhC/PjgpqpALOnta3dXCVt1B84gGkqLf4rMuMAUH8gjLDy+u11E7NyUIDFVeP MVfx7gF7isGwelZ7eHcQlBnseNHvo/3964snp4KAlWucVfiz4d9mGjm36qdFIXvl cjyx1UK6llbAuJCRROGsoC9Azm+/9dS0IB92bwNwE7+1R6/GkOjp/G63qqTE+w/v 3ZRZCE5heLKWAQasLMQ54MjQ7nxPYfSix/rkuHxVqxRZlga1k6bamHgND5xVKXdY jECe3Y2C0ibernUN6C0FnEb0yuwISYLgVODc3bS8UZqE8rb2fwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG2GDhoAN+sF7UK40WFrvGKz8uSaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHnWSuI2rd5xs3JNhgyGr6 rTRZDfkkkmbNfOtVYFMzvFY7qfVNd7KOtzBg3ot0vC+OoNBQkpNRm/VGyFrnl4Hf B8X4DsOI68NtO37ifNaMX4rgR9OLRxrU3gvAxKef5Fl/vmPuD7Uiud8whSp5+y3M ly6cqcYQmfpaKTeBmxe04JudJaq9weE6TYhCZT8xc5FfdEEevAY7iVNzBUdUtASV SzPnRO9HbOzeC0vQ8m2ornWSQ6urufZCqw6o4pXd9hbVJoBaAzrQ508wQhRp142r AhgfjwSGuRNgDlp2J7vlvCw4BcGwfNcVRbEsRALISOT5Rxdo6wVEHK+vg/vhZBDR -----END CERTIFICATE-----Generated at Wed Apr 15 14:38:56 2026 by rpki-client