$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: v5JRqXa4FATH8R4UPG3lFtxhuY8ap+PcMAeCzcK6CU8= Subject key identifier: 9F:51:64:05:17:6B:2A:26:FC:D1:7D:17:1A:F2:B1:72:51:02:FE:A6 Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584F3CC4D35FE1F173EF5BDA66C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B61C1 Signing time: Sun 20 Sep 2026 12:00:24 +0000 Manifest this update: Sun 20 Sep 2026 12:00:24 +0000 Manifest next update: Tue 22 Sep 2026 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: B0sQxwxs9m8Qyd/bJfQ0X/BnyqzR07+x+LgDwRd/C+c=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: etQn3glDJ9Y7mnBtEA4kPjBgUwDwQf2VPBgCv9Dqq0g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:c4:d3:5f:e1:f1:73:ef:5b:da:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Sep 20 12:00:24 2026 GMT Not After : Sep 22 12:00:00 2026 GMT Subject: CN=60d7e62e-1b9a-475e-a91c-69164a0a108e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:20:38:66:79:8b:6c:11:7c:c3:63:59:9e:9b: 3a:10:5c:48:ab:8c:41:2e:ab:57:c0:96:e2:7e:26: 81:7b:e8:b2:15:9f:8c:96:79:f6:66:6e:f3:a4:d6: b1:f3:bc:cd:f6:12:b5:85:65:2a:dc:69:1b:68:02: 09:8b:fe:cd:59:c5:9f:72:cc:43:16:04:09:ae:00: aa:92:49:43:e2:ff:c4:0e:8c:71:75:e0:bb:13:9b: 86:f5:8f:c6:6e:7d:c4:18:73:80:b6:64:4e:c7:f2: b2:56:5d:48:8e:d0:ab:0a:45:c4:6b:b4:db:a5:ba: c2:b5:66:21:d8:ae:4b:f7:0c:70:ac:05:5c:fb:05: 34:cc:45:b6:2a:a8:5b:73:b0:51:e5:2e:4b:eb:47: e5:ca:7b:27:a8:e2:3b:66:26:51:ac:3c:0e:cc:aa: ec:56:53:14:e4:ab:5f:93:b9:11:ca:8e:c2:8e:91: 53:b6:bf:0e:d9:79:0d:69:2f:f9:69:6a:13:8e:e0: 00:4c:f4:eb:5f:50:e0:1e:a8:e1:b3:cd:8d:7c:be: fe:65:09:55:d1:53:22:44:39:08:1d:cd:6a:a6:9b: cb:fc:18:84:79:33:a1:40:37:ae:62:67:58:da:c8: de:2f:55:49:cd:78:fa:b9:66:15:c4:0c:e0:94:7f: 25:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:51:64:05:17:6B:2A:26:FC:D1:7D:17:1A:F2:B1:72:51:02:FE:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:11:bb:51:35:70:f7:42:5a:0f:47:88:28:13:5f:12:d4:0e: 62:3d:2d:fa:bf:f8:14:97:82:1c:0b:d0:15:81:c8:da:06:b3: 4f:d5:f7:a5:4c:a1:ed:cc:52:31:0c:e9:31:1b:02:bd:3f:e9: 29:0c:c1:a3:71:bd:d5:cb:f7:94:5c:c8:ca:f4:08:6a:db:4e: c4:b7:bb:5d:d8:2c:6f:0c:0f:c3:af:cb:71:d7:6f:c4:6c:f9: 51:0d:09:2d:14:06:1a:39:aa:b9:53:01:ec:ae:f5:24:66:af: 0f:98:e9:d7:10:69:8a:a8:c8:1f:fa:17:f9:3b:42:f0:4a:4e: 1e:9c:b4:af:b6:51:40:55:e8:9c:a4:44:15:71:24:ba:f9:4a: b1:3f:db:34:92:7e:83:b4:bf:30:3c:79:f8:8b:9a:55:cf:0b: 7f:b5:df:31:3d:7b:d2:c5:70:33:8c:61:3c:4e:f7:86:34:e4: 46:40:99:64:0b:de:2b:e8:0b:3e:68:22:ff:76:d5:de:32:7e: 06:c2:67:68:83:95:b6:63:d5:31:72:64:27:c6:02:ad:4f:b9: f8:43:c4:24:f4:be:1f:b4:b4:8e:a1:4d:68:69:db:33:12:83: e9:d1:c0:40:f0:64:4b:01:0b:2d:f5:c7:dd:4c:c0:46:28:e7: f1:17:cf:1b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE88xNNf4fFz71vaZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI2MDkyMDEyMDAyNFoXDTI2MDkyMjEyMDAwMFowLzEtMCsGA1UEAxMk NjBkN2U2MmUtMWI5YS00NzVlLWE5MWMtNjkxNjRhMGExMDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CA4ZnmLbBF8w2NZnps6EFxIq4xBLqtXwJbi fiaBe+iyFZ+Mlnn2Zm7zpNax87zN9hK1hWUq3GkbaAIJi/7NWcWfcsxDFgQJrgCq kklD4v/EDoxxdeC7E5uG9Y/Gbn3EGHOAtmROx/KyVl1IjtCrCkXEa7TbpbrCtWYh 2K5L9wxwrAVc+wU0zEW2Kqhbc7BR5S5L60flynsnqOI7ZiZRrDwOzKrsVlMU5Ktf k7kRyo7CjpFTtr8O2XkNaS/5aWoTjuAATPTrX1DgHqjhs82NfL7+ZQlV0VMiRDkI Hc1qppvL/BiEeTOhQDeuYmdY2sjeL1VJzXj6uWYVxAzglH8l5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ9RZAUXayom/NF9FxrysXJRAv6mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANEbtRNXD3QloPR4goE18S 1A5iPS36v/gUl4IcC9AVgcjaBrNP1felTKHtzFIxDOkxGwK9P+kpDMGjcb3Vy/eU XMjK9Ahq207Et7td2CxvDA/Dr8tx12/EbPlRDQktFAYaOaq5UwHsrvUkZq8PmOnX EGmKqMgf+hf5O0LwSk4enLSvtlFAVeicpEQVcSS6+UqxP9s0kn6DtL8wPHn4i5pV zwt/td8xPXvSxXAzjGE8TveGNORGQJlkC94r6As+aCL/dtXeMn4Gwmdog5W2Y9Ux cmQnxgKtT7n4Q8Qk9L4ftLSOoU1oadszEoPp0cBA8GRLAQst9cfdTMBGKOfxF88b -----END CERTIFICATE-----Generated at Sun Sep 20 17:59:14 2026 by rpki-client