$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft File: 3b9b8028-72e5-488e-971c-54bd1e51f064.mft (raw, json) Hash identifier: 2YC6HCFf43j72DPb0LuuZGysdV6c4w6kkTGhrtp2syk= Subject key identifier: 1D:BC:89:19:37:94:5E:DA:A8:25:B2:1A:E4:6E:01:FE:55:C4:7D:FE Authority key identifier: 5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD Certificate issuer: /CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Certificate serial: 010D0C9F4328584F756B0384CDB600E312D30600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft Manifest number: 010D0C9F4328584A528A8A7AC4CF3AECDE07A963 Signing time: Sat 10 Oct 2026 19:00:24 +0000 Manifest this update: Sat 10 Oct 2026 19:00:24 +0000 Manifest next update: Mon 12 Oct 2026 19:00:00 +0000 Files and hashes: 1: 31dea251-a914-3cdf-bb34-ea459b59f5b7.roa (hash: /nLHZMZYfbj087oVFR2nAlpjKB4RBV7n0XxdRDkPMpQ=) 2: 3b9b8028-72e5-488e-971c-54bd1e51f064.crl (hash: JFC1PWsIqgSjtedYRh9+Bh/KU47tsobT9IBE/KGcKig=) 3: 69651a7a-33cd-341a-9ff0-30c6489996d5.roa (hash: U3mYMca79FCo+CKNAvfvtqntzbE8/tZe5M8kkrJmOTE=) 4: d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa (hash: vhA6nv0MxgK9IbPP/P362bJEEEYuuThgS+KbIkVHJ+s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:75:6b:03:84:cd:b6:00:e3:12:d3:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Validity Not Before: Oct 10 19:00:24 2026 GMT Not After : Oct 12 19:00:00 2026 GMT Subject: CN=985e1d06-0c9f-408c-bf13-9ed775e3f80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:df:97:db:41:5a:73:10:f9:81:63:d8:37: ed:27:a7:54:22:4e:73:07:f9:5e:07:9c:cd:52:99: 57:04:e9:cd:b7:85:17:dd:31:39:a1:f8:59:e7:e4: e3:ce:d0:fa:a0:b8:03:17:75:a1:87:6c:d4:6c:ef: f7:a9:88:61:60:90:f0:d2:68:30:80:b9:d1:87:dd: 9a:d8:3e:23:9a:b9:87:dd:de:3e:12:58:81:e5:8f: 64:2b:53:93:09:19:db:ea:b8:d8:37:d3:03:af:85: 48:03:27:2a:f2:cf:3c:9a:e6:06:82:c2:6e:13:08: d3:58:7b:84:bc:df:13:ac:f6:b0:30:fa:0a:8e:87: 5a:bc:24:fa:e4:01:e5:42:b3:da:ff:29:66:a1:ef: 40:10:33:17:c8:3c:c1:04:92:a6:e0:eb:70:4e:33: aa:8d:ab:5c:38:13:4e:e4:e8:55:a1:db:87:e0:9e: 92:cd:e4:b9:37:62:de:40:00:a0:e5:d2:bb:d9:a4: 15:f9:f4:e4:05:c6:1e:78:8c:bd:82:61:ff:fb:79: c2:11:0c:e2:4b:a5:15:ad:af:cf:ca:5d:27:a5:51: fb:24:39:90:bc:15:50:28:22:c4:fe:7f:81:35:d9: cd:c6:4e:13:b8:db:68:c3:e1:52:f3:85:e5:24:31: 93:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BC:89:19:37:94:5E:DA:A8:25:B2:1A:E4:6E:01:FE:55:C4:7D:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl X509v3 Authority Key Identifier: keyid:5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:7c:5f:74:8a:31:11:8b:9e:0f:b0:05:09:02:72:b7:aa:36: 45:b3:a7:27:e6:98:3a:23:fa:01:b1:99:fa:13:c7:82:59:d6: 40:00:57:ac:ce:20:05:54:59:2a:5a:90:81:52:5b:3a:e4:a9: 3b:b2:7a:b0:ac:e3:61:4f:a5:80:e6:9d:f6:db:5e:de:4b:69: a1:04:ea:af:cc:0c:fb:dd:cb:99:89:60:1d:fa:8f:da:75:54: e4:8b:ed:92:58:4a:f7:a6:93:d6:1a:dd:35:8b:1b:c0:9f:24: ee:f1:e0:6f:a7:35:e3:65:07:69:12:34:76:20:37:44:f1:7f: fc:06:93:bd:b0:15:6c:88:fa:03:a5:05:ee:e9:c7:e9:a1:68: 11:fc:13:45:9e:a1:23:51:c3:e6:8f:1d:8a:bc:4b:f5:e2:59: f9:55:0c:85:d1:4b:b5:d6:ef:94:93:d9:0f:cd:3f:3c:11:00: 20:68:32:57:ec:01:fc:5c:b9:ae:28:dd:83:64:23:45:d7:42: f7:d7:44:f8:f0:c1:6a:f9:1a:92:67:74:70:d5:1f:c9:da:e7: 98:ac:79:d5:9f:08:a1:7f:21:c0:6f:f8:3d:fc:14:48:9b:83: e3:b1:34:10:45:b7:c6:4c:66:7c:d1:02:a4:67:ef:bc:91:f7: 28:b7:8d:8d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE91awOEzbYA4xLTBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I5YjgwMjgtNzJlNS00ODhlLTk3MWMtNTRiZDFlNTFm MDY0MB4XDTI2MTAxMDE5MDAyNFoXDTI2MTAxMjE5MDAwMFowLzEtMCsGA1UEAxMk OTg1ZTFkMDYtMGM5Zi00MDhjLWJmMTMtOWVkNzc1ZTNmODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7ffl9tBWnMQ+YFj2DftJ6dUIk5zB/leB5zN UplXBOnNt4UX3TE5ofhZ5+TjztD6oLgDF3Whh2zUbO/3qYhhYJDw0mgwgLnRh92a 2D4jmrmH3d4+EliB5Y9kK1OTCRnb6rjYN9MDr4VIAycq8s88muYGgsJuEwjTWHuE vN8TrPawMPoKjodavCT65AHlQrPa/ylmoe9AEDMXyDzBBJKm4OtwTjOqjatcOBNO 5OhVoduH4J6SzeS5N2LeQACg5dK72aQV+fTkBcYeeIy9gmH/+3nCEQziS6UVra/P yl0npVH7JDmQvBVQKCLE/n+BNdnNxk4TuNtow+FS84XlJDGT4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB28iRk3lF7aqCWyGuRuAf5VxH3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjli ODAyOC03MmU1LTQ4OGUtOTcxYy01NGJkMWU1MWYwNjQvM2I5YjgwMjgtNzJlNS00 ODhlLTk3MWMtNTRiZDFlNTFmMDY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I5YjgwMjgtNzJlNS00ODhlLTk3 MWMtNTRiZDFlNTFmMDY0LzNiOWI4MDI4LTcyZTUtNDg4ZS05NzFjLTU0YmQxZTUx ZjA2NC5jcmwwHwYDVR0jBBgwFoAUX4thMJJmpOqC+c1YDyeQVXIBqr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjliODAyOC03MmU1LTQ4OGUtOTcxYy01NGJk MWU1MWYwNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBufF90ijERi54PsAUJAnK3 qjZFs6cn5pg6I/oBsZn6E8eCWdZAAFesziAFVFkqWpCBUls65Kk7snqwrONhT6WA 5p32217eS2mhBOqvzAz73cuZiWAd+o/adVTki+2SWEr3ppPWGt01ixvAnyTu8eBv pzXjZQdpEjR2IDdE8X/8BpO9sBVsiPoDpQXu6cfpoWgR/BNFnqEjUcPmjx2KvEv1 4ln5VQyF0Uu11u+Uk9kPzT88EQAgaDJX7AH8XLmuKN2DZCNF10L310T48MFq+RqS Z3Rw1R/J2ueYrHnVnwihfyHAb/g9/BRIm4PjsTQQRbfGTGZ80QKkZ++8kfcot42N -----END CERTIFICATE-----Generated at Sun Oct 11 10:07:23 2026 by rpki-client