$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft File: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft (raw, json) Hash identifier: +62Exg+/vbl09L2vJ3FeV4imYcTa0x7mEQZTq2gUmQw= Subject key identifier: D7:4A:5E:AC:38:E4:2A:3E:06:D0:B3:27:96:4D:12:10:C5:E5:7C:D6 Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 Certificate issuer: /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Certificate serial: 010D0C9F4328584FBB71A30895F9DDC3AB32C000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft Manifest number: 010D0C9F43285849DA9CE5EFC966AA9E1974D244 Signing time: Wed 04 Nov 2026 21:00:25 +0000 Manifest this update: Wed 04 Nov 2026 21:00:25 +0000 Manifest next update: Fri 06 Nov 2026 21:00:00 +0000 Files and hashes: 1: 2e73e149-085f-345e-acd0-10867059c3f9.roa (hash: uwLHcUrU8T59nyl1l+3peDvgkC290MUJNkJnSDrcH0M=) 2: 389cc261-cf0d-329f-ad46-5a405e8a611e.roa (hash: z5o4aIoFOqJRpxrFvwd3MYBH95ssqG+seNavC0OnJTE=) 3: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl (hash: tAqeQsbV8mAoN7MbMh/RfssesIFr9STmSqTB0wEWNLA=) 4: fbbba54b-950b-302b-a65a-9cf427e72454.roa (hash: fQnPUXYHxA3uHd1wc/VtyrKxc8ZRowE5ZkCE7mWPt7A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:bb:71:a3:08:95:f9:dd:c3:ab:32:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Validity Not Before: Nov 4 21:00:25 2026 GMT Not After : Nov 6 21:00:00 2026 GMT Subject: CN=a1153438-bd2f-4ca9-a2a4-d6971fcccb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f2:e4:f3:3a:3b:e0:a7:b8:24:a0:40:5b:77: 1a:21:fb:c1:be:60:05:d5:96:e4:90:db:56:fe:4c: bb:5b:58:a1:fa:38:42:9d:9d:b1:d1:a5:70:d8:1e: fc:e9:18:5c:67:f2:78:74:b5:38:bf:6c:ef:24:d3: be:4a:a6:4f:85:32:c2:72:da:47:39:3c:75:a5:72: 4b:78:30:0c:e5:c0:6a:d5:e9:85:50:84:cb:b2:dd: a1:3e:c9:8d:6c:b2:b2:d1:3e:89:b9:c2:e9:a5:17: 2e:81:91:d9:0c:b1:35:cc:09:94:f3:f7:4f:ae:7a: 5e:ad:52:9f:d0:81:fa:86:3d:d0:6a:2e:46:50:8b: 8e:75:55:0a:00:59:19:77:2c:d4:1a:50:46:ea:00: ad:43:fa:5b:72:01:c7:2d:71:2b:63:6c:65:7b:67: 19:04:ff:8e:49:f7:91:41:af:63:e0:58:33:c7:40: ab:21:59:73:10:fb:a8:93:ff:b3:c9:0f:9e:76:ce: 27:62:9b:e9:f9:14:8e:fa:82:b9:77:c8:2d:7b:c9: 33:89:f1:63:46:ea:e1:85:6d:93:0b:ef:f4:5e:08: 0e:83:df:e6:23:3e:bd:e0:23:49:cb:1b:68:02:2a: d9:18:6d:67:5c:ee:bf:84:17:b1:f9:f5:a7:ce:56: 79:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4A:5E:AC:38:E4:2A:3E:06:D0:B3:27:96:4D:12:10:C5:E5:7C:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl X509v3 Authority Key Identifier: keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:cd:3f:4a:9b:1e:c8:08:78:f8:5e:f1:d1:8e:07:f9:ca:02: ea:a7:87:c4:1b:20:eb:13:71:0e:d5:74:95:61:f1:b3:98:10: 72:c1:0b:62:7b:79:1c:78:37:ac:b9:38:a5:a9:22:9e:4a:26: 28:f2:ec:69:bb:c3:49:d0:50:bb:a3:ad:25:42:c3:0d:89:06: f6:57:2f:00:0c:fb:e4:99:09:09:86:a2:48:8e:b5:62:dd:ae: ee:3b:c4:c4:26:5b:77:47:a2:93:63:13:24:01:d2:8c:73:af: 44:70:a7:83:c2:2d:e0:24:a8:73:62:d6:d2:e9:14:fb:c2:4a: 11:89:b5:aa:90:fc:e4:ee:fd:23:bf:9b:4d:e9:d2:d2:76:ef: 30:a5:25:2e:1b:ca:95:91:e0:3c:44:ef:a2:16:83:e7:25:85: e0:e2:92:41:67:6f:19:05:95:8a:cd:a0:c9:1a:6e:60:59:ce: 3f:e3:fd:4c:eb:58:e1:2c:16:73:f1:3f:1d:a7:f6:dc:1f:e9: d8:2e:ea:db:00:88:37:83:2b:06:ec:84:d7:18:a6:81:c4:31: bc:04:3f:b2:c1:18:6a:be:a8:53:0e:9e:93:6f:87:1e:ff:24: 30:eb:98:1d:55:53:51:bd:82:ac:a2:48:9f:7e:b5:d1:2f:ab: 07:c1:f9:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+7caMIlfndw6sywAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M4YTk3MWYtZDdkYy00ZTk1LWJjNmUtYTBkYjE1Zjgw YTg0MB4XDTI2MTEwNDIxMDAyNVoXDTI2MTEwNjIxMDAwMFowLzEtMCsGA1UEAxMk YTExNTM0MzgtYmQyZi00Y2E5LWEyYTQtZDY5NzFmY2NjYjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofLk8zo74Ke4JKBAW3caIfvBvmAF1ZbkkNtW /ky7W1ih+jhCnZ2x0aVw2B786RhcZ/J4dLU4v2zvJNO+SqZPhTLCctpHOTx1pXJL eDAM5cBq1emFUITLst2hPsmNbLKy0T6JucLppRcugZHZDLE1zAmU8/dPrnperVKf 0IH6hj3Qai5GUIuOdVUKAFkZdyzUGlBG6gCtQ/pbcgHHLXErY2xle2cZBP+OSfeR Qa9j4Fgzx0CrIVlzEPuok/+zyQ+eds4nYpvp+RSO+oK5d8gte8kzifFjRurhhW2T C+/0XggOg9/mIz694CNJyxtoAirZGG1nXO6/hBex+fWnzlZ5MQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNdKXqw45Co+BtCzJ5ZNEhDF5XzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhh OTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVmODBhODQvM2M4YTk3MWYtZDdkYy00 ZTk1LWJjNmUtYTBkYjE1ZjgwYTg0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2M4YTk3MWYtZDdkYy00ZTk1LWJj NmUtYTBkYjE1ZjgwYTg0LzNjOGE5NzFmLWQ3ZGMtNGU5NS1iYzZlLWEwZGIxNWY4 MGE4NC5jcmwwHwYDVR0jBBgwFoAUufpX3ttk7SBqXo1BLS6GNNdjSxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRi MTVmODBhODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCdzT9Kmx7ICHj4XvHRjgf5 ygLqp4fEGyDrE3EO1XSVYfGzmBBywQtie3kceDesuTilqSKeSiYo8uxpu8NJ0FC7 o60lQsMNiQb2Vy8ADPvkmQkJhqJIjrVi3a7uO8TEJlt3R6KTYxMkAdKMc69EcKeD wi3gJKhzYtbS6RT7wkoRibWqkPzk7v0jv5tN6dLSdu8wpSUuG8qVkeA8RO+iFoPn JYXg4pJBZ28ZBZWKzaDJGm5gWc4/4/1M61jhLBZz8T8dp/bcH+nYLurbAIg3gysG 7ITXGKaBxDG8BD+ywRhqvqhTDp6Tb4ce/yQw65gdVVNRvYKsokiffrXRL6sHwfkO -----END CERTIFICATE-----Generated at Thu Nov 5 14:32:05 2026 by rpki-client