$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft File: 86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft (raw, json) Hash identifier: j9aaRtThXkTOEBjqfz0U/N7P76I00ezv5WP3ae1tw/w= Subject key identifier: CB:54:EC:BF:18:00:1A:ED:58:FC:A6:A1:8C:D7:9E:C4:39:22:AD:12 Authority key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Certificate issuer: /CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Certificate serial: 010D0C9F4328584D4F366C98F037AC90DB568480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft Manifest number: 010D0C9F432858492FFDC9CA712E0CA721145786 Signing time: Fri 27 Mar 2026 17:00:04 +0000 Manifest this update: Fri 27 Mar 2026 17:00:04 +0000 Manifest next update: Mon 30 Mar 2026 17:00:00 +0000 Files and hashes: 1: 435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa (hash: KolBCrPMKmWsqy/aatM2VaE0WEKnGJW76AgTfBswOYw=) 2: 86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl (hash: u1tkvMqVo8D4hYDFwhWfqa7kfdUbTCycRAk3VVQXatw=) 3: b3ccf0c7-cf0f-3b39-a7f4-852d1385aad7.roa (hash: J7gGsJZNo6HaG3hMXjK6r65IXKoQdojuqyQQkvxZZcY=) 4: ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa (hash: Apj5l2ZyTjryNBF/7ewTUOF8CyA0NQA0+qlw9ikJWaM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:36:6c:98:f0:37:ac:90:db:56:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Validity Not Before: Mar 27 17:00:04 2026 GMT Not After : Mar 30 17:00:00 2026 GMT Subject: CN=820e5ea6-c0a3-4eb0-bffc-19169c4a9e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:97:a8:11:a8:f0:26:d1:f2:02:90:98:1c:8c: 54:10:4b:31:01:af:0f:21:47:7f:45:24:82:02:4f: 16:ee:d5:0a:d6:8b:82:d8:cd:17:5a:58:7a:12:61: d3:0f:74:a7:24:9e:2b:78:72:74:fd:90:e6:dc:03: d1:b3:35:30:3c:7c:b1:65:cd:0c:0a:a6:6c:d6:18: da:49:c5:49:0c:a0:b0:44:a0:44:8d:c4:6b:20:00: 88:43:df:61:86:f9:a4:3a:8c:11:8c:64:e8:f0:47: 86:2b:8e:f8:78:48:83:45:91:8a:75:ff:4b:2a:da: 29:7c:28:4d:5d:ee:66:72:70:c4:3a:07:5d:03:fe: 1a:99:5a:bf:ba:96:64:77:8f:ec:38:61:c3:69:d6: 1d:04:18:f8:be:ad:8a:76:8c:e4:92:d9:41:01:f1: 3e:0e:a6:6d:61:87:4a:d4:7e:f3:c2:58:32:1d:bc: ad:9a:86:7c:e8:04:29:ec:a7:35:f1:6d:6d:65:43: 66:b7:17:0c:0a:8e:0b:1c:a0:c7:db:c9:fc:76:06: d0:3c:f7:4f:90:56:bf:72:49:78:b1:1a:01:06:a1: e2:73:04:45:5e:69:81:f8:f3:37:bb:79:a8:c5:e4: de:5c:d6:50:29:e2:e4:8d:d5:a6:74:48:5e:6b:d1: 07:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:54:EC:BF:18:00:1A:ED:58:FC:A6:A1:8C:D7:9E:C4:39:22:AD:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl X509v3 Authority Key Identifier: keyid:6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:2c:84:07:78:16:86:94:0f:1a:6e:46:c3:a4:4f:01:69:e0: 65:95:51:9b:b8:90:96:bf:c4:85:8e:56:5a:3f:8f:35:8c:cd: 7f:bd:5b:8d:27:ec:30:8c:78:a2:07:45:4c:40:0f:5a:5a:fe: 10:19:75:b9:08:39:e5:e6:8f:41:73:1e:2c:19:ac:20:f5:09: 9b:9d:f9:6f:65:dc:74:79:3a:12:23:3a:32:f3:c6:c6:ae:f2: 8f:2e:5c:52:f1:fc:86:67:35:9c:c7:c8:8c:10:8c:42:d0:cc: d9:b8:be:10:47:90:0f:38:e7:b9:69:12:59:09:8d:d8:f9:15: 81:b4:bb:92:7e:8d:0f:f9:c3:d8:f6:ec:b9:50:3a:a4:7d:90: 23:d3:8c:95:e4:87:69:fe:58:51:27:c2:95:64:fd:5c:7a:68: 8c:8c:71:33:90:e5:be:41:ca:dd:ce:68:60:7f:92:53:5f:d5: d4:2d:91:0d:72:4d:a0:3b:4d:b9:18:7d:a7:b7:47:a5:88:82: 4f:a2:43:e9:a1:86:62:bb:5b:99:a9:ee:d9:5d:8b:1c:34:e1: ff:36:84:5a:51:0d:60:52:08:d6:ce:d9:69:bf:3f:9b:ea:8d: 5c:6a:51:9a:34:99:7b:03:da:d1:da:5a:bf:31:a7:84:ae:34: 48:de:80:b2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1PNmyY8DeskNtWhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmNWNkOGEtZjkwMy00MTc2LTk3YTctNjY3MWU0OWIx YzliMB4XDTI2MDMyNzE3MDAwNFoXDTI2MDMzMDE3MDAwMFowLzEtMCsGA1UEAxMk ODIwZTVlYTYtYzBhMy00ZWIwLWJmZmMtMTkxNjljNGE5ZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JeoEajwJtHyApCYHIxUEEsxAa8PIUd/RSSC Ak8W7tUK1ouC2M0XWlh6EmHTD3SnJJ4reHJ0/ZDm3APRszUwPHyxZc0MCqZs1hja ScVJDKCwRKBEjcRrIACIQ99hhvmkOowRjGTo8EeGK474eEiDRZGKdf9LKtopfChN Xe5mcnDEOgddA/4amVq/upZkd4/sOGHDadYdBBj4vq2KdozkktlBAfE+DqZtYYdK 1H7zwlgyHbytmoZ86AQp7Kc18W1tZUNmtxcMCo4LHKDH28n8dgbQPPdPkFa/ckl4 sRoBBqHicwRFXmmB+PM3u3moxeTeXNZQKeLkjdWmdEhea9EHPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMtU7L8YABrtWPymoYzXnsQ5Iq0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmY1 Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5YjFjOWIvODZmNWNkOGEtZjkwMy00 MTc2LTk3YTctNjY3MWU0OWIxYzliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZmNWNkOGEtZjkwMy00MTc2LTk3 YTctNjY3MWU0OWIxYzliLzg2ZjVjZDhhLWY5MDMtNDE3Ni05N2E3LTY2NzFlNDli MWM5Yi5jcmwwHwYDVR0jBBgwFoAUajTL2XXyS8rb791JQFJ7g8nK5UEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02Njcx ZTQ5YjFjOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRLIQHeBaGlA8abkbDpE8B aeBllVGbuJCWv8SFjlZaP481jM1/vVuNJ+wwjHiiB0VMQA9aWv4QGXW5CDnl5o9B cx4sGawg9QmbnflvZdx0eToSIzoy88bGrvKPLlxS8fyGZzWcx8iMEIxC0MzZuL4Q R5APOOe5aRJZCY3Y+RWBtLuSfo0P+cPY9uy5UDqkfZAj04yV5Idp/lhRJ8KVZP1c emiMjHEzkOW+Qcrdzmhgf5JTX9XULZENck2gO025GH2nt0eliIJPokPpoYZiu1uZ qe7ZXYscNOH/NoRaUQ1gUgjWztlpvz+b6o1calGaNJl7A9rR2lq/MaeErjRI3oCy -----END CERTIFICATE-----Generated at Sat Mar 28 12:16:57 2026 by rpki-client