$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft File: 86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft (raw, json) Hash identifier: 0as1rsfNQk5hujFVAPNNvhsjfL0di3BOcr5YDGoC6vs= Subject key identifier: 41:AF:48:1B:77:F4:89:0A:B4:CC:3E:9D:BA:E1:55:A3:1D:91:75:85 Authority key identifier: B3:D1:A1:D5:30:D9:AB:D6:2C:FD:F1:3C:B7:08:3F:DF:CA:4C:A6:00 Certificate issuer: /CN=86b3d251-3b5e-4f85-be32-3f374c1f4cf4 Certificate serial: 010D0C9F4328584D4CE2DB80DD60832A39EE9100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft Manifest number: 010D0C9F4328584B2C8C5EB92E1CB01265A794C4 Signing time: Thu 26 Mar 2026 21:00:04 +0000 Manifest this update: Thu 26 Mar 2026 21:00:04 +0000 Manifest next update: Sat 28 Mar 2026 21:00:00 +0000 Files and hashes: 1: 86b3d251-3b5e-4f85-be32-3f374c1f4cf4.crl (hash: q5UYW+z/Ps749weIE/1b7OVu5mx5HSJpYnyp69fuqBI=) 2: a9ee0678-5480-306d-82fa-bb7c0e1410fe.roa (hash: 5OCVf3rElGUkK/HL1Lvr0u2s1uzQK9E2vvXUKPMuBmo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:e2:db:80:dd:60:83:2a:39:ee:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b3d251-3b5e-4f85-be32-3f374c1f4cf4 Validity Not Before: Mar 26 21:00:04 2026 GMT Not After : Mar 28 21:00:00 2026 GMT Subject: CN=cba66d17-bfbe-41d6-b919-3423f2fded51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0c:ac:dd:6e:2a:2d:be:de:68:d7:b8:c4:e9: 09:66:04:36:17:16:bc:11:09:4b:b6:dc:93:4e:65: 17:61:ef:cd:07:ba:d4:1f:7a:4f:6e:09:4c:91:a4: 3d:a0:e3:c1:10:ea:9b:30:3b:ae:ce:67:49:15:f8: e2:f9:ba:f5:bc:fa:59:27:3b:c0:bd:27:aa:c0:24: 37:27:35:6e:99:a7:c8:18:b2:00:ff:80:78:1d:16: ac:20:8f:8c:e0:bf:c0:e8:1f:c9:7c:fc:a1:50:c3: 24:54:d6:cf:5c:55:c6:2e:d3:6d:6b:4d:f7:86:5e: bf:10:d3:e2:f1:80:74:a5:53:d7:4f:c5:13:31:c3: 5e:34:95:af:6f:57:6f:40:92:d3:bc:e1:c3:4b:9c: b9:2a:b8:bc:7a:7c:79:18:88:8e:fd:f3:c2:d0:a2: 9d:f5:a3:23:df:c7:9b:48:d9:60:69:41:42:ca:4f: f0:cc:f5:6a:ec:24:44:dd:fa:05:5c:7a:64:8a:41: 48:1d:aa:b1:9e:45:91:6f:31:64:d2:dc:3d:ee:19: 85:cf:92:04:5a:95:b4:80:1e:0e:c3:d7:1e:6c:fb: 4a:07:34:b1:2d:4f:a5:3d:58:15:fb:92:22:9c:08: 41:6d:b2:2b:a5:cf:94:21:92:1d:c4:bd:4b:6a:96: 8c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AF:48:1B:77:F4:89:0A:B4:CC:3E:9D:BA:E1:55:A3:1D:91:75:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.crl X509v3 Authority Key Identifier: keyid:B3:D1:A1:D5:30:D9:AB:D6:2C:FD:F1:3C:B7:08:3F:DF:CA:4C:A6:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:cb:c3:0a:18:34:7f:3a:31:44:6d:7a:a1:c7:35:bf:ba:0b: 0a:e2:6e:20:62:95:e6:67:3c:0c:d1:05:dd:28:f6:c2:6e:a2: 76:b0:9c:54:0d:62:7f:bf:18:ea:11:3f:ac:e9:87:8f:6c:bd: b9:44:78:f4:fd:78:3c:7a:ab:2f:fe:b4:ec:92:18:92:e2:34: ee:ac:ab:10:74:b9:02:bc:fb:7b:74:cd:92:5d:e3:bd:7b:9c: bc:35:c2:1e:47:9e:3a:7f:35:fa:cd:e1:81:ba:de:10:ac:29: f6:e9:c8:15:4f:4b:e3:4b:f1:7c:41:db:aa:6a:05:2b:7b:57: 94:a1:5c:8a:46:d0:41:fa:c7:9b:79:49:04:8d:0c:a8:f0:82: 82:88:33:2c:15:87:06:31:29:14:fe:8a:6e:e2:3d:d6:d4:6f: 1e:05:9c:8e:ac:e1:38:33:75:bb:0a:d7:d7:30:bc:a1:77:3f: 65:b5:e0:12:bd:25:ae:ea:b2:25:be:e5:40:6a:15:ae:c5:8c: e6:5e:f0:de:e4:d3:2d:d0:2b:4e:e5:0b:b6:3c:54:7a:3c:88: 32:98:de:11:71:4b:bb:bd:59:c7:61:10:d3:ba:02:23:b9:39: b9:6f:e9:e5:92:f9:24:e8:62:92:a3:4b:87:78:cd:81:8d:72: b3:7d:96:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1M4tuA3WCDKjnukQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiM2QyNTEtM2I1ZS00Zjg1LWJlMzItM2YzNzRjMWY0 Y2Y0MB4XDTI2MDMyNjIxMDAwNFoXDTI2MDMyODIxMDAwMFowLzEtMCsGA1UEAxMk Y2JhNjZkMTctYmZiZS00MWQ2LWI5MTktMzQyM2YyZmRlZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Qys3W4qLb7eaNe4xOkJZgQ2Fxa8EQlLttyT TmUXYe/NB7rUH3pPbglMkaQ9oOPBEOqbMDuuzmdJFfji+br1vPpZJzvAvSeqwCQ3 JzVumafIGLIA/4B4HRasII+M4L/A6B/JfPyhUMMkVNbPXFXGLtNta033hl6/ENPi 8YB0pVPXT8UTMcNeNJWvb1dvQJLTvOHDS5y5Kri8enx5GIiO/fPC0KKd9aMj38eb SNlgaUFCyk/wzPVq7CRE3foFXHpkikFIHaqxnkWRbzFk0tw97hmFz5IEWpW0gB4O w9cebPtKBzSxLU+lPVgV+5IinAhBbbIrpc+UIZIdxL1LapaMhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEGvSBt39IkKtMw+nbrhVaMdkXWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84NmIz ZDI1MS0zYjVlLTRmODUtYmUzMi0zZjM3NGMxZjRjZjQvODZiM2QyNTEtM2I1ZS00 Zjg1LWJlMzItM2YzNzRjMWY0Y2Y0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODZiM2QyNTEtM2I1ZS00Zjg1LWJl MzItM2YzNzRjMWY0Y2Y0Lzg2YjNkMjUxLTNiNWUtNGY4NS1iZTMyLTNmMzc0YzFm NGNmNC5jcmwwHwYDVR0jBBgwFoAUs9Gh1TDZq9Ys/fE8twg/38pMpgAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84NmIzZDI1MS0zYjVlLTRmODUtYmUzMi0zZjM3 NGMxZjRjZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALy8MKGDR/OjFEbXqhxzW/ ugsK4m4gYpXmZzwM0QXdKPbCbqJ2sJxUDWJ/vxjqET+s6YePbL25RHj0/Xg8eqsv /rTskhiS4jTurKsQdLkCvPt7dM2SXeO9e5y8NcIeR546fzX6zeGBut4QrCn26cgV T0vjS/F8QduqagUre1eUoVyKRtBB+sebeUkEjQyo8IKCiDMsFYcGMSkU/opu4j3W 1G8eBZyOrOE4M3W7CtfXMLyhdz9lteASvSWu6rIlvuVAahWuxYzmXvDe5NMt0CtO 5Qu2PFR6PIgymN4RcUu7vVnHYRDTugIjuTm5b+nlkvkk6GKSo0uHeM2BjXKzfZb3 -----END CERTIFICATE-----Generated at Fri Mar 27 04:59:11 2026 by rpki-client