$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft File: 86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft (raw, json) Hash identifier: +UuAbLvpGuEAFKb2xm6gDN56EL4FsE8ZFvUmvbO9ikw= Subject key identifier: 3C:91:4F:42:81:F8:66:8D:A1:03:68:CE:E2:84:6D:F8:F3:F8:68:BC Authority key identifier: B3:D1:A1:D5:30:D9:AB:D6:2C:FD:F1:3C:B7:08:3F:DF:CA:4C:A6:00 Certificate issuer: /CN=86b3d251-3b5e-4f85-be32-3f374c1f4cf4 Certificate serial: 010D0C9F4328584D6B9861CE19C709FCB4600580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft Manifest number: 010D0C9F4328584B2C8C5EB92E1CB01265A794CF Signing time: Mon 06 Apr 2026 21:00:03 +0000 Manifest this update: Mon 06 Apr 2026 21:00:03 +0000 Manifest next update: Thu 09 Apr 2026 21:00:00 +0000 Files and hashes: 1: 86b3d251-3b5e-4f85-be32-3f374c1f4cf4.crl (hash: RDZtN8H19c6gFOxD2UWkR5Ba6rYck5xH3cJ79SlCQw4=) 2: a9ee0678-5480-306d-82fa-bb7c0e1410fe.roa (hash: 5OCVf3rElGUkK/HL1Lvr0u2s1uzQK9E2vvXUKPMuBmo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:98:61:ce:19:c7:09:fc:b4:60:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b3d251-3b5e-4f85-be32-3f374c1f4cf4 Validity Not Before: Apr 6 21:00:03 2026 GMT Not After : Apr 9 21:00:00 2026 GMT Subject: CN=aa17979b-58ae-4b79-a7fe-12f0375fbaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:05:de:30:fb:8a:1c:dc:ba:3b:24:de:79:76: b2:34:ed:c6:e7:71:ed:00:d7:9a:55:57:e7:64:5b: 3a:6b:f5:5e:54:37:86:bc:07:a5:5f:f2:66:62:c9: 1f:cd:b5:6a:3a:bb:2c:66:33:0d:25:0d:b5:a8:1f: 16:a6:d9:39:10:65:0d:15:d3:99:7b:eb:5a:f1:cb: c6:22:85:30:91:01:cd:b5:a6:c9:c1:32:15:c7:d0: a1:ed:ea:80:5a:4a:0a:7d:fe:3e:70:ce:d5:11:02: 48:79:7f:90:73:93:87:0f:24:ab:c1:e0:5f:6b:3c: 69:34:5b:e3:c1:f6:98:aa:ed:df:42:df:68:6e:27: db:75:e2:c1:b0:e4:dc:4d:b8:20:60:14:40:46:b5: f2:4c:e1:53:63:2b:0a:f6:21:7c:73:77:a1:6c:9c: 85:f7:72:e1:b1:65:82:ab:a7:11:a6:c0:a8:0e:38: 56:ff:98:e5:40:c2:b9:ed:a3:dc:a7:40:28:36:93: 91:13:c0:29:b2:5d:d7:59:86:41:b2:86:03:fd:51: b5:9b:11:7e:57:f3:03:13:12:a4:30:61:5d:ea:6c: 94:22:72:f3:1e:9d:9f:82:b4:b6:6f:0f:c8:45:d6: bb:f2:e9:9b:84:c6:ac:5b:72:7c:9f:65:52:a2:67: 7d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:91:4F:42:81:F8:66:8D:A1:03:68:CE:E2:84:6D:F8:F3:F8:68:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.crl X509v3 Authority Key Identifier: keyid:B3:D1:A1:D5:30:D9:AB:D6:2C:FD:F1:3C:B7:08:3F:DF:CA:4C:A6:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:54:74:6d:52:1d:5c:6b:74:8c:4e:47:55:9c:89:a0:9c:d9: 38:cf:11:7e:f3:e4:71:71:40:ba:31:1b:7b:c6:3a:1b:5e:b6: d4:2e:1e:8f:40:4f:55:08:40:73:39:a5:92:6b:36:bc:af:98: cd:11:32:cf:f9:c0:df:e9:9e:b6:88:70:e6:25:81:48:14:e6: b5:75:f0:b2:6f:ce:fc:13:9d:97:af:86:b7:42:8f:22:38:60: cd:ed:88:b4:b4:57:c0:f0:12:dd:f8:d8:13:3f:97:dd:ec:4f: 39:05:1d:ca:03:a8:9b:4d:a0:c1:cc:f0:eb:f8:28:27:c8:97: c2:16:43:35:eb:d2:5d:fc:80:78:4a:b2:8b:fe:0e:cf:1b:b3: 63:8d:cc:cb:ce:68:41:c7:b4:87:04:d6:af:85:8b:9c:90:69: 59:32:d4:b6:5f:f2:52:a2:f1:ba:65:d5:ca:97:47:98:af:25: f4:19:40:80:e7:92:d9:de:6f:6d:4d:f9:f2:d5:e6:0b:f9:5d: d4:91:dc:35:38:04:8f:1b:72:f3:f3:47:84:87:22:12:eb:6c: db:9b:2f:1b:5a:4e:41:0c:24:6e:c0:69:b3:c4:c6:28:43:3c: 34:78:1b:44:e3:3f:42:2d:9a:99:78:cc:fc:0e:e9:5b:02:18: 7d:70:fe:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1rmGHOGccJ/LRgBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiM2QyNTEtM2I1ZS00Zjg1LWJlMzItM2YzNzRjMWY0 Y2Y0MB4XDTI2MDQwNjIxMDAwM1oXDTI2MDQwOTIxMDAwMFowLzEtMCsGA1UEAxMk YWExNzk3OWItNThhZS00Yjc5LWE3ZmUtMTJmMDM3NWZiYWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QXeMPuKHNy6OyTeeXayNO3G53HtANeaVVfn ZFs6a/VeVDeGvAelX/JmYskfzbVqOrssZjMNJQ21qB8Wptk5EGUNFdOZe+ta8cvG IoUwkQHNtabJwTIVx9Ch7eqAWkoKff4+cM7VEQJIeX+Qc5OHDySrweBfazxpNFvj wfaYqu3fQt9obifbdeLBsOTcTbggYBRARrXyTOFTYysK9iF8c3ehbJyF93LhsWWC q6cRpsCoDjhW/5jlQMK57aPcp0AoNpORE8Apsl3XWYZBsoYD/VG1mxF+V/MDExKk MGFd6myUInLzHp2fgrS2bw/IRda78umbhMasW3J8n2VSomd9IwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDyRT0KB+GaNoQNozuKEbfjz+Gi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84NmIz ZDI1MS0zYjVlLTRmODUtYmUzMi0zZjM3NGMxZjRjZjQvODZiM2QyNTEtM2I1ZS00 Zjg1LWJlMzItM2YzNzRjMWY0Y2Y0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODZiM2QyNTEtM2I1ZS00Zjg1LWJl MzItM2YzNzRjMWY0Y2Y0Lzg2YjNkMjUxLTNiNWUtNGY4NS1iZTMyLTNmMzc0YzFm NGNmNC5jcmwwHwYDVR0jBBgwFoAUs9Gh1TDZq9Ys/fE8twg/38pMpgAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84NmIzZDI1MS0zYjVlLTRmODUtYmUzMi0zZjM3 NGMxZjRjZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJVHRtUh1ca3SMTkdVnImg nNk4zxF+8+RxcUC6MRt7xjobXrbULh6PQE9VCEBzOaWSaza8r5jNETLP+cDf6Z62 iHDmJYFIFOa1dfCyb878E52Xr4a3Qo8iOGDN7Yi0tFfA8BLd+NgTP5fd7E85BR3K A6ibTaDBzPDr+CgnyJfCFkM169Jd/IB4SrKL/g7PG7NjjczLzmhBx7SHBNavhYuc kGlZMtS2X/JSovG6ZdXKl0eYryX0GUCA55LZ3m9tTfny1eYL+V3Ukdw1OASPG3Lz 80eEhyIS62zbmy8bWk5BDCRuwGmzxMYoQzw0eBtE4z9CLZqZeMz8DulbAhh9cP7i -----END CERTIFICATE-----Generated at Tue Apr 7 15:06:45 2026 by rpki-client