$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.mft File: 86025be1-eb4b-4cf7-8cfe-9e4f5311802d.mft (raw, json) Hash identifier: P1lIWApBczBkomuCRpj9BUhgAWWF5X/Jv+930u99R3M= Subject key identifier: 75:31:0B:2D:11:0E:CF:24:B7:49:AD:78:D9:DC:62:FC:EE:A3:A5:F4 Authority key identifier: D9:75:3A:AC:0C:1F:CB:B4:06:00:A9:4F:34:E1:96:5C:7D:A3:E4:1A Certificate issuer: /CN=86025be1-eb4b-4cf7-8cfe-9e4f5311802d Certificate serial: 010D0C9F4328584F9155C92B02B507A93DE229F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.mft Manifest number: 010D0C9F43285841132A5ED76FFFD6C9B9D59BB3 Signing time: Tue 20 Oct 2026 19:00:24 +0000 Manifest this update: Tue 20 Oct 2026 19:00:24 +0000 Manifest next update: Thu 22 Oct 2026 19:00:00 +0000 Files and hashes: 1: 11aa7ee6-0eb3-3390-8485-1b2c29b4cc49.roa (hash: Ky15qC/e5wqS26obss4p26ys6e6CVDkCUwgFZ57z3lo=) 2: 86025be1-eb4b-4cf7-8cfe-9e4f5311802d.crl (hash: +XIGFqdzL4GrH7772yrWbuUT2jFQSpN+KhEHCIhPPKk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:91:55:c9:2b:02:b5:07:a9:3d:e2:29:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86025be1-eb4b-4cf7-8cfe-9e4f5311802d Validity Not Before: Oct 20 19:00:24 2026 GMT Not After : Oct 22 19:00:00 2026 GMT Subject: CN=86bc8b8c-bd7b-4e20-ae29-3196a21d629e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:76:b0:82:24:92:83:f6:9b:6c:c0:a7:b6: e1:4e:95:86:38:d8:1e:da:30:06:87:3f:da:2a:11: bd:bf:57:39:61:3d:2c:0a:f1:a5:42:b1:13:f0:13: e0:4f:75:08:b8:87:8f:d8:74:de:b4:a5:d4:33:52: aa:58:47:c4:b2:b9:2d:c6:e5:88:94:a7:2a:0d:7b: 1e:4d:55:b6:b8:c1:7d:f8:e8:16:e3:f6:cd:3c:e7: 26:5c:4b:52:70:fa:dc:06:94:84:19:e1:ba:95:f0: b7:0e:67:5c:84:0f:d3:89:1a:1e:a2:5c:87:30:43: 30:fd:be:a1:b0:f5:59:65:7a:45:67:72:97:3b:3c: f4:75:d9:60:b4:5b:c2:99:d8:1c:65:a4:39:b9:3b: 54:f3:86:68:3d:30:2d:c0:af:76:7c:69:8b:53:4b: 52:f1:0d:de:5e:35:d9:17:97:5c:fd:43:05:7c:c0: a5:38:53:0f:70:cf:3d:59:d7:4a:6d:e2:47:58:d3: 27:a1:02:2e:87:a5:90:ef:da:77:4d:19:dc:88:46: 30:16:9a:79:a3:5e:3c:07:85:23:2f:6f:b9:99:5f: dd:b1:e9:c5:53:6d:97:80:06:6e:97:9d:93:9c:30: 4c:0c:4c:26:12:26:e0:5c:1a:c2:ec:8a:53:04:c7: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:31:0B:2D:11:0E:CF:24:B7:49:AD:78:D9:DC:62:FC:EE:A3:A5:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.crl X509v3 Authority Key Identifier: keyid:D9:75:3A:AC:0C:1F:CB:B4:06:00:A9:4F:34:E1:96:5C:7D:A3:E4:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86025be1-eb4b-4cf7-8cfe-9e4f5311802d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5b:d3:3c:8c:96:68:d3:e1:04:c1:06:2f:f3:45:a6:70:98: ec:62:16:1b:bf:aa:eb:08:a4:84:41:20:2b:fc:76:dd:1d:5b: a9:17:75:65:a2:9a:6c:b5:be:63:51:fe:6f:69:43:01:53:e2: 3b:ee:14:b2:b4:6d:e2:05:47:3f:03:ac:1d:5f:ac:81:ea:58: 54:16:0e:1e:5b:75:f9:06:cb:b6:3c:e9:36:44:2b:9f:b8:82: 14:8f:e6:c6:e7:df:0f:24:e4:e2:83:43:ae:2d:b9:44:c8:ae: c9:57:b6:83:61:7f:dd:db:be:51:d5:ed:8f:53:bc:11:0d:21: 3b:4a:b3:80:37:83:47:b5:2e:6e:0b:84:30:59:a0:f3:17:d3: a6:4c:09:4e:cc:db:d8:c7:35:df:92:11:ad:cc:b8:eb:92:7b: 68:f6:7a:2e:4d:9d:eb:87:94:b9:0d:1c:7c:e0:4e:ad:36:e0: 59:38:be:c1:6d:82:00:8f:82:b5:61:89:a8:ec:ba:54:bd:30: 29:c1:5d:51:83:27:d2:0b:7b:fc:3d:ee:1d:3c:75:b1:78:d9: eb:cf:e8:44:fe:3c:50:ec:8b:af:bd:c0:30:df:9c:52:db:58: 3a:8f:da:bc:de:86:d3:fe:1b:da:3b:6c:be:33:83:81:cb:66: 88:40:85:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+RVckrArUHqT3iKfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYwMjViZTEtZWI0Yi00Y2Y3LThjZmUtOWU0ZjUzMTE4 MDJkMB4XDTI2MTAyMDE5MDAyNFoXDTI2MTAyMjE5MDAwMFowLzEtMCsGA1UEAxMk ODZiYzhiOGMtYmQ3Yi00ZTIwLWFlMjktMzE5NmEyMWQ2MjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzol2sIIkkoP2m2zAp7bhTpWGONge2jAGhz/a KhG9v1c5YT0sCvGlQrET8BPgT3UIuIeP2HTetKXUM1KqWEfEsrktxuWIlKcqDXse TVW2uMF9+OgW4/bNPOcmXEtScPrcBpSEGeG6lfC3DmdchA/TiRoeolyHMEMw/b6h sPVZZXpFZ3KXOzz0ddlgtFvCmdgcZaQ5uTtU84ZoPTAtwK92fGmLU0tS8Q3eXjXZ F5dc/UMFfMClOFMPcM89WddKbeJHWNMnoQIuh6WQ79p3TRnciEYwFpp5o148B4Uj L2+5mV/dsenFU22XgAZul52TnDBMDEwmEibgXBrC7IpTBMeIiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHUxCy0RDs8kt0mteNncYvzuo6X0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NjAy NWJlMS1lYjRiLTRjZjctOGNmZS05ZTRmNTMxMTgwMmQvODYwMjViZTEtZWI0Yi00 Y2Y3LThjZmUtOWU0ZjUzMTE4MDJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODYwMjViZTEtZWI0Yi00Y2Y3LThj ZmUtOWU0ZjUzMTE4MDJkLzg2MDI1YmUxLWViNGItNGNmNy04Y2ZlLTllNGY1MzEx ODAyZC5jcmwwHwYDVR0jBBgwFoAU2XU6rAwfy7QGAKlPNOGWXH2j5BowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NjAyNWJlMS1lYjRiLTRjZjctOGNmZS05ZTRm NTMxMTgwMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADW9M8jJZo0+EEwQYv80Wm cJjsYhYbv6rrCKSEQSAr/HbdHVupF3Vloppstb5jUf5vaUMBU+I77hSytG3iBUc/ A6wdX6yB6lhUFg4eW3X5Bsu2POk2RCufuIIUj+bG598PJOTig0OuLblEyK7JV7aD YX/d275R1e2PU7wRDSE7SrOAN4NHtS5uC4QwWaDzF9OmTAlOzNvYxzXfkhGtzLjr knto9nouTZ3rh5S5DRx84E6tNuBZOL7BbYIAj4K1YYmo7LpUvTApwV1RgyfSC3v8 Pe4dPHWxeNnrz+hE/jxQ7IuvvcAw35xS21g6j9q83obT/hvaO2y+M4OBy2aIQIVA -----END CERTIFICATE-----Generated at Wed Oct 21 21:04:33 2026 by rpki-client