$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft File: 86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft (raw, json) Hash identifier: GCLAcKxV4XAMS/wLRt2Bpil6PMs68F6CF3QrCI7QHN0= Subject key identifier: 57:0B:41:2E:5A:21:6E:A1:79:00:4D:49:AD:AD:3C:C9:3B:E1:99:8F Authority key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Certificate issuer: /CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Certificate serial: 010D0C9F4328584EF1F9432DF644F86E28E6E480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft Manifest number: 010D0C9F432858492FFDC9CA712E0CA721145823 Signing time: Mon 24 Aug 2026 17:00:23 +0000 Manifest this update: Mon 24 Aug 2026 17:00:23 +0000 Manifest next update: Thu 27 Aug 2026 17:00:00 +0000 Files and hashes: 1: 435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa (hash: HYzlARhvSoYjLF6IPwvzsLIPV9I84/H1uZSpweajbJ0=) 2: 86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl (hash: ANKFc7eqYuxW5zNa6AFg+7/WkgpYFROwegLu/2AcShI=) 3: b3ccf0c7-cf0f-3b39-a7f4-852d1385aad7.roa (hash: VYJGPYRgWVLg9g9Tjzy+Vm42+W4NBtvtN3mnQRvEtnQ=) 4: ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa (hash: aXDQKs1Zdv9DM6PmuN/Xf31jzslvlhW5rvj3qYV0qPc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:f9:43:2d:f6:44:f8:6e:28:e6:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Validity Not Before: Aug 24 17:00:23 2026 GMT Not After : Aug 27 17:00:00 2026 GMT Subject: CN=ff477c73-3290-4203-a586-0462b840c339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:88:27:39:43:d8:df:23:02:c6:28:a1:a1:8b: 2e:56:1c:ff:c7:1c:11:f0:94:98:13:97:83:3a:ea: c5:49:a4:03:cd:a3:85:46:ad:b5:fc:05:9d:e9:49: 48:76:0a:4f:c8:f1:74:c4:22:ff:64:ef:52:bd:af: 30:c4:8c:0d:94:a2:7f:94:5c:d0:29:57:a8:15:90: 06:20:23:bb:83:27:9d:4a:fd:46:51:a3:0c:56:b4: b6:98:ac:6e:57:5a:65:b3:fd:af:71:ec:9c:18:ef: f6:20:ad:7f:a8:ad:28:67:48:fd:fc:bb:b8:39:3e: 32:40:89:fb:b0:8a:97:70:d7:a1:f9:b2:a5:b9:19: be:b6:d7:c5:d3:c6:31:85:f0:9c:ae:7f:77:f9:a7: 08:db:1f:c8:44:d0:82:9f:36:25:27:9e:02:01:d9: 7c:6c:0a:97:0c:d6:45:69:e8:5f:7a:fd:51:30:99: 27:0e:87:97:b7:1e:b1:37:d5:b1:ea:58:a7:4e:f0: d0:66:14:8d:70:03:2f:b5:64:08:4b:bd:fe:3a:1d: b2:1f:a7:d1:13:a2:c4:fd:43:c7:71:b3:80:1a:d7: e7:09:23:c5:cb:8c:be:06:94:3b:c7:0f:eb:89:a9: 86:94:59:57:db:62:61:c2:75:fd:36:db:23:d3:fd: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0B:41:2E:5A:21:6E:A1:79:00:4D:49:AD:AD:3C:C9:3B:E1:99:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl X509v3 Authority Key Identifier: keyid:6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:83:bf:8e:ac:8e:c8:bd:1c:c4:38:c1:d9:17:7c:65:a5:e4: 02:ca:12:64:f5:c6:14:34:43:5b:35:21:6c:06:f3:8e:b9:48: d9:77:b8:29:93:18:b8:70:ad:bc:2f:be:59:49:29:1c:af:26: 14:83:31:59:a4:a5:1a:11:ec:b6:50:4e:cf:b8:c8:fe:b2:c4: e6:18:56:34:ac:5c:74:2c:1b:f0:51:e4:25:ef:9d:dc:7c:1a: f3:54:3a:8d:f5:41:9b:dd:39:3e:ec:0a:c5:9b:67:93:da:9e: ef:a6:82:d2:e6:c5:d9:35:66:60:de:37:30:9f:c5:c1:68:e0: aa:eb:8e:2c:f8:e3:d4:3e:de:0f:9c:a4:34:77:d0:f4:c5:ee: 91:b4:ba:8e:9e:07:37:76:d4:ce:e0:b7:ca:c8:f8:2e:70:e4: 25:4e:6c:5b:fc:a5:19:ec:c1:aa:12:6b:14:67:b8:40:6f:e6: d0:6f:7e:15:2e:19:6c:e0:a4:58:9f:4b:55:a0:c1:42:61:5d: 97:07:d9:e0:90:4f:b0:94:4e:66:10:43:c0:05:9c:95:a9:b9: 14:38:c9:23:eb:78:a3:2c:0a:71:f2:eb:12:02:d3:08:fb:d0: 62:d7:fb:bb:90:74:0a:f8:50:55:0a:ff:9e:7c:57:5e:38:a9: 36:eb:e6:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7x+UMt9kT4bijm5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmNWNkOGEtZjkwMy00MTc2LTk3YTctNjY3MWU0OWIx YzliMB4XDTI2MDgyNDE3MDAyM1oXDTI2MDgyNzE3MDAwMFowLzEtMCsGA1UEAxMk ZmY0NzdjNzMtMzI5MC00MjAzLWE1ODYtMDQ2MmI4NDBjMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnognOUPY3yMCxiihoYsuVhz/xxwR8JSYE5eD OurFSaQDzaOFRq21/AWd6UlIdgpPyPF0xCL/ZO9Sva8wxIwNlKJ/lFzQKVeoFZAG ICO7gyedSv1GUaMMVrS2mKxuV1pls/2vceycGO/2IK1/qK0oZ0j9/Lu4OT4yQIn7 sIqXcNeh+bKluRm+ttfF08YxhfCcrn93+acI2x/IRNCCnzYlJ54CAdl8bAqXDNZF aehfev1RMJknDoeXtx6xN9Wx6linTvDQZhSNcAMvtWQIS73+Oh2yH6fRE6LE/UPH cbOAGtfnCSPFy4y+BpQ7xw/riamGlFlX22JhwnX9Ntsj0/3l4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFcLQS5aIW6heQBNSa2tPMk74ZmPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmY1 Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5YjFjOWIvODZmNWNkOGEtZjkwMy00 MTc2LTk3YTctNjY3MWU0OWIxYzliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZmNWNkOGEtZjkwMy00MTc2LTk3 YTctNjY3MWU0OWIxYzliLzg2ZjVjZDhhLWY5MDMtNDE3Ni05N2E3LTY2NzFlNDli MWM5Yi5jcmwwHwYDVR0jBBgwFoAUajTL2XXyS8rb791JQFJ7g8nK5UEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02Njcx ZTQ5YjFjOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4g7+OrI7IvRzEOMHZF3xl peQCyhJk9cYUNENbNSFsBvOOuUjZd7gpkxi4cK28L75ZSSkcryYUgzFZpKUaEey2 UE7PuMj+ssTmGFY0rFx0LBvwUeQl753cfBrzVDqN9UGb3Tk+7ArFm2eT2p7vpoLS 5sXZNWZg3jcwn8XBaOCq644s+OPUPt4PnKQ0d9D0xe6RtLqOngc3dtTO4LfKyPgu cOQlTmxb/KUZ7MGqEmsUZ7hAb+bQb34VLhls4KRYn0tVoMFCYV2XB9ngkE+wlE5m EEPABZyVqbkUOMkj63ijLApx8usSAtMI+9Bi1/u7kHQK+FBVCv+efFdeOKk26+b3 -----END CERTIFICATE-----Generated at Tue Aug 25 15:41:11 2026 by rpki-client