$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft File: 86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft (raw, json) Hash identifier: D/hCsUaGe1Qx/p7sFap6PHcKXuIpmtXy0bwYZxcYbdc= Subject key identifier: D7:85:9B:B5:0D:5A:8C:C7:9A:54:10:96:08:4A:A4:F5:AA:FB:70:C6 Authority key identifier: B3:D1:A1:D5:30:D9:AB:D6:2C:FD:F1:3C:B7:08:3F:DF:CA:4C:A6:00 Certificate issuer: /CN=86b3d251-3b5e-4f85-be32-3f374c1f4cf4 Certificate serial: 010D0C9F4328584F6A7BD06E8F67E1476D806880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft Manifest number: 010D0C9F4328584B2C8C5EB92E1CB01265A7958B Signing time: Tue 06 Oct 2026 21:00:25 +0000 Manifest this update: Tue 06 Oct 2026 21:00:25 +0000 Manifest next update: Thu 08 Oct 2026 21:00:00 +0000 Files and hashes: 1: 86b3d251-3b5e-4f85-be32-3f374c1f4cf4.crl (hash: BAL/oXfKjEmcZhib1jq9fWta9ljd4DPEO4Dt9chzd2w=) 2: a9ee0678-5480-306d-82fa-bb7c0e1410fe.roa (hash: Pj9EQFa9P5NlupoXnQjW4SCCS3cRq6LkE+GlEq/EOz4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6a:7b:d0:6e:8f:67:e1:47:6d:80:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b3d251-3b5e-4f85-be32-3f374c1f4cf4 Validity Not Before: Oct 6 21:00:25 2026 GMT Not After : Oct 8 21:00:00 2026 GMT Subject: CN=56e9f81b-630c-4b1f-b253-b0f41bd71235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:fa:32:fa:63:6f:61:4a:ad:a9:0f:cb:64: 5b:58:89:f0:29:96:46:ed:96:dd:fc:41:63:97:e3: d5:c6:bd:46:96:e6:a7:15:26:15:bb:62:89:94:99: d0:79:45:0f:7c:5c:f9:aa:d4:d8:f2:9b:bf:59:d1: 0a:2c:f4:70:1a:3b:b6:68:2c:60:9d:27:28:ed:32: d6:f4:0d:32:8e:3c:78:ad:24:b8:20:e5:43:32:77: 68:c0:31:7a:8f:79:c4:53:02:93:90:5e:fb:ab:b2: b5:ba:f9:65:c6:40:e3:44:cf:b5:74:ea:b4:25:eb: 20:d4:2e:64:19:72:c2:d4:92:fc:ab:ed:b0:54:94: e7:af:60:39:61:af:8c:a5:3c:c8:a5:07:42:a2:0f: 15:59:ae:e3:00:70:39:82:38:ed:85:ef:0f:15:ba: 87:5c:2b:7f:3e:b9:45:83:b7:ad:94:6b:79:d8:ab: e3:d6:3a:ac:dc:a7:e5:44:94:6c:62:dc:03:d2:b0: 2e:6a:d5:04:50:68:e3:09:e7:c3:e7:4e:5f:8d:98: 48:3f:92:2f:c7:d8:f9:fb:18:53:06:4b:cf:a7:e8: 60:dc:f2:73:5b:38:d7:1c:b6:3d:f0:0c:7d:d7:99: c8:01:b6:7b:79:59:38:2a:18:82:d4:bc:37:51:32: 05:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:85:9B:B5:0D:5A:8C:C7:9A:54:10:96:08:4A:A4:F5:AA:FB:70:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.crl X509v3 Authority Key Identifier: keyid:B3:D1:A1:D5:30:D9:AB:D6:2C:FD:F1:3C:B7:08:3F:DF:CA:4C:A6:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:be:dc:d0:40:6d:ff:26:7f:2e:ee:a9:f6:4a:73:e8:fe:5f: 00:1e:15:03:3f:9e:02:e8:5a:c4:b7:7c:89:ca:6c:d6:ef:32: d0:1e:0f:7d:4a:66:fa:55:fb:64:be:9a:19:92:2f:e3:5c:e0: 1c:f5:ef:95:18:76:f1:ba:8a:4d:24:b6:e2:4b:18:af:a2:7d: 47:70:2d:b2:b8:fb:d5:0b:49:c9:c4:17:8c:4b:ec:19:cb:fc: ed:7c:e7:b2:94:a1:8c:8b:53:09:db:8d:01:a9:fd:aa:f8:b3: 66:db:b0:3e:ba:6d:02:a6:53:8d:de:25:ce:b4:bd:d9:1e:b5: 92:7a:01:ca:b0:87:47:80:45:12:8a:b2:cf:1e:59:08:62:d5: 17:6b:f5:ff:51:2f:7f:24:cb:bc:49:7c:50:f2:61:50:a7:92: 59:34:a2:67:49:ff:47:81:28:39:60:c1:ec:5e:43:d1:ec:db: 20:88:5a:29:66:35:87:04:6b:b9:53:35:c3:3a:7e:1d:be:46: 20:47:c3:b5:24:4d:9f:c2:cd:6e:65:d0:f8:06:14:a9:43:b2: 86:82:d4:b2:be:e0:1f:a2:46:a9:46:59:e6:7a:2e:6a:7a:16: d4:33:b7:c5:52:df:f3:e4:c0:b0:ca:6e:e3:aa:8c:5d:dd:77: 51:96:f4:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9qe9Buj2fhR22AaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiM2QyNTEtM2I1ZS00Zjg1LWJlMzItM2YzNzRjMWY0 Y2Y0MB4XDTI2MTAwNjIxMDAyNVoXDTI2MTAwODIxMDAwMFowLzEtMCsGA1UEAxMk NTZlOWY4MWItNjMwYy00YjFmLWIyNTMtYjBmNDFiZDcxMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWD6Mvpjb2FKrakPy2RbWInwKZZG7Zbd/EFj l+PVxr1GluanFSYVu2KJlJnQeUUPfFz5qtTY8pu/WdEKLPRwGju2aCxgnSco7TLW 9A0yjjx4rSS4IOVDMndowDF6j3nEUwKTkF77q7K1uvllxkDjRM+1dOq0Jesg1C5k GXLC1JL8q+2wVJTnr2A5Ya+MpTzIpQdCog8VWa7jAHA5gjjthe8PFbqHXCt/PrlF g7etlGt52Kvj1jqs3KflRJRsYtwD0rAuatUEUGjjCefD505fjZhIP5Ivx9j5+xhT BkvPp+hg3PJzWzjXHLY98Ax915nIAbZ7eVk4KhiC1Lw3UTIFrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNeFm7UNWozHmlQQlghKpPWq+3DGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84NmIz ZDI1MS0zYjVlLTRmODUtYmUzMi0zZjM3NGMxZjRjZjQvODZiM2QyNTEtM2I1ZS00 Zjg1LWJlMzItM2YzNzRjMWY0Y2Y0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODZiM2QyNTEtM2I1ZS00Zjg1LWJl MzItM2YzNzRjMWY0Y2Y0Lzg2YjNkMjUxLTNiNWUtNGY4NS1iZTMyLTNmMzc0YzFm NGNmNC5jcmwwHwYDVR0jBBgwFoAUs9Gh1TDZq9Ys/fE8twg/38pMpgAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84NmIzZDI1MS0zYjVlLTRmODUtYmUzMi0zZjM3 NGMxZjRjZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARvtzQQG3/Jn8u7qn2SnPo /l8AHhUDP54C6FrEt3yJymzW7zLQHg99Smb6VftkvpoZki/jXOAc9e+VGHbxuopN JLbiSxivon1HcC2yuPvVC0nJxBeMS+wZy/ztfOeylKGMi1MJ240Bqf2q+LNm27A+ um0CplON3iXOtL3ZHrWSegHKsIdHgEUSirLPHlkIYtUXa/X/US9/JMu8SXxQ8mFQ p5JZNKJnSf9HgSg5YMHsXkPR7NsgiFopZjWHBGu5UzXDOn4dvkYgR8O1JE2fws1u ZdD4BhSpQ7KGgtSyvuAfokapRlnmei5qehbUM7fFUt/z5MCwym7jqoxd3XdRlvST -----END CERTIFICATE-----Generated at Wed Oct 7 20:13:45 2026 by rpki-client