$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft File: 86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft (raw, json) Hash identifier: OAk4b+eIlr5r/2SZzvdi6SxBWVjyrwcXE5SGUsORTKY= Subject key identifier: 89:21:AC:C9:22:A3:BE:9D:A7:BC:80:37:FC:2B:1E:9E:20:9B:AE:B6 Authority key identifier: B3:D1:A1:D5:30:D9:AB:D6:2C:FD:F1:3C:B7:08:3F:DF:CA:4C:A6:00 Certificate issuer: /CN=86b3d251-3b5e-4f85-be32-3f374c1f4cf4 Certificate serial: 010D0C9F4328584EE745A5BBA59031993EA572E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft Manifest number: 010D0C9F4328584B2C8C5EB92E1CB01265A7955A Signing time: Thu 20 Aug 2026 21:00:23 +0000 Manifest this update: Thu 20 Aug 2026 21:00:23 +0000 Manifest next update: Sun 23 Aug 2026 21:00:00 +0000 Files and hashes: 1: 86b3d251-3b5e-4f85-be32-3f374c1f4cf4.crl (hash: nM6H/Yb9nXAoMsH5i0eu4zXIk4+FGgWRSrMoOMvZcek=) 2: a9ee0678-5480-306d-82fa-bb7c0e1410fe.roa (hash: V5rYyUo+xCUoOkVLAouPYle4cIM/BZfL88pdC+ZkrKY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:45:a5:bb:a5:90:31:99:3e:a5:72:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b3d251-3b5e-4f85-be32-3f374c1f4cf4 Validity Not Before: Aug 20 21:00:23 2026 GMT Not After : Aug 23 21:00:00 2026 GMT Subject: CN=bff1954b-1fb8-405e-9737-085b43a34904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b4:cf:69:24:f6:ac:5c:4c:08:cc:1d:40:a7: b2:3b:69:b7:bc:c3:44:0e:5f:07:c9:dc:96:9f:ae: 5d:70:08:78:70:74:98:5d:a4:22:ae:65:27:c7:b4: 4e:c9:74:4e:33:b6:14:f8:23:d4:25:9a:fb:0e:09: 20:c6:ab:2c:a7:2a:e8:b7:b8:52:00:1c:a5:6e:58: fc:81:d8:d5:53:ed:8e:53:27:73:3a:26:0f:d2:a7: 81:6e:a9:af:66:90:5a:ad:69:f1:a8:38:fb:72:9c: 36:14:f0:79:ec:68:f5:8b:d7:91:b5:90:22:f1:7e: 07:b7:91:c8:18:b6:08:62:aa:33:f4:c4:92:bb:00: 3b:0c:6a:ef:7b:d4:fb:14:c3:b0:c5:6b:d4:78:a8: 46:cb:b5:11:da:0e:49:7d:fd:c2:30:bc:5c:11:ae: 79:73:41:61:fb:3f:50:ba:bc:97:e5:63:6e:7a:cf: 03:3e:99:4a:cb:d5:51:69:10:62:87:88:38:8b:43: 44:1e:d6:6d:df:39:bf:ca:65:ea:6c:b6:7a:bd:e3: e6:f4:7b:6d:fb:15:0c:10:53:87:cd:25:35:c1:ef: 94:1c:b0:68:b7:ba:5c:bc:38:bf:ce:73:ca:94:dd: 6f:23:60:a9:64:57:aa:94:5a:f3:36:fd:61:81:e0: 3e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:21:AC:C9:22:A3:BE:9D:A7:BC:80:37:FC:2B:1E:9E:20:9B:AE:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.crl X509v3 Authority Key Identifier: keyid:B3:D1:A1:D5:30:D9:AB:D6:2C:FD:F1:3C:B7:08:3F:DF:CA:4C:A6:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d1:2f:06:1b:0b:75:70:51:1c:29:52:92:ea:dd:86:ae:ad: 51:26:a3:0b:23:72:e8:da:15:b1:d4:da:f2:8c:83:fa:d5:4d: ce:9d:fe:55:63:9b:4b:fe:01:49:56:fd:67:8d:92:10:ef:ee: 11:a6:45:97:e7:e9:46:a5:15:f7:26:48:69:77:f9:19:c4:f1: 73:16:a0:6f:93:f2:72:31:7e:70:c8:9d:46:ce:8f:de:85:98: a6:de:88:62:6a:f3:c9:00:b6:8f:5d:a0:09:f5:e1:e2:cf:cf: ef:f0:0e:6d:b8:2b:81:af:ee:22:7a:d6:8c:b0:00:6b:af:e4: f7:f4:b5:54:64:d6:c6:7a:02:8c:57:ee:45:3e:c1:83:94:a8: 7b:3c:3a:7d:c9:1c:0a:ce:e3:b3:2b:9c:77:9b:cf:b7:e8:8e: 6d:9e:4e:af:2a:f8:ad:77:30:00:4d:4c:71:9c:08:7f:58:f0: d5:df:cf:9c:76:f8:cb:56:fd:33:a1:e4:c6:32:a4:52:51:bf: 5a:b3:e6:a6:a8:2e:61:ad:c1:02:b1:f1:d0:3c:f9:b5:6e:70: 4d:24:80:42:8e:b2:ad:2d:d8:9b:aa:c6:95:e3:ef:41:78:0f: 0c:87:52:9c:ce:a4:85:50:a3:f1:7f:85:cf:c6:38:95:0b:66: 6b:52:58:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7nRaW7pZAxmT6lcuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiM2QyNTEtM2I1ZS00Zjg1LWJlMzItM2YzNzRjMWY0 Y2Y0MB4XDTI2MDgyMDIxMDAyM1oXDTI2MDgyMzIxMDAwMFowLzEtMCsGA1UEAxMk YmZmMTk1NGItMWZiOC00MDVlLTk3MzctMDg1YjQzYTM0OTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7TPaST2rFxMCMwdQKeyO2m3vMNEDl8HydyW n65dcAh4cHSYXaQirmUnx7ROyXROM7YU+CPUJZr7Dgkgxqsspyrot7hSABylblj8 gdjVU+2OUydzOiYP0qeBbqmvZpBarWnxqDj7cpw2FPB57Gj1i9eRtZAi8X4Ht5HI GLYIYqoz9MSSuwA7DGrve9T7FMOwxWvUeKhGy7UR2g5Jff3CMLxcEa55c0Fh+z9Q uryX5WNues8DPplKy9VRaRBih4g4i0NEHtZt3zm/ymXqbLZ6vePm9Htt+xUMEFOH zSU1we+UHLBot7pcvDi/znPKlN1vI2CpZFeqlFrzNv1hgeA+CwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIkhrMkio76dp7yAN/wrHp4gm662MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84NmIz ZDI1MS0zYjVlLTRmODUtYmUzMi0zZjM3NGMxZjRjZjQvODZiM2QyNTEtM2I1ZS00 Zjg1LWJlMzItM2YzNzRjMWY0Y2Y0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODZiM2QyNTEtM2I1ZS00Zjg1LWJl MzItM2YzNzRjMWY0Y2Y0Lzg2YjNkMjUxLTNiNWUtNGY4NS1iZTMyLTNmMzc0YzFm NGNmNC5jcmwwHwYDVR0jBBgwFoAUs9Gh1TDZq9Ys/fE8twg/38pMpgAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84NmIzZDI1MS0zYjVlLTRmODUtYmUzMi0zZjM3 NGMxZjRjZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBY0S8GGwt1cFEcKVKS6t2G rq1RJqMLI3Lo2hWx1NryjIP61U3Onf5VY5tL/gFJVv1njZIQ7+4RpkWX5+lGpRX3 Jkhpd/kZxPFzFqBvk/JyMX5wyJ1Gzo/ehZim3ohiavPJALaPXaAJ9eHiz8/v8A5t uCuBr+4ietaMsABrr+T39LVUZNbGegKMV+5FPsGDlKh7PDp9yRwKzuOzK5x3m8+3 6I5tnk6vKvitdzAATUxxnAh/WPDV38+cdvjLVv0zoeTGMqRSUb9as+amqC5hrcEC sfHQPPm1bnBNJIBCjrKtLdibqsaV4+9BeA8Mh1KczqSFUKPxf4XPxjiVC2ZrUli2 -----END CERTIFICATE-----Generated at Fri Aug 21 00:18:29 2026 by rpki-client