$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft File: 89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft (raw, json) Hash identifier: DJkI/ihPlodFLzqkditltsoLLgsMZ5+MERJ61ctn1Yw= Subject key identifier: 19:9D:C2:6F:59:A1:A1:1F:BB:C5:65:70:16:20:75:7F:43:D5:9E:07 Authority key identifier: CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46 Certificate issuer: /CN=89fa01af-cca5-4d8f-8003-f6c9e22578b4 Certificate serial: 010D0C9F4328584D4B5FBC564EE26939383C0040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft Manifest number: 010D0C9F4328584073A8490E353C7E7CF5E966E2 Signing time: Thu 26 Mar 2026 08:00:03 +0000 Manifest this update: Thu 26 Mar 2026 08:00:03 +0000 Manifest next update: Sat 28 Mar 2026 08:00:00 +0000 Files and hashes: 1: 47f52259-d832-3c2a-bc43-3f72c7ef644d.roa (hash: B7WCRXInfa/RfqVBYOK2HUWwwNIf6R51tziLEAvLur8=) 2: 89fa01af-cca5-4d8f-8003-f6c9e22578b4.crl (hash: CQW8MHBuxd2DiAMTHd4hbTh5lJthTW1S2WyLkqy1ej0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:5f:bc:56:4e:e2:69:39:38:3c:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89fa01af-cca5-4d8f-8003-f6c9e22578b4 Validity Not Before: Mar 26 08:00:03 2026 GMT Not After : Mar 28 08:00:00 2026 GMT Subject: CN=0d914307-a2ba-4928-b702-946cbf3e7633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:42:05:41:47:da:36:02:87:72:e2:67:22: a3:16:da:2e:c9:a8:8b:60:9b:19:a0:ad:6e:7e:ff: 0a:6d:a4:3c:63:15:02:94:03:d5:f0:03:2b:cb:a5: 6f:da:c7:0e:7a:5a:ea:49:6c:ac:c2:27:f3:bd:52: a5:c8:c5:4e:10:b4:91:1c:dc:be:99:56:73:91:f0: 33:b1:f4:60:29:50:34:7f:e6:0e:f1:bf:4c:b5:48: b7:92:d3:55:4d:d6:51:e7:a9:d6:e2:58:00:ec:c7: b9:86:50:a0:0b:de:bc:65:b6:e8:b1:6e:68:1c:58: 3b:9d:e9:b0:2a:57:01:ea:e2:c1:33:2a:99:56:d9: e1:6a:1c:2b:e2:aa:18:a6:41:92:1c:72:31:48:0f: fa:d2:f0:38:db:cf:63:5c:94:25:ad:26:7a:79:74: 2a:f3:54:40:d7:71:fa:a1:a3:c1:af:7b:ec:85:59: b8:27:b5:3e:f0:aa:0a:27:52:48:18:5d:54:f4:65: a4:90:e7:0a:05:9f:e7:65:d8:9b:c6:3c:9f:a6:52: f1:ad:74:fa:0a:ea:0f:a2:d1:e4:79:6d:a2:d3:ab: d3:77:01:42:98:b3:23:d3:3f:e7:75:e1:b6:65:95: 80:b5:5d:63:a3:87:49:8d:08:21:19:f3:4a:3c:39: 41:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9D:C2:6F:59:A1:A1:1F:BB:C5:65:70:16:20:75:7F:43:D5:9E:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.crl X509v3 Authority Key Identifier: keyid:CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:91:a1:cb:31:c2:cd:71:cd:90:8d:21:09:c3:16:58:57:76: 3d:ac:2c:98:3d:54:a6:6f:d5:d9:b7:25:fb:3d:91:eb:a7:a6: f0:9f:33:68:c5:e9:64:93:6c:43:78:0a:48:0f:f3:fc:ce:09: c0:bd:7a:76:22:81:1d:0d:6a:90:48:9a:3a:28:74:0d:10:b2: 0b:e6:e5:ce:2d:ee:3d:0d:e0:79:f5:78:5c:8d:3b:77:00:08: fe:47:bf:fc:30:65:0b:47:d3:94:02:23:98:4d:97:b3:bc:f4: 15:24:a1:13:d7:40:a1:c0:bb:c2:8f:5c:79:88:97:a5:5c:a3: a2:72:89:84:99:69:a0:1d:1c:4b:eb:54:28:3b:d1:fe:30:77: 71:ac:89:ec:f8:37:c0:f2:71:f6:db:fb:ba:94:aa:53:67:7e: 39:03:99:c0:84:be:ed:88:04:35:df:64:08:54:a6:8e:5b:ab: eb:8d:4c:89:fb:1b:93:4e:a5:01:2f:de:27:0b:c1:06:43:7d: 75:53:60:a8:20:a4:a1:ff:75:0b:b4:b1:8a:9d:72:1a:87:68: fe:23:5e:dc:7f:f3:17:ae:8c:f7:a8:b9:b0:97:67:db:72:75: 48:0d:3e:7c:89:5a:c3:80:26:f8:28:5b:d4:34:f5:a4:6d:91: 2a:97:7c:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LX7xWTuJpOTg8AEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlmYTAxYWYtY2NhNS00ZDhmLTgwMDMtZjZjOWUyMjU3 OGI0MB4XDTI2MDMyNjA4MDAwM1oXDTI2MDMyODA4MDAwMFowLzEtMCsGA1UEAxMk MGQ5MTQzMDctYTJiYS00OTI4LWI3MDItOTQ2Y2JmM2U3NjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/RCBUFH2jYCh3LiZyKjFtouyaiLYJsZoK1u fv8KbaQ8YxUClAPV8AMry6Vv2scOelrqSWyswifzvVKlyMVOELSRHNy+mVZzkfAz sfRgKVA0f+YO8b9MtUi3ktNVTdZR56nW4lgA7Me5hlCgC968ZbbosW5oHFg7nemw KlcB6uLBMyqZVtnhahwr4qoYpkGSHHIxSA/60vA4289jXJQlrSZ6eXQq81RA13H6 oaPBr3vshVm4J7U+8KoKJ1JIGF1U9GWkkOcKBZ/nZdibxjyfplLxrXT6CuoPotHk eW2i06vTdwFCmLMj0z/ndeG2ZZWAtV1jo4dJjQghGfNKPDlBJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBmdwm9ZoaEfu8VlcBYgdX9D1Z4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84OWZh MDFhZi1jY2E1LTRkOGYtODAwMy1mNmM5ZTIyNTc4YjQvODlmYTAxYWYtY2NhNS00 ZDhmLTgwMDMtZjZjOWUyMjU3OGI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODlmYTAxYWYtY2NhNS00ZDhmLTgw MDMtZjZjOWUyMjU3OGI0Lzg5ZmEwMWFmLWNjYTUtNGQ4Zi04MDAzLWY2YzllMjI1 NzhiNC5jcmwwHwYDVR0jBBgwFoAUzKuu83vISvdPvK7QobzlFWslW0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84OWZhMDFhZi1jY2E1LTRkOGYtODAwMy1mNmM5 ZTIyNTc4YjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDkaHLMcLNcc2QjSEJwxZY V3Y9rCyYPVSmb9XZtyX7PZHrp6bwnzNoxelkk2xDeApID/P8zgnAvXp2IoEdDWqQ SJo6KHQNELIL5uXOLe49DeB59XhcjTt3AAj+R7/8MGULR9OUAiOYTZezvPQVJKET 10ChwLvCj1x5iJelXKOicomEmWmgHRxL61QoO9H+MHdxrIns+DfA8nH22/u6lKpT Z345A5nAhL7tiAQ132QIVKaOW6vrjUyJ+xuTTqUBL94nC8EGQ311U2CoIKSh/3UL tLGKnXIah2j+I17cf/MXroz3qLmwl2fbcnVIDT58iVrDgCb4KFvUNPWkbZEql3xL -----END CERTIFICATE-----Generated at Thu Mar 26 21:19:58 2026 by rpki-client