$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft File: 589c840d-5406-45bd-ac1d-d77b3c5c3780.mft (raw, json) Hash identifier: CnIjV59ZBfghQcBuJE9tryhWE221MtFqANwYk1yjRF4= Subject key identifier: 94:EC:4C:80:38:C8:41:30:F5:40:0D:CC:C2:5D:28:71:10:B4:70:CD Authority key identifier: BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F Certificate issuer: /CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Certificate serial: 010D0C9F4328584D49FA74152377BAC96D78CD58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft Manifest number: 010D0C9F4328584073A8273D6C0F9AE946A9C69B Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Fri 27 Mar 2026 20:00:00 +0000 Files and hashes: 1: 0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer (hash: qbW5Oe8ZH8LXRkGL+tJMOyuvkonBqhPduSzgcBMu+QY=) 2: 589c840d-5406-45bd-ac1d-d77b3c5c3780.crl (hash: Vc/A2EXOBImjmSQh+BoIQB8ct7q3bS4dfqTsKh3FNpY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:74:15:23:77:ba:c9:6d:78:cd:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 27 20:00:00 2026 GMT Subject: CN=3bca2cb2-a22a-422a-9256-4c8955885b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ad:3a:d9:89:38:1a:08:51:06:95:b0:12:89: 88:d4:3d:f2:34:d7:53:a4:f7:f1:62:8c:26:40:7e: 5f:7e:4b:07:22:8c:1d:32:89:8d:01:05:e7:e1:9a: c7:96:ab:de:b1:54:a7:02:5c:e7:1b:4e:ae:23:41: d2:b0:c9:4f:45:38:66:c3:7d:c5:cb:bc:f4:b0:32: 35:ca:b1:22:bf:de:fa:77:81:8c:34:1c:80:78:89: ab:12:d2:e3:37:fc:c5:2f:6c:1b:34:61:64:05:97: 87:4e:5b:e9:2f:df:ac:47:bb:41:dd:0c:c1:e5:25: b0:c8:b1:3c:fa:82:b1:ed:6a:05:74:08:b8:47:bb: d8:2a:44:f4:45:66:1f:d7:d6:14:3b:80:c8:d1:ba: 06:71:44:b6:ae:0a:c7:0f:91:19:75:1d:42:2b:83: 3d:03:c0:56:34:3b:3d:21:03:ce:5b:d2:d7:7a:d2: a8:7c:f1:95:ec:52:37:83:bf:e7:1b:6f:2c:e5:3e: 17:27:58:b2:85:29:69:73:4e:4c:2e:87:a7:dc:2f: 41:b7:82:d6:0e:04:98:c7:02:8b:c3:30:81:52:ab: ee:f3:96:5c:e1:6b:52:f1:d0:83:a5:76:4d:de:50: 6a:95:11:5b:13:5b:d0:86:f0:4b:b7:9a:e3:41:5e: 39:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EC:4C:80:38:C8:41:30:F5:40:0D:CC:C2:5D:28:71:10:B4:70:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl X509v3 Authority Key Identifier: keyid:BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:19:21:f1:48:45:f1:62:61:e4:5a:b7:83:11:39:51:f5:c1: 0a:60:c5:ed:88:61:3e:5d:2f:cf:c0:87:c9:8f:7a:d2:16:01: 57:6f:ca:c4:9b:c2:3e:c1:3b:24:3f:5b:71:78:ba:b0:f5:53: d6:60:7e:cd:74:0f:37:3f:0f:4c:06:ed:f0:2f:99:10:8a:6e: a4:3d:e3:05:44:3f:01:3a:29:7d:19:6d:ca:a0:b6:7e:ac:0c: 3e:ad:21:05:52:c0:73:04:26:ec:c1:2a:b7:5f:50:35:a1:b2: a5:e5:ba:c0:d2:c1:ef:af:c2:79:24:04:61:01:16:f6:05:34: 04:33:8e:d3:82:0a:40:1d:a4:10:5c:a8:14:18:25:dc:14:b9: cf:09:81:f7:ff:0a:02:af:97:2d:bf:26:3c:e6:45:13:0b:bf: b2:6d:df:86:43:50:7c:e3:dc:2a:06:e9:35:6c:c5:5c:33:08: 75:91:c1:70:2c:2b:32:df:a7:54:23:f4:53:7f:a4:d4:5a:a6: 4f:f2:1b:82:41:5c:6c:01:a7:5f:b7:9d:27:00:0a:c8:9b:e3: 0b:5e:cb:64:ed:94:c8:f8:4c:b4:b3:6b:ce:55:7e:c7:84:28: cd:ad:ec:b3:8f:38:89:f1:79:e0:44:3b:39:7b:b6:72:69:6f: b1:1a:9c:19 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nQVI3e6yW14zVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5Yzg0MGQtNTQwNi00NWJkLWFjMWQtZDc3YjNjNWMz NzgwMB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyNzIwMDAwMFowLzEtMCsGA1UEAxMk M2JjYTJjYjItYTIyYS00MjJhLTkyNTYtNGM4OTU1ODg1YjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK062Yk4GghRBpWwEomI1D3yNNdTpPfxYowm QH5ffksHIowdMomNAQXn4ZrHlqvesVSnAlznG06uI0HSsMlPRThmw33Fy7z0sDI1 yrEiv976d4GMNByAeImrEtLjN/zFL2wbNGFkBZeHTlvpL9+sR7tB3QzB5SWwyLE8 +oKx7WoFdAi4R7vYKkT0RWYf19YUO4DI0boGcUS2rgrHD5EZdR1CK4M9A8BWNDs9 IQPOW9LXetKofPGV7FI3g7/nG28s5T4XJ1iyhSlpc05MLoen3C9Bt4LWDgSYxwKL wzCBUqvu85Zc4WtS8dCDpXZN3lBqlRFbE1vQhvBLt5rjQV45rQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJTsTIA4yEEw9UANzMJdKHEQtHDNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODlj ODQwZC01NDA2LTQ1YmQtYWMxZC1kNzdiM2M1YzM3ODAvNTg5Yzg0MGQtNTQwNi00 NWJkLWFjMWQtZDc3YjNjNWMzNzgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTg5Yzg0MGQtNTQwNi00NWJkLWFj MWQtZDc3YjNjNWMzNzgwLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC5jcmwwHwYDVR0jBBgwFoAUvBV74rm3Dq1oBqW2qJ8D1OLgRk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ODljODQwZC01NDA2LTQ1YmQtYWMxZC1kNzdi M2M1YzM3ODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxGSHxSEXxYmHkWreDETlR 9cEKYMXtiGE+XS/PwIfJj3rSFgFXb8rEm8I+wTskP1txeLqw9VPWYH7NdA83Pw9M Bu3wL5kQim6kPeMFRD8BOil9GW3KoLZ+rAw+rSEFUsBzBCbswSq3X1A1obKl5brA 0sHvr8J5JARhARb2BTQEM47TggpAHaQQXKgUGCXcFLnPCYH3/woCr5ctvyY85kUT C7+ybd+GQ1B849wqBuk1bMVcMwh1kcFwLCsy36dUI/RTf6TUWqZP8huCQVxsAadf t50nAArIm+MLXstk7ZTI+Ey0s2vOVX7HhCjNreyzjziJ8XngRDs5e7ZyaW+xGpwZ -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:40 2026 by rpki-client