$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft File: 589a84a2-f62d-414f-915d-810c9265e5de.mft (raw, json) Hash identifier: 2dkpAlFo9Kn9iMfne7pB/Ovi96OaqgaaIWpo99LYTAg= Subject key identifier: 02:66:86:AA:36:9C:6A:63:20:55:D7:44:DD:58:A1:A9:5A:24:2E:2B Authority key identifier: 39:63:73:7A:44:9C:AE:FF:D4:5A:0B:A5:23:B8:60:43:35:C6:5F:59 Certificate issuer: /CN=589a84a2-f62d-414f-915d-810c9265e5de Certificate serial: 010D0C9F4328584D4C12689A764ABAE44740D900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft Manifest number: 010D0C9F4328584B8AA3359A4801463882BB4164 Signing time: Thu 26 Mar 2026 14:00:03 +0000 Manifest this update: Thu 26 Mar 2026 14:00:03 +0000 Manifest next update: Sat 28 Mar 2026 14:00:00 +0000 Files and hashes: 1: 589a84a2-f62d-414f-915d-810c9265e5de.crl (hash: elDApxNlDQ+en+sFQui/3Jkf39K9YoBSI5CKrtW7tvU=) 2: b9b863f4-1e9b-35b6-856e-0def881a13c7.roa (hash: +sWgOglXAgIaidLZQB2GGQbRUJy36L0I2/98JisldFo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:12:68:9a:76:4a:ba:e4:47:40:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589a84a2-f62d-414f-915d-810c9265e5de Validity Not Before: Mar 26 14:00:03 2026 GMT Not After : Mar 28 14:00:00 2026 GMT Subject: CN=93e6c360-50aa-41e8-9c11-981c0f7dd903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4d:12:aa:bf:d7:4a:40:bb:06:19:4d:f9:99: c8:ba:d9:54:57:1a:53:bc:58:f5:a5:3c:c4:63:ee: 95:66:15:ff:24:4b:93:66:26:ec:60:28:92:71:4b: 00:f0:b7:5e:72:c7:05:39:e2:a1:9a:49:3e:bf:da: c8:8a:0d:3e:7b:11:b3:be:b1:f1:c3:0d:67:52:b7: de:dc:5e:5b:94:a7:06:46:8f:7e:67:f9:26:21:82: d9:28:75:56:2e:ec:38:46:6f:b9:88:e8:82:f3:76: 55:a8:3c:9d:99:b2:85:9e:51:71:47:cd:3a:86:d0: ac:b4:d9:5e:a9:20:22:9f:2e:b8:c4:7f:ed:7b:76: e8:2c:6e:1e:a3:20:05:ba:4e:d8:6d:e4:40:b8:60: 16:5a:a4:a1:c8:ad:e2:96:5e:c2:ad:d1:64:4d:26: 10:9e:14:10:f1:40:3d:ee:4f:d7:78:62:cc:8e:c0: bf:0f:2b:ef:6a:59:dc:dc:fa:91:a9:9b:72:1c:2f: 72:f2:af:1c:4f:b9:60:17:06:38:d8:9e:48:f0:27: 49:a5:0e:6b:a6:8e:3f:92:8f:9c:3d:b7:1b:0b:f7: 52:99:e5:01:71:dc:4a:de:ce:10:45:83:60:f5:db: 36:a1:58:0c:c8:67:a1:60:96:88:ea:f0:d8:fa:ac: 67:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:66:86:AA:36:9C:6A:63:20:55:D7:44:DD:58:A1:A9:5A:24:2E:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.crl X509v3 Authority Key Identifier: keyid:39:63:73:7A:44:9C:AE:FF:D4:5A:0B:A5:23:B8:60:43:35:C6:5F:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b5:4f:59:b4:b4:d4:be:8d:85:bd:79:3d:ee:02:86:4f:ae: f4:3b:40:4b:96:f6:65:5a:2e:8c:ff:58:56:ca:dd:69:92:b9: 3d:08:a0:ff:86:d2:8f:bb:ed:f5:ae:57:5d:2d:fe:fa:54:08: ac:4e:8c:59:b3:22:f4:77:b2:aa:3e:db:8b:a0:ac:c2:c0:97: 12:07:8f:94:76:e3:b9:99:bc:48:f7:5f:83:6c:df:dd:fc:0e: e5:20:5a:a7:4d:f5:dd:ec:1e:3c:d4:f9:0a:77:ac:4c:84:ba: ee:b0:71:7e:23:3a:95:7c:12:b7:53:da:0b:91:00:0e:ff:50: 36:86:1b:e7:dc:0b:dd:10:8f:98:66:b9:95:bb:81:36:b9:83: 2a:68:aa:6f:55:ca:9b:3c:c8:37:5b:6c:e0:07:72:31:a1:ba: 53:a5:e1:5f:fc:26:fa:ba:cd:66:b2:84:6d:05:29:30:bf:9a: 3e:00:b8:6a:f8:0c:3c:9d:4f:4d:06:d3:16:b0:f8:41:0a:f1: 00:bc:ca:82:3c:cd:0c:05:2c:f3:76:bf:31:e1:e7:b7:a2:d2: 67:db:29:61:81:39:d8:f6:0c:5b:b3:bc:36:dc:57:31:3c:46: 87:90:31:2f:e8:b3:9d:89:16:b8:2c:7b:02:37:b7:b1:27:fc: 37:6f:d1:2f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MEmiadkq65EdA2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5YTg0YTItZjYyZC00MTRmLTkxNWQtODEwYzkyNjVl NWRlMB4XDTI2MDMyNjE0MDAwM1oXDTI2MDMyODE0MDAwMFowLzEtMCsGA1UEAxMk OTNlNmMzNjAtNTBhYS00MWU4LTljMTEtOTgxYzBmN2RkOTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk0Sqr/XSkC7BhlN+ZnIutlUVxpTvFj1pTzE Y+6VZhX/JEuTZibsYCiScUsA8LdecscFOeKhmkk+v9rIig0+exGzvrHxww1nUrfe 3F5blKcGRo9+Z/kmIYLZKHVWLuw4Rm+5iOiC83ZVqDydmbKFnlFxR806htCstNle qSAiny64xH/te3boLG4eoyAFuk7YbeRAuGAWWqShyK3ill7CrdFkTSYQnhQQ8UA9 7k/XeGLMjsC/Dyvvalnc3PqRqZtyHC9y8q8cT7lgFwY42J5I8CdJpQ5rpo4/ko+c PbcbC/dSmeUBcdxK3s4QRYNg9ds2oVgMyGehYJaI6vDY+qxnfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAJmhqo2nGpjIFXXRN1YoalaJC4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODlh ODRhMi1mNjJkLTQxNGYtOTE1ZC04MTBjOTI2NWU1ZGUvNTg5YTg0YTItZjYyZC00 MTRmLTkxNWQtODEwYzkyNjVlNWRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTg5YTg0YTItZjYyZC00MTRmLTkx NWQtODEwYzkyNjVlNWRlLzU4OWE4NGEyLWY2MmQtNDE0Zi05MTVkLTgxMGM5MjY1 ZTVkZS5jcmwwHwYDVR0jBBgwFoAUOWNzekScrv/UWgulI7hgQzXGX1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODlhODRhMi1mNjJkLTQxNGYtOTE1ZC04MTBj OTI2NWU1ZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHtU9ZtLTUvo2FvXk97gKG T670O0BLlvZlWi6M/1hWyt1pkrk9CKD/htKPu+31rlddLf76VAisToxZsyL0d7Kq PtuLoKzCwJcSB4+UduO5mbxI91+DbN/d/A7lIFqnTfXd7B481PkKd6xMhLrusHF+ IzqVfBK3U9oLkQAO/1A2hhvn3AvdEI+YZrmVu4E2uYMqaKpvVcqbPMg3W2zgB3Ix obpTpeFf/Cb6us1msoRtBSkwv5o+ALhq+Aw8nU9NBtMWsPhBCvEAvMqCPM0MBSzz dr8x4ee3otJn2ylhgTnY9gxbs7w23FcxPEaHkDEv6LOdiRa4LHsCN7exJ/w3b9Ev -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:31 2026 by rpki-client