$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft File: 589a84a2-f62d-414f-915d-810c9265e5de.mft (raw, json) Hash identifier: W+zysTQFWhxD74B4tiE8b91dsy6AbhavFUmAxLrWj0s= Subject key identifier: DE:98:C9:F5:29:76:DE:CE:B8:48:B6:60:52:17:7F:54:EF:D9:99:20 Authority key identifier: 39:63:73:7A:44:9C:AE:FF:D4:5A:0B:A5:23:B8:60:43:35:C6:5F:59 Certificate issuer: /CN=589a84a2-f62d-414f-915d-810c9265e5de Certificate serial: 010D0C9F4328584DCF488E25E0EBB8BCA013A980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft Manifest number: 010D0C9F4328584B8AA3359A4801463882BB4194 Signing time: Tue 12 May 2026 14:00:03 +0000 Manifest this update: Tue 12 May 2026 14:00:03 +0000 Manifest next update: Fri 15 May 2026 14:00:00 +0000 Files and hashes: 1: 589a84a2-f62d-414f-915d-810c9265e5de.crl (hash: LdepgMT1OoPLHwEZp0x1n4mCO3nljGp+n/VwoyD+/rM=) 2: b9b863f4-1e9b-35b6-856e-0def881a13c7.roa (hash: +sWgOglXAgIaidLZQB2GGQbRUJy36L0I2/98JisldFo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:48:8e:25:e0:eb:b8:bc:a0:13:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589a84a2-f62d-414f-915d-810c9265e5de Validity Not Before: May 12 14:00:03 2026 GMT Not After : May 15 14:00:00 2026 GMT Subject: CN=a9e3273c-7d0a-4ff8-b8fc-cd586892731c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:06:1a:8d:93:17:6d:5f:a7:a1:00:e2:f3:9f: 4c:be:47:5f:72:3f:fe:8f:a5:e2:17:b4:0e:3e:10: 4b:a9:22:12:14:0f:ac:d9:ce:fe:84:c5:37:b9:f0: 9a:25:df:1b:68:c3:51:aa:89:7e:0d:0e:44:52:52: 67:f1:ae:ef:c4:91:d6:dc:00:38:2d:ff:50:46:7b: ca:24:ae:6f:b7:1f:c2:0c:cb:59:e2:1f:16:6b:f4: 86:0b:bf:f4:f9:ba:8b:45:bb:94:7a:00:5a:0d:23: ce:0d:62:5e:11:fa:82:c9:92:2e:ed:5c:31:b4:09: 56:d0:56:87:ec:b4:3a:d2:d7:1b:5c:44:69:2c:1e: 08:5e:6c:42:4e:0f:e3:9d:c2:95:c8:d3:3a:96:36: 54:a3:33:9a:ae:1a:0b:4a:93:42:ae:ed:26:de:ed: c4:6e:48:51:72:a1:6a:9d:70:ac:31:4c:6c:ea:a7: 92:38:26:62:e8:cd:64:f2:c5:d9:58:92:4d:2c:e6: 08:05:8a:cd:e1:b3:cb:0a:f7:ca:f8:6e:90:06:0d: 97:2e:da:c8:71:b4:c5:36:86:53:d9:19:dd:38:10: ae:c5:bd:71:8a:f0:d4:87:b7:49:c1:cd:b7:e3:39: 9b:94:28:04:57:d0:7c:22:a1:81:c6:53:e9:97:10: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:98:C9:F5:29:76:DE:CE:B8:48:B6:60:52:17:7F:54:EF:D9:99:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.crl X509v3 Authority Key Identifier: keyid:39:63:73:7A:44:9C:AE:FF:D4:5A:0B:A5:23:B8:60:43:35:C6:5F:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5a:53:9f:e7:47:b1:58:08:02:fb:4d:04:2c:af:4a:64:c4: 70:1f:33:de:7a:6d:e0:f6:22:f0:73:3b:7a:44:2b:cf:14:6e: 22:5f:45:2b:32:d5:ac:9c:c8:a9:d9:cd:41:9a:51:df:14:60: 39:ac:e2:9c:27:47:1d:54:09:ed:eb:e3:b5:8b:42:4e:6c:df: b5:d0:35:5c:fe:ca:54:d1:25:d5:79:6c:c8:e6:fa:72:e1:ac: ef:a4:e3:04:10:ea:78:f1:4c:c6:c7:a5:62:bb:23:69:a2:48: 69:da:af:73:22:37:1b:1c:10:29:a3:19:e0:d0:c2:f0:55:d5: 1c:57:4a:9a:9c:57:90:51:7e:8b:25:f1:d6:38:58:c3:da:61: 59:35:66:c3:08:46:e2:54:f7:ac:b2:d4:ca:e2:4e:e8:49:90: c1:a5:20:a5:a9:5d:b9:6c:8f:89:19:af:a2:36:2e:89:66:15: f7:2d:34:1d:05:d6:f9:60:8f:67:31:cc:51:6b:54:85:fe:d9: 8f:80:ca:a3:73:21:58:20:df:65:b2:84:69:f3:ab:45:77:4f: 7f:a3:4b:09:d3:03:14:ba:da:ac:a5:ad:a7:9a:a3:d7:ef:31: 2f:2a:d8:8f:5a:aa:7e:e2:84:9c:f8:dc:21:b4:24:f9:31:c8: e2:58:e9:49 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PSI4l4Ou4vKATqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5YTg0YTItZjYyZC00MTRmLTkxNWQtODEwYzkyNjVl NWRlMB4XDTI2MDUxMjE0MDAwM1oXDTI2MDUxNTE0MDAwMFowLzEtMCsGA1UEAxMk YTllMzI3M2MtN2QwYS00ZmY4LWI4ZmMtY2Q1ODY4OTI3MzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QYajZMXbV+noQDi859Mvkdfcj/+j6XiF7QO PhBLqSISFA+s2c7+hMU3ufCaJd8baMNRqol+DQ5EUlJn8a7vxJHW3AA4Lf9QRnvK JK5vtx/CDMtZ4h8Wa/SGC7/0+bqLRbuUegBaDSPODWJeEfqCyZIu7VwxtAlW0FaH 7LQ60tcbXERpLB4IXmxCTg/jncKVyNM6ljZUozOarhoLSpNCru0m3u3EbkhRcqFq nXCsMUxs6qeSOCZi6M1k8sXZWJJNLOYIBYrN4bPLCvfK+G6QBg2XLtrIcbTFNoZT 2RndOBCuxb1xivDUh7dJwc234zmblCgEV9B8IqGBxlPplxC3TwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN6YyfUpdt7OuEi2YFIXf1Tv2ZkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODlh ODRhMi1mNjJkLTQxNGYtOTE1ZC04MTBjOTI2NWU1ZGUvNTg5YTg0YTItZjYyZC00 MTRmLTkxNWQtODEwYzkyNjVlNWRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTg5YTg0YTItZjYyZC00MTRmLTkx NWQtODEwYzkyNjVlNWRlLzU4OWE4NGEyLWY2MmQtNDE0Zi05MTVkLTgxMGM5MjY1 ZTVkZS5jcmwwHwYDVR0jBBgwFoAUOWNzekScrv/UWgulI7hgQzXGX1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODlhODRhMi1mNjJkLTQxNGYtOTE1ZC04MTBj OTI2NWU1ZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8WlOf50exWAgC+00ELK9K ZMRwHzPeem3g9iLwczt6RCvPFG4iX0UrMtWsnMip2c1BmlHfFGA5rOKcJ0cdVAnt 6+O1i0JObN+10DVc/spU0SXVeWzI5vpy4azvpOMEEOp48UzGx6ViuyNpokhp2q9z IjcbHBApoxng0MLwVdUcV0qanFeQUX6LJfHWOFjD2mFZNWbDCEbiVPesstTK4k7o SZDBpSClqV25bI+JGa+iNi6JZhX3LTQdBdb5YI9nMcxRa1SF/tmPgMqjcyFYIN9l soRp86tFd09/o0sJ0wMUutqspa2nmqPX7zEvKtiPWqp+4oSc+NwhtCT5McjiWOlJ -----END CERTIFICATE-----Generated at Wed May 13 12:30:08 2026 by rpki-client