$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89871cf9-6e6f-48f5-97f2-35e8676b70b3/89871cf9-6e6f-48f5-97f2-35e8676b70b3.mft File: 89871cf9-6e6f-48f5-97f2-35e8676b70b3.mft (raw, json) Hash identifier: 84HmST74FlkvadKtuc6o8uDQuAFVB5ct70R7Ms9iauQ= Subject key identifier: 35:C9:2F:11:5A:8E:15:C4:4D:4A:B3:DC:22:59:72:2E:EB:47:95:21 Authority key identifier: BB:20:62:40:CA:2F:5B:C4:63:AD:4C:F1:8C:A6:B9:8F:83:13:C7:53 Certificate issuer: /CN=89871cf9-6e6f-48f5-97f2-35e8676b70b3 Certificate serial: 010D0C9F4328584D4FE917C89435BC712CC888B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89871cf9-6e6f-48f5-97f2-35e8676b70b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89871cf9-6e6f-48f5-97f2-35e8676b70b3/89871cf9-6e6f-48f5-97f2-35e8676b70b3.mft Manifest number: 010D0C9F4328584BF88BF84733FC6460ACC568BE Signing time: Fri 27 Mar 2026 23:00:03 +0000 Manifest this update: Fri 27 Mar 2026 23:00:03 +0000 Manifest next update: Sun 29 Mar 2026 23:00:00 +0000 Files and hashes: 1: 72f73f08-e0d6-3157-afec-f28534fe2ed2.roa (hash: iMivdDRVLg2iNQbbjMynPyMrccHJSKVa5q80LoK7RqU=) 2: 89871cf9-6e6f-48f5-97f2-35e8676b70b3.crl (hash: 7KAef4wDKwyyVqZH4bDDS9lr94q8o85aoguIEjFB71E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89871cf9-6e6f-48f5-97f2-35e8676b70b3/89871cf9-6e6f-48f5-97f2-35e8676b70b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89871cf9-6e6f-48f5-97f2-35e8676b70b3/89871cf9-6e6f-48f5-97f2-35e8676b70b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89871cf9-6e6f-48f5-97f2-35e8676b70b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:e9:17:c8:94:35:bc:71:2c:c8:88:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89871cf9-6e6f-48f5-97f2-35e8676b70b3 Validity Not Before: Mar 27 23:00:03 2026 GMT Not After : Mar 29 23:00:00 2026 GMT Subject: CN=b5c7f6a9-059e-4322-a6e2-733cb20cca2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:4d:18:06:2b:ea:4c:40:33:cf:8f:07:18: cb:2d:46:22:11:2c:ca:8f:71:71:06:ca:d9:60:b7: 95:2b:4c:13:69:b6:e9:58:43:58:d8:51:26:a8:15: b6:1a:c0:75:0a:20:26:82:3f:f7:29:36:0c:80:91: 4d:d3:b2:79:8f:32:4d:fa:dd:e6:d6:15:60:2d:58: 99:08:e2:be:e1:b4:ca:d4:7b:f7:27:d0:ee:bf:16: d9:05:b3:9b:eb:12:5a:90:94:9a:d2:7c:4b:23:5b: 09:0c:ee:27:50:4e:8d:83:97:71:65:a8:91:cc:32: 85:6d:f4:12:a0:13:ed:c4:6b:8c:0f:47:38:17:01: 5b:b2:0e:e2:0a:cf:7d:ec:bf:f8:df:cc:bd:01:d0: 0d:79:d7:db:e8:6d:2c:8a:28:09:a3:fc:a3:d6:e1: 32:ca:7b:c0:b2:0c:89:7c:14:0b:17:d4:91:96:2d: 06:df:73:f5:5e:04:02:15:9e:8f:9d:00:f0:4d:48: 76:0d:89:25:87:55:e9:81:71:ae:13:d2:82:38:68: b5:6f:d3:55:82:f5:0c:73:09:26:8d:40:6a:a1:77: ab:98:31:36:47:1a:10:b3:48:a5:a4:eb:78:30:a0: ae:00:50:30:a2:44:16:69:f9:6c:73:45:e7:3e:f5: e6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C9:2F:11:5A:8E:15:C4:4D:4A:B3:DC:22:59:72:2E:EB:47:95:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89871cf9-6e6f-48f5-97f2-35e8676b70b3/89871cf9-6e6f-48f5-97f2-35e8676b70b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89871cf9-6e6f-48f5-97f2-35e8676b70b3/89871cf9-6e6f-48f5-97f2-35e8676b70b3.crl X509v3 Authority Key Identifier: keyid:BB:20:62:40:CA:2F:5B:C4:63:AD:4C:F1:8C:A6:B9:8F:83:13:C7:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89871cf9-6e6f-48f5-97f2-35e8676b70b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ea:1d:08:dc:f4:a9:13:1a:cc:aa:5b:34:0b:a4:60:d7:e9: bd:33:74:31:fb:d3:38:f4:02:9f:36:31:29:7f:bc:6c:d4:2f: 0b:a1:34:c0:5c:49:94:dd:16:19:96:f0:0c:ce:f5:fb:e1:cd: 7e:56:78:2c:c7:ec:69:ec:2e:8f:e0:28:81:ad:46:e8:7d:d9: e4:c9:ff:bd:cc:f9:f5:dc:2f:aa:f9:ce:80:59:8e:b1:5a:35: bf:4a:99:35:5c:fe:a6:d6:62:8a:9c:97:7f:eb:cf:d9:f5:14: 14:7a:fb:71:e8:bf:ac:f1:bc:26:8c:e5:66:bb:7b:d2:06:fa: 25:c2:14:5a:d3:39:13:7b:13:be:0f:8e:6d:9e:1f:f6:71:b2: da:ca:0d:d8:0f:46:20:55:24:41:cc:f0:3c:39:93:bf:5d:7c: d9:82:95:39:90:5b:2c:37:68:0b:18:e1:53:c9:6e:d7:c1:2c: b1:42:09:c5:7e:63:d1:2c:2e:b1:9d:b6:56:a8:0f:aa:bc:1c: 82:0c:a0:a9:aa:39:6e:6e:7a:5b:ee:1f:fb:3d:02:f9:f6:24: 81:82:77:49:73:af:29:f5:3e:b0:23:64:d1:85:44:7c:56:91: ad:0c:7f:c1:21:9c:c1:47:84:d4:cc:76:ea:ce:b7:34:96:c2: 5c:68:07:94 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1P6RfIlDW8cSzIiLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk4NzFjZjktNmU2Zi00OGY1LTk3ZjItMzVlODY3NmI3 MGIzMB4XDTI2MDMyNzIzMDAwM1oXDTI2MDMyOTIzMDAwMFowLzEtMCsGA1UEAxMk YjVjN2Y2YTktMDU5ZS00MzIyLWE2ZTItNzMzY2IyMGNjYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYxNGAYr6kxAM8+PBxjLLUYiESzKj3FxBsrZ YLeVK0wTabbpWENY2FEmqBW2GsB1CiAmgj/3KTYMgJFN07J5jzJN+t3m1hVgLViZ COK+4bTK1Hv3J9DuvxbZBbOb6xJakJSa0nxLI1sJDO4nUE6Ng5dxZaiRzDKFbfQS oBPtxGuMD0c4FwFbsg7iCs997L/438y9AdANedfb6G0siigJo/yj1uEyynvAsgyJ fBQLF9SRli0G33P1XgQCFZ6PnQDwTUh2DYklh1XpgXGuE9KCOGi1b9NVgvUMcwkm jUBqoXermDE2RxoQs0ilpOt4MKCuAFAwokQWaflsc0XnPvXmxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDXJLxFajhXETUqz3CJZci7rR5UhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTg3 MWNmOS02ZTZmLTQ4ZjUtOTdmMi0zNWU4Njc2YjcwYjMvODk4NzFjZjktNmU2Zi00 OGY1LTk3ZjItMzVlODY3NmI3MGIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODk4NzFjZjktNmU2Zi00OGY1LTk3 ZjItMzVlODY3NmI3MGIzLzg5ODcxY2Y5LTZlNmYtNDhmNS05N2YyLTM1ZTg2NzZi NzBiMy5jcmwwHwYDVR0jBBgwFoAUuyBiQMovW8RjrUzxjKa5j4MTx1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTg3MWNmOS02ZTZmLTQ4ZjUtOTdmMi0zNWU4 Njc2YjcwYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAR6h0I3PSpExrMqls0C6Rg 1+m9M3Qx+9M49AKfNjEpf7xs1C8LoTTAXEmU3RYZlvAMzvX74c1+Vngsx+xp7C6P 4CiBrUbofdnkyf+9zPn13C+q+c6AWY6xWjW/Spk1XP6m1mKKnJd/68/Z9RQUevtx 6L+s8bwmjOVmu3vSBvolwhRa0zkTexO+D45tnh/2cbLayg3YD0YgVSRBzPA8OZO/ XXzZgpU5kFssN2gLGOFTyW7XwSyxQgnFfmPRLC6xnbZWqA+qvByCDKCpqjlubnpb 7h/7PQL59iSBgndJc68p9T6wI2TRhUR8VpGtDH/BIZzBR4TUzHbqzrc0lsJcaAeU -----END CERTIFICATE-----Generated at Sat Mar 28 10:47:07 2026 by rpki-client