$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft File: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft (raw, json) Hash identifier: grbZ3yjCZmx6PYN+S416LFqfUGnxTC0nWF9ySaUAWa8= Subject key identifier: F9:B7:26:DB:BE:5B:17:D9:82:1B:F9:25:BD:FF:D0:B3:F8:47:93:66 Authority key identifier: 1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A Certificate issuer: /CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Certificate serial: 010D0C9F4328584F456073AF13887D80B6EC6480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft Manifest number: 010D0C9F4328584BC280D5C678E41C6D5255F5CB Signing time: Wed 23 Sep 2026 14:00:22 +0000 Manifest this update: Wed 23 Sep 2026 14:00:22 +0000 Manifest next update: Sat 26 Sep 2026 14:00:00 +0000 Files and hashes: 1: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl (hash: K7K7v8P2D0srFzIVJ4Q3WFgUvuMpSgx6lMOPSmMuBr4=) 2: 8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa (hash: Ivc2V75k346K7GF/0O0XSnoD/R0U1OkGceQFHYTCD58=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:60:73:af:13:88:7d:80:b6:ec:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Validity Not Before: Sep 23 14:00:22 2026 GMT Not After : Sep 26 14:00:00 2026 GMT Subject: CN=306ce0ce-bab6-4fa5-971f-b7b80d7e9048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:27:ff:36:42:c3:85:32:a1:f7:28:8d:4b: 04:ff:2a:4d:4d:7e:69:1d:9b:ee:ba:af:c5:f7:a9: 79:ff:46:09:11:b9:4e:e8:18:a5:13:46:82:55:8a: a9:02:b5:22:57:e1:0a:01:a4:dc:b2:7d:bb:5a:92: f5:a6:84:64:5d:e7:3b:de:c3:66:be:a4:b3:c2:14: 2b:b0:9a:8c:1f:c7:fe:bc:28:6d:40:1a:b0:53:c0: fa:40:07:73:0b:15:e9:61:a7:46:f3:27:23:f5:8c: b1:f2:ea:5a:79:89:ef:56:22:db:e9:99:34:e7:6f: 22:c1:5d:7b:8d:d0:43:c9:9c:59:0d:67:5e:f2:21: d9:2a:e5:19:e2:13:d6:e8:19:5c:f4:cd:52:c3:56: 01:80:63:19:87:bf:3b:f5:7f:b5:84:48:69:c0:f0: 74:c7:aa:fa:33:18:cb:97:ca:df:b9:14:67:26:0d: 9e:e0:07:3c:5a:ef:79:f5:2c:47:05:75:85:9a:2e: 56:8a:ac:d0:0f:f8:d5:55:92:07:16:a2:3c:ca:ee: 2e:2e:f0:8f:ba:76:7b:a6:5e:e1:7f:8d:e6:03:db: f6:a5:bf:4d:09:12:a0:24:34:6a:34:18:c3:97:61: 46:7d:e3:55:b6:13:4b:56:dd:97:2e:e1:85:2b:43: 99:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B7:26:DB:BE:5B:17:D9:82:1B:F9:25:BD:FF:D0:B3:F8:47:93:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl X509v3 Authority Key Identifier: keyid:1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:72:c9:a0:53:95:46:44:6b:6c:87:42:eb:ff:bb:b4:b1:20: d0:05:ed:43:fa:9b:4d:4c:cd:30:ca:0b:9a:14:8e:d8:20:fa: a8:7d:e9:fc:4d:73:ca:42:ce:f4:9f:de:ee:b1:56:82:a2:a5: 34:a7:14:b8:b4:78:62:66:8b:04:f3:6a:82:15:6d:f3:92:56: 0c:c7:9d:e8:74:6b:e4:9e:cf:c9:b1:1c:97:89:fd:58:0b:84: 50:88:c0:08:50:5d:c1:1a:e5:16:b3:d9:63:f7:a5:cf:99:ed: 4b:57:36:36:05:3f:f3:8b:6a:9e:ed:4e:18:83:a8:39:cc:4e: 17:ee:de:c5:56:b8:6e:1b:70:1a:30:12:85:c5:54:74:d9:fd: 8d:98:aa:c6:f6:f1:3f:85:6a:b2:a2:02:ed:f5:46:54:36:82: f9:72:89:b1:ca:cd:ce:73:81:50:d0:ae:52:7f:ed:05:7e:fa: f0:78:fb:6a:63:ce:6b:c5:73:1b:fc:93:cc:3d:35:53:14:a2: 52:c4:d3:40:22:7e:95:1d:33:b2:a5:03:be:f1:fe:e2:e5:20: ea:bb:ce:17:e9:c3:03:79:83:95:ab:1e:02:be:7a:76:0a:2d: 78:70:19:c3:84:d6:ec:69:8f:31:4a:28:3b:63:22:a9:22:15: 0b:d6:f9:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9FYHOvE4h9gLbsZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliODVkNWEtMjIzNi00YTZiLTljM2QtMjRiMTQ0NDlm NDlkMB4XDTI2MDkyMzE0MDAyMloXDTI2MDkyNjE0MDAwMFowLzEtMCsGA1UEAxMk MzA2Y2UwY2UtYmFiNi00ZmE1LTk3MWYtYjdiODBkN2U5MDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna8n/zZCw4UyofcojUsE/ypNTX5pHZvuuq/F 96l5/0YJEblO6BilE0aCVYqpArUiV+EKAaTcsn27WpL1poRkXec73sNmvqSzwhQr sJqMH8f+vChtQBqwU8D6QAdzCxXpYadG8ycj9Yyx8upaeYnvViLb6Zk0528iwV17 jdBDyZxZDWde8iHZKuUZ4hPW6Blc9M1Sw1YBgGMZh7879X+1hEhpwPB0x6r6MxjL l8rfuRRnJg2e4Ac8Wu959SxHBXWFmi5WiqzQD/jVVZIHFqI8yu4uLvCPunZ7pl7h f43mA9v2pb9NCRKgJDRqNBjDl2FGfeNVthNLVt2XLuGFK0OZdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPm3Jtu+WxfZghv5Jb3/0LP4R5NmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4 NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIxNDQ0OWY0OWQvODliODVkNWEtMjIzNi00 YTZiLTljM2QtMjRiMTQ0NDlmNDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODliODVkNWEtMjIzNi00YTZiLTlj M2QtMjRiMTQ0NDlmNDlkLzg5Yjg1ZDVhLTIyMzYtNGE2Yi05YzNkLTI0YjE0NDQ5 ZjQ5ZC5jcmwwHwYDVR0jBBgwFoAUHRCgkuPQCqlaPwSDXzmh/4LJB5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIx NDQ0OWY0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHcsmgU5VGRGtsh0Lr/7u0 sSDQBe1D+ptNTM0wyguaFI7YIPqofen8TXPKQs70n97usVaCoqU0pxS4tHhiZosE 82qCFW3zklYMx53odGvkns/JsRyXif1YC4RQiMAIUF3BGuUWs9lj96XPme1LVzY2 BT/zi2qe7U4Yg6g5zE4X7t7FVrhuG3AaMBKFxVR02f2NmKrG9vE/hWqyogLt9UZU NoL5comxys3Oc4FQ0K5Sf+0FfvrwePtqY85rxXMb/JPMPTVTFKJSxNNAIn6VHTOy pQO+8f7i5SDqu84X6cMDeYOVqx4Cvnp2Ci14cBnDhNbsaY8xSig7YyKpIhUL1vmi -----END CERTIFICATE-----Generated at Thu Sep 24 04:32:55 2026 by rpki-client