$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft File: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft (raw, json) Hash identifier: qf72zNH9JfGr+vTkztHRtaM+0Oy09Nw90HY3DjGfONA= Subject key identifier: D6:1F:E5:8D:62:AE:C8:3E:13:3C:1A:1B:86:6B:5E:3E:40:F2:44:B2 Authority key identifier: 1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A Certificate issuer: /CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Certificate serial: 010D0C9F4328584D4EDD18F11B8141611DF1DEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft Manifest number: 010D0C9F4328584BC280D5C678E41C6D5255F511 Signing time: Fri 27 Mar 2026 14:00:04 +0000 Manifest this update: Fri 27 Mar 2026 14:00:04 +0000 Manifest next update: Mon 30 Mar 2026 14:00:00 +0000 Files and hashes: 1: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl (hash: hJE/C26+j1OHETkxnt99ZEKxR49/a1W2qq/yePMk8XY=) 2: 8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa (hash: 9PEw8/U+B7s8pUyCXXJyDSvq2pS4MiseXUi/qiFsV90=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:dd:18:f1:1b:81:41:61:1d:f1:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Validity Not Before: Mar 27 14:00:04 2026 GMT Not After : Mar 30 14:00:00 2026 GMT Subject: CN=138502f1-32dc-439c-b581-f5f4d34206f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:59:80:1c:dd:4f:18:4d:06:17:5b:0b:55: 97:38:f2:e6:fc:d9:c1:b8:8e:49:2c:2e:14:90:39: d4:b4:41:38:86:7b:f8:ac:bd:64:b9:6f:6a:9b:22: a6:05:e3:06:82:d2:be:55:d7:fa:bb:f5:be:c0:e1: 63:54:6c:71:27:1c:ac:37:90:34:6f:7a:c8:7c:ba: 6b:80:c9:ca:97:8b:d2:4c:77:e8:69:81:23:12:02: ff:9a:55:75:fb:29:9e:83:31:4a:ac:16:f0:1a:29: b2:3b:a8:39:ab:31:be:c5:f8:cd:bb:e8:4e:24:9a: 3b:52:83:32:eb:d8:9a:68:58:48:89:10:42:cf:5c: bb:4e:63:71:4e:ad:13:81:0c:e0:8c:5e:d0:ce:cc: 72:0d:44:4f:13:e2:b4:b5:97:30:51:06:20:40:f1: 03:80:ec:e5:0c:a3:84:45:88:b5:a3:5a:88:f0:15: 4c:3b:e1:30:16:a7:b8:42:d8:c9:91:20:35:64:0f: 00:d5:fe:ac:5b:83:8b:58:af:ac:0b:11:6d:c3:38: 48:29:c6:ae:11:1b:08:87:18:75:5a:12:d3:ea:f9: 48:63:6d:b8:19:f0:66:63:66:29:78:f0:20:17:c7: 54:6c:87:d8:e6:c8:d6:e1:ab:9f:b5:bb:09:1b:d4: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1F:E5:8D:62:AE:C8:3E:13:3C:1A:1B:86:6B:5E:3E:40:F2:44:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl X509v3 Authority Key Identifier: keyid:1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:52:0d:6a:32:4f:fe:42:2c:e3:92:e5:b5:db:c7:71:dc:90: 8d:9a:15:b0:4c:27:e1:fa:bf:1a:75:ac:e4:18:2e:34:cc:88: 48:1b:d4:e1:9f:87:f8:ea:e4:0a:b8:29:b3:b5:7c:61:f3:dd: cb:cc:98:59:f7:b6:61:9a:1b:69:88:33:86:26:bb:4a:65:2d: 4b:ac:32:7c:23:32:45:68:27:c4:f7:af:08:45:fe:5f:97:b4: e4:41:3c:c0:90:cb:5c:9b:9d:13:b5:9a:85:a4:31:cc:7c:df: 55:9d:ca:0e:5f:e9:6c:ec:92:75:2a:20:91:04:ac:d6:c6:a1: 04:00:27:c7:cc:3f:3d:1b:00:a9:e2:2e:89:c2:3c:ea:13:da: 28:07:75:1e:35:50:f2:18:6d:2c:05:42:20:d7:3c:8f:a4:6d: c4:5f:29:2a:fa:60:e1:00:1b:8e:dd:8a:2a:96:78:ba:14:6d: ad:e5:f7:ee:33:ba:77:4f:69:92:37:9d:59:e5:b6:da:57:c1: 9d:bf:d0:90:ba:6f:0f:7c:8f:2e:11:df:43:19:12:16:dd:a4: 47:aa:18:0f:a1:ee:52:c9:1e:8e:10:c7:67:7e:fa:b6:67:74: 31:6f:20:30:13:30:ad:b1:70:34:76:d2:e0:aa:e6:13:3e:b4: 41:17:77:23 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1O3RjxG4FBYR3x3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliODVkNWEtMjIzNi00YTZiLTljM2QtMjRiMTQ0NDlm NDlkMB4XDTI2MDMyNzE0MDAwNFoXDTI2MDMzMDE0MDAwMFowLzEtMCsGA1UEAxMk MTM4NTAyZjEtMzJkYy00MzljLWI1ODEtZjVmNGQzNDIwNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumxZgBzdTxhNBhdbC1WXOPLm/NnBuI5JLC4U kDnUtEE4hnv4rL1kuW9qmyKmBeMGgtK+Vdf6u/W+wOFjVGxxJxysN5A0b3rIfLpr gMnKl4vSTHfoaYEjEgL/mlV1+ymegzFKrBbwGimyO6g5qzG+xfjNu+hOJJo7UoMy 69iaaFhIiRBCz1y7TmNxTq0TgQzgjF7QzsxyDURPE+K0tZcwUQYgQPEDgOzlDKOE RYi1o1qI8BVMO+EwFqe4QtjJkSA1ZA8A1f6sW4OLWK+sCxFtwzhIKcauERsIhxh1 WhLT6vlIY224GfBmY2YpePAgF8dUbIfY5sjW4auftbsJG9RW2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNYf5Y1irsg+EzwaG4ZrXj5A8kSyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4 NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIxNDQ0OWY0OWQvODliODVkNWEtMjIzNi00 YTZiLTljM2QtMjRiMTQ0NDlmNDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODliODVkNWEtMjIzNi00YTZiLTlj M2QtMjRiMTQ0NDlmNDlkLzg5Yjg1ZDVhLTIyMzYtNGE2Yi05YzNkLTI0YjE0NDQ5 ZjQ5ZC5jcmwwHwYDVR0jBBgwFoAUHRCgkuPQCqlaPwSDXzmh/4LJB5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIx NDQ0OWY0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdUg1qMk/+QizjkuW128dx 3JCNmhWwTCfh+r8adazkGC40zIhIG9Thn4f46uQKuCmztXxh893LzJhZ97Zhmhtp iDOGJrtKZS1LrDJ8IzJFaCfE968IRf5fl7TkQTzAkMtcm50TtZqFpDHMfN9VncoO X+ls7JJ1KiCRBKzWxqEEACfHzD89GwCp4i6JwjzqE9ooB3UeNVDyGG0sBUIg1zyP pG3EXykq+mDhABuO3Yoqlni6FG2t5ffuM7p3T2mSN51Z5bbaV8Gdv9CQum8PfI8u Ed9DGRIW3aRHqhgPoe5SyR6OEMdnfvq2Z3QxbyAwEzCtsXA0dtLgquYTPrRBF3cj -----END CERTIFICATE-----Generated at Sat Mar 28 08:45:46 2026 by rpki-client