$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft File: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft (raw, json) Hash identifier: zYyl9/oFWZop1uFVtBO18taj1TJmeO+qYt9qg/8g8rc= Subject key identifier: 0E:22:C5:44:8F:A4:EC:1D:EC:2F:E7:F7:51:5C:C3:76:57:54:99:9C Authority key identifier: 1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A Certificate issuer: /CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Certificate serial: 010D0C9F4328584DCF489176445C0CE4422C7440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft Manifest number: 010D0C9F4328584BC280D5C678E41C6D5255F542 Signing time: Tue 12 May 2026 14:00:03 +0000 Manifest this update: Tue 12 May 2026 14:00:03 +0000 Manifest next update: Fri 15 May 2026 14:00:00 +0000 Files and hashes: 1: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl (hash: dF4O+KMz/6nNHHsOIhWocSd+XVFHtdXf2PKjCg2I89Q=) 2: 8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa (hash: o4uX8/noFYR52QLtWMakRmwpiQDloAZtwher9E+FVfM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:48:91:76:44:5c:0c:e4:42:2c:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Validity Not Before: May 12 14:00:03 2026 GMT Not After : May 15 14:00:00 2026 GMT Subject: CN=b61365df-4a14-410f-a3e7-03f1c67d387e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:08:78:a8:18:c8:ca:57:35:27:d8:bc:a1:8a: f1:c0:77:8a:bf:b2:3b:35:f3:b4:02:4b:d8:c3:e1: 82:3d:2b:61:36:cb:74:e5:e1:19:71:3d:ec:be:2d: 6f:dc:cd:61:29:99:ae:8e:1e:e9:25:3d:84:e0:e5: 81:a3:52:d7:4b:c8:8a:96:aa:3d:ee:90:d0:63:e1: 7d:8c:f3:26:e7:c5:f9:00:00:04:c4:f9:4f:8a:a0: 01:57:71:25:68:9f:67:40:95:74:52:7b:18:79:af: 5b:6d:52:d2:aa:ad:7e:25:9a:ed:aa:8e:93:b0:4c: b6:27:08:aa:c4:19:16:4d:90:9a:45:1d:58:70:17: f4:37:dc:29:91:5f:27:f4:74:71:7f:bb:1a:52:a8: 88:6e:6c:b3:bf:c2:7e:be:94:97:4c:04:60:e0:b1: 5b:d3:91:52:17:db:2c:4b:de:72:b8:2c:05:db:d0: 31:93:3d:ba:b9:39:8d:2e:54:02:77:e4:ba:14:ec: e4:8d:04:b6:ed:38:2d:a6:b6:69:78:2d:24:38:a2: e5:1d:46:7b:df:8b:f4:3c:21:59:c1:67:65:32:d9: 9b:6d:5a:20:e5:f6:40:57:08:af:0e:19:d8:33:c6: b6:a1:f9:f7:21:6e:33:5d:65:0b:ef:13:3c:12:23: 45:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:22:C5:44:8F:A4:EC:1D:EC:2F:E7:F7:51:5C:C3:76:57:54:99:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl X509v3 Authority Key Identifier: keyid:1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ac:f4:89:b5:b2:69:6c:80:0c:fb:a7:26:f0:f4:6f:3f:1f: e2:9e:a9:4c:af:58:39:b7:ad:38:f2:02:03:07:59:bf:cd:d9: 5c:7c:df:0e:b5:f7:93:de:d2:f9:98:c6:da:33:b1:db:e0:1f: a0:8b:97:4a:eb:c8:88:66:9e:35:64:29:05:c2:35:c2:a3:e0: 29:e7:9b:44:02:42:0b:06:dc:95:56:4e:55:a9:18:79:a8:26: b9:39:96:4e:8b:a5:7c:17:e2:0b:81:0d:e4:d9:a1:7e:f3:40: 86:40:e3:65:c0:01:dd:4a:1f:32:92:e9:91:a8:f1:34:d7:0f: 1c:f5:06:51:f3:ad:d3:04:ba:ff:21:10:71:96:ea:b8:ef:b0: 39:0a:e7:dd:58:bd:2f:cb:75:46:fc:25:7b:73:2a:29:f5:ad: fc:cc:f9:c7:12:a0:33:f0:23:67:54:5e:37:fc:41:5d:8e:c3: 48:76:92:b1:5c:92:6c:77:c5:9f:77:f3:e9:ff:fc:10:f1:2e: d0:7f:52:34:31:8c:06:a4:68:1c:a6:07:09:31:06:bc:f9:8f: 43:f8:3e:4e:38:78:18:29:ab:6b:23:a3:f7:5a:d8:70:db:18: 58:a2:f5:12:a7:d9:d3:cf:77:70:bd:30:c7:17:4a:d5:e2:47: 9a:83:9b:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PSJF2RFwM5EIsdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliODVkNWEtMjIzNi00YTZiLTljM2QtMjRiMTQ0NDlm NDlkMB4XDTI2MDUxMjE0MDAwM1oXDTI2MDUxNTE0MDAwMFowLzEtMCsGA1UEAxMk YjYxMzY1ZGYtNGExNC00MTBmLWEzZTctMDNmMWM2N2QzODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQh4qBjIylc1J9i8oYrxwHeKv7I7NfO0AkvY w+GCPSthNst05eEZcT3svi1v3M1hKZmujh7pJT2E4OWBo1LXS8iKlqo97pDQY+F9 jPMm58X5AAAExPlPiqABV3ElaJ9nQJV0UnsYea9bbVLSqq1+JZrtqo6TsEy2Jwiq xBkWTZCaRR1YcBf0N9wpkV8n9HRxf7saUqiIbmyzv8J+vpSXTARg4LFb05FSF9ss S95yuCwF29Axkz26uTmNLlQCd+S6FOzkjQS27TgtprZpeC0kOKLlHUZ734v0PCFZ wWdlMtmbbVog5fZAVwivDhnYM8a2ofn3IW4zXWUL7xM8EiNFewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA4ixUSPpOwd7C/n91Fcw3ZXVJmcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4 NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIxNDQ0OWY0OWQvODliODVkNWEtMjIzNi00 YTZiLTljM2QtMjRiMTQ0NDlmNDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODliODVkNWEtMjIzNi00YTZiLTlj M2QtMjRiMTQ0NDlmNDlkLzg5Yjg1ZDVhLTIyMzYtNGE2Yi05YzNkLTI0YjE0NDQ5 ZjQ5ZC5jcmwwHwYDVR0jBBgwFoAUHRCgkuPQCqlaPwSDXzmh/4LJB5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIx NDQ0OWY0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbrPSJtbJpbIAM+6cm8PRv Px/inqlMr1g5t6048gIDB1m/zdlcfN8OtfeT3tL5mMbaM7Hb4B+gi5dK68iIZp41 ZCkFwjXCo+Ap55tEAkILBtyVVk5VqRh5qCa5OZZOi6V8F+ILgQ3k2aF+80CGQONl wAHdSh8ykumRqPE01w8c9QZR863TBLr/IRBxluq477A5CufdWL0vy3VG/CV7cyop 9a38zPnHEqAz8CNnVF43/EFdjsNIdpKxXJJsd8Wfd/Pp//wQ8S7Qf1I0MYwGpGgc pgcJMQa8+Y9D+D5OOHgYKatrI6P3Wthw2xhYovUSp9nTz3dwvTDHF0rV4keag5vQ -----END CERTIFICATE-----Generated at Wed May 13 03:43:54 2026 by rpki-client