$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft File: 89dfa952-929a-4c50-a372-96882b2b33e2.mft (raw, json) Hash identifier: 5Yd+nXxRiNIpC6nSewhX3YMO2pyT4IbeUOPY8eUMeJc= Subject key identifier: 5C:10:B7:5A:9A:CB:7F:B4:27:BE:AF:ED:34:99:4C:8C:3B:62:FE:66 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584F48FB9929A3FF18CAE0507280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft Manifest number: 010D0C9F4328584073A821439392B1CC62E2378A Signing time: Thu 24 Sep 2026 21:00:23 +0000 Manifest this update: Thu 24 Sep 2026 21:00:23 +0000 Manifest next update: Sun 27 Sep 2026 21:00:00 +0000 Files and hashes: 1: 0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa (hash: XVIOX7ttAs1nwbCLGahn6BeBJYOjXKT9staTmE3jS8c=) 2: 89dfa952-929a-4c50-a372-96882b2b33e2.crl (hash: vcZ6ZOLj4vgU+YE9SVhrDy2NjM1Uj/wWcgOtGXsvIAg=) 3: b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa (hash: rAXr4T3vjkvYN/doq6WARLZI80ciegYkfqvTWNw3mlI=) 4: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (hash: YsZglykVTLupNw2FqYsd5Q9s+mP7yu3zFq0OkUCceJI=) 5: e234c5cf-6ad7-350b-9018-aeef40195ca6.roa (hash: adDcSfTCn7UccAYiMHcfuzltf0k5efuybd5bKePHP7w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:fb:99:29:a3:ff:18:ca:e0:50:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Sep 24 21:00:23 2026 GMT Not After : Sep 27 21:00:00 2026 GMT Subject: CN=144817c5-451a-41a7-a660-ffb80fe56df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:47:00:d1:be:ee:e2:59:d1:ee:45:00:5b:3a: 0b:7e:a8:ef:32:a7:59:9f:63:1a:93:fb:62:a5:85: 52:2a:c2:ce:a7:ff:d8:ca:e3:45:0c:10:85:cc:2a: b1:37:2b:54:10:7d:49:c1:92:74:03:74:a6:9c:58: e9:2c:23:aa:91:8a:9f:cf:fc:76:e8:ad:26:55:dd: 61:06:d6:c5:8f:69:3a:55:b8:0b:cc:3a:90:66:e5: 98:55:aa:9f:6b:c0:ea:ee:ab:18:38:1d:b8:e3:59: c8:30:e5:a5:d7:16:1f:3a:b9:0e:b9:18:63:71:84: 3b:6d:52:18:d3:62:d4:2d:32:f2:df:14:19:16:35: a8:dc:6c:de:67:66:8d:29:97:b1:2c:40:35:b6:9a: ee:61:7d:22:51:3c:9d:8f:21:37:17:a5:41:06:f6: 0f:20:f4:2c:db:ee:1a:4f:12:6d:d2:a9:5d:dc:c1: 75:65:95:8d:6b:0b:6c:ad:bd:50:4a:70:67:3d:13: 2c:9f:01:21:97:f7:a3:85:13:1b:9c:01:4a:c3:d0: 18:1d:29:dc:6d:80:55:3f:68:08:31:1f:d3:e4:98: 28:96:a0:fa:35:3b:6e:a9:43:bc:53:84:7d:ae:d5: 52:61:c6:dc:14:d1:ee:35:55:13:b7:ce:38:af:19: 80:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:10:B7:5A:9A:CB:7F:B4:27:BE:AF:ED:34:99:4C:8C:3B:62:FE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:50:33:ae:0a:5b:aa:bd:c6:73:37:68:81:49:87:78:af:fa: e4:4d:c6:21:8b:48:99:c3:ae:9f:54:11:a1:06:b2:76:5b:71: ec:bd:16:72:92:d2:ad:f6:67:bd:45:57:43:dc:d1:da:7f:41: 4e:83:8a:ab:14:9b:96:33:1f:df:60:69:d6:73:3f:3b:33:13: 94:dc:30:a0:ac:44:f1:94:c2:f3:c4:5d:9c:9f:a5:ad:47:d5: 2e:f9:29:8a:32:3b:8c:0a:ae:c4:d3:2e:50:6e:20:d3:5d:c2: 96:17:97:be:4d:55:31:dc:b3:a3:ff:4b:61:8a:f0:fb:d2:52: be:fb:42:ce:54:b8:72:47:04:20:15:7c:eb:18:07:6b:6b:ca: e7:0e:54:73:77:0e:5b:fd:c3:4c:b9:0b:4a:95:48:be:48:00: 59:cc:fa:e6:f1:8b:fc:14:e9:fa:d3:c1:8b:7c:a0:3b:02:79: 46:0b:64:92:18:41:2b:37:a1:9c:c3:ef:d6:05:1b:02:f4:82: da:d8:fb:79:36:4c:56:b0:18:47:21:a8:aa:d8:c8:6e:3e:ea: 9c:70:5f:b2:10:c7:03:a7:7e:89:12:d6:fe:d9:0b:6b:43:a4: 0c:f1:b4:4a:5a:a5:05:70:52:3c:a9:f5:0d:54:d2:f8:86:69: 22:cf:0b:76 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9I+5kpo/8YyuBQcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI2MDkyNDIxMDAyM1oXDTI2MDkyNzIxMDAwMFowLzEtMCsGA1UEAxMk MTQ0ODE3YzUtNDUxYS00MWE3LWE2NjAtZmZiODBmZTU2ZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kcA0b7u4lnR7kUAWzoLfqjvMqdZn2Mak/ti pYVSKsLOp//YyuNFDBCFzCqxNytUEH1JwZJ0A3SmnFjpLCOqkYqfz/x26K0mVd1h BtbFj2k6VbgLzDqQZuWYVaqfa8Dq7qsYOB2441nIMOWl1xYfOrkOuRhjcYQ7bVIY 02LULTLy3xQZFjWo3GzeZ2aNKZexLEA1tpruYX0iUTydjyE3F6VBBvYPIPQs2+4a TxJt0qld3MF1ZZWNawtsrb1QSnBnPRMsnwEhl/ejhRMbnAFKw9AYHSncbYBVP2gI MR/T5JgolqD6NTtuqUO8U4R9rtVSYcbcFNHuNVUTt844rxmAXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFwQt1qay3+0J76v7TSZTIw7Yv5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvODlkZmE5NTItOTI5YS00 YzUwLWEzNzItOTY4ODJiMmIzM2UyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYUDOuCluqvcZzN2iBSYd4 r/rkTcYhi0iZw66fVBGhBrJ2W3HsvRZyktKt9me9RVdD3NHaf0FOg4qrFJuWMx/f YGnWcz87MxOU3DCgrETxlMLzxF2cn6WtR9Uu+SmKMjuMCq7E0y5QbiDTXcKWF5e+ TVUx3LOj/0thivD70lK++0LOVLhyRwQgFXzrGAdra8rnDlRzdw5b/cNMuQtKlUi+ SABZzPrm8Yv8FOn608GLfKA7AnlGC2SSGEErN6Gcw+/WBRsC9ILa2Pt5NkxWsBhH Iaiq2MhuPuqccF+yEMcDp36JEtb+2QtrQ6QM8bRKWqUFcFI8qfUNVNL4hmkizwt2 -----END CERTIFICATE-----Generated at Fri Sep 25 19:17:17 2026 by rpki-client