$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft File: 89dfa952-929a-4c50-a372-96882b2b33e2.mft (raw, json) Hash identifier: 1vfNV4Wz4cPElLmWzeE7MBQ9NU4EHVqznH/M6J2Zixg= Subject key identifier: BB:29:DB:23:E2:FE:CE:C3:F6:04:0D:E3:1B:95:9D:3C:91:B1:B0:99 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584D49FA72C850A873DD12B32B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft Manifest number: 010D0C9F4328584073A821439392B1CC62E236CE Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Fri 27 Mar 2026 20:00:00 +0000 Files and hashes: 1: 0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa (hash: eslZdN/86YSmLtvkEB3cnTUYNiIz7HHUwKcsWs3DkVU=) 2: 89dfa952-929a-4c50-a372-96882b2b33e2.crl (hash: cU/Mrd7lu7OudSkenVbGBbqiPE9F1I8TPu8iXjS7FwM=) 3: b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa (hash: 3dfIxBJfZc+RlqpzW1ZSpaH0j23GWTAKL4ywWMljlcE=) 4: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (hash: 2Jk5xUiWAqMgVegFQ1veu/o5hgYyNyJ231tBv0iyQXE=) 5: e234c5cf-6ad7-350b-9018-aeef40195ca6.roa (hash: wdKvIHmJXw0Xp9qy5AkrQDXAxODx/I443CPOrr/73gE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:72:c8:50:a8:73:dd:12:b3:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 27 20:00:00 2026 GMT Subject: CN=60d1cc32-1973-4810-a751-70efb78b3442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f0:04:9a:63:2f:6b:b8:0d:37:96:2a:9c:b9: 0e:74:92:b4:07:84:8e:82:57:29:09:a2:d5:06:7e: 90:31:de:13:75:f2:1c:93:3d:73:1f:65:55:ce:ce: 3e:20:30:e4:ae:b7:8e:c3:3b:98:f1:7f:6d:89:5a: b9:5a:a9:ba:84:fe:99:4e:76:0e:2a:0b:1f:4f:2a: 95:de:89:68:e5:ed:52:2c:5a:07:82:ba:2b:81:74: 2c:09:a5:2f:b4:40:7a:06:ad:73:d8:fc:94:87:fd: a2:24:01:d0:b9:a0:56:c7:22:38:43:df:ad:0f:8c: 96:44:2f:7a:02:45:ae:5d:19:c5:75:fe:7e:4e:47: 5b:25:ac:db:9b:60:17:e4:59:87:58:e4:94:86:77: 9c:e6:7c:4f:10:6c:54:68:59:00:b6:c5:ac:09:05: fd:78:ae:e8:1c:35:9d:63:ad:33:3b:88:bf:44:28: 72:75:e1:0f:2e:0c:81:11:7d:41:60:9c:00:55:60: 18:27:fc:3d:4b:3b:b9:fb:12:9a:dd:04:5c:86:9f: 87:1f:c5:d4:fd:eb:7b:17:ba:a8:9d:90:96:20:32: 60:c3:bb:98:aa:2a:a0:e9:c5:ec:3c:94:cd:b0:ba: 38:0b:b7:15:c9:35:0e:b8:36:de:78:16:89:75:84: 9a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:29:DB:23:E2:FE:CE:C3:F6:04:0D:E3:1B:95:9D:3C:91:B1:B0:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3f:40:c0:73:e4:61:2b:27:80:20:37:60:69:d1:de:65:07: 3c:97:d3:c3:f2:4f:44:8e:ef:1b:6d:a1:bf:c8:98:c8:79:fb: 14:71:ca:24:d6:7b:55:92:b5:b5:ac:69:03:3d:11:d5:5e:3a: 54:3c:59:f5:ba:cf:e6:c7:81:98:40:ee:35:30:94:67:8b:39: 20:b1:f6:4b:22:d4:8c:0d:47:d3:34:7d:d3:a4:e5:25:79:da: cc:fa:47:04:a0:ee:ba:7b:10:fd:36:0f:c0:02:d1:15:e3:04: 71:ba:23:bd:85:15:6d:db:0f:f8:be:15:19:0e:89:5c:ef:a2: ae:aa:b5:08:32:f3:85:58:99:31:a0:62:ea:63:66:71:54:d5: 03:e2:be:dc:6c:4d:8f:eb:f3:93:7a:01:03:da:c4:19:73:4c: 8a:67:aa:cb:6e:b5:a3:53:3e:8c:a2:77:c7:b7:7d:1a:32:e9: 9b:4e:32:de:24:9c:6a:94:33:a9:15:0c:a9:cc:ef:c7:8b:d9: 2a:5e:8f:5f:c8:67:bc:eb:74:bf:88:8b:3d:6e:f5:8b:42:ad: d6:b8:00:84:75:51:e8:0e:df:bd:16:70:42:d3:0b:b5:ca:46: ed:31:4f:cc:4c:cf:0c:38:34:cc:9d:32:f7:05:5a:ec:6f:9f: 2b:45:a9:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nLIUKhz3RKzK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyNzIwMDAwMFowLzEtMCsGA1UEAxMk NjBkMWNjMzItMTk3My00ODEwLWE3NTEtNzBlZmI3OGIzNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfAEmmMva7gNN5YqnLkOdJK0B4SOglcpCaLV Bn6QMd4TdfIckz1zH2VVzs4+IDDkrreOwzuY8X9tiVq5Wqm6hP6ZTnYOKgsfTyqV 3olo5e1SLFoHgrorgXQsCaUvtEB6Bq1z2PyUh/2iJAHQuaBWxyI4Q9+tD4yWRC96 AkWuXRnFdf5+TkdbJazbm2AX5FmHWOSUhnec5nxPEGxUaFkAtsWsCQX9eK7oHDWd Y60zO4i/RChydeEPLgyBEX1BYJwAVWAYJ/w9Szu5+xKa3QRchp+HH8XU/et7F7qo nZCWIDJgw7uYqiqg6cXsPJTNsLo4C7cVyTUOuDbeeBaJdYSamQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLsp2yPi/s7D9gQN4xuVnTyRsbCZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvODlkZmE5NTItOTI5YS00 YzUwLWEzNzItOTY4ODJiMmIzM2UyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9P0DAc+RhKyeAIDdgadHe ZQc8l9PD8k9Eju8bbaG/yJjIefsUccok1ntVkrW1rGkDPRHVXjpUPFn1us/mx4GY QO41MJRnizkgsfZLItSMDUfTNH3TpOUledrM+kcEoO66exD9Ng/AAtEV4wRxuiO9 hRVt2w/4vhUZDolc76KuqrUIMvOFWJkxoGLqY2ZxVNUD4r7cbE2P6/OTegED2sQZ c0yKZ6rLbrWjUz6MonfHt30aMumbTjLeJJxqlDOpFQypzO/Hi9kqXo9fyGe863S/ iIs9bvWLQq3WuACEdVHoDt+9FnBC0wu1ykbtMU/MTM8MODTMnTL3BVrsb58rRakk -----END CERTIFICATE-----Generated at Thu Mar 26 07:25:58 2026 by rpki-client