$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft File: 89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft (raw, json) Hash identifier: 05ztO3FxIccJaEfK2lnEghyhh2cOSZXkobCdhFrNnbU= Subject key identifier: A2:F9:63:60:6B:F5:06:52:23:35:24:AE:73:49:D9:4C:1F:C2:44:7E Authority key identifier: CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46 Certificate issuer: /CN=89fa01af-cca5-4d8f-8003-f6c9e22578b4 Certificate serial: 010D0C9F4328584D4E2A6A24140A13AD18A63880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft Manifest number: 010D0C9F4328584073A8490E353C7E7CF5E966E3 Signing time: Fri 27 Mar 2026 08:00:04 +0000 Manifest this update: Fri 27 Mar 2026 08:00:04 +0000 Manifest next update: Mon 30 Mar 2026 08:00:00 +0000 Files and hashes: 1: 47f52259-d832-3c2a-bc43-3f72c7ef644d.roa (hash: B7WCRXInfa/RfqVBYOK2HUWwwNIf6R51tziLEAvLur8=) 2: 89fa01af-cca5-4d8f-8003-f6c9e22578b4.crl (hash: j6JodFqKfAzMyeI3/DTO314wq62bVGCxBeWPNqIAQMA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:2a:6a:24:14:0a:13:ad:18:a6:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89fa01af-cca5-4d8f-8003-f6c9e22578b4 Validity Not Before: Mar 27 08:00:04 2026 GMT Not After : Mar 30 08:00:00 2026 GMT Subject: CN=f9637d47-4ff2-4a67-9d22-859aabf03000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3c:da:4c:e1:0d:83:a7:95:41:e6:d7:51:51: b4:31:c4:bd:a6:08:2f:22:53:ea:a9:f7:79:23:20: 19:3c:2a:85:28:26:fe:58:ac:0e:bf:0c:3b:d3:71: 41:d8:82:40:ac:86:70:ce:00:7b:0e:f7:ec:d6:da: 51:86:56:d6:b3:c7:4b:22:05:e7:05:3f:12:30:fc: be:46:7f:ed:33:5b:4c:30:05:d2:67:03:b9:ca:7a: 13:9e:17:da:cb:72:b3:2a:1f:79:95:68:7d:82:52: b7:3e:4a:de:1d:be:aa:d3:14:97:cb:11:3a:07:48: 04:44:e9:80:cf:04:c5:27:51:df:5b:88:3f:83:74: 31:2c:ea:6f:7e:63:6a:0a:da:b1:5f:40:9a:95:a3: 44:7a:0c:9e:99:6b:13:92:a0:a2:7a:6e:80:0c:34: c4:cb:1b:25:11:19:e9:35:0e:c0:88:d6:1c:41:6a: ca:6a:49:2e:ba:f9:e0:34:db:65:f3:2b:ea:39:28: 79:d9:1a:8c:ed:fb:e3:cb:09:07:7d:49:fe:cd:69: 6d:b6:08:55:19:96:82:1a:1e:ac:11:31:07:47:25: 16:57:1f:51:b9:1e:cd:08:87:fa:70:84:ba:c8:c1: 39:19:d7:56:6c:3b:58:e3:c3:b7:05:8e:4a:e1:07: f3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F9:63:60:6B:F5:06:52:23:35:24:AE:73:49:D9:4C:1F:C2:44:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.crl X509v3 Authority Key Identifier: keyid:CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:3a:19:6a:32:62:12:8b:fb:9e:5a:25:43:0a:e5:cf:a1:c3: 7a:d9:b8:0b:7f:63:3c:fd:c8:d0:a5:6c:58:13:ab:54:a1:ca: 3c:43:3c:3e:b3:31:2d:75:9f:49:52:24:c5:7a:ae:4c:9c:18: c7:25:38:f8:8b:5d:d2:59:69:48:e5:de:73:94:a4:bd:dc:2b: a1:82:26:30:6f:36:2c:38:bb:cc:c9:d6:8e:ac:57:3a:e6:c4: 71:09:0b:6c:e2:82:41:14:88:20:ad:01:c0:19:0a:2d:24:1a: 46:ba:81:fd:83:39:1c:f4:60:a9:f3:a0:50:90:2e:9c:e8:b2: f7:95:1e:fc:ab:fd:23:87:35:52:36:ac:58:32:e8:12:f2:88: 88:1c:45:f8:4a:7b:4e:38:f7:52:64:85:9b:16:6e:5c:c1:88: db:64:20:17:fd:db:51:f3:8c:57:4a:3d:c4:7f:42:5f:3b:4f: 4c:6d:6b:d6:75:0e:c1:52:e9:6f:d1:ee:18:5d:4b:a0:df:42: e8:44:5b:49:6e:04:33:11:2c:13:48:6a:73:9b:cd:0e:4d:7d: 0a:f4:1a:93:fe:8e:48:96:e0:cc:2f:3e:07:1c:cc:e4:0e:20: 1b:80:e5:41:27:4c:82:88:ab:41:70:9d:1f:92:93:6c:48:b1: 94:0c:e2:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1OKmokFAoTrRimOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlmYTAxYWYtY2NhNS00ZDhmLTgwMDMtZjZjOWUyMjU3 OGI0MB4XDTI2MDMyNzA4MDAwNFoXDTI2MDMzMDA4MDAwMFowLzEtMCsGA1UEAxMk Zjk2MzdkNDctNGZmMi00YTY3LTlkMjItODU5YWFiZjAzMDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjzaTOENg6eVQebXUVG0McS9pggvIlPqqfd5 IyAZPCqFKCb+WKwOvww703FB2IJArIZwzgB7Dvfs1tpRhlbWs8dLIgXnBT8SMPy+ Rn/tM1tMMAXSZwO5ynoTnhfay3KzKh95lWh9glK3PkreHb6q0xSXyxE6B0gEROmA zwTFJ1HfW4g/g3QxLOpvfmNqCtqxX0CalaNEegyemWsTkqCiem6ADDTEyxslERnp NQ7AiNYcQWrKakkuuvngNNtl8yvqOSh52RqM7fvjywkHfUn+zWlttghVGZaCGh6s ETEHRyUWVx9RuR7NCIf6cIS6yME5GddWbDtY48O3BY5K4QfzywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKL5Y2Br9QZSIzUkrnNJ2UwfwkR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84OWZh MDFhZi1jY2E1LTRkOGYtODAwMy1mNmM5ZTIyNTc4YjQvODlmYTAxYWYtY2NhNS00 ZDhmLTgwMDMtZjZjOWUyMjU3OGI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODlmYTAxYWYtY2NhNS00ZDhmLTgw MDMtZjZjOWUyMjU3OGI0Lzg5ZmEwMWFmLWNjYTUtNGQ4Zi04MDAzLWY2YzllMjI1 NzhiNC5jcmwwHwYDVR0jBBgwFoAUzKuu83vISvdPvK7QobzlFWslW0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84OWZhMDFhZi1jY2E1LTRkOGYtODAwMy1mNmM5 ZTIyNTc4YjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASOhlqMmISi/ueWiVDCuXP ocN62bgLf2M8/cjQpWxYE6tUoco8Qzw+szEtdZ9JUiTFeq5MnBjHJTj4i13SWWlI 5d5zlKS93CuhgiYwbzYsOLvMydaOrFc65sRxCQts4oJBFIggrQHAGQotJBpGuoH9 gzkc9GCp86BQkC6c6LL3lR78q/0jhzVSNqxYMugS8oiIHEX4SntOOPdSZIWbFm5c wYjbZCAX/dtR84xXSj3Ef0JfO09MbWvWdQ7BUulv0e4YXUug30LoRFtJbgQzESwT SGpzm80OTX0K9BqT/o5IluDMLz4HHMzkDiAbgOVBJ0yCiKtBcJ0fkpNsSLGUDOKY -----END CERTIFICATE-----Generated at Fri Mar 27 19:35:34 2026 by rpki-client