$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft File: 589c840d-5406-45bd-ac1d-d77b3c5c3780.mft (raw, json) Hash identifier: 2GCZ6Cj6CF3Fl8two1un22uZ+BMwfulHIAIqfvHwUkA= Subject key identifier: CD:65:FB:00:6E:FC:66:72:4D:A7:C2:C7:03:E1:C5:7E:CC:C1:AA:36 Authority key identifier: BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F Certificate issuer: /CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Certificate serial: 010D0C9F4328584D710FFABC03837E53BD40EB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft Manifest number: 010D0C9F4328584073A8273D6C0F9AE946A9C6AA Signing time: Wed 08 Apr 2026 20:00:03 +0000 Manifest this update: Wed 08 Apr 2026 20:00:03 +0000 Manifest next update: Fri 10 Apr 2026 21:00:00 +0000 Files and hashes: 1: 0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer (hash: f6xbP6TCaNqc2N2FraT+OhXFdtYOa2HHOaEFp6Raw3E=) 2: 589c840d-5406-45bd-ac1d-d77b3c5c3780.crl (hash: wVZSbIEQVSE8NhTtQl5fUGpibpVwmGbIfM7LnfnO/S4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:0f:fa:bc:03:83:7e:53:bd:40:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Validity Not Before: Apr 8 20:00:03 2026 GMT Not After : Apr 10 21:00:00 2026 GMT Subject: CN=72e64504-9536-4abd-a2f7-43ae93e36820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:54:66:e7:02:9c:c2:f6:fa:d1:15:64:0b: a9:04:8f:78:34:39:e7:11:87:e2:19:7c:42:00:2f: df:53:39:76:21:3a:8c:dc:48:76:bf:f1:e7:a8:10: c3:31:0d:9f:15:f7:c6:39:df:d3:cb:b1:54:d9:42: f7:0c:65:49:52:15:b8:03:a6:c8:84:c7:4f:88:b6: 84:6f:54:f2:97:67:0b:cf:af:02:95:e1:67:1a:db: dd:3e:ed:b1:c3:31:96:54:dc:c2:32:54:99:b3:cb: cb:31:4a:f2:f9:6d:dd:02:26:67:87:29:cc:cc:5a: c8:d3:73:32:c1:c2:80:40:b2:f9:07:b2:7f:5c:8a: 0a:8c:77:de:5b:38:fb:9e:23:14:01:af:7b:5e:a3: 9d:5e:32:80:06:51:ae:01:fa:17:c3:d7:6f:2d:35: 76:37:98:cb:b3:7d:16:23:2d:52:80:80:3a:0e:63: 6c:48:df:06:28:25:19:6e:e4:fe:21:00:37:f8:60: d6:bd:75:d0:cc:dc:e4:89:f0:7d:0e:4c:90:a6:8b: 41:ee:d5:4e:ed:34:bc:6e:c5:1c:01:4f:85:0f:92: ca:2f:0e:7c:85:64:47:60:50:28:9f:bd:a0:2c:00: bb:82:98:08:41:52:7b:9d:43:a3:0a:00:46:18:5d: c5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:65:FB:00:6E:FC:66:72:4D:A7:C2:C7:03:E1:C5:7E:CC:C1:AA:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl X509v3 Authority Key Identifier: keyid:BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:59:7e:05:d7:9f:56:99:b6:27:10:2a:55:c0:1c:60:98:d1: 0a:c0:be:97:e3:86:7d:b4:9c:7e:01:5d:04:4c:e1:d3:df:1a: 02:b2:96:e5:3b:00:8d:c9:bf:41:1c:8f:68:11:56:2a:1c:de: 51:c5:cb:6b:bf:c4:10:ec:26:ee:a9:e3:29:1f:82:c0:11:a8: 93:21:0d:8e:06:73:9e:07:c0:ca:ba:51:08:56:5f:0e:2c:bf: c1:17:ed:ce:7d:92:23:af:ff:dc:78:d5:ba:ab:d4:59:a4:10: 51:5a:c2:74:8d:43:7a:bd:6b:40:f1:1d:05:e8:4c:fb:ac:d6: 44:e3:87:13:41:5b:88:00:37:bf:a8:22:c0:c2:3c:ea:78:04: 3b:ff:8d:80:d0:29:a3:62:7d:35:ab:e6:a4:8c:4d:65:88:02: c3:78:9f:64:70:43:fd:0f:52:01:38:24:2c:ab:75:43:78:51: 75:d9:b0:3f:52:8f:4e:9e:d7:8a:f3:f8:a6:62:21:d7:d1:d9: de:76:69:d4:d1:c6:41:41:90:4f:fe:d9:e9:3b:7e:69:7a:69: ed:98:29:9a:8a:e5:f5:99:23:8a:55:7b:9a:43:e9:3b:36:03: 70:e4:c2:7e:c3:48:b6:87:e7:a3:17:de:b5:95:66:27:32:b6: 1c:17:b3:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1xD/q8A4N+U71A6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5Yzg0MGQtNTQwNi00NWJkLWFjMWQtZDc3YjNjNWMz NzgwMB4XDTI2MDQwODIwMDAwM1oXDTI2MDQxMDIxMDAwMFowLzEtMCsGA1UEAxMk NzJlNjQ1MDQtOTUzNi00YWJkLWEyZjctNDNhZTkzZTM2ODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdtUZucCnML2+tEVZAupBI94NDnnEYfiGXxC AC/fUzl2ITqM3Eh2v/HnqBDDMQ2fFffGOd/Ty7FU2UL3DGVJUhW4A6bIhMdPiLaE b1Tyl2cLz68CleFnGtvdPu2xwzGWVNzCMlSZs8vLMUry+W3dAiZnhynMzFrI03My wcKAQLL5B7J/XIoKjHfeWzj7niMUAa97XqOdXjKABlGuAfoXw9dvLTV2N5jLs30W Iy1SgIA6DmNsSN8GKCUZbuT+IQA3+GDWvXXQzNzkifB9DkyQpotB7tVO7TS8bsUc AU+FD5LKLw58hWRHYFAon72gLAC7gpgIQVJ7nUOjCgBGGF3FowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM1l+wBu/GZyTafCxwPhxX7Mwao2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODlj ODQwZC01NDA2LTQ1YmQtYWMxZC1kNzdiM2M1YzM3ODAvNTg5Yzg0MGQtNTQwNi00 NWJkLWFjMWQtZDc3YjNjNWMzNzgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTg5Yzg0MGQtNTQwNi00NWJkLWFj MWQtZDc3YjNjNWMzNzgwLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC5jcmwwHwYDVR0jBBgwFoAUvBV74rm3Dq1oBqW2qJ8D1OLgRk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ODljODQwZC01NDA2LTQ1YmQtYWMxZC1kNzdi M2M1YzM3ODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkWX4F159WmbYnECpVwBxg mNEKwL6X44Z9tJx+AV0ETOHT3xoCspblOwCNyb9BHI9oEVYqHN5Rxctrv8QQ7Cbu qeMpH4LAEaiTIQ2OBnOeB8DKulEIVl8OLL/BF+3OfZIjr//ceNW6q9RZpBBRWsJ0 jUN6vWtA8R0F6Ez7rNZE44cTQVuIADe/qCLAwjzqeAQ7/42A0CmjYn01q+akjE1l iALDeJ9kcEP9D1IBOCQsq3VDeFF12bA/Uo9OnteK8/imYiHX0dnedmnU0cZBQZBP /tnpO35pemntmCmaiuX1mSOKVXuaQ+k7NgNw5MJ+w0i2h+ejF961lWYnMrYcF7PA -----END CERTIFICATE-----Generated at Thu Apr 9 09:40:55 2026 by rpki-client