$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft File: 589c840d-5406-45bd-ac1d-d77b3c5c3780.mft (raw, json) Hash identifier: grYNnz/pIw7VgEVkxo5cznsuWD+4tkhr9owBSL0GxUA= Subject key identifier: 5A:CB:3B:00:82:9B:F5:01:27:25:99:11:98:B1:F9:66:24:11:38:E9 Authority key identifier: BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F Certificate issuer: /CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Certificate serial: 010D0C9F4328584F7B3BDE715DC5B6451B7B8920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft Manifest number: 010D0C9F4328584073A8273D6C0F9AE946A9C765 Signing time: Mon 12 Oct 2026 21:00:24 +0000 Manifest this update: Mon 12 Oct 2026 21:00:24 +0000 Manifest next update: Thu 15 Oct 2026 21:00:00 +0000 Files and hashes: 1: 0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer (hash: f6xbP6TCaNqc2N2FraT+OhXFdtYOa2HHOaEFp6Raw3E=) 2: 589c840d-5406-45bd-ac1d-d77b3c5c3780.crl (hash: ykhggjrF328kK58b0pWDrxPPjJZgpzoitZNumstYJ7E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:3b:de:71:5d:c5:b6:45:1b:7b:89:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Validity Not Before: Oct 12 21:00:24 2026 GMT Not After : Oct 15 21:00:00 2026 GMT Subject: CN=8530eac4-5b51-442d-be7a-27b1bd52cd57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:8b:00:d4:cb:d7:b5:ee:da:13:26:dd:83: ab:60:dd:8b:f3:0f:a0:fa:b8:c0:0a:ec:86:71:1d: 03:8d:9c:d8:26:99:db:85:14:9d:c1:0e:95:91:e2: 12:7e:25:10:f1:26:5e:06:fe:ec:6e:7c:cd:42:31: 72:8c:74:b0:4a:97:c0:73:55:c5:a1:5e:d9:86:74: 62:c3:13:e7:cc:7b:76:04:7b:83:f6:b9:ca:26:5b: 72:a1:56:b0:d1:bf:c8:48:41:03:ac:dd:37:ee:d5: 12:d9:e9:68:f1:8b:75:bb:e5:30:7e:f2:94:57:c0: b4:f9:ee:1b:ed:97:a8:6b:ab:c3:cc:a8:8a:f6:7f: 4a:ee:97:46:55:9a:1c:8a:3a:05:24:06:d4:a0:38: 42:03:b5:a5:26:ee:e3:ff:4b:ba:78:00:d5:7a:70: cc:8d:a6:e2:d6:34:60:43:98:f4:78:9f:d5:a7:1d: 2d:35:1a:3e:34:19:a2:7d:88:e5:18:24:ac:1e:3c: 4b:ab:0c:d0:fe:9f:9a:5e:b2:91:9f:c1:8c:66:88: 83:e5:ac:45:18:9d:3a:dc:fc:75:c4:46:7e:64:9a: f9:0b:76:bb:41:e2:10:b4:03:a5:60:f5:63:ee:80: ee:3c:d3:e7:95:8f:de:85:a5:32:2b:8c:e1:51:49: 87:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CB:3B:00:82:9B:F5:01:27:25:99:11:98:B1:F9:66:24:11:38:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl X509v3 Authority Key Identifier: keyid:BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e7:ef:78:8e:7c:9c:92:fb:8c:6c:91:67:8d:eb:31:c6:d7: b9:ed:95:28:41:e6:d7:f3:61:2c:db:bb:73:f8:4e:a7:44:4b: 54:03:05:1e:9c:1c:a1:0e:8c:ca:92:b2:b4:13:1f:df:61:d6: 81:4d:e4:a0:7d:0b:dc:f5:bc:88:7f:93:09:03:44:27:fc:8f: 86:fd:6d:82:44:57:ef:3c:9c:8b:9f:d4:51:7d:1c:be:16:20: 52:fa:3e:09:95:dd:95:46:46:82:65:aa:0d:54:87:11:23:7c: 6a:8f:46:31:43:9f:72:22:2c:03:0b:d0:cb:07:46:89:ba:b9: 4a:b9:f7:a8:83:4e:79:cc:7c:05:e5:6a:73:53:5b:7c:a6:35: 1d:87:31:b3:9f:fd:fb:1f:a4:60:0f:2e:2d:03:15:5e:43:fc: 8c:28:97:c7:ae:90:2f:d2:aa:95:f1:98:8c:32:7f:6f:57:c5: e0:b6:f9:ee:03:97:16:e2:72:fc:2a:e8:6e:06:d0:29:5c:ba: e3:92:37:a5:6e:2e:24:64:12:0d:df:c3:7f:50:85:7b:ad:58: a9:42:aa:0a:5c:c5:bd:89:b6:df:12:c5:b6:a8:a5:7e:40:f2: 85:84:46:36:f8:1d:ae:ff:0a:4b:a4:b7:2a:46:6f:5f:fb:67: 0c:af:b3:6e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE97O95xXcW2RRt7iSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5Yzg0MGQtNTQwNi00NWJkLWFjMWQtZDc3YjNjNWMz NzgwMB4XDTI2MTAxMjIxMDAyNFoXDTI2MTAxNTIxMDAwMFowLzEtMCsGA1UEAxMk ODUzMGVhYzQtNWI1MS00NDJkLWJlN2EtMjdiMWJkNTJjZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI2LANTL17Xu2hMm3YOrYN2L8w+g+rjACuyG cR0DjZzYJpnbhRSdwQ6VkeISfiUQ8SZeBv7sbnzNQjFyjHSwSpfAc1XFoV7ZhnRi wxPnzHt2BHuD9rnKJltyoVaw0b/ISEEDrN037tUS2elo8Yt1u+UwfvKUV8C0+e4b 7Zeoa6vDzKiK9n9K7pdGVZocijoFJAbUoDhCA7WlJu7j/0u6eADVenDMjabi1jRg Q5j0eJ/Vpx0tNRo+NBmifYjlGCSsHjxLqwzQ/p+aXrKRn8GMZoiD5axFGJ063Px1 xEZ+ZJr5C3a7QeIQtAOlYPVj7oDuPNPnlY/ehaUyK4zhUUmHjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFrLOwCCm/UBJyWZEZix+WYkETjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODlj ODQwZC01NDA2LTQ1YmQtYWMxZC1kNzdiM2M1YzM3ODAvNTg5Yzg0MGQtNTQwNi00 NWJkLWFjMWQtZDc3YjNjNWMzNzgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTg5Yzg0MGQtNTQwNi00NWJkLWFj MWQtZDc3YjNjNWMzNzgwLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC5jcmwwHwYDVR0jBBgwFoAUvBV74rm3Dq1oBqW2qJ8D1OLgRk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ODljODQwZC01NDA2LTQ1YmQtYWMxZC1kNzdi M2M1YzM3ODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBd5+94jnyckvuMbJFnjesx xte57ZUoQebX82Es27tz+E6nREtUAwUenByhDozKkrK0Ex/fYdaBTeSgfQvc9byI f5MJA0Qn/I+G/W2CRFfvPJyLn9RRfRy+FiBS+j4Jld2VRkaCZaoNVIcRI3xqj0Yx Q59yIiwDC9DLB0aJurlKufeog055zHwF5WpzU1t8pjUdhzGzn/37H6RgDy4tAxVe Q/yMKJfHrpAv0qqV8ZiMMn9vV8XgtvnuA5cW4nL8KuhuBtApXLrjkjelbi4kZBIN 38N/UIV7rVipQqoKXMW9ibbfEsW2qKV+QPKFhEY2+B2u/wpLpLcqRm9f+2cMr7Nu -----END CERTIFICATE-----Generated at Tue Oct 13 10:28:18 2026 by rpki-client