$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft File: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft (raw, json) Hash identifier: uOY38fx6BGzx9KIMHb4CVTCoDekGl/8n0jysDqpIWQY= Subject key identifier: 45:A2:22:CC:12:AF:45:D9:A7:D0:62:64:C6:A8:0C:FB:E6:FD:0B:90 Authority key identifier: 1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A Certificate issuer: /CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Certificate serial: 010D0C9F4328584D7B880C8C55FA066C76996DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft Manifest number: 010D0C9F4328584BC280D5C678E41C6D5255F522 Signing time: Sun 12 Apr 2026 14:00:03 +0000 Manifest this update: Sun 12 Apr 2026 14:00:03 +0000 Manifest next update: Wed 15 Apr 2026 14:00:00 +0000 Files and hashes: 1: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl (hash: /dgF0DyzMVWzgPLKPhR+otzOluGadi1RqtYwLh9CiXo=) 2: 8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa (hash: 4brbuH3dgfaZ0skTzM2hljAzHKpzaORbnPnl6Wsj70E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:88:0c:8c:55:fa:06:6c:76:99:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Validity Not Before: Apr 12 14:00:03 2026 GMT Not After : Apr 15 14:00:00 2026 GMT Subject: CN=10e1c99a-4cea-4f52-b387-d4271eee6a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:92:c5:62:b0:56:42:5c:3f:04:f8:47:a7: c0:66:9b:d8:4f:b0:15:e2:6a:fc:48:f0:a0:16:36: 35:6b:fe:99:bb:a0:20:37:90:f8:6c:a2:3d:44:4f: 8f:73:1c:5a:47:4a:14:6b:42:5c:ab:f0:28:fc:3c: ef:55:dc:d6:3a:c9:cf:1f:dd:c3:80:e4:4a:53:37: 23:21:e2:a6:a7:9c:c9:dc:39:ef:97:bf:50:3b:0c: 14:dc:ee:83:31:be:dc:b4:52:70:8d:29:18:da:db: e2:aa:77:b0:c3:5c:57:bd:84:6f:1b:1f:fd:02:a0: b0:50:e1:2b:4f:3a:8b:e8:a4:89:d1:f3:46:71:44: 4b:01:83:82:12:cc:f8:90:7e:45:03:1c:61:8b:c7: 3f:6a:5f:2e:b4:fb:8e:7f:fe:79:21:35:91:5f:7f: 36:64:c2:73:4d:3c:34:14:c8:87:15:48:f7:8e:63: f9:5f:2f:78:63:69:ad:0c:b6:44:29:94:f5:dd:b5: 71:55:5a:f3:22:77:4d:15:d4:b0:60:38:b2:c0:63: 78:69:19:f3:f2:5f:96:d2:2a:27:78:a2:59:88:8f: 4d:9c:04:9f:d1:e6:bd:10:3e:26:55:0b:ee:ce:c8: ae:eb:5a:69:59:91:b3:a6:98:73:48:b9:dc:e8:d2: c9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A2:22:CC:12:AF:45:D9:A7:D0:62:64:C6:A8:0C:FB:E6:FD:0B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl X509v3 Authority Key Identifier: keyid:1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a2:99:ae:f6:9d:d9:ef:0c:f4:c1:ee:42:2e:7b:2a:dd:44: e7:b8:6d:53:d6:a4:33:60:f0:a9:01:64:8c:b9:1d:df:83:20: 7e:94:19:45:ee:5b:43:6a:bb:df:84:c9:24:da:19:48:52:06: 29:bf:af:26:be:75:72:4b:72:d8:30:23:5c:41:af:24:9a:a3: ca:e5:bb:73:4c:df:17:e8:42:12:95:00:66:5c:f4:93:6c:4b: e5:e3:9d:22:30:77:db:18:9e:16:af:97:62:42:07:2f:3e:ca: 45:75:b3:73:66:6e:9d:eb:48:f5:52:2c:b0:7e:cf:de:82:ca: 02:36:92:94:b2:5c:c2:6f:e0:ca:ce:29:d9:37:d0:81:e1:15: 6e:ef:2f:58:4e:bf:d7:65:ff:f1:59:8b:d3:4c:b4:f8:97:70: c7:9e:c1:ce:ed:53:65:91:56:fe:86:1f:6b:11:a7:0f:ee:9e: f1:39:fa:72:2a:92:ea:27:52:07:2d:4f:c0:f7:7a:b4:05:ae: 2b:41:37:6e:48:51:a1:d1:3a:f2:7b:7b:5a:c9:b0:9d:98:8b: 2c:df:f3:ec:76:c9:87:2f:b5:2e:2a:bc:1f:99:50:61:33:05: 80:63:85:43:45:6e:41:a8:9c:a4:2b:79:e6:62:13:75:ab:e4: c5:3f:01:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE17iAyMVfoGbHaZbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliODVkNWEtMjIzNi00YTZiLTljM2QtMjRiMTQ0NDlm NDlkMB4XDTI2MDQxMjE0MDAwM1oXDTI2MDQxNTE0MDAwMFowLzEtMCsGA1UEAxMk MTBlMWM5OWEtNGNlYS00ZjUyLWIzODctZDQyNzFlZWU2YTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM6SxWKwVkJcPwT4R6fAZpvYT7AV4mr8SPCg FjY1a/6Zu6AgN5D4bKI9RE+PcxxaR0oUa0Jcq/Ao/DzvVdzWOsnPH93DgORKUzcj IeKmp5zJ3Dnvl79QOwwU3O6DMb7ctFJwjSkY2tviqneww1xXvYRvGx/9AqCwUOEr TzqL6KSJ0fNGcURLAYOCEsz4kH5FAxxhi8c/al8utPuOf/55ITWRX382ZMJzTTw0 FMiHFUj3jmP5Xy94Y2mtDLZEKZT13bVxVVrzIndNFdSwYDiywGN4aRnz8l+W0ion eKJZiI9NnASf0ea9ED4mVQvuzsiu61ppWZGzpphzSLnc6NLJ3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEWiIswSr0XZp9BiZMaoDPvm/QuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4 NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIxNDQ0OWY0OWQvODliODVkNWEtMjIzNi00 YTZiLTljM2QtMjRiMTQ0NDlmNDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODliODVkNWEtMjIzNi00YTZiLTlj M2QtMjRiMTQ0NDlmNDlkLzg5Yjg1ZDVhLTIyMzYtNGE2Yi05YzNkLTI0YjE0NDQ5 ZjQ5ZC5jcmwwHwYDVR0jBBgwFoAUHRCgkuPQCqlaPwSDXzmh/4LJB5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIx NDQ0OWY0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgopmu9p3Z7wz0we5CLnsq 3UTnuG1T1qQzYPCpAWSMuR3fgyB+lBlF7ltDarvfhMkk2hlIUgYpv68mvnVyS3LY MCNcQa8kmqPK5btzTN8X6EISlQBmXPSTbEvl450iMHfbGJ4Wr5diQgcvPspFdbNz Zm6d60j1Uiywfs/egsoCNpKUslzCb+DKzinZN9CB4RVu7y9YTr/XZf/xWYvTTLT4 l3DHnsHO7VNlkVb+hh9rEacP7p7xOfpyKpLqJ1IHLU/A93q0Ba4rQTduSFGh0Try e3taybCdmIss3/PsdsmHL7UuKrwfmVBhMwWAY4VDRW5BqJykK3nmYhN1q+TFPwFh -----END CERTIFICATE-----Generated at Mon Apr 13 10:39:25 2026 by rpki-client