$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft File: a89dfa66-11db-4652-8710-2a69de76abaa.mft (raw, json) Hash identifier: y71pofR8C3WDF5gg9UVjyRBAjwnqMyJpCGK5jInvEWU= Subject key identifier: 32:56:7B:69:70:51:91:FF:AF:10:EA:07:6C:CC:71:0D:69:47:61:BE Authority key identifier: 45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6 Certificate issuer: /CN=a89dfa66-11db-4652-8710-2a69de76abaa Certificate serial: 010D0C9F4328584D7BC398AD28BEF0610411B7C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft Manifest number: 010D0C9F4328584BD5E8EC521E9945DEBD1B8418 Signing time: Sun 12 Apr 2026 16:00:03 +0000 Manifest this update: Sun 12 Apr 2026 16:00:03 +0000 Manifest next update: Tue 14 Apr 2026 16:00:00 +0000 Files and hashes: 1: a89dfa66-11db-4652-8710-2a69de76abaa.crl (hash: bFGmAjqnPxeYil6VoyNt4+PkLeZPIgqObuqzAJWFJkU=) 2: b3d0c767-d849-3fd0-93e5-6a900b4e0a1c.roa (hash: kvvACKEpPRxRRDzrzhoSWoZUovwoTna/7MM02t3eFE0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:c3:98:ad:28:be:f0:61:04:11:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a89dfa66-11db-4652-8710-2a69de76abaa Validity Not Before: Apr 12 16:00:03 2026 GMT Not After : Apr 14 16:00:00 2026 GMT Subject: CN=85fdd555-0b99-4009-910c-db15268d8189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c6:68:5e:5c:c4:57:c4:aa:af:91:33:e3:44: e3:d7:8a:13:b7:03:4a:b3:18:03:97:3a:35:0f:63: e2:3c:1b:29:52:ce:f7:51:0b:1b:b4:85:fa:da:bd: 2d:05:94:57:03:1f:10:dd:43:55:d7:72:49:00:b7: cd:62:1a:84:ff:61:54:02:93:2c:55:4e:b3:02:a1: ee:ab:2a:75:93:d1:00:c8:ed:c5:53:87:59:8d:d4: 12:4c:40:1d:8f:7d:92:6b:83:74:b1:4c:89:79:7f: 80:d8:ea:c0:1d:3f:ed:ea:61:b4:bb:ba:a0:dc:a7: 26:e7:e4:a6:ac:29:d4:b3:a8:a0:38:f9:ac:2f:74: c7:6a:67:b8:31:e5:b3:d8:12:9f:fd:11:6b:70:4c: 3d:74:24:a4:11:b2:c0:a7:77:e8:47:04:e8:87:cc: e4:2a:c3:ed:e5:07:3b:85:f3:89:c2:9c:27:23:b6: fe:65:4f:0e:65:d3:92:93:48:ac:30:b1:87:32:78: 46:c0:79:45:d2:71:59:72:2f:5b:cb:10:9a:c8:82: b3:02:b1:fd:9f:12:23:4a:20:74:52:43:17:2f:f2: 38:6d:c0:3f:bb:b5:35:c3:21:f9:f7:29:e0:77:39: d1:a8:77:75:03:b0:fd:2d:88:ee:fa:d7:b8:66:a4: 55:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:56:7B:69:70:51:91:FF:AF:10:EA:07:6C:CC:71:0D:69:47:61:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.crl X509v3 Authority Key Identifier: keyid:45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:73:2c:b4:0f:ca:d0:56:cd:95:c4:ce:22:ba:db:eb:63:55: 10:be:57:2b:0a:94:8d:44:44:f8:af:f1:ac:c5:a0:15:de:c9: e6:f6:3f:44:47:6b:23:44:b7:81:2e:5e:a3:a6:ac:20:b1:b1: 06:db:ae:d2:11:43:96:50:c8:37:e5:d5:a2:59:01:99:b5:c3: 9c:4e:a9:31:5b:aa:3d:d5:f7:73:43:d7:fb:62:d8:99:97:2c: 1d:c3:2d:91:bc:fb:57:0f:68:5e:45:ea:3d:06:52:22:3b:f2: bb:9a:f9:9d:92:1f:57:ff:bd:5d:97:c1:4c:c9:1e:c1:ae:4e: dd:b2:01:0a:99:d8:9c:2e:c5:3c:7a:f3:8b:40:68:7e:84:53: 2b:1f:2d:d5:4a:c2:32:d2:14:82:39:fe:c9:a6:08:23:fc:11: 7b:43:f0:3a:8d:20:23:b0:16:ff:78:e9:2d:6e:cb:89:74:48: 70:fc:71:4c:9b:23:b5:db:d0:23:87:e4:20:31:70:63:f1:a7: ca:82:3c:fe:f0:40:8b:75:86:68:b3:b4:6a:00:97:30:70:13: 55:06:26:4d:29:03:64:16:e7:02:f9:e8:4f:46:aa:c1:63:3a: ba:5d:de:93:39:0b:0c:eb:f3:49:be:81:4e:56:fd:a5:bd:fe: df:5a:98:86 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE17w5itKL7wYQQRt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5ZGZhNjYtMTFkYi00NjUyLTg3MTAtMmE2OWRlNzZh YmFhMB4XDTI2MDQxMjE2MDAwM1oXDTI2MDQxNDE2MDAwMFowLzEtMCsGA1UEAxMk ODVmZGQ1NTUtMGI5OS00MDA5LTkxMGMtZGIxNTI2OGQ4MTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8ZoXlzEV8Sqr5Ez40Tj14oTtwNKsxgDlzo1 D2PiPBspUs73UQsbtIX62r0tBZRXAx8Q3UNV13JJALfNYhqE/2FUApMsVU6zAqHu qyp1k9EAyO3FU4dZjdQSTEAdj32Sa4N0sUyJeX+A2OrAHT/t6mG0u7qg3Kcm5+Sm rCnUs6igOPmsL3THame4MeWz2BKf/RFrcEw9dCSkEbLAp3foRwToh8zkKsPt5Qc7 hfOJwpwnI7b+ZU8OZdOSk0isMLGHMnhGwHlF0nFZci9byxCayIKzArH9nxIjSiB0 UkMXL/I4bcA/u7U1wyH59yngdznRqHd1A7D9LYju+te4ZqRVuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDJWe2lwUZH/rxDqB2zMcQ1pR2G+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODlk ZmE2Ni0xMWRiLTQ2NTItODcxMC0yYTY5ZGU3NmFiYWEvYTg5ZGZhNjYtMTFkYi00 NjUyLTg3MTAtMmE2OWRlNzZhYmFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg5ZGZhNjYtMTFkYi00NjUyLTg3 MTAtMmE2OWRlNzZhYmFhL2E4OWRmYTY2LTExZGItNDY1Mi04NzEwLTJhNjlkZTc2 YWJhYS5jcmwwHwYDVR0jBBgwFoAURTegwoIR/CLIlWvO8ME36EvSGLYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODlkZmE2Ni0xMWRiLTQ2NTItODcxMC0yYTY5 ZGU3NmFiYWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALcyy0D8rQVs2VxM4iutvr Y1UQvlcrCpSNRET4r/GsxaAV3snm9j9ER2sjRLeBLl6jpqwgsbEG267SEUOWUMg3 5dWiWQGZtcOcTqkxW6o91fdzQ9f7YtiZlywdwy2RvPtXD2heReo9BlIiO/K7mvmd kh9X/71dl8FMyR7Brk7dsgEKmdicLsU8evOLQGh+hFMrHy3VSsIy0hSCOf7Jpggj /BF7Q/A6jSAjsBb/eOktbsuJdEhw/HFMmyO129Ajh+QgMXBj8afKgjz+8ECLdYZo s7RqAJcwcBNVBiZNKQNkFucC+ehPRqrBYzq6Xd6TOQsM6/NJvoFOVv2lvf7fWpiG -----END CERTIFICATE-----Generated at Mon Apr 13 10:39:25 2026 by rpki-client