$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft File: 89dfa952-929a-4c50-a372-96882b2b33e2.mft (raw, json) Hash identifier: Iv5ZAXemYRFJlYtIPUmNGP38LWrbfXwGyIGy5BqEVP0= Subject key identifier: 0B:32:9C:3B:84:3E:4E:AF:DA:08:07:6A:66:9F:8E:07:1E:D9:C6:17 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584D3ECFA89E0A0FC868431332A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft Manifest number: 010D0C9F4328584073A821439392B1CC62E236CA Signing time: Sat 21 Mar 2026 20:00:04 +0000 Manifest this update: Sat 21 Mar 2026 20:00:04 +0000 Manifest next update: Mon 23 Mar 2026 20:00:00 +0000 Files and hashes: 1: 0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa (hash: eslZdN/86YSmLtvkEB3cnTUYNiIz7HHUwKcsWs3DkVU=) 2: 89dfa952-929a-4c50-a372-96882b2b33e2.crl (hash: 1U2jdSfCCtvUQSpjqiEJijhul1hrQ66T39927TengbI=) 3: b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa (hash: 3dfIxBJfZc+RlqpzW1ZSpaH0j23GWTAKL4ywWMljlcE=) 4: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (hash: 2Jk5xUiWAqMgVegFQ1veu/o5hgYyNyJ231tBv0iyQXE=) 5: e234c5cf-6ad7-350b-9018-aeef40195ca6.roa (hash: wdKvIHmJXw0Xp9qy5AkrQDXAxODx/I443CPOrr/73gE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:cf:a8:9e:0a:0f:c8:68:43:13:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Mar 21 20:00:04 2026 GMT Not After : Mar 23 20:00:00 2026 GMT Subject: CN=a1b0e1f2-d79b-431c-bf7d-67d604471765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:c3:0c:28:26:78:4f:f4:e1:e6:ce:85:ad: f0:be:18:83:11:d1:5b:e9:b8:55:85:af:85:b6:91: d9:0b:2d:ad:47:4b:34:b7:51:16:f6:21:66:07:30: 28:c6:3e:24:66:c0:5a:72:3f:f5:b1:77:a2:af:19: c2:53:57:35:a8:0b:49:72:64:f1:4f:93:6e:54:bc: 38:81:26:87:25:3f:bc:84:51:d7:85:1b:8d:dc:32: 22:a3:02:aa:fd:33:5c:dd:fb:f7:ef:5d:90:9c:ce: b5:d2:fd:56:a4:aa:5b:26:7b:94:b1:a3:e1:88:20: 21:5c:c8:1a:80:fa:dd:76:97:79:34:ac:6f:4a:60: 60:46:18:13:0f:8c:ce:93:63:f1:41:e0:05:e1:b3: 03:43:ab:84:6a:52:cb:14:67:1a:b5:65:3f:06:10: 4c:49:65:27:43:55:72:07:6e:a0:bc:7e:a3:8c:8b: 6b:e0:ea:01:99:8a:1f:33:0f:81:43:d5:be:bf:f9: 0d:6b:8b:b1:c7:1b:46:b9:0e:bb:78:1e:97:e4:ce: 96:8d:5c:04:95:b7:e3:4a:70:b6:f8:2a:ce:52:33: eb:40:5f:95:1f:24:84:b2:8b:63:8f:7b:80:7a:80: 8c:a0:63:0c:99:df:25:6f:dd:e2:9b:f1:82:0a:46: c7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:32:9C:3B:84:3E:4E:AF:DA:08:07:6A:66:9F:8E:07:1E:D9:C6:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:2c:4b:3c:df:d3:59:bc:16:c7:0c:92:23:09:b4:8b:c0:3f: ea:ce:91:67:87:0d:4a:1e:2e:54:fc:8b:24:00:21:0d:36:7a: 9f:d2:8e:b1:4c:8e:4a:39:a1:ed:5e:6a:ea:a5:7e:85:59:cd: b7:03:21:8b:e3:b7:6d:f4:95:b6:9d:b9:e7:6d:15:96:6f:66: a3:17:b9:fb:4f:01:16:5b:43:a9:4d:67:4c:aa:1a:4d:fe:83: 03:b8:7f:98:5b:ff:74:4f:aa:58:f6:0e:37:23:6d:23:32:7f: a9:b2:06:22:bb:ed:1e:7d:13:64:47:83:4a:9e:0f:6d:23:73: 69:67:a9:04:cf:42:11:cf:8e:35:e5:ee:8e:da:dd:49:c9:98: 86:c2:11:8c:06:7b:32:32:0a:20:d1:83:e1:dc:c3:c7:0a:7a: 69:dd:8f:25:c1:df:d4:2f:e7:ba:7a:e9:8e:42:ff:b3:85:41: f0:1c:4f:90:f6:76:cb:89:ab:90:26:35:d7:34:f4:d2:9d:67: b4:ad:fb:5f:4e:e2:81:f2:03:bf:80:84:94:9c:c9:94:dc:fa: 9f:d1:62:72:d5:de:6e:26:b4:ce:61:65:0b:54:26:55:c9:af: 6c:6f:ff:20:78:ea:17:51:8b:6c:4b:89:96:92:6a:05:e3:84: c3:2a:10:f2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0+z6ieCg/IaEMTMqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI2MDMyMTIwMDAwNFoXDTI2MDMyMzIwMDAwMFowLzEtMCsGA1UEAxMk YTFiMGUxZjItZDc5Yi00MzFjLWJmN2QtNjdkNjA0NDcxNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmjDDCgmeE/04ebOha3wvhiDEdFb6bhVha+F tpHZCy2tR0s0t1EW9iFmBzAoxj4kZsBacj/1sXeirxnCU1c1qAtJcmTxT5NuVLw4 gSaHJT+8hFHXhRuN3DIiowKq/TNc3fv3712QnM610v1WpKpbJnuUsaPhiCAhXMga gPrddpd5NKxvSmBgRhgTD4zOk2PxQeAF4bMDQ6uEalLLFGcatWU/BhBMSWUnQ1Vy B26gvH6jjItr4OoBmYofMw+BQ9W+v/kNa4uxxxtGuQ67eB6X5M6WjVwElbfjSnC2 +CrOUjPrQF+VHySEsotjj3uAeoCMoGMMmd8lb93im/GCCkbHmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAsynDuEPk6v2ggHamafjgce2cYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvODlkZmE5NTItOTI5YS00 YzUwLWEzNzItOTY4ODJiMmIzM2UyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPLEs839NZvBbHDJIjCbSL wD/qzpFnhw1KHi5U/IskACENNnqf0o6xTI5KOaHtXmrqpX6FWc23AyGL47dt9JW2 nbnnbRWWb2ajF7n7TwEWW0OpTWdMqhpN/oMDuH+YW/90T6pY9g43I20jMn+psgYi u+0efRNkR4NKng9tI3NpZ6kEz0IRz4415e6O2t1JyZiGwhGMBnsyMgog0YPh3MPH Cnpp3Y8lwd/UL+e6eumOQv+zhUHwHE+Q9nbLiauQJjXXNPTSnWe0rftfTuKB8gO/ gISUnMmU3Pqf0WJy1d5uJrTOYWULVCZVya9sb/8geOoXUYtsS4mWkmoF44TDKhDy -----END CERTIFICATE-----Generated at Sun Mar 22 08:19:17 2026 by rpki-client