$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft File: 989afb89-021f-486a-9386-ea5ad2a85eb3.mft (raw, json) Hash identifier: SbfRK6hjCmFjaximsCpZmXq7Yk6AZiVOOJtS9ET/C30= Subject key identifier: BF:C9:7E:D3:5B:FC:2A:39:7D:AB:8B:95:E9:34:9B:F0:91:86:DE:D4 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584DA586141D4003DED81DF00080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft Manifest number: 010D0C9F4328584AB3B971372E2FC2C294D1E8A2 Signing time: Mon 27 Apr 2026 15:00:03 +0000 Manifest this update: Mon 27 Apr 2026 15:00:03 +0000 Manifest next update: Thu 30 Apr 2026 15:00:00 +0000 Files and hashes: 1: 24ff25e6-fb53-31cd-9980-92a2e33cb078.roa (hash: zs2cYyvnfwmbCnxWBVuIM0Om77UazbGbF+m+A3VhAu8=) 2: 4bd87949-f415-39b3-9d62-cda131cadecc.roa (hash: psX3/138cC00b8nzynHBwT5TbdWsq+NNs8BXpqqhC6M=) 3: 84a820e8-2494-3391-a8ed-9f54f9e78765.roa (hash: yKNo3iilg/cKC9mDFT55xqG13SUURWGruu3pmI5L5vE=) 4: 86f9e25e-c248-3933-9ce8-4e4b4097a657.roa (hash: dMma2x10JqMGhKj7SahZzBW3gyxI6SLeIVTYJ81oBx8=) 5: 989afb89-021f-486a-9386-ea5ad2a85eb3.crl (hash: nqocfOzW7gE2vYcWJonEA9C8RWnOuLKcNugDc4k9FHQ=) 6: e17bd202-be79-3815-9fd1-b952c78144fc.roa (hash: QWN3X7sFH26KvO41dp1fuMXJVYyiFSYkS2PuqMyEEE4=) 7: fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa (hash: ZKaVQb5knz3F77tddWvCwfylEhiZqe1keD3xvLskNvY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:86:14:1d:40:03:de:d8:1d:f0:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Apr 27 15:00:03 2026 GMT Not After : Apr 30 15:00:00 2026 GMT Subject: CN=1cfcdf8d-aefe-4497-a477-16f650f20f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:05:53:e6:df:0e:d6:46:61:19:82:a1:04:6d: 25:ce:5d:dc:fa:f2:50:0e:8b:eb:f9:78:10:7b:b7: 97:19:1c:56:4c:88:86:c8:e7:e1:cc:d9:5c:25:7c: 59:5f:e6:17:95:4b:53:d7:98:6b:5e:4e:af:94:5b: fc:78:e8:a6:11:f0:b5:03:6c:ec:40:64:34:95:57: 78:a3:c2:7c:c0:66:04:7b:22:3b:51:41:56:3b:7a: 20:ec:7a:e5:5f:00:90:ee:aa:c3:41:e2:34:a7:1a: 99:35:09:a8:d4:de:76:67:9e:c6:e7:e0:a0:eb:f4: 64:ed:11:6a:22:14:ae:5d:f6:90:20:8f:26:cd:b0: de:f6:c4:fc:d8:72:27:75:cb:db:f3:0d:09:11:2e: ee:25:e7:95:32:c5:5b:f0:bd:88:cd:8d:57:6d:35: 2e:46:d0:e0:c4:50:ce:e3:79:91:18:21:6b:4a:e9: 9b:60:98:76:bd:7e:69:d8:48:40:40:36:64:25:62: 1b:a0:53:ce:c8:f0:13:48:b7:69:ea:16:b2:18:a2: ce:ee:db:0f:e6:7a:ac:f4:54:34:41:33:fd:ef:fd: f2:0b:c3:06:52:33:d4:1f:d5:3a:44:82:18:5a:2e: a3:ba:9d:78:d8:88:20:55:64:19:70:91:7a:3d:7c: c1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C9:7E:D3:5B:FC:2A:39:7D:AB:8B:95:E9:34:9B:F0:91:86:DE:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d8:90:a7:07:3a:4c:3d:a0:09:8c:dc:37:b9:5b:d4:26:46: 0b:45:68:45:4a:77:07:d1:c4:27:9c:f9:c3:9d:56:0b:b7:57: fb:02:9b:41:54:05:bd:8d:ee:23:59:5b:01:1c:1a:b1:33:ae: 43:3e:0d:b2:ba:2a:12:2b:ac:14:e0:25:80:fa:ff:79:0f:11: e2:05:52:ca:84:15:79:1f:bb:8e:51:15:37:b0:5f:22:5c:3f: 72:19:4e:f7:c0:0f:d5:52:3c:98:d6:2f:32:cc:2b:4e:84:b8: 30:ac:d4:d4:50:a9:86:09:fb:de:b3:c8:0e:58:e3:88:ae:d3: d5:9a:1b:a6:77:cd:2f:98:a3:00:a0:32:50:9b:5a:06:39:fe: 73:1d:0e:a3:68:a7:5e:d6:ef:4f:2a:a6:f6:87:ef:be:15:c9: af:57:20:41:46:4a:ef:f9:c0:43:e5:61:24:0f:aa:7f:4d:f9: 21:ba:a4:3a:ae:45:b6:eb:cb:a4:57:57:4c:b2:d9:59:62:a4: 20:46:e4:ac:a5:a8:15:14:d4:ac:43:36:13:91:c1:fc:14:b7: 2e:c6:77:57:bc:6f:da:d4:80:e7:d6:fa:3b:5a:1d:b1:35:97: 29:57:a8:25:30:eb:cb:37:87:e7:b6:07:4e:09:90:59:3f:d8: ea:63:29:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2lhhQdQAPe2B3wAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MDQyNzE1MDAwM1oXDTI2MDQzMDE1MDAwMFowLzEtMCsGA1UEAxMk MWNmY2RmOGQtYWVmZS00NDk3LWE0NzctMTZmNjUwZjIwZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogVT5t8O1kZhGYKhBG0lzl3c+vJQDovr+XgQ e7eXGRxWTIiGyOfhzNlcJXxZX+YXlUtT15hrXk6vlFv8eOimEfC1A2zsQGQ0lVd4 o8J8wGYEeyI7UUFWO3og7HrlXwCQ7qrDQeI0pxqZNQmo1N52Z57G5+Cg6/Rk7RFq IhSuXfaQII8mzbDe9sT82HIndcvb8w0JES7uJeeVMsVb8L2IzY1XbTUuRtDgxFDO 43mRGCFrSumbYJh2vX5p2EhAQDZkJWIboFPOyPATSLdp6hayGKLO7tsP5nqs9FQ0 QTP97/3yC8MGUjPUH9U6RIIYWi6jup142IggVWQZcJF6PXzBgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL/JftNb/Co5fauLlek0m/CRht7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvOTg5YWZiODktMDIxZi00 ODZhLTkzODYtZWE1YWQyYTg1ZWIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAH2JCnBzpMPaAJjNw3uVvU JkYLRWhFSncH0cQnnPnDnVYLt1f7AptBVAW9je4jWVsBHBqxM65DPg2yuioSK6wU 4CWA+v95DxHiBVLKhBV5H7uOURU3sF8iXD9yGU73wA/VUjyY1i8yzCtOhLgwrNTU UKmGCfves8gOWOOIrtPVmhumd80vmKMAoDJQm1oGOf5zHQ6jaKde1u9PKqb2h+++ FcmvVyBBRkrv+cBD5WEkD6p/TfkhuqQ6rkW268ukV1dMstlZYqQgRuSspagVFNSs QzYTkcH8FLcuxndXvG/a1IDn1vo7Wh2xNZcpV6glMOvLN4fntgdOCZBZP9jqYyn0 -----END CERTIFICATE-----Generated at Tue Apr 28 11:56:18 2026 by rpki-client