$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft File: 589a84a2-f62d-414f-915d-810c9265e5de.mft (raw, json) Hash identifier: eR4G7zKEzMSHO7LdNG4PUvRGY+p3/IQNf73mdvx/ZzM= Subject key identifier: 1C:DF:DA:4F:78:4F:C4:05:C2:52:7D:14:03:29:42:E0:35:28:E2:D5 Authority key identifier: 39:63:73:7A:44:9C:AE:FF:D4:5A:0B:A5:23:B8:60:43:35:C6:5F:59 Certificate issuer: /CN=589a84a2-f62d-414f-915d-810c9265e5de Certificate serial: 010D0C9F4328584D897D76767171072011DA2C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft Manifest number: 010D0C9F4328584B8AA3359A4801463882BB417B Signing time: Fri 17 Apr 2026 14:00:03 +0000 Manifest this update: Fri 17 Apr 2026 14:00:03 +0000 Manifest next update: Sun 19 Apr 2026 14:00:00 +0000 Files and hashes: 1: 589a84a2-f62d-414f-915d-810c9265e5de.crl (hash: FA/TG6N/lq69lDpZzKRRxzUTg6PN3VD59ydjLCCB3oU=) 2: b9b863f4-1e9b-35b6-856e-0def881a13c7.roa (hash: +sWgOglXAgIaidLZQB2GGQbRUJy36L0I2/98JisldFo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:7d:76:76:71:71:07:20:11:da:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589a84a2-f62d-414f-915d-810c9265e5de Validity Not Before: Apr 17 14:00:03 2026 GMT Not After : Apr 19 14:00:00 2026 GMT Subject: CN=fc643dd9-350b-442f-bcac-f69164f4e364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:03:8d:7c:c1:f5:9d:44:9b:4f:4d:61:3b: 96:44:7c:62:54:81:af:6a:13:bc:10:8b:b5:b5:97: 02:d1:8e:df:bb:1f:f8:11:11:4d:98:5f:3b:35:55: 40:65:57:00:79:4d:04:b4:8e:16:1e:fa:e0:dd:2e: ba:50:f0:9f:ff:04:cf:d2:d3:53:b2:76:f5:65:d2: 69:a7:b4:e3:29:e1:4f:9a:78:dd:f5:9b:91:99:57: bd:bf:2c:3c:bc:18:3a:77:1b:99:23:36:c3:be:86: b3:e0:1d:10:a1:c7:6b:08:97:e1:e1:e2:41:57:a3: d5:c3:d9:f4:36:1c:b3:24:34:d1:16:5d:58:5a:36: bd:ef:6d:b1:da:1d:2e:cb:a2:dd:77:c1:7d:7e:b1: 43:1c:5e:97:1e:f0:d0:2c:4c:16:42:91:c1:8d:9e: a5:5d:99:4f:a9:16:a6:24:ef:39:21:9d:b2:50:ca: 85:12:43:c3:58:d4:50:22:9a:41:e5:13:ff:33:9b: cd:4c:42:75:d1:a7:ed:92:41:17:d7:ed:b5:44:7b: c0:7a:0a:a5:06:24:25:f6:7a:78:3f:c1:31:74:ef: 89:93:3d:e2:1e:28:71:71:36:fc:82:5c:3d:41:80: a2:49:ad:08:b8:86:d8:03:12:33:29:6c:da:c0:00: 8e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DF:DA:4F:78:4F:C4:05:C2:52:7D:14:03:29:42:E0:35:28:E2:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.crl X509v3 Authority Key Identifier: keyid:39:63:73:7A:44:9C:AE:FF:D4:5A:0B:A5:23:B8:60:43:35:C6:5F:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a2:bf:7c:63:19:14:96:47:dc:9c:d8:80:00:d1:a0:ee:9d: 8a:82:0e:9d:e7:e0:07:8b:04:4a:a7:3c:c4:19:41:86:89:ca: 43:7a:b9:01:19:75:64:f4:aa:a5:e2:de:ce:ad:c8:a6:03:8a: ce:f9:95:6e:a2:32:42:01:b2:1e:e2:14:fd:94:c4:7f:f4:46: cd:39:91:d1:79:ae:86:20:75:91:5a:63:83:06:1d:c1:41:d1: 9d:53:80:e7:f0:0b:dc:d5:c9:61:82:23:d8:a2:d4:22:85:e0: 05:58:f0:a9:b9:6c:c5:05:5a:c0:c8:89:b7:fd:14:ca:97:1c: 38:d0:08:ea:d9:1e:6c:50:66:cf:71:37:69:cf:78:09:58:3a: f5:cc:4d:0e:58:dd:be:2c:8b:68:24:07:2c:30:d8:ea:72:3e: 36:2f:64:39:4e:5b:1e:20:57:f6:15:00:a8:97:96:1c:5a:8e: fd:bc:95:98:a7:61:12:c7:d1:6d:dc:82:39:93:72:2f:d7:cb: 40:68:e7:66:7f:70:c8:97:6b:a1:64:1a:7d:7f:bc:7e:06:90: 09:fa:e5:ab:fb:13:9b:68:c1:70:08:ea:db:82:6b:4a:71:3a: 1f:b1:6b:da:6c:8b:a4:fc:76:38:f3:12:38:da:42:f3:af:fe: 13:e8:d0:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2JfXZ2cXEHIBHaLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5YTg0YTItZjYyZC00MTRmLTkxNWQtODEwYzkyNjVl NWRlMB4XDTI2MDQxNzE0MDAwM1oXDTI2MDQxOTE0MDAwMFowLzEtMCsGA1UEAxMk ZmM2NDNkZDktMzUwYi00NDJmLWJjYWMtZjY5MTY0ZjRlMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurIDjXzB9Z1Em09NYTuWRHxiVIGvahO8EIu1 tZcC0Y7fux/4ERFNmF87NVVAZVcAeU0EtI4WHvrg3S66UPCf/wTP0tNTsnb1ZdJp p7TjKeFPmnjd9ZuRmVe9vyw8vBg6dxuZIzbDvoaz4B0QocdrCJfh4eJBV6PVw9n0 NhyzJDTRFl1YWja9722x2h0uy6Ldd8F9frFDHF6XHvDQLEwWQpHBjZ6lXZlPqRam JO85IZ2yUMqFEkPDWNRQIppB5RP/M5vNTEJ10aftkkEX1+21RHvAegqlBiQl9np4 P8ExdO+Jkz3iHihxcTb8glw9QYCiSa0IuIbYAxIzKWzawACOewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBzf2k94T8QFwlJ9FAMpQuA1KOLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODlh ODRhMi1mNjJkLTQxNGYtOTE1ZC04MTBjOTI2NWU1ZGUvNTg5YTg0YTItZjYyZC00 MTRmLTkxNWQtODEwYzkyNjVlNWRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTg5YTg0YTItZjYyZC00MTRmLTkx NWQtODEwYzkyNjVlNWRlLzU4OWE4NGEyLWY2MmQtNDE0Zi05MTVkLTgxMGM5MjY1 ZTVkZS5jcmwwHwYDVR0jBBgwFoAUOWNzekScrv/UWgulI7hgQzXGX1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODlhODRhMi1mNjJkLTQxNGYtOTE1ZC04MTBj OTI2NWU1ZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVor98YxkUlkfcnNiAANGg 7p2Kgg6d5+AHiwRKpzzEGUGGicpDerkBGXVk9Kql4t7OrcimA4rO+ZVuojJCAbIe 4hT9lMR/9EbNOZHRea6GIHWRWmODBh3BQdGdU4Dn8Avc1clhgiPYotQiheAFWPCp uWzFBVrAyIm3/RTKlxw40Ajq2R5sUGbPcTdpz3gJWDr1zE0OWN2+LItoJAcsMNjq cj42L2Q5TlseIFf2FQCol5YcWo79vJWYp2ESx9Ft3II5k3Iv18tAaOdmf3DIl2uh ZBp9f7x+BpAJ+uWr+xObaMFwCOrbgmtKcTofsWvabIuk/HY48xI42kLzr/4T6NCX -----END CERTIFICATE-----Generated at Fri Apr 17 21:18:40 2026 by rpki-client