$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft File: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft (raw, json) Hash identifier: pG0kfQQroUgc+Qb6+t9DSwQU8Hk+uKG+m0cvdyrFJ7k= Subject key identifier: F8:85:A0:A8:00:D0:D4:C0:C0:8A:E3:7F:9C:91:46:48:0E:19:56:40 Authority key identifier: 1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A Certificate issuer: /CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Certificate serial: 010D0C9F4328584D86B2C619CBFCA000948A6FE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft Manifest number: 010D0C9F4328584BC280D5C678E41C6D5255F527 Signing time: Thu 16 Apr 2026 14:00:03 +0000 Manifest this update: Thu 16 Apr 2026 14:00:03 +0000 Manifest next update: Sun 19 Apr 2026 14:00:00 +0000 Files and hashes: 1: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl (hash: nC9LzjCkRI2PjHdo6OjhFPgrWg+CRn2UY47V7Gnc4yM=) 2: 8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa (hash: o4uX8/noFYR52QLtWMakRmwpiQDloAZtwher9E+FVfM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:b2:c6:19:cb:fc:a0:00:94:8a:6f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Validity Not Before: Apr 16 14:00:03 2026 GMT Not After : Apr 19 14:00:00 2026 GMT Subject: CN=bfebdcb8-9772-4353-bdde-b58a8fe778be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d5:e4:40:56:3e:11:b2:aa:d8:14:3a:0e:07: c0:ee:ed:c9:1a:fe:eb:80:2a:b7:cd:9e:36:fe:b8: 66:a1:88:33:73:c0:47:ef:83:bb:95:2f:32:69:64: 23:a1:b5:25:f7:e2:68:16:bb:4f:fe:2c:45:c2:6b: 08:83:92:07:b6:7b:a5:b3:2d:cb:e6:5f:e2:2b:0b: d3:3c:01:f5:72:30:38:f1:22:be:ea:e3:99:9a:96: d0:70:d7:04:1b:a1:10:95:d3:b5:03:ad:e3:0b:35: 4f:34:9c:02:c1:a3:af:fa:ad:be:f0:df:f4:ba:55: 6b:3c:01:01:70:f4:38:9c:30:5c:af:53:97:d9:82: 6d:ac:c3:ce:12:56:fa:22:9f:ae:11:2e:86:6b:01: a8:a8:eb:ee:00:46:b8:11:4d:ae:ea:0e:75:f4:69: 64:e8:c0:97:d6:59:c7:b8:b1:44:a0:3e:79:a1:e7: f6:d5:4a:6e:b3:06:18:fa:c6:44:c8:71:ee:64:26: 98:a8:d8:b7:1c:e8:8d:0f:da:ae:2b:38:66:1e:f4: 8c:d6:3e:30:1b:24:d6:0e:b6:34:74:0f:37:51:a6: 8c:02:56:47:57:2d:92:9f:dc:4e:7e:20:c0:fb:f4: 1c:e1:d4:67:67:2a:50:35:d0:36:b8:e0:21:a8:f5: 3c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:85:A0:A8:00:D0:D4:C0:C0:8A:E3:7F:9C:91:46:48:0E:19:56:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl X509v3 Authority Key Identifier: keyid:1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:77:e6:8c:e8:7a:09:e6:8b:d8:ab:89:8a:1a:cc:34:c4:41: c2:7e:33:95:c5:de:60:ea:9d:a6:f5:e8:a7:d3:4a:0c:12:60: 51:2b:4a:25:05:ea:8f:da:03:56:60:fb:e3:1a:d1:d4:18:ae: 23:c2:bf:4a:b3:c9:98:05:1d:45:9b:eb:50:13:99:9c:c5:70: d9:af:4f:6c:5e:b6:c1:04:f1:14:f5:55:4c:1e:06:c5:b5:a7: 84:9a:de:74:19:cc:9b:bf:f8:1f:d9:62:5f:76:24:be:09:b3: 3a:70:ea:ae:c0:07:9f:62:97:9e:6f:3f:1e:7e:c4:ab:57:12: 43:e4:58:a3:81:62:7d:dc:dc:3c:26:b8:92:84:be:cb:a0:9f: 6e:23:88:e2:4a:3c:7c:75:39:6d:7c:e5:21:6f:10:1c:43:72: 1c:09:8f:2d:1c:e2:38:f0:b8:f1:40:92:71:52:24:c0:67:f6: f7:44:30:73:06:65:1b:2e:e9:d5:c8:cc:8b:a8:44:42:99:77: f3:62:67:ee:da:c1:bf:ec:df:21:7a:7e:4e:e2:b9:cb:95:c2: 9d:0f:03:f2:83:65:60:a6:38:2a:40:b9:44:76:23:93:0e:eb: f7:82:8d:c3:73:b3:87:be:e5:49:c8:d9:6d:b2:7d:93:0a:61: 0f:d4:90:b8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2GssYZy/ygAJSKb+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliODVkNWEtMjIzNi00YTZiLTljM2QtMjRiMTQ0NDlm NDlkMB4XDTI2MDQxNjE0MDAwM1oXDTI2MDQxOTE0MDAwMFowLzEtMCsGA1UEAxMk YmZlYmRjYjgtOTc3Mi00MzUzLWJkZGUtYjU4YThmZTc3OGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNXkQFY+EbKq2BQ6DgfA7u3JGv7rgCq3zZ42 /rhmoYgzc8BH74O7lS8yaWQjobUl9+JoFrtP/ixFwmsIg5IHtnulsy3L5l/iKwvT PAH1cjA48SK+6uOZmpbQcNcEG6EQldO1A63jCzVPNJwCwaOv+q2+8N/0ulVrPAEB cPQ4nDBcr1OX2YJtrMPOElb6Ip+uES6GawGoqOvuAEa4EU2u6g519Glk6MCX1lnH uLFEoD55oef21UpuswYY+sZEyHHuZCaYqNi3HOiND9quKzhmHvSM1j4wGyTWDrY0 dA83UaaMAlZHVy2Sn9xOfiDA+/Qc4dRnZypQNdA2uOAhqPU8rwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPiFoKgA0NTAwIrjf5yRRkgOGVZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4 NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIxNDQ0OWY0OWQvODliODVkNWEtMjIzNi00 YTZiLTljM2QtMjRiMTQ0NDlmNDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODliODVkNWEtMjIzNi00YTZiLTlj M2QtMjRiMTQ0NDlmNDlkLzg5Yjg1ZDVhLTIyMzYtNGE2Yi05YzNkLTI0YjE0NDQ5 ZjQ5ZC5jcmwwHwYDVR0jBBgwFoAUHRCgkuPQCqlaPwSDXzmh/4LJB5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIx NDQ0OWY0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+d+aM6HoJ5ovYq4mKGsw0 xEHCfjOVxd5g6p2m9ein00oMEmBRK0olBeqP2gNWYPvjGtHUGK4jwr9Ks8mYBR1F m+tQE5mcxXDZr09sXrbBBPEU9VVMHgbFtaeEmt50Gcybv/gf2WJfdiS+CbM6cOqu wAefYpeebz8efsSrVxJD5FijgWJ93Nw8JriShL7LoJ9uI4jiSjx8dTltfOUhbxAc Q3IcCY8tHOI48LjxQJJxUiTAZ/b3RDBzBmUbLunVyMyLqERCmXfzYmfu2sG/7N8h en5O4rnLlcKdDwPyg2VgpjgqQLlEdiOTDuv3go3Dc7OHvuVJyNltsn2TCmEP1JC4 -----END CERTIFICATE-----Generated at Fri Apr 17 05:32:39 2026 by rpki-client