$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft File: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft (raw, json) Hash identifier: iAW01yXUVY0s+mj6ChLB1pS6CkX3SkLLUnjmGASQKrE= Subject key identifier: 4F:5C:12:A4:0B:F4:4A:EF:61:7E:E8:91:78:29:A9:7A:7B:1B:4C:08 Authority key identifier: 1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A Certificate issuer: /CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Certificate serial: 010D0C9F4328584D06475DB6EBBC9C0199121200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft Manifest number: 010D0C9F4328584BC280D5C678E41C6D5255F4F7 Signing time: Sun 01 Mar 2026 14:00:09 +0000 Manifest this update: Sun 01 Mar 2026 14:00:09 +0000 Manifest next update: Wed 04 Mar 2026 14:00:00 +0000 Files and hashes: 1: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl (hash: UJCdpQzEH7QTKZt32cg7DBRvd6YG0mzsbpm8UQkBa0c=) 2: 8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa (hash: 9PEw8/U+B7s8pUyCXXJyDSvq2pS4MiseXUi/qiFsV90=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:5d:b6:eb:bc:9c:01:99:12:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Validity Not Before: Mar 1 14:00:09 2026 GMT Not After : Mar 4 14:00:00 2026 GMT Subject: CN=8d8c3c2d-bc91-4991-b99e-b13afe35871d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b9:33:9b:49:0b:e5:61:ef:65:f6:54:cf:ce: a3:18:31:50:c2:ea:1e:3c:56:25:c3:c8:1b:df:a6: 9a:75:74:71:66:81:a0:9b:ef:71:7b:a2:4c:9e:84: 87:56:1b:04:46:d8:be:ef:c5:20:bf:77:9c:b6:09: 4b:dc:c7:f2:33:b1:78:f5:76:83:e8:50:6f:df:5e: 74:4c:63:14:e6:55:c5:0f:db:76:6a:62:48:a6:2d: 79:75:65:7b:93:58:78:6d:c5:d7:5b:5a:02:54:55: 89:de:84:ff:b2:20:ad:dc:dc:e5:e5:a3:c5:ee:74: ac:4b:37:a2:f1:d4:67:86:e7:4d:12:91:05:ce:7e: 8c:33:30:3c:d3:b5:96:e9:fa:4f:08:58:77:68:29: 98:a8:df:7b:fd:1f:71:66:80:6e:9c:20:33:0f:3c: 3c:8c:55:4b:bf:b6:37:cb:fe:dc:d9:a4:26:09:c9: 49:49:0e:26:13:ca:b7:26:fe:02:21:30:9f:70:33: b4:c6:c9:ec:e7:d0:cb:17:b5:71:0b:ab:c6:97:13: 5a:78:4b:16:90:e0:65:18:6a:c8:d9:9f:e3:15:b2: 84:87:b5:5f:55:34:dc:a3:de:39:0c:cd:d7:c5:91: 9b:bd:8e:7a:69:32:d7:6c:0f:03:28:47:45:72:8f: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5C:12:A4:0B:F4:4A:EF:61:7E:E8:91:78:29:A9:7A:7B:1B:4C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl X509v3 Authority Key Identifier: keyid:1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:60:92:60:1b:9a:08:29:71:62:fa:71:05:f0:42:3c:ff:ff: 6f:ba:df:6e:34:fa:00:73:fe:2e:aa:5d:95:d9:61:cb:fc:5a: b5:69:94:6e:77:01:db:43:4c:9d:d3:6d:26:a5:b0:fa:96:e0: c3:84:68:c1:4e:bd:7f:55:81:ee:8a:4a:77:c3:87:24:8b:04: 6e:96:76:17:e6:50:7e:01:b0:84:ad:21:c3:28:88:95:d9:a6: 5c:bc:1d:3d:f4:61:1b:e6:cf:88:fa:35:ff:cf:30:c7:28:52: 59:4f:ac:d9:df:a2:10:66:ae:2e:65:c0:95:42:e2:bf:97:31: 6b:d7:9b:44:90:a8:c6:11:e8:d9:48:51:4b:29:2b:d3:61:76: 79:52:2d:9f:8c:77:04:8f:3d:e5:96:e0:e2:47:c1:e3:8f:fd: a7:1d:5c:ba:c1:e4:b1:bc:33:7b:53:b2:d8:84:4f:50:e3:10: cd:47:9f:c3:23:6a:27:6c:ee:39:e0:c0:14:e3:45:b7:46:11: c3:8e:e4:5c:20:07:bc:fa:f2:46:16:97:6a:29:83:42:fb:f8: f7:75:5b:68:14:db:f1:66:39:b6:4c:1e:83:07:92:b9:5f:31: c7:a4:12:45:65:70:23:2d:27:be:3c:88:dd:5a:3b:3c:7d:85: b1:ee:93:8d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GR12267ycAZkSEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliODVkNWEtMjIzNi00YTZiLTljM2QtMjRiMTQ0NDlm NDlkMB4XDTI2MDMwMTE0MDAwOVoXDTI2MDMwNDE0MDAwMFowLzEtMCsGA1UEAxMk OGQ4YzNjMmQtYmM5MS00OTkxLWI5OWUtYjEzYWZlMzU4NzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLkzm0kL5WHvZfZUz86jGDFQwuoePFYlw8gb 36aadXRxZoGgm+9xe6JMnoSHVhsERti+78Ugv3ectglL3MfyM7F49XaD6FBv3150 TGMU5lXFD9t2amJIpi15dWV7k1h4bcXXW1oCVFWJ3oT/siCt3Nzl5aPF7nSsSzei 8dRnhudNEpEFzn6MMzA807WW6fpPCFh3aCmYqN97/R9xZoBunCAzDzw8jFVLv7Y3 y/7c2aQmCclJSQ4mE8q3Jv4CITCfcDO0xsns59DLF7VxC6vGlxNaeEsWkOBlGGrI 2Z/jFbKEh7VfVTTco945DM3XxZGbvY56aTLXbA8DKEdFco/H7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE9cEqQL9ErvYX7okXgpqXp7G0wIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4 NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIxNDQ0OWY0OWQvODliODVkNWEtMjIzNi00 YTZiLTljM2QtMjRiMTQ0NDlmNDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODliODVkNWEtMjIzNi00YTZiLTlj M2QtMjRiMTQ0NDlmNDlkLzg5Yjg1ZDVhLTIyMzYtNGE2Yi05YzNkLTI0YjE0NDQ5 ZjQ5ZC5jcmwwHwYDVR0jBBgwFoAUHRCgkuPQCqlaPwSDXzmh/4LJB5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIx NDQ0OWY0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcYJJgG5oIKXFi+nEF8EI8 //9vut9uNPoAc/4uql2V2WHL/Fq1aZRudwHbQ0yd020mpbD6luDDhGjBTr1/VYHu ikp3w4ckiwRulnYX5lB+AbCErSHDKIiV2aZcvB099GEb5s+I+jX/zzDHKFJZT6zZ 36IQZq4uZcCVQuK/lzFr15tEkKjGEejZSFFLKSvTYXZ5Ui2fjHcEjz3lluDiR8Hj j/2nHVy6weSxvDN7U7LYhE9Q4xDNR5/DI2onbO454MAU40W3RhHDjuRcIAe8+vJG FpdqKYNC+/j3dVtoFNvxZjm2TB6DB5K5XzHHpBJFZXAjLSe+PIjdWjs8fYWx7pON -----END CERTIFICATE-----Generated at Mon Mar 2 09:05:23 2026 by rpki-client