$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft File: a89dfa66-11db-4652-8710-2a69de76abaa.mft (raw, json) Hash identifier: U0UCTCzgrSO/yAG5WU3ZAvmOzttYRUWqwDxMiAMQR8M= Subject key identifier: 2F:17:A8:10:D2:82:04:F6:BD:81:5D:C0:47:B0:F1:42:EE:FC:CA:73 Authority key identifier: 45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6 Certificate issuer: /CN=a89dfa66-11db-4652-8710-2a69de76abaa Certificate serial: 010D0C9F4328584EA67AF9A3562C3B27CC045480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft Manifest number: 010D0C9F4328584BD5E8EC521E9945DEBD1B8485 Signing time: Tue 28 Jul 2026 16:00:22 +0000 Manifest this update: Tue 28 Jul 2026 16:00:22 +0000 Manifest next update: Fri 31 Jul 2026 16:00:00 +0000 Files and hashes: 1: a89dfa66-11db-4652-8710-2a69de76abaa.crl (hash: SqYySV0mIVSy1fBh9q6WEOfE+d/n66o1hKjPgBEdgKw=) 2: b3d0c767-d849-3fd0-93e5-6a900b4e0a1c.roa (hash: iHC1MDuHqUVx1a7wx1fwpIZG6baJNks9ael8xhPLHXE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:7a:f9:a3:56:2c:3b:27:cc:04:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a89dfa66-11db-4652-8710-2a69de76abaa Validity Not Before: Jul 28 16:00:22 2026 GMT Not After : Jul 31 16:00:00 2026 GMT Subject: CN=bb2b5d08-8b63-468c-bb85-14a658db0cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6e:e4:bd:64:9c:9e:93:e4:cc:aa:dc:75:c9: f1:0c:fa:b8:ff:e9:16:1d:e8:cf:38:94:9c:9f:89: 35:de:5a:53:71:c3:fb:70:d3:b6:98:de:e8:32:83: fe:c3:90:22:c6:78:6e:06:f6:f7:60:d6:95:f1:91: 38:e7:ae:d4:92:c2:1e:6e:2f:9b:b1:39:35:6b:dc: 1d:75:ba:fe:36:5a:fa:e6:54:38:d1:8a:8f:b7:c1: 10:8c:c1:f5:bf:48:ab:d0:00:25:45:e7:97:fe:11: bb:ab:26:3e:6a:09:a5:00:df:3b:a3:e9:24:f9:67: 7e:6a:e0:92:ab:69:d5:59:0d:ae:46:cd:db:46:27: e7:e0:42:9f:ba:9a:8d:6e:62:de:ea:09:35:bb:a7: 57:95:94:cb:1d:cd:ed:6f:6c:49:8a:ff:86:5f:c2: 68:7b:14:64:83:f2:d9:32:6e:6b:a2:e5:63:57:40: 54:fb:70:93:60:c6:ef:a3:f1:ba:b4:1c:25:58:ac: cc:42:5a:15:93:86:c3:e6:2a:b4:1d:73:bb:e9:fe: c1:3a:7f:96:99:64:54:65:60:71:91:23:5c:90:ca: 42:d0:c9:a4:ba:ae:c3:d9:92:f0:fd:d6:39:87:c0: 1b:75:4a:66:38:64:a0:61:57:39:36:bb:72:b7:36: c6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:17:A8:10:D2:82:04:F6:BD:81:5D:C0:47:B0:F1:42:EE:FC:CA:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.crl X509v3 Authority Key Identifier: keyid:45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:4f:33:32:3f:93:22:6a:d7:ba:d0:73:17:b3:d1:3e:0e:4f: 70:7e:01:80:79:9a:8d:0a:5d:5a:7d:12:01:3e:e8:e6:79:48: 93:5f:06:f4:6a:f9:62:30:0a:ca:04:7e:88:f0:73:78:80:fb: bb:c9:11:b5:55:fb:21:84:eb:40:de:72:cb:82:ad:07:27:e4: 37:9a:a1:b9:e6:34:61:cc:65:c7:d4:09:01:55:4b:2e:fb:f1: 58:f2:66:48:d4:42:59:7b:18:9e:a4:41:08:e3:e9:58:12:4e: 03:fd:8c:f0:a4:a8:84:28:d1:03:d1:88:87:e3:33:aa:85:06: 92:51:f6:bc:50:1a:bd:9c:d0:60:1f:42:1f:29:4e:66:10:2c: e1:33:bc:f3:e7:3a:b2:b2:a3:43:d4:c9:15:bd:e8:db:18:16: 3d:c3:4d:46:e7:6a:e5:36:64:34:4b:40:7b:a3:f9:68:4c:a3: 90:20:54:9b:7d:2f:22:1d:83:67:43:e4:5d:1d:3b:8f:80:c7: 7b:ab:66:0d:49:2e:69:d9:dc:ac:af:d4:84:e1:8d:84:e6:ab: b4:ac:09:6a:d5:c0:fb:ee:a7:4c:27:31:29:99:43:9e:da:8c: d4:aa:25:bd:9f:ff:44:24:2e:44:d7:fe:36:0b:cb:6e:54:c1: 7a:fb:c8:30 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6mevmjViw7J8wEVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5ZGZhNjYtMTFkYi00NjUyLTg3MTAtMmE2OWRlNzZh YmFhMB4XDTI2MDcyODE2MDAyMloXDTI2MDczMTE2MDAwMFowLzEtMCsGA1UEAxMk YmIyYjVkMDgtOGI2My00NjhjLWJiODUtMTRhNjU4ZGIwY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW7kvWScnpPkzKrcdcnxDPq4/+kWHejPOJSc n4k13lpTccP7cNO2mN7oMoP+w5AixnhuBvb3YNaV8ZE4567UksIebi+bsTk1a9wd dbr+Nlr65lQ40YqPt8EQjMH1v0ir0AAlReeX/hG7qyY+agmlAN87o+kk+Wd+auCS q2nVWQ2uRs3bRifn4EKfupqNbmLe6gk1u6dXlZTLHc3tb2xJiv+GX8JoexRkg/LZ Mm5rouVjV0BU+3CTYMbvo/G6tBwlWKzMQloVk4bD5iq0HXO76f7BOn+WmWRUZWBx kSNckMpC0Mmkuq7D2ZLw/dY5h8AbdUpmOGSgYVc5NrtytzbGWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC8XqBDSggT2vYFdwEew8ULu/MpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODlk ZmE2Ni0xMWRiLTQ2NTItODcxMC0yYTY5ZGU3NmFiYWEvYTg5ZGZhNjYtMTFkYi00 NjUyLTg3MTAtMmE2OWRlNzZhYmFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg5ZGZhNjYtMTFkYi00NjUyLTg3 MTAtMmE2OWRlNzZhYmFhL2E4OWRmYTY2LTExZGItNDY1Mi04NzEwLTJhNjlkZTc2 YWJhYS5jcmwwHwYDVR0jBBgwFoAURTegwoIR/CLIlWvO8ME36EvSGLYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODlkZmE2Ni0xMWRiLTQ2NTItODcxMC0yYTY5 ZGU3NmFiYWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRTzMyP5Miate60HMXs9E+ Dk9wfgGAeZqNCl1afRIBPujmeUiTXwb0avliMArKBH6I8HN4gPu7yRG1VfshhOtA 3nLLgq0HJ+Q3mqG55jRhzGXH1AkBVUsu+/FY8mZI1EJZexiepEEI4+lYEk4D/Yzw pKiEKNED0YiH4zOqhQaSUfa8UBq9nNBgH0IfKU5mECzhM7zz5zqysqND1MkVvejb GBY9w01G52rlNmQ0S0B7o/loTKOQIFSbfS8iHYNnQ+RdHTuPgMd7q2YNSS5p2dys r9SE4Y2E5qu0rAlq1cD77qdMJzEpmUOe2ozUqiW9n/9EJC5E1/42C8tuVMF6+8gw -----END CERTIFICATE-----Generated at Wed Jul 29 00:45:29 2026 by rpki-client