$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft File: 989afb89-021f-486a-9386-ea5ad2a85eb3.mft (raw, json) Hash identifier: Fm8Rb+gIpfl6ENXHjQ+i5RR1jjE88TvNe+TsZRaynMg= Subject key identifier: A7:00:FC:0C:01:70:34:67:85:21:28:AA:D2:1F:83:5C:F2:43:C9:1A Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584EA65D40E3AADCD2AE9647DD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft Manifest number: 010D0C9F4328584AB3B971372E2FC2C294D1E902 Signing time: Tue 28 Jul 2026 15:00:23 +0000 Manifest this update: Tue 28 Jul 2026 15:00:23 +0000 Manifest next update: Fri 31 Jul 2026 15:00:00 +0000 Files and hashes: 1: 24ff25e6-fb53-31cd-9980-92a2e33cb078.roa (hash: kyPMura/tPT+6xv5eeRccLKgT8aiYJ0CdUrSAIBvjvU=) 2: 4bd87949-f415-39b3-9d62-cda131cadecc.roa (hash: Da+dnSi4TrowH9hIrtfv21tAUXT9C3zn66XK3w7HMvs=) 3: 84a820e8-2494-3391-a8ed-9f54f9e78765.roa (hash: +tsBTSIKMEHgmQ8auvnG1XWnFXVE6ijEgMzHmTwOLHs=) 4: 86f9e25e-c248-3933-9ce8-4e4b4097a657.roa (hash: lGo+ONvmq/n2au+OMqVnebdcaj1SI7s9OGW++4/M27k=) 5: 989afb89-021f-486a-9386-ea5ad2a85eb3.crl (hash: eWRyAt7dvb87s5h18+FjC0gU4fppPwtBICc8QN2Z81o=) 6: e17bd202-be79-3815-9fd1-b952c78144fc.roa (hash: FBCCurjf1+RAos6OhstGaMRSdaMfx3oBb8zTRRRDB6M=) 7: fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa (hash: x/DcA57qtDslrBKiOu8yjowdZ+THGc8fJI8OPuP1l/c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:5d:40:e3:aa:dc:d2:ae:96:47:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Jul 28 15:00:23 2026 GMT Not After : Jul 31 15:00:00 2026 GMT Subject: CN=d4a403d9-0a7a-4f2d-94d7-d692b5acda63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:a2:62:8d:74:59:5a:d9:3c:cf:07:52:08: 22:a1:7a:92:55:d1:ab:c0:ba:b0:05:78:50:60:ee: e2:82:d7:b3:29:0b:d6:ba:60:d5:d6:a3:1a:d2:74: 36:85:ec:e0:5f:a7:52:a3:bd:bf:8f:19:04:6d:98: ee:7c:36:0f:e8:a3:79:eb:3a:be:72:c7:29:19:d4: b4:97:cd:cf:b8:7a:c5:4a:19:93:12:82:26:b7:3c: 32:49:6a:6d:a7:08:a1:5b:c5:ec:8f:a9:5d:76:21: c2:61:db:0b:78:0e:66:97:7a:55:e4:5c:5b:43:08: e0:7e:c9:21:c3:ac:73:8b:39:2d:2e:c1:ae:92:dc: c3:90:ce:c9:e0:ca:cb:31:17:ea:c8:48:c0:80:42: 7f:3d:01:04:56:ba:da:f3:d8:a7:69:8b:84:a3:81: 7a:db:3b:0b:7d:5c:f9:78:62:35:e3:26:1b:2a:cc: e7:25:69:4e:90:4e:bd:6d:a2:d1:01:03:a3:ea:08: 9e:82:cb:a5:fe:92:d3:47:b1:f2:48:59:b5:d9:f4: f7:25:db:fb:af:32:4e:23:67:c0:1e:22:bd:0f:cf: 4a:5d:a1:f0:da:ee:f8:02:98:f9:c3:2a:bf:3e:fb: 67:a1:e7:be:d2:34:28:16:8b:78:a1:bf:2d:ee:08: 2f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:00:FC:0C:01:70:34:67:85:21:28:AA:D2:1F:83:5C:F2:43:C9:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:81:b9:53:f6:62:c5:c9:98:77:ae:40:1a:86:6a:71:ce:51: 61:b6:5c:7b:71:69:70:cf:02:bd:c9:d1:0a:3d:21:ee:75:f2: 62:6b:e3:de:12:2d:ab:d4:41:dd:0a:ac:e3:f4:76:36:71:3d: 60:16:45:70:c1:2d:6c:79:9c:3e:94:4d:72:ca:31:0e:31:7d: ea:3f:8c:18:10:84:3a:38:0a:cb:46:bf:fa:12:10:d8:0e:b2: 98:4b:f9:f3:9a:ea:7a:11:db:f3:64:dc:76:4a:ee:b2:dd:c0: 56:bf:bb:41:26:78:ad:8a:4e:81:29:ef:45:a7:50:32:0b:b5: 78:b9:9f:5b:c8:aa:5a:33:23:55:7c:c9:2e:41:21:cb:e2:ce: e5:73:07:ee:90:3f:ac:ba:4e:9f:80:cf:67:df:f2:1e:e3:c3: af:31:10:53:66:2b:25:57:45:0a:8b:1e:ff:7d:c3:0a:60:60: 0d:2f:37:cd:74:ce:fe:24:8f:ba:0e:63:2f:cc:aa:4c:5f:51: 7c:2b:00:ef:69:f7:f8:32:be:55:ab:1d:ef:03:b3:3d:72:31: 16:b9:e8:c1:66:65:7d:1d:c3:7b:f6:a9:18:16:b1:3d:e4:9a: 13:e4:03:ff:0d:04:bb:6f:b3:3c:9d:62:eb:d1:f5:58:19:17: 4f:8e:b2:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6mXUDjqtzSrpZH3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MDcyODE1MDAyM1oXDTI2MDczMTE1MDAwMFowLzEtMCsGA1UEAxMk ZDRhNDAzZDktMGE3YS00ZjJkLTk0ZDctZDY5MmI1YWNkYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgmiYo10WVrZPM8HUggioXqSVdGrwLqwBXhQ YO7igtezKQvWumDV1qMa0nQ2hezgX6dSo72/jxkEbZjufDYP6KN56zq+cscpGdS0 l83PuHrFShmTEoImtzwySWptpwihW8Xsj6lddiHCYdsLeA5ml3pV5FxbQwjgfskh w6xzizktLsGuktzDkM7J4MrLMRfqyEjAgEJ/PQEEVrra89inaYuEo4F62zsLfVz5 eGI14yYbKsznJWlOkE69baLRAQOj6giegsul/pLTR7HySFm12fT3Jdv7rzJOI2fA HiK9D89KXaHw2u74Apj5wyq/Pvtnoee+0jQoFot4ob8t7ggvJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKcA/AwBcDRnhSEoqtIfg1zyQ8kaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvOTg5YWZiODktMDIxZi00 ODZhLTkzODYtZWE1YWQyYTg1ZWIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBagblT9mLFyZh3rkAahmpx zlFhtlx7cWlwzwK9ydEKPSHudfJia+PeEi2r1EHdCqzj9HY2cT1gFkVwwS1seZw+ lE1yyjEOMX3qP4wYEIQ6OArLRr/6EhDYDrKYS/nzmup6EdvzZNx2Su6y3cBWv7tB Jnitik6BKe9Fp1AyC7V4uZ9byKpaMyNVfMkuQSHL4s7lcwfukD+suk6fgM9n3/Ie 48OvMRBTZislV0UKix7/fcMKYGANLzfNdM7+JI+6DmMvzKpMX1F8KwDvaff4Mr5V qx3vA7M9cjEWuejBZmV9HcN79qkYFrE95JoT5AP/DQS7b7M8nWLr0fVYGRdPjrKx -----END CERTIFICATE-----Generated at Tue Jul 28 23:41:25 2026 by rpki-client