$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: Q/d1gp9/s2EWb14PayLxik1B7afHhhmcRT559S3ObzU= Subject key identifier: 9C:F8:D4:99:83:AF:72:DA:82:DC:3C:D4:1D:A6:EC:4B:2C:74:21:FE Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584DAD33757DF889B26093CE5F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3C22 Signing time: Thu 30 Apr 2026 09:00:03 +0000 Manifest this update: Thu 30 Apr 2026 09:00:03 +0000 Manifest next update: Sun 03 May 2026 09:00:00 +0000 Files and hashes: 1: 843a1018-5704-3ed0-878e-ee960b8368ce.roa (hash: /BKMAEnlabMgIwJu/7utZ98i805EJhcelvcS+25B2nk=) 2: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: qKQ317lxxyxVFC+tr8qtIlblU6JAtqCqp6VjxwCKVR8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:33:75:7d:f8:89:b2:60:93:ce:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Apr 30 09:00:03 2026 GMT Not After : May 3 09:00:00 2026 GMT Subject: CN=8134de60-2684-4e7e-9db4-70aa313d1f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6b:0c:91:77:01:bf:12:90:aa:50:bc:94:3d: 03:54:09:f5:de:e8:95:10:93:11:46:5c:2b:62:85: 83:60:50:7c:55:97:41:ab:f8:f8:fe:23:7c:08:1f: 0b:19:6d:a5:8a:e7:38:ed:83:b7:c5:9e:76:4e:3b: 14:89:69:4c:75:4b:36:d0:29:3a:0b:4f:34:ef:5c: 8c:1b:cb:1a:29:fa:8d:66:50:2b:ac:13:88:eb:36: 45:3d:3f:d3:5d:4f:70:b2:d2:db:d0:89:f3:00:d0: 26:8b:94:60:0c:9a:51:fb:90:37:21:1b:92:86:76: e9:e1:54:6b:e3:fd:0e:10:0c:60:0e:b7:c0:ca:16: 66:a6:10:15:d9:76:aa:18:e2:a3:d2:f0:ba:52:75: b8:9d:88:4e:f1:06:19:42:28:01:3a:78:86:24:ef: ec:80:be:2c:7f:3e:d5:f9:21:55:cd:35:06:00:62: 67:ef:86:a5:15:57:5e:38:2e:f1:21:e5:40:73:be: 04:e5:63:3d:3a:09:c3:08:d0:e0:19:a9:c4:62:e2: 1b:bb:79:a0:b4:74:63:4d:ae:43:ec:0e:34:8c:7f: e0:5e:9e:8f:1c:dc:b6:ca:56:b5:ca:34:45:b9:12: a3:51:fd:59:8c:e2:5d:29:46:5d:d8:18:0c:40:58: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F8:D4:99:83:AF:72:DA:82:DC:3C:D4:1D:A6:EC:4B:2C:74:21:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:32:74:bb:58:24:7a:d2:64:b3:0c:11:56:ae:b3:10:38:4a: 82:e6:b1:84:9e:ec:05:40:3f:54:5e:c9:9d:fa:18:82:f6:2d: c9:ec:03:de:de:69:44:90:40:dd:b0:fe:60:3b:86:1f:12:0e: 6c:91:da:59:1c:8e:45:f2:83:03:5f:36:16:bf:4f:64:e3:a3: a4:84:83:3e:7c:39:65:91:52:67:12:d2:3e:ee:f3:15:0f:05: 37:88:cd:df:a7:cf:81:7d:1d:ba:0b:57:6e:15:ce:7c:4e:50: 8d:c9:ff:b4:00:58:5a:f2:ee:eb:3b:e4:c3:e2:db:80:c7:4b: d5:6a:44:2d:5f:8c:ee:c3:31:6b:4a:60:98:e0:47:6c:b0:ef: e4:85:9c:55:5b:78:e9:9a:16:c6:73:f2:f2:19:99:7e:24:14: b9:99:53:ec:89:62:d1:e3:42:e3:41:b8:e7:44:c8:2d:62:b2: e5:ee:d5:a5:20:a3:2f:b3:98:de:dd:6a:31:e7:d5:86:32:4d: 71:b2:bc:22:6e:cb:89:24:ea:77:a5:da:37:cb:70:fe:99:e9: 0c:e1:21:81:ac:93:21:b6:d2:56:ce:54:fc:6d:89:ed:66:a3: e6:06:a1:11:19:ea:82:e5:c5:93:0f:cb:41:46:73:52:61:80: 31:0f:a2:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2tM3V9+ImyYJPOXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI2MDQzMDA5MDAwM1oXDTI2MDUwMzA5MDAwMFowLzEtMCsGA1UEAxMk ODEzNGRlNjAtMjY4NC00ZTdlLTlkYjQtNzBhYTMxM2QxZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWsMkXcBvxKQqlC8lD0DVAn13uiVEJMRRlwr YoWDYFB8VZdBq/j4/iN8CB8LGW2liuc47YO3xZ52TjsUiWlMdUs20Ck6C08071yM G8saKfqNZlArrBOI6zZFPT/TXU9wstLb0InzANAmi5RgDJpR+5A3IRuShnbp4VRr 4/0OEAxgDrfAyhZmphAV2XaqGOKj0vC6UnW4nYhO8QYZQigBOniGJO/sgL4sfz7V +SFVzTUGAGJn74alFVdeOC7xIeVAc74E5WM9OgnDCNDgGanEYuIbu3mgtHRjTa5D 7A40jH/gXp6PHNy2yla1yjRFuRKjUf1ZjOJdKUZd2BgMQFiF+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJz41JmDr3Lagtw81B2m7EssdCH+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnMnS7WCR60mSzDBFWrrMQ OEqC5rGEnuwFQD9UXsmd+hiC9i3J7APe3mlEkEDdsP5gO4YfEg5skdpZHI5F8oMD XzYWv09k46OkhIM+fDllkVJnEtI+7vMVDwU3iM3fp8+BfR26C1duFc58TlCNyf+0 AFha8u7rO+TD4tuAx0vVakQtX4zuwzFrSmCY4EdssO/khZxVW3jpmhbGc/LyGZl+ JBS5mVPsiWLR40LjQbjnRMgtYrLl7tWlIKMvs5je3Wox59WGMk1xsrwibsuJJOp3 pdo3y3D+mekM4SGBrJMhttJWzlT8bYntZqPmBqERGeqC5cWTD8tBRnNSYYAxD6II -----END CERTIFICATE-----Generated at Thu Apr 30 13:46:36 2026 by rpki-client