$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: K2xNoHtNknrVkY4rTBP3kV09RMF1tUaTNrrkIdygFnQ= Subject key identifier: F2:57:7D:CA:F1:FB:EA:A8:08:F9:AB:73:D0:63:78:10:E6:AE:73:85 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584D2467EF3958C0217F74552CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3BEF Signing time: Thu 12 Mar 2026 09:00:04 +0000 Manifest this update: Thu 12 Mar 2026 09:00:04 +0000 Manifest next update: Sat 14 Mar 2026 09:00:00 +0000 Files and hashes: 1: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (hash: 5m9ra8yT6ANocpsIpmlk4LULYnaQErR/BLkmmU1r9Xo=) 2: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (hash: if8zgtzM2usFyn2wZSGsZXfbuhqS2ym1iBkrYf8p3Ps=) 3: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (hash: C/sdjqpHiuSqrhiGjL1NZYa4My3mB5VK9UqceLkl0rI=) 4: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: VmGEQ4XWMbJ2Xplh7LsAMqYFMeVq4Hrg3Xv2b+Br7RQ=) 5: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (hash: H11Or6peyZ1TRQNc5Fd+qiwk7vD3wKjV8BglVZkTfUc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:67:ef:39:58:c0:21:7f:74:55:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Mar 12 09:00:04 2026 GMT Not After : Mar 14 09:00:00 2026 GMT Subject: CN=7e35da51-afb3-453c-94ec-906d75bbdd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3b:6c:23:d5:e4:c6:a8:f2:98:a8:c0:e8:18: 88:dd:c2:9e:e4:98:8a:fa:b7:3b:d7:e0:3e:74:d6: f1:ad:34:35:00:0f:cc:82:6a:26:d0:e4:ff:2c:f2: f8:ca:94:7f:ce:cb:f6:51:07:03:43:59:6f:b4:54: 16:42:47:57:51:64:cc:1b:e8:6f:df:cd:81:d2:35: 01:ea:7d:35:36:af:b4:01:ea:e7:8e:85:7d:ee:0c: 19:ff:95:11:37:47:ae:5f:95:a1:48:d3:06:eb:24: cd:ca:af:3a:d1:a4:26:3d:d5:b7:77:4e:f6:35:0f: 11:73:44:13:91:3e:9b:5a:f1:ac:33:03:db:74:9e: 33:c5:03:a4:5c:39:a8:e5:39:69:7f:df:57:a6:7b: 89:99:77:59:a2:fe:a4:c7:90:6c:72:1d:7a:0d:5c: 91:b4:c5:03:aa:a1:1c:da:d5:2f:6a:ef:93:ee:ad: 91:a0:50:38:e5:db:d6:d9:af:14:58:a6:52:e7:57: f0:1f:82:d8:4c:42:66:83:bf:e3:08:4f:2a:7b:57: 7d:37:c9:e4:a5:47:d2:52:ca:77:50:6c:55:09:79: 9a:66:94:4f:2f:f0:1d:a3:1b:76:49:79:91:a2:06: 24:29:f4:33:50:8b:76:ae:7c:a9:3d:52:47:0a:38: 4e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:57:7D:CA:F1:FB:EA:A8:08:F9:AB:73:D0:63:78:10:E6:AE:73:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:66:6b:27:97:b3:20:6d:7b:cf:86:55:2c:9e:6d:f7:10:9a: c9:8c:7a:22:c4:4e:01:10:a2:f0:38:7a:6b:3e:4f:d5:55:f6: 4e:6a:92:62:20:6b:b6:11:6f:d6:66:34:41:9c:57:38:70:a9: b7:cc:71:0a:77:c6:55:ac:98:d3:72:33:95:9e:00:9a:f0:e1: ee:19:fc:3b:83:45:be:56:c2:3d:cc:b1:5b:2d:33:86:4b:71: 36:67:86:87:28:95:89:3e:7e:5d:07:dd:5a:96:11:cf:a4:66: d4:bc:d3:59:07:7b:ca:3c:4d:5e:a9:01:d3:4d:ce:c3:f3:2e: 8b:3d:0e:8c:46:ad:43:ca:78:37:3d:9b:b8:4e:45:fe:48:d4: c6:9b:4d:01:8f:40:93:e1:89:45:2f:e8:99:3e:a7:6f:a1:bc: b3:c6:df:63:ec:c0:ee:e6:08:ef:8a:03:27:c9:32:31:59:0b: 8c:67:05:d1:e9:3c:eb:46:45:0b:24:6c:16:f0:34:4f:9f:bb: aa:36:42:7c:44:65:be:47:9c:65:62:49:e8:cf:5c:50:a9:c3: b8:4e:42:76:91:8d:64:05:f6:ad:40:46:c1:77:8b:3d:07:54: 32:a9:73:38:55:f5:e4:3d:76:34:14:72:22:df:1c:97:33:26: 1c:46:d8:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0kZ+85WMAhf3RVLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI2MDMxMjA5MDAwNFoXDTI2MDMxNDA5MDAwMFowLzEtMCsGA1UEAxMk N2UzNWRhNTEtYWZiMy00NTNjLTk0ZWMtOTA2ZDc1YmJkZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDtsI9XkxqjymKjA6BiI3cKe5JiK+rc71+A+ dNbxrTQ1AA/Mgmom0OT/LPL4ypR/zsv2UQcDQ1lvtFQWQkdXUWTMG+hv382B0jUB 6n01Nq+0AernjoV97gwZ/5URN0euX5WhSNMG6yTNyq860aQmPdW3d072NQ8Rc0QT kT6bWvGsMwPbdJ4zxQOkXDmo5Tlpf99XpnuJmXdZov6kx5Bsch16DVyRtMUDqqEc 2tUvau+T7q2RoFA45dvW2a8UWKZS51fwH4LYTEJmg7/jCE8qe1d9N8nkpUfSUsp3 UGxVCXmaZpRPL/Adoxt2SXmRogYkKfQzUIt2rnypPVJHCjhOlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPJXfcrx++qoCPmrc9BjeBDmrnOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCtZmsnl7MgbXvPhlUsnm33 EJrJjHoixE4BEKLwOHprPk/VVfZOapJiIGu2EW/WZjRBnFc4cKm3zHEKd8ZVrJjT cjOVngCa8OHuGfw7g0W+VsI9zLFbLTOGS3E2Z4aHKJWJPn5dB91alhHPpGbUvNNZ B3vKPE1eqQHTTc7D8y6LPQ6MRq1Dyng3PZu4TkX+SNTGm00Bj0CT4YlFL+iZPqdv obyzxt9j7MDu5gjvigMnyTIxWQuMZwXR6TzrRkULJGwW8DRPn7uqNkJ8RGW+R5xl Yknoz1xQqcO4TkJ2kY1kBfatQEbBd4s9B1QyqXM4VfXkPXY0FHIi3xyXMyYcRtil -----END CERTIFICATE-----Generated at Fri Mar 13 09:57:02 2026 by rpki-client