$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.mft File: aa1697fd-d88f-4851-bbc3-2c19067535ee.mft (raw, json) Hash identifier: XtYMNpFaJoI5guWHnVTBdMl1LGVprACBUgDIScCZGY8= Subject key identifier: B2:B1:37:74:DD:0F:D8:8E:5C:CF:32:A6:1E:A6:E1:96:EB:F6:ED:15 Authority key identifier: 4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 Certificate issuer: /CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Certificate serial: 010D0C9F4328584D2DB64698E3636A3C816B8B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.mft Manifest number: 010D0C9F4328584073A81F2A631496F6AFDF462C Signing time: Sun 15 Mar 2026 17:00:08 +0000 Manifest this update: Sun 15 Mar 2026 17:00:08 +0000 Manifest next update: Tue 17 Mar 2026 17:00:00 +0000 Files and hashes: 1: 5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa (hash: bq2iKgz2zpU5R6z5XGxgM8gEOa4ZDZChK9mfXwi24sE=) 2: aa1697fd-d88f-4851-bbc3-2c19067535ee.crl (hash: csipC6LSprMGFyIxySyRUdRe1DU9AwxBtxLmAB1uhvw=) 3: ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa (hash: Gy1NrN2pw5POXVDINMzqK/KmzeoO+8ilJTCHDfcTFGg=) 4: eea8b073-d04e-3f44-9019-aea66a4ba48e.roa (hash: I2ZhZoitjgjkINq2j7pFdXjnAjtg6Tue6VYeicex6vM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:b6:46:98:e3:63:6a:3c:81:6b:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Validity Not Before: Mar 15 17:00:08 2026 GMT Not After : Mar 17 17:00:00 2026 GMT Subject: CN=8d0b5094-944c-44aa-ac07-c69eaf5f9893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:53:bf:f3:f9:24:73:7c:c6:a3:db:59:43:15: f4:cc:cf:01:a3:b7:b5:94:88:bf:a2:c1:e8:2d:84: 32:32:94:68:9d:bc:51:98:0e:de:fd:15:90:ca:73: e9:25:04:8d:3d:4a:b4:24:16:1a:f1:28:33:69:b7: ed:5d:e9:89:da:61:6c:4a:83:42:73:54:14:1d:86: b6:05:23:72:32:f4:3a:0b:0e:5a:69:3d:37:f9:b9: 5f:05:54:2f:0f:ae:84:eb:59:57:d9:53:50:ce:27: 59:00:41:98:ba:48:dc:78:a2:db:d2:01:05:85:41: ab:20:c5:e4:74:96:b8:3e:8e:6b:36:b5:32:11:86: 99:6c:20:c3:0f:b0:f5:b6:49:ef:c6:63:f6:1a:32: 73:35:6e:57:c8:f2:99:1f:ed:49:c5:28:60:45:bc: 5c:f6:b7:7e:64:4c:62:f0:c5:46:a0:02:1f:2c:9e: 4a:42:38:47:f3:ee:8b:b6:57:c9:20:eb:6c:96:1f: 90:95:d1:b6:43:8b:dd:b6:9a:ad:29:e6:f2:7a:e9: eb:a5:46:19:62:f6:29:8e:7d:c3:0e:45:5c:df:73: a0:ad:c7:8c:e0:88:5c:b0:00:43:9e:7a:56:a9:eb: bb:d0:c7:03:03:4f:99:29:25:eb:aa:29:55:34:27: 22:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B1:37:74:DD:0F:D8:8E:5C:CF:32:A6:1E:A6:E1:96:EB:F6:ED:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl X509v3 Authority Key Identifier: keyid:4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:dd:eb:1b:86:75:c5:20:f3:54:68:01:ea:59:ae:ff:9f:7c: 63:69:03:30:ff:51:7e:47:90:b5:2e:58:9c:58:e3:76:96:dc: cf:ec:cd:b3:d1:08:08:e4:ee:27:04:4d:f4:5c:0f:90:18:fc: 4a:5e:0c:93:af:21:f1:fe:32:dc:52:cf:1f:47:e6:00:a6:93: 32:63:7d:99:ba:3c:46:46:c0:9d:06:ff:38:61:da:34:48:3b: 7f:20:64:60:90:45:2a:50:f0:de:31:66:52:f2:5b:42:1a:21: 16:9b:54:e5:07:39:b0:91:ce:3b:b3:fa:23:d0:af:f6:9d:67: 84:25:ed:56:ac:0e:f7:96:b2:41:48:e8:72:8a:34:db:b4:c7: 5c:43:91:45:b7:51:73:20:97:c7:33:0d:1f:04:20:66:dc:ee: 2a:0a:dd:33:52:1a:08:9b:58:d6:1d:0a:dd:13:b8:ff:e9:e9: 89:4e:1b:5f:89:21:26:96:7d:76:31:ee:1c:b8:95:67:b3:c5: 85:a9:51:14:fe:d5:f8:0b:39:41:3f:a9:c7:06:15:b9:79:e1: ec:62:52:6b:c8:be:f0:4f:0c:19:ba:2c:af:c4:1b:62:f9:31: 07:8c:37:20:38:85:73:54:20:5d:b0:67:5b:2c:bc:4f:99:5b: 80:44:a7:30 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0ttkaY42NqPIFriwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWExNjk3ZmQtZDg4Zi00ODUxLWJiYzMtMmMxOTA2NzUz NWVlMB4XDTI2MDMxNTE3MDAwOFoXDTI2MDMxNzE3MDAwMFowLzEtMCsGA1UEAxMk OGQwYjUwOTQtOTQ0Yy00NGFhLWFjMDctYzY5ZWFmNWY5ODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21O/8/kkc3zGo9tZQxX0zM8Bo7e1lIi/osHo LYQyMpRonbxRmA7e/RWQynPpJQSNPUq0JBYa8SgzabftXemJ2mFsSoNCc1QUHYa2 BSNyMvQ6Cw5aaT03+blfBVQvD66E61lX2VNQzidZAEGYukjceKLb0gEFhUGrIMXk dJa4Po5rNrUyEYaZbCDDD7D1tknvxmP2GjJzNW5XyPKZH+1JxShgRbxc9rd+ZExi 8MVGoAIfLJ5KQjhH8+6LtlfJIOtslh+QldG2Q4vdtpqtKebyeunrpUYZYvYpjn3D DkVc33OgrceM4IhcsABDnnpWqeu70McDA0+ZKSXrqilVNCciOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLKxN3TdD9iOXM8yph6m4Zbr9u0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2 OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5MDY3NTM1ZWUvYWExNjk3ZmQtZDg4Zi00 ODUxLWJiYzMtMmMxOTA2NzUzNWVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWExNjk3ZmQtZDg4Zi00ODUxLWJi YzMtMmMxOTA2NzUzNWVlL2FhMTY5N2ZkLWQ4OGYtNDg1MS1iYmMzLTJjMTkwNjc1 MzVlZS5jcmwwHwYDVR0jBBgwFoAUSqqP3fYAqfNSzbyHvtXiocgmFskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5 MDY3NTM1ZWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCK3esbhnXFIPNUaAHqWa7/ n3xjaQMw/1F+R5C1LlicWON2ltzP7M2z0QgI5O4nBE30XA+QGPxKXgyTryHx/jLc Us8fR+YAppMyY32ZujxGRsCdBv84Ydo0SDt/IGRgkEUqUPDeMWZS8ltCGiEWm1Tl Bzmwkc47s/oj0K/2nWeEJe1WrA73lrJBSOhyijTbtMdcQ5FFt1FzIJfHMw0fBCBm 3O4qCt0zUhoIm1jWHQrdE7j/6emJThtfiSEmln12Me4cuJVns8WFqVEU/tX4CzlB P6nHBhW5eeHsYlJryL7wTwwZuiyvxBti+TEHjDcgOIVzVCBdsGdbLLxPmVuARKcw -----END CERTIFICATE-----Generated at Mon Mar 16 09:33:19 2026 by rpki-client