$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: iRCo3DzqmxgcMLAqIdPhqe5kO2/A5nCMeSGNa/Zh9dI= Subject key identifier: 96:0D:02:3F:25:D3:B2:2E:DF:1D:77:7D:27:39:D1:89:3C:1A:90:DC Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584D48B2D5678CC95DCD05621780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF022534 Signing time: Wed 25 Mar 2026 09:00:04 +0000 Manifest this update: Wed 25 Mar 2026 09:00:04 +0000 Manifest next update: Sat 28 Mar 2026 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: xBQ4tnwPaPRY4mIjSpqWchIgEuDvIHX/1YHcclM+obk=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: JJ2tVW7jEw/T+wSa/SZsK6ZROHFtg++Y4yRhiSqE21c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:b2:d5:67:8c:c9:5d:cd:05:62:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Mar 25 09:00:04 2026 GMT Not After : Mar 28 09:00:00 2026 GMT Subject: CN=53f86b24-b38a-4e9c-bd1c-c18da9e68a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:32:9f:98:97:9d:08:8a:bc:03:2c:68:b4: c9:84:78:0a:f0:32:0f:46:69:39:66:0a:f3:4f:01: e6:e2:b6:25:7d:75:63:13:a0:ce:4e:ce:09:56:c5: 98:21:a9:e7:a8:33:b6:6c:ae:b1:81:63:65:3e:30: 1e:a8:8b:38:42:a8:9f:b6:d5:57:ab:17:7d:43:78: ba:a4:42:46:74:db:41:fa:2c:dd:e1:2f:21:13:90: 1b:f1:0f:63:00:a9:40:c1:cf:01:62:fa:6a:35:a4: 18:5d:0c:e9:f8:3f:1f:a5:84:22:75:25:c8:d9:4e: d1:38:dd:db:6e:7d:97:7c:16:06:6c:e2:dd:a2:96: c2:b3:87:35:83:5c:a2:8a:e1:21:80:00:aa:0e:c0: c4:e4:60:c8:a1:8f:b5:a3:01:4e:a2:d0:04:5f:f5: 51:ff:bf:5d:f5:13:8a:a8:18:a8:0f:9a:fe:7b:58: 31:c3:09:f8:0b:7d:ba:dc:97:20:3f:c9:6e:38:7f: ae:cc:00:05:47:a9:95:70:7f:49:07:06:e1:78:9b: 20:7b:81:4b:a7:e1:a4:9f:4c:02:29:09:4b:2e:36: ad:6f:e0:f3:98:ee:2f:e8:3e:e7:77:ae:38:22:c5: 1d:c3:c8:6c:5b:73:16:55:61:5e:5e:54:b3:00:a7: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0D:02:3F:25:D3:B2:2E:DF:1D:77:7D:27:39:D1:89:3C:1A:90:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:9b:47:dd:a0:9d:1f:a7:90:14:cd:6c:d8:19:e8:23:9b:f8: 70:3f:9a:81:4d:ad:63:19:20:b6:55:9e:04:e3:8c:85:97:8a: e3:b6:86:f7:30:72:99:7e:ce:93:c8:5b:a0:ce:64:d4:e9:95: 52:76:eb:5b:23:af:a5:7f:3f:69:cc:ed:58:71:27:ae:2f:7b: 05:43:46:48:5a:f1:a6:41:77:a6:22:d1:8a:e7:22:08:50:97: 19:0e:ae:a0:7a:3c:c7:6d:d9:cd:53:72:7b:e3:1c:4c:a4:eb: 24:de:36:51:70:22:31:ea:56:c8:2d:51:b8:a6:67:99:3a:4d: 47:90:93:f3:90:b1:e9:5d:85:85:43:09:12:31:b4:55:67:df: 97:38:03:de:7b:e5:f6:b0:b3:b6:5c:86:bc:f2:77:33:d6:15: 04:29:2e:28:5b:60:ee:3e:2c:26:69:3c:ea:8a:d0:13:d4:13: d7:d5:e9:ba:64:56:c5:3d:44:db:80:69:70:e9:25:df:1a:d0: 27:9e:9e:95:cf:c3:27:5c:3c:79:25:d7:76:a6:34:c2:50:a9: eb:67:b1:f1:f7:4a:4d:d2:fa:e9:06:d3:27:01:16:b5:da:54: 10:d1:0a:01:90:cf:32:1b:33:50:51:6e:1a:dd:4c:4f:4d:8d: 5a:34:bc:e5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IstVnjMldzQViF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI2MDMyNTA5MDAwNFoXDTI2MDMyODA5MDAwMFowLzEtMCsGA1UEAxMk NTNmODZiMjQtYjM4YS00ZTljLWJkMWMtYzE4ZGE5ZTY4YTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLwyn5iXnQiKvAMsaLTJhHgK8DIPRmk5Zgrz TwHm4rYlfXVjE6DOTs4JVsWYIannqDO2bK6xgWNlPjAeqIs4QqifttVXqxd9Q3i6 pEJGdNtB+izd4S8hE5Ab8Q9jAKlAwc8BYvpqNaQYXQzp+D8fpYQidSXI2U7RON3b bn2XfBYGbOLdopbCs4c1g1yiiuEhgACqDsDE5GDIoY+1owFOotAEX/VR/79d9ROK qBioD5r+e1gxwwn4C3263JcgP8luOH+uzAAFR6mVcH9JBwbheJsge4FLp+Gkn0wC KQlLLjatb+DzmO4v6D7nd644IsUdw8hsW3MWVWFeXlSzAKeaPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJYNAj8l07Iu3x13fSc50Yk8GpDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtm0fdoJ0fp5AUzWzYGegj m/hwP5qBTa1jGSC2VZ4E44yFl4rjtob3MHKZfs6TyFugzmTU6ZVSdutbI6+lfz9p zO1YcSeuL3sFQ0ZIWvGmQXemItGK5yIIUJcZDq6gejzHbdnNU3J74xxMpOsk3jZR cCIx6lbILVG4pmeZOk1HkJPzkLHpXYWFQwkSMbRVZ9+XOAPee+X2sLO2XIa88ncz 1hUEKS4oW2DuPiwmaTzqitAT1BPX1em6ZFbFPUTbgGlw6SXfGtAnnp6Vz8MnXDx5 Jdd2pjTCUKnrZ7Hx90pN0vrpBtMnARa12lQQ0QoBkM8yGzNQUW4a3UxPTY1aNLzl -----END CERTIFICATE-----Generated at Thu Mar 26 02:32:46 2026 by rpki-client