$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: kJ/FmSsVvy1geTPpTXSzEURXXNUd3rV9TuM1hD1tpng= Subject key identifier: A3:04:32:EE:12:4E:DD:A1:DA:C1:46:91:2C:4B:EC:06:CF:BC:E1:18 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584DCEB3AD9A9FEEA23B5769A3C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF022566 Signing time: Tue 12 May 2026 09:00:03 +0000 Manifest this update: Tue 12 May 2026 09:00:03 +0000 Manifest next update: Fri 15 May 2026 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: cnHZVyWJ37R49t67P42LoME14bj6PTOYyZ9dgDk4AkY=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: 6MRFiqSeLwMNnLoVSxXvrnDIqINkLXL25fSgvxL+CxE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ce:b3:ad:9a:9f:ee:a2:3b:57:69:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: May 12 09:00:03 2026 GMT Not After : May 15 09:00:00 2026 GMT Subject: CN=a4664d52-8471-44be-8948-df0398071992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a6:6a:71:53:ca:85:ec:0a:05:e7:28:00:22: 81:56:c4:87:9d:a9:5b:99:21:83:5d:53:1c:a2:70: 8e:85:07:75:f9:f8:15:32:43:05:da:04:00:b7:67: 41:b0:b4:e1:31:48:83:a4:ee:6d:94:bf:20:7a:38: 6d:e2:4a:7a:97:5f:02:99:f8:d5:46:e6:a3:d2:07: da:cf:81:78:6d:b4:87:ed:67:21:f5:fb:1a:1f:61: 2c:d9:80:66:27:5b:cd:79:c0:2d:9d:c0:99:82:4d: 28:1d:47:6e:7e:ec:a4:b5:ff:09:4f:e0:71:1a:c3: 6f:8b:86:79:1e:70:1f:bd:3c:d9:89:eb:7f:b7:0d: 52:90:d3:df:08:e2:db:fa:d8:06:61:c2:36:27:69: 91:bf:be:20:7f:60:e5:60:7c:3d:ec:4e:30:e8:a4: 60:7a:5c:f9:db:af:52:d8:5c:38:21:9e:67:d1:34: 50:34:1b:58:75:3c:ee:67:98:43:b7:8b:a2:5a:a6: 84:3f:30:1b:c6:f6:d3:d7:24:59:4f:02:cd:9d:cb: a1:ce:d7:55:cc:d8:5c:b3:46:75:25:fc:91:f5:16: dd:b0:4b:60:34:68:6b:94:9c:7d:5a:41:3c:38:f8: df:d3:62:62:5d:fe:e9:50:8e:0b:57:11:68:fa:25: 2a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:04:32:EE:12:4E:DD:A1:DA:C1:46:91:2C:4B:EC:06:CF:BC:E1:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:07:a0:32:f9:e4:72:89:c8:25:07:da:29:1b:c4:69:23:a3: 67:82:6e:a1:c9:6f:17:34:83:1c:ec:6a:4c:c9:62:3f:22:b7: 31:dc:3c:d0:2c:a4:4e:9f:22:54:2c:c1:42:98:09:f4:3d:2d: 26:ce:9e:13:dc:77:9d:1b:fc:8c:bb:d8:fb:07:bc:63:90:39: 88:05:fc:0e:16:e8:f0:4d:a6:cc:89:d2:5a:f0:f7:66:b2:9f: 35:7f:6e:29:63:0a:a5:f5:c5:2b:ba:1e:27:81:79:e4:3f:f3: 13:6d:b3:56:ac:e9:f7:b9:17:a4:46:48:d7:7c:af:3a:78:21: e5:a6:2d:69:2e:de:d2:be:6a:d2:70:22:a4:36:b0:ab:4f:de: ad:75:39:5e:45:1a:41:d3:e4:c3:6e:4b:04:12:00:8c:da:56: f3:5a:79:66:61:38:f8:fe:37:0a:c0:99:35:ac:83:84:59:b3: f3:f9:df:49:ec:3c:99:a6:13:5b:fa:7e:62:58:95:7c:b4:fc: a2:ed:8a:04:a6:b8:ff:3f:51:af:00:a1:28:4c:21:e4:69:e1: c4:ec:49:91:ca:c6:64:7e:1c:ca:9d:7e:7a:7b:4e:1a:b0:64: 53:e7:3e:fb:ff:06:f6:de:82:9a:96:46:72:d0:d1:12:47:9d: 28:14:0b:cc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3Os62an+6iO1dpo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI2MDUxMjA5MDAwM1oXDTI2MDUxNTA5MDAwMFowLzEtMCsGA1UEAxMk YTQ2NjRkNTItODQ3MS00NGJlLTg5NDgtZGYwMzk4MDcxOTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKZqcVPKhewKBecoACKBVsSHnalbmSGDXVMc onCOhQd1+fgVMkMF2gQAt2dBsLThMUiDpO5tlL8gejht4kp6l18CmfjVRuaj0gfa z4F4bbSH7Wch9fsaH2Es2YBmJ1vNecAtncCZgk0oHUdufuyktf8JT+BxGsNvi4Z5 HnAfvTzZiet/tw1SkNPfCOLb+tgGYcI2J2mRv74gf2DlYHw97E4w6KRgelz5269S 2Fw4IZ5n0TRQNBtYdTzuZ5hDt4uiWqaEPzAbxvbT1yRZTwLNncuhztdVzNhcs0Z1 JfyR9RbdsEtgNGhrlJx9WkE8OPjf02JiXf7pUI4LVxFo+iUqGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKMEMu4STt2h2sFGkSxL7AbPvOEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnB6Ay+eRyicglB9opG8Rp I6Nngm6hyW8XNIMc7GpMyWI/Ircx3DzQLKROnyJULMFCmAn0PS0mzp4T3HedG/yM u9j7B7xjkDmIBfwOFujwTabMidJa8Pdmsp81f24pYwql9cUruh4ngXnkP/MTbbNW rOn3uRekRkjXfK86eCHlpi1pLt7SvmrScCKkNrCrT96tdTleRRpB0+TDbksEEgCM 2lbzWnlmYTj4/jcKwJk1rIOEWbPz+d9J7DyZphNb+n5iWJV8tPyi7YoEprj/P1Gv AKEoTCHkaeHE7EmRysZkfhzKnX56e04asGRT5z77/wb23oKalkZy0NESR50oFAvM -----END CERTIFICATE-----Generated at Wed May 13 05:22:16 2026 by rpki-client