$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: UQuJKxEOuHuEVTDI4tORHb9H8FcH3kIzvNe+dW+QSaQ= Subject key identifier: 35:07:A8:AF:86:BC:68:2F:62:79:03:F1:D2:28:8A:E6:64:AC:92:C9 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584E97B51D07FCBCF35ECE6DC980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3C79 Signing time: Thu 23 Jul 2026 09:00:21 +0000 Manifest this update: Thu 23 Jul 2026 09:00:21 +0000 Manifest next update: Sun 26 Jul 2026 09:00:00 +0000 Files and hashes: 1: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: Rn94GI1cO4ibZ5DrfGWkd3SX8XjSRFEmsXvCG69M7GE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:1d:07:fc:bc:f3:5e:ce:6d:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Jul 23 09:00:21 2026 GMT Not After : Jul 26 09:00:00 2026 GMT Subject: CN=1050b5ed-7472-49da-bd91-262c7dae514d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:80:8c:e4:da:4c:80:4e:43:dc:a3:09:ad: 5c:24:22:bd:fd:57:31:ba:ed:76:40:a5:95:73:dd: ba:49:34:c7:2b:d5:a4:fa:cf:f7:5f:b9:6c:e6:2e: 87:9a:5f:3d:77:f0:b3:56:f5:9e:5a:fa:79:dc:86: 35:76:19:a4:da:7e:c4:12:0d:f8:2d:42:fd:f9:ec: 0b:24:70:b0:fe:0a:42:41:85:83:0a:a9:e9:17:ec: a4:45:91:66:3f:b3:ee:b6:73:f3:c1:23:99:77:01: 2d:8e:60:11:92:3e:98:0d:d3:57:55:47:e5:c6:f6: 5c:1c:68:f4:36:ee:b5:9f:c5:23:67:95:39:27:e9: 1b:5c:9c:22:2f:32:20:81:ad:84:1e:ab:7b:2b:02: b2:1e:7f:91:a7:f6:df:03:3b:a3:3c:2b:e9:a8:e4: 07:d8:79:b1:e4:a7:4d:8e:75:55:bd:1d:a8:86:fc: 74:e8:da:17:df:32:6a:b7:2b:d8:ed:39:e4:1b:a2: a5:11:fa:72:fa:d9:fe:14:13:d7:8a:13:6c:57:a5: a4:d3:ba:d5:21:3b:e8:af:7b:e6:b2:7a:00:67:75: 52:c9:98:6a:3a:fc:3d:b6:58:4f:24:99:45:42:49: 85:39:30:e0:5f:42:90:b3:c2:f5:63:b6:9e:f2:6b: 5c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:07:A8:AF:86:BC:68:2F:62:79:03:F1:D2:28:8A:E6:64:AC:92:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f8:c4:ec:46:05:dc:17:20:23:ae:c6:b4:11:ff:0e:30:5c: b0:33:2f:26:75:20:4a:3a:3b:a6:9e:f1:11:b8:4e:2c:d4:f7: 09:77:49:db:97:69:3b:aa:86:9f:22:17:5c:54:98:38:44:78: f0:7c:d5:f1:15:9e:c9:a6:d0:9a:d1:04:ac:c0:0e:5b:40:89: 32:e6:ab:e2:a4:37:19:1a:b4:1e:12:3e:b0:54:14:07:a1:b3: 75:e1:f6:dc:ef:52:b1:04:a4:d3:22:91:96:07:d4:79:6a:11: 6d:1f:0b:80:88:dc:62:6e:8c:be:7d:13:b0:e9:bf:69:d3:db: ee:24:1a:eb:cc:39:9c:f7:f3:76:d3:5f:7a:93:6b:a2:b0:f4: c6:0a:fc:a4:2a:ba:9b:42:33:e0:f8:d5:fa:e1:e7:f0:cc:e9: ef:99:3c:15:a5:2d:c3:82:72:bb:52:77:a9:10:81:70:06:b5: 00:ed:63:f5:48:5e:93:19:c9:b2:8a:82:76:49:32:19:69:a8: a3:00:82:be:6c:f1:ba:b1:81:82:3b:dc:dd:10:b3:45:f5:23: 0a:58:2a:3f:03:31:b2:7b:5a:6e:9c:bf:01:a9:5f:60:f3:70: c4:72:bf:93:27:b0:89:f9:b0:60:16:c4:5b:6b:1d:d0:de:56: ea:e0:9c:bd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6XtR0H/LzzXs5tyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI2MDcyMzA5MDAyMVoXDTI2MDcyNjA5MDAwMFowLzEtMCsGA1UEAxMk MTA1MGI1ZWQtNzQ3Mi00OWRhLWJkOTEtMjYyYzdkYWU1MTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/WAjOTaTIBOQ9yjCa1cJCK9/Vcxuu12QKWV c926STTHK9Wk+s/3X7ls5i6Hml89d/CzVvWeWvp53IY1dhmk2n7EEg34LUL9+ewL JHCw/gpCQYWDCqnpF+ykRZFmP7PutnPzwSOZdwEtjmARkj6YDdNXVUflxvZcHGj0 Nu61n8UjZ5U5J+kbXJwiLzIgga2EHqt7KwKyHn+Rp/bfAzujPCvpqOQH2Hmx5KdN jnVVvR2ohvx06NoX3zJqtyvY7TnkG6KlEfpy+tn+FBPXihNsV6Wk07rVITvor3vm snoAZ3VSyZhqOvw9tlhPJJlFQkmFOTDgX0KQs8L1Y7ae8mtc3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDUHqK+GvGgvYnkD8dIoiuZkrJLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBC+MTsRgXcFyAjrsa0Ef8O MFywMy8mdSBKOjumnvERuE4s1PcJd0nbl2k7qoafIhdcVJg4RHjwfNXxFZ7JptCa 0QSswA5bQIky5qvipDcZGrQeEj6wVBQHobN14fbc71KxBKTTIpGWB9R5ahFtHwuA iNxiboy+fROw6b9p09vuJBrrzDmc9/N20196k2uisPTGCvykKrqbQjPg+NX64efw zOnvmTwVpS3DgnK7UnepEIFwBrUA7WP1SF6TGcmyioJ2STIZaaijAIK+bPG6sYGC O9zdELNF9SMKWCo/AzGye1punL8BqV9g83DEcr+TJ7CJ+bBgFsRbax3Q3lbq4Jy9 -----END CERTIFICATE-----Generated at Fri Jul 24 03:06:45 2026 by rpki-client