$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: y1tua6ZH9m66fG9pF9ASjbBWPWrG0NlMZHMsg6LdtdM= Subject key identifier: F4:E2:23:31:BF:F4:8C:95:7C:A4:65:8E:2A:9C:EA:FF:89:D5:0D:0E Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584F52C0F23A2E05207788182300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3CBD Signing time: Mon 28 Sep 2026 09:00:23 +0000 Manifest this update: Mon 28 Sep 2026 09:00:23 +0000 Manifest next update: Wed 30 Sep 2026 09:00:00 +0000 Files and hashes: 1: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: xRzEjUoGSbwcj2bDS3TlLmFLHN248q3Smnw74dpwTfM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:52:c0:f2:3a:2e:05:20:77:88:18:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Sep 28 09:00:23 2026 GMT Not After : Sep 30 09:00:00 2026 GMT Subject: CN=36de6f0f-aed7-45ec-8999-b2bf24460b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:82:44:19:55:fb:fb:5b:b7:99:83:e2:87:43: d1:4f:39:c3:b0:fc:08:e7:77:2f:1c:e5:e7:8e:bc: 33:ea:2a:4d:b2:dd:e6:84:6b:64:01:d5:12:0d:dc: ae:2d:5e:25:2b:5a:f8:03:d2:bf:3c:10:3b:2c:c8: 1c:c7:2d:2f:f7:2b:5d:48:4c:d2:b9:6c:7f:a4:41: ac:4f:95:dc:ab:b2:bc:03:37:33:6a:d2:86:b6:05: b9:04:d5:40:50:8a:c9:2b:41:b7:91:21:35:98:e9: d7:63:be:b9:bc:95:34:33:0c:fc:08:69:5b:2e:3f: a4:46:bc:a1:da:f3:63:13:ea:0e:d7:9f:64:45:65: ed:d6:ab:ab:f1:12:df:6a:4e:a1:69:bd:38:0d:b5: 70:4c:ca:b1:9c:ea:1f:92:7f:99:ab:c9:11:37:7f: c2:0a:42:94:86:e1:ea:2e:a0:6f:44:3a:25:01:d3: bd:1f:e6:37:6a:c2:a4:be:93:6a:73:11:83:6e:a5: 64:6d:12:30:7b:5d:b3:fe:29:e6:33:ea:4c:a8:cc: 17:76:56:10:54:f0:e0:31:0d:45:ed:99:50:03:a1: 33:e4:b1:01:48:d0:cc:1f:bb:51:31:2a:cd:e5:29: a8:c4:71:81:4e:70:09:9e:62:e3:7a:5e:93:8e:ec: b0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E2:23:31:BF:F4:8C:95:7C:A4:65:8E:2A:9C:EA:FF:89:D5:0D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d8:87:d3:1a:e8:cb:43:e3:b9:fc:ab:c8:aa:4d:93:e4:93: d2:e1:77:e4:09:bd:01:6c:18:1b:0a:7d:52:35:93:55:d0:db: d4:a3:a7:42:45:ef:ad:bd:a0:75:25:bf:69:c0:35:c8:0c:4e: bc:77:99:77:44:c5:9f:a5:53:bb:97:60:70:74:33:6c:8d:1f: ee:30:99:97:e3:77:6c:7f:64:44:ef:36:7b:04:52:cb:85:97: 94:fc:d8:95:53:77:5b:e6:e6:dc:02:93:82:55:6d:d3:65:f4: d6:a8:0a:f3:38:f4:d7:a4:32:f0:34:f2:d7:8f:7e:c6:58:73: 15:d3:3e:27:5c:e7:9a:59:87:83:e3:3c:62:bc:d6:97:fd:e3: 05:af:64:a6:13:bd:98:44:33:bf:48:6a:c8:7d:3a:26:59:8b: ee:48:0a:85:9b:b0:cd:80:c3:85:9c:b2:3e:f2:5f:54:80:17: 29:ec:f6:0c:42:3e:b3:56:91:51:58:5c:a2:29:8a:d6:cf:af: 8e:7f:00:7b:49:93:29:40:e3:f3:54:27:5c:01:0a:5d:0f:08: 23:30:57:82:b1:92:1d:6f:53:5a:fe:eb:44:e4:3c:7f:a9:c9: 92:0a:57:92:04:e8:b3:d1:ed:18:dd:2f:75:f4:27:4f:30:12: 7e:0c:af:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9SwPI6LgUgd4gYIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI2MDkyODA5MDAyM1oXDTI2MDkzMDA5MDAwMFowLzEtMCsGA1UEAxMk MzZkZTZmMGYtYWVkNy00NWVjLTg5OTktYjJiZjI0NDYwYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYJEGVX7+1u3mYPih0PRTznDsPwI53cvHOXn jrwz6ipNst3mhGtkAdUSDdyuLV4lK1r4A9K/PBA7LMgcxy0v9ytdSEzSuWx/pEGs T5Xcq7K8AzczatKGtgW5BNVAUIrJK0G3kSE1mOnXY765vJU0Mwz8CGlbLj+kRryh 2vNjE+oO159kRWXt1qur8RLfak6hab04DbVwTMqxnOofkn+Zq8kRN3/CCkKUhuHq LqBvRDolAdO9H+Y3asKkvpNqcxGDbqVkbRIwe12z/inmM+pMqMwXdlYQVPDgMQ1F 7ZlQA6Ez5LEBSNDMH7tRMSrN5SmoxHGBTnAJnmLjel6TjuywcQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPTiIzG/9IyVfKRljiqc6v+J1Q0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBR2IfTGujLQ+O5/KvIqk2T 5JPS4XfkCb0BbBgbCn1SNZNV0NvUo6dCRe+tvaB1Jb9pwDXIDE68d5l3RMWfpVO7 l2BwdDNsjR/uMJmX43dsf2RE7zZ7BFLLhZeU/NiVU3db5ubcApOCVW3TZfTWqArz OPTXpDLwNPLXj37GWHMV0z4nXOeaWYeD4zxivNaX/eMFr2SmE72YRDO/SGrIfTom WYvuSAqFm7DNgMOFnLI+8l9UgBcp7PYMQj6zVpFRWFyiKYrWz6+OfwB7SZMpQOPz VCdcAQpdDwgjMFeCsZIdb1Na/utE5Dx/qcmSCleSBOiz0e0Y3S919CdPMBJ+DK8u -----END CERTIFICATE-----Generated at Tue Sep 29 10:52:01 2026 by rpki-client