$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: DNL/hynwy0KAPHS6cRpB+2MDuFcRPAwhgAX+s0q28qA= Subject key identifier: 59:39:D0:BC:17:B4:DC:96:FE:82:C9:DE:D2:63:39:D5:49:67:16:B0 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584D48B2D4DC2D116BA5D57B2448 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3BFC Signing time: Wed 25 Mar 2026 09:00:04 +0000 Manifest this update: Wed 25 Mar 2026 09:00:04 +0000 Manifest next update: Sat 28 Mar 2026 09:00:00 +0000 Files and hashes: 1: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (hash: 5m9ra8yT6ANocpsIpmlk4LULYnaQErR/BLkmmU1r9Xo=) 2: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (hash: if8zgtzM2usFyn2wZSGsZXfbuhqS2ym1iBkrYf8p3Ps=) 3: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (hash: C/sdjqpHiuSqrhiGjL1NZYa4My3mB5VK9UqceLkl0rI=) 4: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: ZVaobGKyDDx1J/QAjSA3oLkV1VQ7W25QkzwqmWqWg/k=) 5: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (hash: H11Or6peyZ1TRQNc5Fd+qiwk7vD3wKjV8BglVZkTfUc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:b2:d4:dc:2d:11:6b:a5:d5:7b:24:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Mar 25 09:00:04 2026 GMT Not After : Mar 28 09:00:00 2026 GMT Subject: CN=6223c8e6-2f52-4749-b9ee-8df55491ef94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1b:4b:45:86:b7:7e:61:a7:b7:7a:7b:6d:fd: 54:4a:c1:84:8a:31:f1:2f:45:ee:a9:81:94:92:01: ce:7d:20:ab:ce:76:36:da:ac:ef:42:34:5b:02:b6: 5b:b9:51:01:77:55:c0:75:e8:17:0c:38:cd:90:90: 5c:aa:3a:1b:bb:27:a0:de:f2:e2:72:a9:50:1a:12: 6f:e4:44:a3:cb:5c:d1:34:5d:a3:33:4b:cc:c3:90: fc:16:f0:3c:cf:cf:19:ac:f7:dc:f8:d0:6b:ea:fe: 58:cf:86:d0:58:91:ad:b2:68:ff:1f:a2:8d:58:5e: 96:f1:b0:25:32:87:9a:27:9d:d2:ac:f1:c9:94:c2: 84:3f:8f:92:9b:d1:17:98:a3:43:9d:a7:64:09:b3: 83:b1:e0:c0:bd:62:0d:0e:30:89:c4:4c:34:a9:d7: 80:92:20:4e:f6:71:f7:d5:7f:dd:f5:2c:d9:5d:ae: 56:97:a0:73:f2:6e:03:cf:cf:82:87:b0:7d:d0:e9: 74:7a:0c:b8:90:16:08:99:9f:c5:63:f9:65:3f:4c: 50:ff:bc:56:ba:49:e2:35:71:f2:a2:0a:e2:bb:9f: 29:88:f7:4e:b9:8f:f3:be:6d:e7:ca:d9:eb:c8:35: 3e:48:cf:d5:a6:fe:be:7c:5b:da:2e:91:24:5e:86: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:39:D0:BC:17:B4:DC:96:FE:82:C9:DE:D2:63:39:D5:49:67:16:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f3:ef:42:64:81:66:8c:6d:6f:8c:88:ca:fe:8f:00:e5:ce: e5:27:5f:57:fa:a0:9c:21:20:df:64:4c:ee:fd:cd:98:95:de: c4:05:78:d1:a3:08:40:6f:8c:ba:15:42:85:4f:a3:19:ba:a3: 4b:ce:c6:32:f4:c4:a1:49:c7:d9:71:50:1d:fe:6a:30:c8:79: b5:23:41:98:14:58:59:a6:45:d5:81:ba:4d:24:79:99:71:47: 18:9c:97:c6:66:f9:1e:12:61:dc:99:ce:13:fb:d1:e4:e2:bc: 6c:51:97:0d:6d:e2:6b:62:ad:da:8b:e0:cc:1b:94:80:ae:7a: cf:36:92:45:65:c1:59:a5:5a:eb:86:02:54:ee:62:a0:03:35: 5d:9a:b6:1e:1a:a6:6a:00:6d:e5:ec:ab:e6:cd:88:b5:2c:64: e4:a8:eb:64:da:55:4b:32:94:7b:0e:08:cd:00:12:f7:cc:14: ec:28:83:f7:b0:3d:49:f0:45:09:7c:13:95:59:1e:4e:b2:30: bc:e9:9c:50:b0:34:05:1a:ce:78:bb:d9:cc:f0:36:e3:fc:5f: 62:87:15:8b:d4:35:f7:90:ba:8b:16:cb:71:51:5c:9a:5a:8b: 0a:9d:85:71:2c:19:ec:e9:b5:26:10:3f:a4:85:12:24:32:63: 22:fb:1f:9d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IstTcLRFrpdV7JEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI2MDMyNTA5MDAwNFoXDTI2MDMyODA5MDAwMFowLzEtMCsGA1UEAxMk NjIyM2M4ZTYtMmY1Mi00NzQ5LWI5ZWUtOGRmNTU0OTFlZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBtLRYa3fmGnt3p7bf1USsGEijHxL0XuqYGU kgHOfSCrznY22qzvQjRbArZbuVEBd1XAdegXDDjNkJBcqjobuyeg3vLicqlQGhJv 5ESjy1zRNF2jM0vMw5D8FvA8z88ZrPfc+NBr6v5Yz4bQWJGtsmj/H6KNWF6W8bAl MoeaJ53SrPHJlMKEP4+Sm9EXmKNDnadkCbODseDAvWINDjCJxEw0qdeAkiBO9nH3 1X/d9SzZXa5Wl6Bz8m4Dz8+Ch7B90Ol0egy4kBYImZ/FY/llP0xQ/7xWukniNXHy ogriu58piPdOuY/zvm3nytnryDU+SM/Vpv6+fFvaLpEkXoYPlwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFk50LwXtNyW/oLJ3tJjOdVJZxawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAn8+9CZIFmjG1vjIjK/o8A 5c7lJ19X+qCcISDfZEzu/c2Yld7EBXjRowhAb4y6FUKFT6MZuqNLzsYy9MShScfZ cVAd/mowyHm1I0GYFFhZpkXVgbpNJHmZcUcYnJfGZvkeEmHcmc4T+9Hk4rxsUZcN beJrYq3ai+DMG5SArnrPNpJFZcFZpVrrhgJU7mKgAzVdmrYeGqZqAG3l7KvmzYi1 LGTkqOtk2lVLMpR7DgjNABL3zBTsKIP3sD1J8EUJfBOVWR5OsjC86ZxQsDQFGs54 u9nM8Dbj/F9ihxWL1DX3kLqLFstxUVyaWosKnYVxLBns6bUmED+khRIkMmMi+x+d -----END CERTIFICATE-----Generated at Thu Mar 26 05:05:13 2026 by rpki-client