$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc.mft File: aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc.mft (raw, json) Hash identifier: IST/BuZcql4A+j7d9zpSHO77MoXfCceCOFw+biQJYpA= Subject key identifier: 47:61:E8:14:50:B2:E1:23:79:05:59:BF:F7:35:C8:2E:4A:75:0E:3E Authority key identifier: 22:36:48:16:4C:1D:C9:4B:3E:F2:1A:71:1F:35:A7:CD:C4:D6:47:72 Certificate issuer: /CN=aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc Certificate serial: 010D0C9F4328584F44E954393C41CC3466F18380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc.mft Manifest number: 010D0C9F43285842453798DAD21B0BB74754D928 Signing time: Wed 23 Sep 2026 10:00:22 +0000 Manifest this update: Wed 23 Sep 2026 10:00:22 +0000 Manifest next update: Sat 26 Sep 2026 10:00:00 +0000 Files and hashes: 1: aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc.crl (hash: EaokoRniMtkHF1SiaQTINh0MRIhbLgLhcBULeftqU88=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:44:e9:54:39:3c:41:cc:34:66:f1:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc Validity Not Before: Sep 23 10:00:22 2026 GMT Not After : Sep 26 10:00:00 2026 GMT Subject: CN=3f9dd3f0-102d-40aa-8b35-559083bff826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:63:39:47:65:f5:fe:64:07:d9:49:f4:10:10: fb:99:9c:78:d4:c2:a0:bc:88:ad:c7:8b:72:a9:73: d6:6e:0a:18:53:35:80:54:cb:fb:e4:b3:53:85:a5: 01:06:94:a6:ad:e6:f5:22:01:27:fa:a6:88:ea:ca: 22:31:b3:35:9e:92:2e:cc:94:e7:05:b1:9a:c7:c1: 19:84:42:cd:61:4e:e0:35:c0:ff:cf:c5:0d:6b:86: e4:5d:8d:2f:e5:44:47:4c:ed:e3:10:37:d0:76:5d: 1b:86:83:7d:01:cd:fb:84:70:9e:74:cb:64:ba:93: 8a:79:be:cf:68:ec:be:c8:b8:9e:f1:a4:1c:b9:84: 3d:8c:a2:b1:ff:da:be:cd:1f:25:c0:56:5e:4c:71: 77:a1:f8:29:ed:6d:bb:e0:6e:d3:b7:13:d6:4c:73: 0c:e6:d4:1c:df:0c:c3:67:99:90:68:07:03:3a:94: 1c:d1:0d:03:5f:4c:21:56:df:71:e4:79:97:c2:24: 85:0a:37:3a:9a:82:c7:83:f6:7c:79:fb:06:ae:b3: aa:49:07:8e:0f:8a:bc:ed:98:66:1d:c7:70:c1:ee: 8a:5d:08:b5:4d:37:de:ec:c8:c3:3d:bd:73:9d:0d: d3:ab:7e:a3:6c:51:e8:81:ba:ec:a0:3d:9e:36:e9: 54:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:61:E8:14:50:B2:E1:23:79:05:59:BF:F7:35:C8:2E:4A:75:0E:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc.crl X509v3 Authority Key Identifier: keyid:22:36:48:16:4C:1D:C9:4B:3E:F2:1A:71:1F:35:A7:CD:C4:D6:47:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa0ff9e7-a69f-423c-94b9-cd51c3d8e1cc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b2:dd:ad:a4:02:34:6a:8d:2b:82:7a:f4:56:7d:aa:07:92: 07:a1:9d:8f:f8:67:5f:3d:89:3f:6e:a1:84:b5:3c:f6:c6:30: 7d:9f:2a:f2:23:c4:42:34:9e:93:74:30:33:e9:67:5c:c0:10: d8:7d:a0:f5:29:8f:aa:d9:0c:07:4a:9f:92:73:82:e8:89:57: 11:f8:fa:6e:b8:cf:8c:6f:85:98:0b:8d:d1:45:44:58:0c:3a: d5:af:a4:24:f0:7b:75:68:c1:32:db:f3:6e:c2:bd:9b:39:06: a1:94:31:cc:d9:c9:f6:aa:6e:e6:ae:7d:b1:37:ae:eb:b8:15: ee:95:c4:86:72:78:b1:51:1c:c9:e5:39:49:e5:05:d8:2c:19: 99:25:16:63:b8:58:b9:64:1e:8d:4c:db:ca:2a:a8:6b:8a:8b: 7e:d1:88:39:20:23:6e:67:47:ce:2d:6c:eb:02:2b:fd:41:e4: 49:68:c8:f5:e6:2c:45:1c:da:df:b6:63:2c:34:3c:b3:b4:2e: 57:9b:ec:a5:c0:b4:15:db:47:10:8d:b4:7f:38:2e:06:74:f1: bb:fa:f0:40:f2:15:ed:59:4e:30:51:ec:51:bb:24:7a:05:ca: ff:a7:7e:74:7a:00:22:1d:59:41:90:7a:b4:f3:93:a4:28:01: 4f:8f:d7:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9E6VQ5PEHMNGbxg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwZmY5ZTctYTY5Zi00MjNjLTk0YjktY2Q1MWMzZDhl MWNjMB4XDTI2MDkyMzEwMDAyMloXDTI2MDkyNjEwMDAwMFowLzEtMCsGA1UEAxMk M2Y5ZGQzZjAtMTAyZC00MGFhLThiMzUtNTU5MDgzYmZmODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2M5R2X1/mQH2Un0EBD7mZx41MKgvIitx4ty qXPWbgoYUzWAVMv75LNThaUBBpSmreb1IgEn+qaI6soiMbM1npIuzJTnBbGax8EZ hELNYU7gNcD/z8UNa4bkXY0v5URHTO3jEDfQdl0bhoN9Ac37hHCedMtkupOKeb7P aOy+yLie8aQcuYQ9jKKx/9q+zR8lwFZeTHF3ofgp7W274G7TtxPWTHMM5tQc3wzD Z5mQaAcDOpQc0Q0DX0whVt9x5HmXwiSFCjc6moLHg/Z8efsGrrOqSQeOD4q87Zhm Hcdwwe6KXQi1TTfe7MjDPb1znQ3Tq36jbFHogbrsoD2eNulUFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEdh6BRQsuEjeQVZv/c1yC5KdQ4+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYTBm ZjllNy1hNjlmLTQyM2MtOTRiOS1jZDUxYzNkOGUxY2MvYWEwZmY5ZTctYTY5Zi00 MjNjLTk0YjktY2Q1MWMzZDhlMWNjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWEwZmY5ZTctYTY5Zi00MjNjLTk0 YjktY2Q1MWMzZDhlMWNjL2FhMGZmOWU3LWE2OWYtNDIzYy05NGI5LWNkNTFjM2Q4 ZTFjYy5jcmwwHwYDVR0jBBgwFoAUIjZIFkwdyUs+8hpxHzWnzcTWR3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYTBmZjllNy1hNjlmLTQyM2MtOTRiOS1jZDUx YzNkOGUxY2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4st2tpAI0ao0rgnr0Vn2q B5IHoZ2P+GdfPYk/bqGEtTz2xjB9nyryI8RCNJ6TdDAz6WdcwBDYfaD1KY+q2QwH Sp+Sc4LoiVcR+PpuuM+Mb4WYC43RRURYDDrVr6Qk8Ht1aMEy2/Nuwr2bOQahlDHM 2cn2qm7mrn2xN67ruBXulcSGcnixURzJ5TlJ5QXYLBmZJRZjuFi5ZB6NTNvKKqhr iot+0Yg5ICNuZ0fOLWzrAiv9QeRJaMj15ixFHNrftmMsNDyztC5Xm+ylwLQV20cQ jbR/OC4GdPG7+vBA8hXtWU4wUexRuyR6Bcr/p350egAiHVlBkHq085OkKAFPj9fF -----END CERTIFICATE-----Generated at Wed Sep 23 19:46:31 2026 by rpki-client