$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft File: aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft (raw, json) Hash identifier: 0OZmYXUvP7Xunz8ky+leDpRR9Zz7hAKVhxTcXcBMAok= Subject key identifier: 3A:38:A7:6A:C7:66:E3:CD:31:68:B9:D7:C0:60:A2:AE:95:6C:AB:8F Authority key identifier: 33:67:08:05:95:F8:CB:22:BC:11:35:A5:B5:3E:0F:59:0F:DA:FD:70 Certificate issuer: /CN=aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2 Certificate serial: 010D0C9F4328584D48B2D5056261C853DCBEA140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft Manifest number: 010D0C9F432858425E3306748870EF88DC1C90E9 Signing time: Wed 25 Mar 2026 09:00:04 +0000 Manifest this update: Wed 25 Mar 2026 09:00:04 +0000 Manifest next update: Fri 27 Mar 2026 09:00:00 +0000 Files and hashes: 1: aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl (hash: tPbgDZkbgXjtn3e26M+3Bo8tcV+m3xYGc8w6mekQ2/4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:b2:d5:05:62:61:c8:53:dc:be:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2 Validity Not Before: Mar 25 09:00:04 2026 GMT Not After : Mar 27 09:00:00 2026 GMT Subject: CN=df85db99-a749-485b-a632-0317c085b1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8a:2f:33:18:74:a2:ec:3f:46:1e:c0:1e:f0: 0f:8f:2b:50:90:da:27:24:68:cf:e4:5c:c0:ab:35: d0:cd:1d:87:ca:7c:cd:7f:ee:c4:a0:a1:e1:6b:d6: fa:32:37:40:c5:77:f5:b3:8e:84:5e:35:53:0a:8a: d2:a2:b5:ac:6e:02:20:4a:1f:dc:39:63:67:ce:36: 1d:3a:e4:69:5e:72:e1:05:96:35:f5:70:e0:cd:7b: ad:84:2d:21:52:b6:0e:8b:e5:60:0b:30:17:2e:e7: 73:98:f4:4f:50:3f:66:1b:6f:26:25:2d:58:53:85: 4d:6d:40:17:30:9e:68:b3:88:8d:00:d4:14:8d:ec: 8d:08:ed:cc:d0:1c:ef:ac:b7:9f:d3:43:68:22:9c: 25:5a:c9:50:02:c3:03:30:04:fb:7b:57:7e:b9:79: 1c:bd:ea:1d:55:66:f8:6e:a8:dc:0f:99:80:34:06: b9:3e:0b:46:45:e0:c4:61:cc:07:05:c0:6b:ba:f5: 31:d4:e6:4a:b9:ad:cd:07:f9:6a:88:c1:52:d6:7f: 42:bf:6e:7f:ac:11:10:6b:46:2b:76:11:7c:d9:1e: c2:e3:57:9c:1e:96:a4:cf:ad:6a:47:20:38:b8:da: 21:14:68:e9:4f:37:54:1f:4a:44:0a:3f:4e:a0:62: 08:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:38:A7:6A:C7:66:E3:CD:31:68:B9:D7:C0:60:A2:AE:95:6C:AB:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl X509v3 Authority Key Identifier: keyid:33:67:08:05:95:F8:CB:22:BC:11:35:A5:B5:3E:0F:59:0F:DA:FD:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f4:1c:7f:85:d5:0e:a0:95:0a:fc:bc:7e:a3:e4:02:e5:5c: 16:16:9a:fd:16:27:f9:52:0b:25:df:49:a0:ab:3e:01:a8:a2: e6:22:e1:29:1a:a3:3b:7f:c4:c3:44:fa:53:52:69:9b:c5:1d: 1a:40:9d:d4:86:b6:01:ac:52:ab:c3:f3:96:d4:27:0a:6e:24: ac:a2:0c:23:c1:dc:d0:e3:90:54:37:fb:ce:e2:09:ef:78:ed: 58:4e:2f:aa:ca:09:6e:90:96:11:9b:97:0f:13:b7:23:44:0f: 7b:d7:e5:72:c2:e0:39:49:fb:1a:63:4b:c8:38:f6:a0:aa:7c: 79:f9:2f:48:81:10:14:54:ff:2d:2e:89:e5:7a:07:7d:1b:7d: 3c:e2:79:3c:3c:75:c6:9d:73:e3:ce:3c:af:60:39:7d:e9:ed: 4b:c8:94:ee:28:d5:65:93:28:84:06:ab:8e:44:7a:4f:7b:70: bc:10:e4:a8:bb:43:2c:1c:17:9f:42:70:60:94:cc:07:b1:02: dd:97:20:a5:75:07:d5:12:b1:dd:5f:fb:7c:55:c8:97:21:58: ba:6e:30:02:53:18:9d:91:df:5b:08:54:42:22:e8:0d:73:ec: 4c:40:e9:a3:49:fe:2d:6e:e9:21:a7:09:02:84:63:b7:e8:d8: 45:ac:0c:1b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IstUFYmHIU9y+oUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ODQ4YWQtNWVmOS00OGIxLTkxYzUtN2ZhZjY5ZTlm NmEyMB4XDTI2MDMyNTA5MDAwNFoXDTI2MDMyNzA5MDAwMFowLzEtMCsGA1UEAxMk ZGY4NWRiOTktYTc0OS00ODViLWE2MzItMDMxN2MwODViMWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIovMxh0ouw/Rh7AHvAPjytQkNonJGjP5FzA qzXQzR2HynzNf+7EoKHha9b6MjdAxXf1s46EXjVTCorSorWsbgIgSh/cOWNnzjYd OuRpXnLhBZY19XDgzXuthC0hUrYOi+VgCzAXLudzmPRPUD9mG28mJS1YU4VNbUAX MJ5os4iNANQUjeyNCO3M0BzvrLef00NoIpwlWslQAsMDMAT7e1d+uXkcveodVWb4 bqjcD5mANAa5PgtGReDEYcwHBcBruvUx1OZKua3NB/lqiMFS1n9Cv25/rBEQa0Yr dhF82R7C41ecHpakz61qRyA4uNohFGjpTzdUH0pECj9OoGII4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDo4p2rHZuPNMWi518Bgoq6VbKuPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYTk4 NDhhZC01ZWY5LTQ4YjEtOTFjNS03ZmFmNjllOWY2YTIvYWE5ODQ4YWQtNWVmOS00 OGIxLTkxYzUtN2ZhZjY5ZTlmNmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWE5ODQ4YWQtNWVmOS00OGIxLTkx YzUtN2ZhZjY5ZTlmNmEyL2FhOTg0OGFkLTVlZjktNDhiMS05MWM1LTdmYWY2OWU5 ZjZhMi5jcmwwHwYDVR0jBBgwFoAUM2cIBZX4yyK8ETWltT4PWQ/a/XAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYTk4NDhhZC01ZWY5LTQ4YjEtOTFjNS03ZmFm NjllOWY2YTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZ9Bx/hdUOoJUK/Lx+o+QC 5VwWFpr9Fif5Ugsl30mgqz4BqKLmIuEpGqM7f8TDRPpTUmmbxR0aQJ3UhrYBrFKr w/OW1CcKbiSsogwjwdzQ45BUN/vO4gnveO1YTi+qyglukJYRm5cPE7cjRA971+Vy wuA5SfsaY0vIOPagqnx5+S9IgRAUVP8tLonlegd9G3084nk8PHXGnXPjzjyvYDl9 6e1LyJTuKNVlkyiEBquORHpPe3C8EOSou0MsHBefQnBglMwHsQLdlyCldQfVErHd X/t8VciXIVi6bjACUxidkd9bCFRCIugNc+xMQOmjSf4tbukhpwkChGO36NhFrAwb -----END CERTIFICATE-----Generated at Thu Mar 26 06:59:34 2026 by rpki-client