$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft File: 0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft (raw, json) Hash identifier: Fu3Qv+6MLcp0I5n5bSa9X1/ScZGIvYi2FXc1p+gAro0= Subject key identifier: E6:60:DF:28:D7:A5:20:D0:AA:DB:7F:BB:FE:01:D3:B7:7F:FF:E2:B7 Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C Certificate issuer: /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Certificate serial: 010D0C9F4328584D4B9B4A06A563C8F810B65B10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft Manifest number: 010D0C9F4328584073A84E0231FF2DF1C04A3752 Signing time: Thu 26 Mar 2026 10:00:03 +0000 Manifest this update: Thu 26 Mar 2026 10:00:03 +0000 Manifest next update: Sat 28 Mar 2026 10:00:00 +0000 Files and hashes: 1: 0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl (hash: p1dl8ztHmue0ezrPTuKgVFitCG/5mfksGpQtIDWPQ+k=) 2: 58ae2a95-69c6-3c2a-8493-3f45c86d73e0.roa (hash: 2KrAEep7xrO4JMn9o8midMOCdLYqdPSEAdvWreFacUs=) 3: 6624b998-13e0-3a4d-aac9-4037a34bff51.roa (hash: L3E1XDThRg1sBcUykJT36uq40MzPWKwvTvULORmVo74=) 4: 8e308c21-96a9-3c5f-9236-af36b607b789.roa (hash: Xsj+GQVNp55fi3yV32e3JBhX2SpaNkrh1xU7rRpJ0X0=) 5: b7eef4be-80b7-3b1d-9220-d57d94c78330.roa (hash: weo9YuQQIj8YEs+A8ONSmc4Pwr+PP7AobnR30eLiDGw=) 6: d057ed2f-9fd1-3cf7-8b2f-92f9901c8924.roa (hash: 27f5yeiuTCz/77MExsjP+FBf34biCX98xqXasg9j1KY=) 7: ed6b1126-250f-33f9-a75a-557964e92852.roa (hash: DUjAhkjk3mLh+tHoMWKbaLdp2Es8ffqcFzg2RRuB6fE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:9b:4a:06:a5:63:c8:f8:10:b6:5b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Validity Not Before: Mar 26 10:00:03 2026 GMT Not After : Mar 28 10:00:00 2026 GMT Subject: CN=755fd114-4671-419a-a0fe-871c8740581b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3e:90:e6:5e:df:8d:02:ac:48:3e:a0:76:10: f3:32:61:c3:55:01:20:28:93:84:09:62:c3:ed:d6: 5d:54:cf:a6:e5:1d:23:b5:8e:76:09:56:c0:3b:39: 6d:62:b5:e3:e3:e7:14:84:1e:2d:3c:cb:9f:a9:34: a0:43:12:e2:14:73:a7:66:6e:00:4c:30:12:ca:75: 67:d2:35:f0:ac:fb:c2:90:16:3c:05:68:0b:42:9c: 3f:59:90:b3:1b:94:47:14:dd:0f:7c:b1:4e:cb:d5: 35:a9:db:03:1c:b7:93:e6:87:8a:24:a1:75:a8:32: 35:34:f7:71:37:9b:71:19:82:55:79:24:88:05:9a: 55:72:d6:ec:9e:51:e3:cd:5e:62:e8:cd:fe:19:6e: 2b:18:df:c2:0a:04:e8:94:0e:a6:6f:5c:e0:2e:11: 7b:a9:c4:c5:61:75:f5:3d:a0:68:1b:d9:18:2c:cd: c8:2f:f0:5f:5f:86:9c:53:da:f1:79:ca:5e:1b:cf: 47:86:f6:15:b4:9b:1e:8f:91:a1:cd:24:b2:cf:ef: 7a:dc:3f:60:37:60:f2:36:60:ef:82:d9:1b:96:41: a1:41:d2:7e:ea:16:12:35:ac:9d:76:dc:0c:d2:6d: d5:4b:74:5f:4b:9f:18:8b:0b:d6:b4:33:4e:cb:d2: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:60:DF:28:D7:A5:20:D0:AA:DB:7F:BB:FE:01:D3:B7:7F:FF:E2:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl X509v3 Authority Key Identifier: keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c0:da:0b:fb:2c:2a:63:c8:14:2e:f0:3a:4d:9a:ba:8d:eb: 88:7c:31:21:05:46:b0:1b:2c:7c:e2:16:6b:4b:70:77:06:71: 62:a1:67:d1:0c:89:91:a4:1c:db:a5:6d:d2:72:54:90:94:91: 8a:1d:ba:d2:af:e6:72:52:4f:26:d8:1f:82:2a:01:9d:45:9c: 99:d0:7a:6d:d7:38:f3:48:15:8f:ce:c4:ed:85:d8:e1:fb:af: c7:8f:02:7f:b9:22:b5:13:71:d3:dc:5a:d8:e4:25:78:94:c7: 9a:5b:b1:62:95:10:94:bb:70:8a:14:3e:d0:db:18:3d:e7:ef: 86:d0:e8:62:8c:75:9c:19:58:19:7b:b5:86:b4:e6:f3:4d:97: d5:1d:31:bb:d8:6d:f7:b4:53:27:49:de:6e:b2:c3:25:5f:ca: ce:11:ad:d6:fc:b1:84:35:f6:e7:57:80:6b:74:78:5f:2c:15: ef:a1:bb:2e:7c:1b:5c:29:53:e1:ff:70:f4:ff:20:eb:ec:bd: 50:eb:a8:8c:2d:a0:1d:57:7b:a6:ce:72:1f:19:be:7f:7d:97: 85:c6:8b:46:3a:1c:bc:f0:69:d1:47:d7:6a:a9:9a:bb:e2:2f: 96:9c:43:40:ae:f8:64:cf:da:cb:ab:71:83:49:14:00:7b:b7: 76:66:ac:50 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Lm0oGpWPI+BC2WxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhOGMyOTktMDNjYS00YjgxLThiYWUtODNiNmQxYjNk N2Q5MB4XDTI2MDMyNjEwMDAwM1oXDTI2MDMyODEwMDAwMFowLzEtMCsGA1UEAxMk NzU1ZmQxMTQtNDY3MS00MTlhLWEwZmUtODcxYzg3NDA1ODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz6Q5l7fjQKsSD6gdhDzMmHDVQEgKJOECWLD 7dZdVM+m5R0jtY52CVbAOzltYrXj4+cUhB4tPMufqTSgQxLiFHOnZm4ATDASynVn 0jXwrPvCkBY8BWgLQpw/WZCzG5RHFN0PfLFOy9U1qdsDHLeT5oeKJKF1qDI1NPdx N5txGYJVeSSIBZpVctbsnlHjzV5i6M3+GW4rGN/CCgTolA6mb1zgLhF7qcTFYXX1 PaBoG9kYLM3IL/BfX4acU9rxecpeG89HhvYVtJsej5GhzSSyz+963D9gN2DyNmDv gtkblkGhQdJ+6hYSNayddtwM0m3VS3RfS58YiwvWtDNOy9JSVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOZg3yjXpSDQqtt/u/4B07d//+K3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4 YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2ZDFiM2Q3ZDkvMGFhOGMyOTktMDNjYS00 YjgxLThiYWUtODNiNmQxYjNkN2Q5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGFhOGMyOTktMDNjYS00YjgxLThi YWUtODNiNmQxYjNkN2Q5LzBhYThjMjk5LTAzY2EtNGI4MS04YmFlLTgzYjZkMWIz ZDdkOS5jcmwwHwYDVR0jBBgwFoAUj/kPBmSwMq4GLXrC40vBjuR5TTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2 ZDFiM2Q3ZDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1wNoL+ywqY8gULvA6TZq6 jeuIfDEhBUawGyx84hZrS3B3BnFioWfRDImRpBzbpW3SclSQlJGKHbrSr+ZyUk8m 2B+CKgGdRZyZ0Hpt1zjzSBWPzsTthdjh+6/HjwJ/uSK1E3HT3FrY5CV4lMeaW7Fi lRCUu3CKFD7Q2xg95++G0OhijHWcGVgZe7WGtObzTZfVHTG72G33tFMnSd5ussMl X8rOEa3W/LGENfbnV4BrdHhfLBXvobsufBtcKVPh/3D0/yDr7L1Q66iMLaAdV3um znIfGb5/fZeFxotGOhy88GnRR9dqqZq74i+WnENArvhkz9rLq3GDSRQAe7d2ZqxQ -----END CERTIFICATE-----Generated at Thu Mar 26 12:45:29 2026 by rpki-client