$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft File: 2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft (raw, json) Hash identifier: NkUCOlQdUw7AtlphyFg6e4qhFzuwehBSulM+kjZm8rk= Subject key identifier: 8E:89:98:F8:CA:AF:07:BD:31:C1:CE:CB:4F:C7:F4:25:A0:2B:6A:F6 Authority key identifier: 2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C Certificate issuer: /CN=2aa49d03-db4a-4804-82dc-fc2c0fdb94e8 Certificate serial: 010D0C9F4328584D4A183ACC9033853C0C3A7100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft Manifest number: 010D0C9F432858443763028D2974FCB784FD2A95 Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Sat 28 Mar 2026 21:00:00 +0000 Files and hashes: 1: 2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.crl (hash: ycX0yI0SuR6Mmlep5LwgBtmOD/IVMhl6q/9cJL7lk/A=) 2: ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa (hash: Z30dbOBv3UGpRhn2XkzsqqfyKOXZaf8S4fZzmBg07Uk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:3a:cc:90:33:85:3c:0c:3a:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa49d03-db4a-4804-82dc-fc2c0fdb94e8 Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 28 21:00:00 2026 GMT Subject: CN=db674c66-076a-47fa-884b-ba4dfe4045fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b4:d5:99:85:74:fb:47:c2:7a:ab:c8:35:15: 77:be:8c:15:bb:bc:22:82:1d:20:be:7e:55:1a:89: 0b:95:4d:d9:95:e7:e3:19:08:4c:cd:af:cc:f0:d7: 5a:eb:79:ef:e2:10:19:79:85:76:1b:77:64:6d:34: ff:de:a6:2a:3a:9c:4d:4e:50:aa:04:61:ff:67:0b: aa:eb:1a:34:c8:65:bd:92:3c:3f:2d:f0:72:f9:27: 27:85:3a:0c:f2:d6:56:77:72:1d:21:fb:57:63:1e: fc:bb:aa:5b:99:7e:64:56:53:d8:9d:b8:4f:f2:fc: 4d:94:79:65:40:d3:c7:94:b5:50:18:92:ab:99:24: ed:02:b1:54:45:03:4c:a8:1c:30:4a:95:b1:c3:6c: 3d:9e:73:29:54:38:80:74:2c:9c:0e:cf:4c:26:0e: 46:10:5e:17:41:07:ae:0b:fb:67:b9:92:d4:6b:da: eb:2d:64:6f:e1:18:94:21:5b:03:29:bb:1e:e2:03: 20:c4:9c:15:3c:ac:d7:3d:45:63:9e:9e:db:72:31: 56:b5:4d:22:41:8b:f4:8a:2a:9d:8f:40:e5:03:f6: b9:bf:eb:01:55:7f:cc:6f:54:83:89:4b:28:4f:80: a6:80:5f:8b:e0:c6:e5:a5:52:55:3d:66:6b:d7:b9: 99:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:89:98:F8:CA:AF:07:BD:31:C1:CE:CB:4F:C7:F4:25:A0:2B:6A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.crl X509v3 Authority Key Identifier: keyid:2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:44:42:07:4d:19:4e:33:45:65:bb:96:3e:f9:bc:24:de:2a: b4:40:4e:13:d9:f2:6c:5e:52:e0:54:38:f0:e7:13:73:bd:e9: 08:7c:1f:cd:4e:9f:a1:48:36:f4:d9:39:f2:c4:ac:66:be:41: b8:cc:16:b9:f1:61:cb:c5:a5:9b:e8:13:f8:4b:99:fd:35:06: 8f:3a:c9:f9:96:1a:55:4c:73:36:19:ad:27:00:58:98:26:2b: 08:f8:68:cb:34:f9:50:b4:15:9c:e3:05:f7:29:42:72:1d:29: a4:8b:33:90:44:2e:0a:b6:35:c9:b0:30:8c:a4:94:00:eb:34: 15:7a:1d:0d:6c:b7:b7:98:44:f8:40:5b:de:8e:ec:2e:fa:28: bc:96:ec:8f:d6:74:88:1d:3b:04:81:d8:c0:cc:94:8c:49:cf: 89:1a:64:dc:d0:3a:f8:5d:63:55:fa:e7:c2:a3:02:ba:c0:66: 16:a6:b6:0a:4d:98:59:13:6c:73:6f:92:24:6d:79:8f:10:46: 50:e4:7a:92:d7:2e:7d:97:38:66:8b:a1:48:2b:8e:6f:18:72: 39:bb:fa:1b:aa:6c:85:c7:3b:e1:5b:ed:65:be:f8:0c:8f:d2: 0b:f8:25:67:f2:49:59:0f:3a:14:c7:fc:55:e6:8b:0d:bd:08: c7:ef:22:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDrMkDOFPAw6cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDlkMDMtZGI0YS00ODA0LTgyZGMtZmMyYzBmZGI5 NGU4MB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyODIxMDAwMFowLzEtMCsGA1UEAxMk ZGI2NzRjNjYtMDc2YS00N2ZhLTg4NGItYmE0ZGZlNDA0NWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7TVmYV0+0fCeqvINRV3vowVu7wigh0gvn5V GokLlU3ZlefjGQhMza/M8Nda63nv4hAZeYV2G3dkbTT/3qYqOpxNTlCqBGH/Zwuq 6xo0yGW9kjw/LfBy+ScnhToM8tZWd3IdIftXYx78u6pbmX5kVlPYnbhP8vxNlHll QNPHlLVQGJKrmSTtArFURQNMqBwwSpWxw2w9nnMpVDiAdCycDs9MJg5GEF4XQQeu C/tnuZLUa9rrLWRv4RiUIVsDKbse4gMgxJwVPKzXPUVjnp7bcjFWtU0iQYv0iiqd j0DlA/a5v+sBVX/Mb1SDiUsoT4CmgF+L4MblpVJVPWZr17mZXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI6JmPjKrwe9McHOy0/H9CWgK2r2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yYWE0 OWQwMy1kYjRhLTQ4MDQtODJkYy1mYzJjMGZkYjk0ZTgvMmFhNDlkMDMtZGI0YS00 ODA0LTgyZGMtZmMyYzBmZGI5NGU4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmFhNDlkMDMtZGI0YS00ODA0LTgy ZGMtZmMyYzBmZGI5NGU4LzJhYTQ5ZDAzLWRiNGEtNDgwNC04MmRjLWZjMmMwZmRi OTRlOC5jcmwwHwYDVR0jBBgwFoAUL4GD8qhhJFWorV2604WpxuXzKEwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yYWE0OWQwMy1kYjRhLTQ4MDQtODJkYy1mYzJj MGZkYjk0ZTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJREIHTRlOM0Vlu5Y++bwk 3iq0QE4T2fJsXlLgVDjw5xNzvekIfB/NTp+hSDb02TnyxKxmvkG4zBa58WHLxaWb 6BP4S5n9NQaPOsn5lhpVTHM2Ga0nAFiYJisI+GjLNPlQtBWc4wX3KUJyHSmkizOQ RC4KtjXJsDCMpJQA6zQVeh0NbLe3mET4QFvejuwu+ii8luyP1nSIHTsEgdjAzJSM Sc+JGmTc0Dr4XWNV+ufCowK6wGYWprYKTZhZE2xzb5IkbXmPEEZQ5HqS1y59lzhm i6FIK45vGHI5u/obqmyFxzvhW+1lvvgMj9IL+CVn8klZDzoUx/xV5osNvQjH7yK5 -----END CERTIFICATE-----Generated at Thu Mar 26 18:07:26 2026 by rpki-client