$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft File: aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft (raw, json) Hash identifier: Weys2Fkll6YhxNDsSwaIb5omSE/Wc4u/Gq2MIFZUGfE= Subject key identifier: A2:88:C9:8E:0C:E1:A1:4F:77:8D:8B:EF:16:59:77:F4:0A:8F:25:D1 Authority key identifier: 92:3F:C0:B4:62:A6:2F:B6:14:8F:72:2F:7F:3B:0F:C1:B5:CC:F1:E9 Certificate issuer: /CN=aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc Certificate serial: 010D0C9F4328584D4A183B0007787145FAA38800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft Manifest number: 010D0C9F4328584137AED4E352B5544DD5774F18 Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Fri 27 Mar 2026 21:00:00 +0000 Files and hashes: 1: 90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer (hash: KdioMm7j+3x0stt8891dVI0Wnj0GZ6hZ5oFEDX+UBsw=) 2: aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.crl (hash: uP3Vm6oNSpMwD0r41ejrTyHUyHMhc9JAVJSCid4kH9M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:3b:00:07:78:71:45:fa:a3:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 27 21:00:00 2026 GMT Subject: CN=c1bd8b2e-3c04-4498-9700-e68c8f10e223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2e:fe:35:64:ee:4a:1a:db:74:1e:79:34:5e: cf:ae:43:7a:8e:4b:ea:e8:57:58:30:08:65:13:34: 49:01:14:90:74:30:bb:4c:86:7f:07:91:ff:4d:49: 8f:f6:a3:c4:92:44:32:eb:8c:cf:ad:19:d5:2b:f8: c8:e5:f8:17:94:58:7e:e9:41:d3:1e:fe:5f:29:d6: 41:ab:b7:b5:27:4b:dd:5b:2a:e9:ee:46:51:c1:24: a8:3b:95:ff:4b:b9:5b:53:88:ec:77:c7:08:6d:55: c8:99:f1:81:12:2a:a3:db:c6:87:38:c3:27:88:54: f2:15:4c:0b:0e:ec:23:fb:3e:67:89:de:5b:5a:28: 6d:c9:92:4f:29:9d:a0:58:b8:09:2a:04:a9:fd:64: 5c:5b:5e:1b:ea:c6:49:52:bc:e7:f4:73:8d:29:a7: 64:9b:cb:16:00:6f:79:f0:07:7e:6b:80:82:09:71: f4:9c:16:ef:7c:ec:80:19:1f:2b:68:80:64:27:fb: 9d:c1:f1:cb:ee:0b:61:ad:63:64:d1:47:fe:d7:22: 0d:21:51:d8:c9:4a:2f:c1:36:2c:8b:9d:48:85:50: 7b:0f:a6:93:68:37:6a:56:7e:51:b2:d0:0c:88:e1: 4f:d6:51:26:57:6a:bc:da:ae:86:74:8a:15:04:fc: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:88:C9:8E:0C:E1:A1:4F:77:8D:8B:EF:16:59:77:F4:0A:8F:25:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.crl X509v3 Authority Key Identifier: keyid:92:3F:C0:B4:62:A6:2F:B6:14:8F:72:2F:7F:3B:0F:C1:B5:CC:F1:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:01:b7:c1:85:40:ae:b2:e4:fa:e2:da:8e:71:ea:4d:aa:c2: c2:8f:14:b2:b9:b4:ef:d0:ae:bc:30:d6:37:72:1a:2b:70:4b: 05:4d:64:9e:4a:e1:d0:04:d3:fc:a5:e8:32:dc:60:f4:11:bb: 4a:28:47:fc:83:82:04:f6:50:a4:b5:6a:b5:11:1d:44:f5:9a: d2:90:57:ed:d1:6e:00:28:2b:fe:7a:23:f7:1f:89:45:bc:b4: bc:f2:aa:a0:29:9c:3c:cc:5b:06:b4:91:dc:31:3f:9b:22:e1: 26:53:eb:28:37:b7:5c:13:aa:d3:c9:1d:f4:1b:09:41:4d:85: fa:0c:61:76:31:d1:d2:c6:de:ac:d6:f0:fe:b8:3f:13:60:00: 61:94:07:da:1e:26:25:73:1e:39:b3:42:63:19:d1:bc:74:ec: 2d:8b:fa:8c:43:eb:5c:46:14:d3:9a:29:ea:54:ab:1d:32:4b: 81:0e:95:aa:c4:0f:73:5e:fb:f8:1c:79:be:6f:9a:47:a2:72: 9e:ab:39:f6:0f:ab:73:01:4e:9b:6a:fa:b4:fb:67:97:a7:1d: 22:d9:79:53:d5:a7:8a:f5:26:c3:7b:ec:e9:d7:19:25:cc:82: b4:fc:64:3b:d2:8e:59:1d:b3:aa:29:bc:4f:4c:55:05:2c:31: 5c:58:9e:90 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDsAB3hxRfqjiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5YWRlNWUtNmZmNi00YWU1LThkNWUtNWRiM2M5ZGU5 NGRjMB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyNzIxMDAwMFowLzEtMCsGA1UEAxMk YzFiZDhiMmUtM2MwNC00NDk4LTk3MDAtZTY4YzhmMTBlMjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy7+NWTuShrbdB55NF7PrkN6jkvq6FdYMAhl EzRJARSQdDC7TIZ/B5H/TUmP9qPEkkQy64zPrRnVK/jI5fgXlFh+6UHTHv5fKdZB q7e1J0vdWyrp7kZRwSSoO5X/S7lbU4jsd8cIbVXImfGBEiqj28aHOMMniFTyFUwL Duwj+z5nid5bWihtyZJPKZ2gWLgJKgSp/WRcW14b6sZJUrzn9HONKadkm8sWAG95 8Ad+a4CCCXH0nBbvfOyAGR8raIBkJ/udwfHL7gthrWNk0Uf+1yINIVHYyUovwTYs i51IhVB7D6aTaDdqVn5RstAMiOFP1lEmV2q82q6GdIoVBPxa/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKKIyY4M4aFPd42L7xZZd/QKjyXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYTlh ZGU1ZS02ZmY2LTRhZTUtOGQ1ZS01ZGIzYzlkZTk0ZGMvYWE5YWRlNWUtNmZmNi00 YWU1LThkNWUtNWRiM2M5ZGU5NGRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWE5YWRlNWUtNmZmNi00YWU1LThk NWUtNWRiM2M5ZGU5NGRjL2FhOWFkZTVlLTZmZjYtNGFlNS04ZDVlLTVkYjNjOWRl OTRkYy5jcmwwHwYDVR0jBBgwFoAUkj/AtGKmL7YUj3IvfzsPwbXM8ekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYTlhZGU1ZS02ZmY2LTRhZTUtOGQ1ZS01ZGIz YzlkZTk0ZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANAbfBhUCusuT64tqOcepN qsLCjxSyubTv0K68MNY3chorcEsFTWSeSuHQBNP8pegy3GD0EbtKKEf8g4IE9lCk tWq1ER1E9ZrSkFft0W4AKCv+eiP3H4lFvLS88qqgKZw8zFsGtJHcMT+bIuEmU+so N7dcE6rTyR30GwlBTYX6DGF2MdHSxt6s1vD+uD8TYABhlAfaHiYlcx45s0JjGdG8 dOwti/qMQ+tcRhTTminqVKsdMkuBDpWqxA9zXvv4HHm+b5pHonKeqzn2D6tzAU6b avq0+2eXpx0i2XlT1aeK9SbDe+zp1xklzIK0/GQ70o5ZHbOqKbxPTFUFLDFcWJ6Q -----END CERTIFICATE-----Generated at Thu Mar 26 09:03:44 2026 by rpki-client