$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: QA3kHqAfwiwt7It7wqQVewLXZSp4VGpLrVFBmHiDWTA= Subject key identifier: 48:6A:64:7E:38:17:83:6E:0D:84:17:0C:69:10:1E:47:1F:FA:A2:7C Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584D05B275C967C02FB9A62BBF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF02251C Signing time: Sun 01 Mar 2026 09:00:08 +0000 Manifest this update: Sun 01 Mar 2026 09:00:08 +0000 Manifest next update: Wed 04 Mar 2026 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: /9KDoC2nM43RhiH0EMt2ViBRYHw4C6Nc3cSBwmL8sPs=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: JJ2tVW7jEw/T+wSa/SZsK6ZROHFtg++Y4yRhiSqE21c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:b2:75:c9:67:c0:2f:b9:a6:2b:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Mar 1 09:00:08 2026 GMT Not After : Mar 4 09:00:00 2026 GMT Subject: CN=731f280d-0d42-4395-b5c9-4f3c614a6b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:53:ce:da:3f:44:a8:21:89:43:7e:f2:e2:e6: 51:1d:80:a7:60:3a:9d:5e:05:f6:5c:f3:56:76:b5: 78:d9:f8:dc:c3:f9:5a:f0:0a:4e:5c:bd:fc:de:27: ef:81:21:95:dd:b8:b4:34:bd:04:71:01:8d:11:d8: 45:2a:4f:1d:ec:c0:58:4d:fe:63:7e:5c:78:da:22: 84:75:5f:6b:9c:d2:f1:af:be:06:9e:9c:d6:ee:32: 0a:10:b9:27:28:22:55:23:b2:94:96:5b:39:88:aa: c8:c7:df:96:24:ec:47:15:f4:02:92:b5:21:b8:f8: b6:3a:f3:e5:48:fc:40:62:cb:54:18:76:19:c5:38: f3:73:d7:6a:a3:ee:f5:f2:71:18:33:1e:1e:4d:ca: a6:ed:ee:e4:a4:7e:f4:89:4b:1f:bf:f8:09:62:ae: 7f:bf:87:32:79:94:02:12:ce:7d:a5:f8:ac:52:31: 3f:09:ff:0c:d0:8e:b7:2f:2d:fd:b9:1f:71:62:38: 2b:65:d2:3a:0f:26:10:e0:34:30:f3:73:ac:9b:56: 36:03:98:e4:bb:a8:d6:f8:ec:54:16:46:f5:ec:4f: b9:bd:73:e5:d8:6d:96:8c:7d:d4:ec:46:1b:be:46: 28:7f:d8:d2:16:30:f6:75:89:6e:b9:30:53:11:ed: 0b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6A:64:7E:38:17:83:6E:0D:84:17:0C:69:10:1E:47:1F:FA:A2:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:cf:a6:82:a2:af:b6:65:ee:00:23:fa:95:c4:fa:03:35:68: 88:03:d1:95:16:52:f5:df:69:b1:ba:fe:71:9c:7d:94:8f:c8: 6b:47:25:1a:28:5d:79:ff:47:a8:5b:93:85:44:8f:ad:ff:7d: 4e:15:ac:90:b7:2d:b0:23:51:52:c1:cd:75:73:30:a7:d2:12: 27:c4:46:c6:c7:af:19:c7:ab:a3:c2:36:6b:56:c1:10:87:8c: 10:72:23:fe:50:52:68:84:de:b8:b6:0c:fc:8d:51:69:f8:7c: 88:19:0a:c6:9a:eb:5a:f4:94:38:01:d3:42:62:45:6a:a4:fb: 2b:f3:47:f2:5d:2f:a9:6d:7d:43:77:8b:b4:7e:4a:3f:2d:3c: 2b:ef:0d:08:c6:a4:cb:2c:da:08:de:85:aa:35:66:bf:3e:98: 7c:fe:18:72:3b:17:53:07:de:8d:90:b4:39:04:0f:36:a2:8a: 31:e0:43:28:a5:c2:31:4b:03:86:cd:82:e8:8f:71:65:a5:bf: 29:28:ab:e8:76:e6:b9:17:9b:f1:32:dd:ab:3a:66:87:dc:88: 9e:de:9f:91:75:03:f0:8e:3b:69:fd:dc:d7:2d:44:34:51:52: 07:19:a0:8c:3b:ee:60:9e:9a:b2:8c:4b:a6:51:e0:2c:08:42: 0d:28:27:1f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0FsnXJZ8AvuaYrv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI2MDMwMTA5MDAwOFoXDTI2MDMwNDA5MDAwMFowLzEtMCsGA1UEAxMk NzMxZjI4MGQtMGQ0Mi00Mzk1LWI1YzktNGYzYzYxNGE2YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVPO2j9EqCGJQ37y4uZRHYCnYDqdXgX2XPNW drV42fjcw/la8ApOXL383ifvgSGV3bi0NL0EcQGNEdhFKk8d7MBYTf5jflx42iKE dV9rnNLxr74GnpzW7jIKELknKCJVI7KUlls5iKrIx9+WJOxHFfQCkrUhuPi2OvPl SPxAYstUGHYZxTjzc9dqo+718nEYMx4eTcqm7e7kpH70iUsfv/gJYq5/v4cyeZQC Es59pfisUjE/Cf8M0I63Ly39uR9xYjgrZdI6DyYQ4DQw83Osm1Y2A5jku6jW+OxU Fkb17E+5vXPl2G2WjH3U7EYbvkYof9jSFjD2dYluuTBTEe0LkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEhqZH44F4NuDYQXDGkQHkcf+qJ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBz6aCoq+2Ze4AI/qVxPoD NWiIA9GVFlL132mxuv5xnH2Uj8hrRyUaKF15/0eoW5OFRI+t/31OFayQty2wI1FS wc11czCn0hInxEbGx68Zx6ujwjZrVsEQh4wQciP+UFJohN64tgz8jVFp+HyIGQrG muta9JQ4AdNCYkVqpPsr80fyXS+pbX1Dd4u0fko/LTwr7w0IxqTLLNoI3oWqNWa/ Pph8/hhyOxdTB96NkLQ5BA82ooox4EMopcIxSwOGzYLoj3Flpb8pKKvodua5F5vx Mt2rOmaH3Iie3p+RdQPwjjtp/dzXLUQ0UVIHGaCMO+5gnpqyjEumUeAsCEINKCcf -----END CERTIFICATE-----Generated at Mon Mar 2 04:17:32 2026 by rpki-client