$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: I1xLu0E/kyd5dyEjRD3oCS8rfLEopH/6xzn3FzDm29I= Subject key identifier: CE:11:89:88:71:5E:F3:2E:3F:CC:50:5D:B0:3E:D3:32:61:70:7F:18 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584D8E7DEE752A199A0E473B6B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3C17 Signing time: Sun 19 Apr 2026 09:00:03 +0000 Manifest this update: Sun 19 Apr 2026 09:00:03 +0000 Manifest next update: Tue 21 Apr 2026 09:00:00 +0000 Files and hashes: 1: 843a1018-5704-3ed0-878e-ee960b8368ce.roa (hash: /BKMAEnlabMgIwJu/7utZ98i805EJhcelvcS+25B2nk=) 2: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: FbTNphWQWaVVD1vw+b/GCZu8GQ4RJbDpp52v7KpQgkA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:7d:ee:75:2a:19:9a:0e:47:3b:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Apr 19 09:00:03 2026 GMT Not After : Apr 21 09:00:00 2026 GMT Subject: CN=75d3b369-2f19-46cb-bcd8-9978b15d895a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:e3:b9:49:f9:8f:de:58:3d:49:30:ef:f8: 99:4d:23:eb:54:1b:e6:03:05:c7:ef:e2:3a:e5:6a: ce:c7:7e:75:d0:45:5e:6f:79:2a:86:85:3c:b4:7b: 34:00:9a:1e:ed:67:95:54:70:44:11:b8:48:3b:cb: 4b:c6:4c:64:0d:94:59:4a:1b:ef:bc:81:03:29:10: 94:3e:f6:a8:0a:f9:94:ba:7b:c8:ec:71:08:2b:c2: a9:57:e5:aa:58:2d:6b:2f:ae:61:6c:c7:c2:e2:0a: b0:10:7a:6d:4f:dc:0c:77:25:c2:98:95:16:26:3c: 9c:07:96:86:c0:73:0a:c4:87:e7:b8:8f:20:6e:59: f5:05:ba:a4:4c:39:c4:35:78:2b:ab:6d:d5:a1:4c: 85:67:8b:01:26:12:f0:ca:eb:aa:1b:59:89:ea:a7: ab:25:09:3d:6b:4b:b8:32:7d:c4:4d:8a:ba:2c:25: 27:32:0e:8c:23:0b:bd:15:49:85:02:db:34:b8:9c: 17:1c:30:cd:8c:c9:93:81:2a:d3:33:be:b5:d2:bf: 56:5c:a4:92:76:30:25:b1:48:8b:49:e1:49:86:43: 78:dc:d7:0e:4b:db:ca:17:1a:35:3b:0e:38:64:00: 7c:84:0e:19:d8:dc:1a:b1:3c:1b:ff:49:0c:41:c6: 64:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:11:89:88:71:5E:F3:2E:3F:CC:50:5D:B0:3E:D3:32:61:70:7F:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:e7:a1:0a:51:22:7c:60:8b:fa:39:ba:7e:51:c2:3f:7f:47: a1:34:74:8a:9a:96:6f:d1:d1:26:8e:9f:8d:a0:cc:57:a9:73: b0:67:0f:f8:d9:6d:1b:bc:0e:a9:dc:94:a2:ca:5b:28:b1:f7: 78:e7:be:7c:74:91:42:71:b0:da:ef:22:07:db:5d:71:ec:0d: 88:09:c2:74:16:41:50:dc:fd:23:cd:b6:13:65:f9:e7:fd:b7: ee:d5:36:4d:07:db:16:05:1d:33:4e:49:60:86:5f:25:6c:16: dc:17:fe:14:cb:06:4a:8f:b0:36:bb:c5:fe:95:92:c0:cb:40: 73:4d:17:4b:1f:ea:5e:fe:8d:be:ae:66:82:da:83:4f:6c:1b: f9:4e:bc:e5:e6:fd:66:97:3d:f5:f2:45:d3:8f:d8:9b:08:e0: 84:11:88:3a:e7:64:2a:de:b2:bf:a7:94:ae:8f:e9:3b:8f:49: e1:4e:43:4d:d1:21:57:56:dc:ae:c0:b3:ae:c1:e0:e5:95:c5: b8:92:f1:66:95:2f:42:6f:44:a8:ee:8f:23:95:4e:4b:46:d8: ba:d1:49:3a:cc:df:34:38:5a:67:85:1a:8a:b9:42:e1:6b:4b: 8e:f2:17:9c:97:08:82:18:2e:aa:40:33:98:ca:17:da:4f:2f: ab:cf:68:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Ofe51KhmaDkc7a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI2MDQxOTA5MDAwM1oXDTI2MDQyMTA5MDAwMFowLzEtMCsGA1UEAxMk NzVkM2IzNjktMmYxOS00NmNiLWJjZDgtOTk3OGIxNWQ4OTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHfjuUn5j95YPUkw7/iZTSPrVBvmAwXH7+I6 5WrOx3510EVeb3kqhoU8tHs0AJoe7WeVVHBEEbhIO8tLxkxkDZRZShvvvIEDKRCU PvaoCvmUunvI7HEIK8KpV+WqWC1rL65hbMfC4gqwEHptT9wMdyXCmJUWJjycB5aG wHMKxIfnuI8gbln1BbqkTDnENXgrq23VoUyFZ4sBJhLwyuuqG1mJ6qerJQk9a0u4 Mn3ETYq6LCUnMg6MIwu9FUmFAts0uJwXHDDNjMmTgSrTM7610r9WXKSSdjAlsUiL SeFJhkN43NcOS9vKFxo1Ow44ZAB8hA4Z2NwasTwb/0kMQcZkGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM4RiYhxXvMuP8xQXbA+0zJhcH8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAm56EKUSJ8YIv6Obp+UcI/ f0ehNHSKmpZv0dEmjp+NoMxXqXOwZw/42W0bvA6p3JSiylsosfd45758dJFCcbDa 7yIH211x7A2ICcJ0FkFQ3P0jzbYTZfnn/bfu1TZNB9sWBR0zTklghl8lbBbcF/4U ywZKj7A2u8X+lZLAy0BzTRdLH+pe/o2+rmaC2oNPbBv5Trzl5v1mlz318kXTj9ib COCEEYg652Qq3rK/p5Suj+k7j0nhTkNN0SFXVtyuwLOuweDllcW4kvFmlS9Cb0So 7o8jlU5LRti60Uk6zN80OFpnhRqKuULha0uO8heclwiCGC6qQDOYyhfaTy+rz2ic -----END CERTIFICATE-----Generated at Sun Apr 19 14:06:28 2026 by rpki-client