$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: /iIBq+zxthD2ej1UFxJJB08PTdUKwy9VatQoVkpyJ4Y= Subject key identifier: A2:36:46:5E:A9:D3:AF:5D:3F:D1:FB:77:04:32:C8:E7:19:FD:8D:8A Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584D05B274F3CD7C7E20E4581800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3BE4 Signing time: Sun 01 Mar 2026 09:00:08 +0000 Manifest this update: Sun 01 Mar 2026 09:00:08 +0000 Manifest next update: Wed 04 Mar 2026 09:00:00 +0000 Files and hashes: 1: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (hash: 5m9ra8yT6ANocpsIpmlk4LULYnaQErR/BLkmmU1r9Xo=) 2: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (hash: if8zgtzM2usFyn2wZSGsZXfbuhqS2ym1iBkrYf8p3Ps=) 3: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (hash: C/sdjqpHiuSqrhiGjL1NZYa4My3mB5VK9UqceLkl0rI=) 4: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: J/3t6m4lBsykeTy/frsIZKibe+rqj9fioWuDKxES70Q=) 5: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (hash: H11Or6peyZ1TRQNc5Fd+qiwk7vD3wKjV8BglVZkTfUc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:b2:74:f3:cd:7c:7e:20:e4:58:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Mar 1 09:00:08 2026 GMT Not After : Mar 4 09:00:00 2026 GMT Subject: CN=e64e3f0c-c3bf-4ea2-a2b7-a6f11233d223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ed:45:93:43:98:fb:be:00:4e:2f:a3:b1:30: 1d:d5:4d:49:24:da:a7:36:2a:4a:b3:84:05:af:46: 13:c2:88:6f:97:5a:98:10:f6:aa:92:cc:c1:f9:72: dc:8a:f5:3b:8d:88:de:6f:b7:25:19:02:86:a4:93: 25:ef:49:8e:28:4f:b0:c1:ae:b3:10:7d:29:8b:4a: a4:b7:2a:e4:ca:a0:17:8b:bb:e1:42:65:4d:09:d8: 58:a0:7d:00:71:a3:61:65:43:18:d0:78:e6:95:c3: 8a:32:37:4a:e0:3b:92:d9:cb:9d:9e:6d:1f:f4:6e: 79:27:43:58:73:05:c1:28:86:be:26:70:2d:32:21: 45:b4:7b:62:ce:1e:d8:0c:b1:43:49:71:5d:39:28: 26:ef:fb:b8:1f:9d:4f:6b:ea:26:60:27:f3:0c:83: cc:20:8d:af:6e:f5:fb:75:3e:40:e2:fc:31:3d:0e: 16:7b:ab:ce:15:d8:32:88:a4:3b:5f:9a:ee:53:b7: ae:0d:c6:55:7f:84:9f:8f:12:7a:11:57:af:59:29: ae:d7:61:cd:10:b9:84:a4:cb:b2:18:3f:77:fe:db: 49:fb:ac:61:27:d2:09:b3:86:fb:df:8e:18:be:96: df:1c:98:7e:d3:ee:79:6f:ee:8f:eb:b3:f3:ea:ee: 46:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:36:46:5E:A9:D3:AF:5D:3F:D1:FB:77:04:32:C8:E7:19:FD:8D:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:fd:1e:c1:47:31:76:97:a2:2b:9e:1d:56:90:28:fb:22:12: e0:52:f7:12:3b:b1:f9:94:03:34:72:14:69:8a:73:2b:94:a8: 99:89:9c:fc:a6:27:23:c7:8c:92:62:da:12:b6:bb:34:66:a6: fb:ed:3d:50:b3:69:cf:6c:9a:53:b6:84:c0:e8:b9:1c:29:2c: 14:3a:9c:24:7b:47:0e:fb:62:76:23:24:f7:a0:0c:1e:25:18: e5:e7:f3:31:68:7a:18:eb:f5:79:2a:40:df:31:ac:58:ed:57: dd:73:53:a9:b5:e8:4b:eb:1d:54:68:a0:c2:7c:db:8c:f4:bf: 69:c5:cc:3b:8b:11:b7:1c:30:3f:53:7e:1e:7d:77:24:8b:b9: 3a:6d:da:a3:b2:2a:57:55:a7:d7:9c:d5:a5:7e:48:b3:d7:89: a5:fb:9d:c7:9a:f0:68:ae:9f:0e:ff:01:36:65:bd:c4:c0:e2: d4:86:81:2e:48:e0:80:9b:83:17:e2:69:26:86:5d:44:1a:89: d0:0f:3a:5e:ad:02:f2:ac:83:be:18:6f:bf:3a:f8:1f:8a:71: 50:84:47:3b:61:dc:b8:33:7b:75:b4:06:af:26:02:a5:95:bf: 29:11:ba:ec:a3:38:06:5f:09:55:97:d6:9d:d8:57:a5:41:ed: 25:4f:bc:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0FsnTzzXx+IORYGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI2MDMwMTA5MDAwOFoXDTI2MDMwNDA5MDAwMFowLzEtMCsGA1UEAxMk ZTY0ZTNmMGMtYzNiZi00ZWEyLWEyYjctYTZmMTEyMzNkMjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+1Fk0OY+74ATi+jsTAd1U1JJNqnNipKs4QF r0YTwohvl1qYEPaqkszB+XLcivU7jYjeb7clGQKGpJMl70mOKE+wwa6zEH0pi0qk tyrkyqAXi7vhQmVNCdhYoH0AcaNhZUMY0HjmlcOKMjdK4DuS2cudnm0f9G55J0NY cwXBKIa+JnAtMiFFtHtizh7YDLFDSXFdOSgm7/u4H51Pa+omYCfzDIPMII2vbvX7 dT5A4vwxPQ4We6vOFdgyiKQ7X5ruU7euDcZVf4SfjxJ6EVevWSmu12HNELmEpMuy GD93/ttJ+6xhJ9IJs4b7344YvpbfHJh+0+55b+6P67Pz6u5GdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKI2Rl6p069dP9H7dwQyyOcZ/Y2KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAf/R7BRzF2l6Irnh1WkCj7 IhLgUvcSO7H5lAM0chRpinMrlKiZiZz8picjx4ySYtoStrs0Zqb77T1Qs2nPbJpT toTA6LkcKSwUOpwke0cO+2J2IyT3oAweJRjl5/MxaHoY6/V5KkDfMaxY7Vfdc1Op tehL6x1UaKDCfNuM9L9pxcw7ixG3HDA/U34efXcki7k6bdqjsipXVafXnNWlfkiz 14ml+53HmvBorp8O/wE2Zb3EwOLUhoEuSOCAm4MX4mkmhl1EGonQDzperQLyrIO+ GG+/OvgfinFQhEc7Ydy4M3t1tAavJgKllb8pEbrsozgGXwlVl9ad2FelQe0lT7zS -----END CERTIFICATE-----Generated at Mon Mar 2 04:03:00 2026 by rpki-client