$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.mft File: aa7171b0-4847-462e-b732-1c7ed6b3b0b1.mft (raw, json) Hash identifier: XGpnxg29AqzjJxxoemoeg63yBofBrMW3cG/3otnWeTA= Subject key identifier: B5:83:CF:AC:59:50:77:B4:FD:2A:7E:6A:BA:A0:B6:C6:1A:AD:AA:47 Authority key identifier: F9:0C:DB:DA:38:8A:15:51:9D:4E:27:95:05:A6:CB:01:1D:75:A2:9F Certificate issuer: /CN=aa7171b0-4847-462e-b732-1c7ed6b3b0b1 Certificate serial: 010D0C9F4328584D0682E9433D0880EAED9FF600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.mft Manifest number: 010D0C9F4328584BE9CA121A81BB04FEA13D09E9 Signing time: Sun 01 Mar 2026 16:00:08 +0000 Manifest this update: Sun 01 Mar 2026 16:00:08 +0000 Manifest next update: Wed 04 Mar 2026 16:00:00 +0000 Files and hashes: 1: aa7171b0-4847-462e-b732-1c7ed6b3b0b1.crl (hash: 05PbpPHTugYDxf4T+UmaL9XOS3upT1pQIlt4FK5k5ig=) 2: f9e6c530-846a-3e06-812c-206bcca4499e.roa (hash: ZiCobYMU+aJWSEdSVx4dNzMa9Ah4u2Cikli0ThVeQ8o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:82:e9:43:3d:08:80:ea:ed:9f:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7171b0-4847-462e-b732-1c7ed6b3b0b1 Validity Not Before: Mar 1 16:00:08 2026 GMT Not After : Mar 4 16:00:00 2026 GMT Subject: CN=0e58f70c-5a74-469c-8a64-ab7dc191de9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cb:3b:42:de:84:8f:1a:16:5c:18:24:04:a5: 24:d2:30:d9:ab:de:2a:d3:71:bb:30:c4:e7:6b:06: 0d:37:22:ca:4e:ad:b6:9e:5a:1c:1e:de:2f:01:43: 7c:ac:6b:03:44:e5:14:8d:e1:ee:2f:69:35:cc:47: a8:b0:fd:b3:e5:a0:30:ec:c2:cb:f6:ea:21:29:93: 08:e4:88:5e:a1:d9:18:6e:68:2a:9d:df:c3:8d:b9: 03:ba:4d:23:15:05:2e:1b:aa:db:83:6f:84:ee:4d: 06:14:0c:6c:df:02:83:ba:19:bd:66:a1:4a:d0:d8: 5f:31:93:df:16:97:ed:f6:5d:7a:c4:f4:67:a8:32: 5e:b8:f0:39:15:d0:d5:91:e0:0c:dc:bb:8a:e9:0e: 3c:88:7d:e6:25:6a:1d:84:8e:c2:54:60:ca:88:66: ba:64:40:ad:78:39:77:14:8f:05:f4:c4:02:e9:a8: d1:32:38:20:38:35:3c:5a:a2:6d:96:f8:49:83:50: 86:09:a4:c9:a2:7e:b6:6f:b8:9d:6b:d0:a2:4d:6d: 39:16:14:b7:48:77:79:88:8b:69:a8:78:bd:88:d7: 92:b3:04:2e:85:4e:4a:f6:da:12:f4:61:07:28:cb: fb:13:3b:f0:fa:fd:9f:22:e6:79:ae:bf:01:ba:2f: e2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:83:CF:AC:59:50:77:B4:FD:2A:7E:6A:BA:A0:B6:C6:1A:AD:AA:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.crl X509v3 Authority Key Identifier: keyid:F9:0C:DB:DA:38:8A:15:51:9D:4E:27:95:05:A6:CB:01:1D:75:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b1:06:c5:14:7b:e4:79:6d:6e:a2:2a:55:9b:90:62:3e:15: db:27:5d:2f:26:41:f6:52:06:fc:5c:65:83:94:02:64:0b:56: 79:aa:c8:46:3b:82:5a:0e:a6:e0:c4:da:b1:e0:24:8b:36:af: 28:ba:46:75:ff:75:23:e2:60:a2:a4:11:ff:18:7f:72:8f:88: e6:f2:f1:ca:0a:02:44:84:f3:31:5c:c0:44:8f:bc:b9:a5:a1: f5:41:3d:df:18:68:4d:5b:85:ff:11:e5:96:3e:02:ad:65:02: c8:73:d8:ec:a6:6a:3d:9c:9c:68:fc:76:74:95:7e:d7:69:5d: ca:bb:52:c8:39:f6:2c:de:64:9a:a3:cb:f5:22:d8:a8:68:77: c9:95:6c:39:f2:f5:01:fe:69:33:f8:f1:b7:c9:79:6a:a7:87: cb:0b:52:ab:da:e5:7c:bc:78:6b:5d:d0:75:ae:35:48:1d:e3: b3:df:1b:c9:a0:58:f4:0e:ee:33:88:90:77:ec:d9:8a:53:a8: d6:f5:e5:95:b7:73:9c:66:1c:d2:99:ef:3c:3a:36:30:98:9d: 25:ad:d5:eb:5d:9c:71:12:00:01:09:2c:54:b4:58:ff:12:56: 7f:12:fb:84:1e:2f:d4:06:11:51:2f:6b:49:25:c3:f3:31:39: 87:14:23:7b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GgulDPQiA6u2f9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE3MTcxYjAtNDg0Ny00NjJlLWI3MzItMWM3ZWQ2YjNi MGIxMB4XDTI2MDMwMTE2MDAwOFoXDTI2MDMwNDE2MDAwMFowLzEtMCsGA1UEAxMk MGU1OGY3MGMtNWE3NC00NjljLThhNjQtYWI3ZGMxOTFkZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMs7Qt6EjxoWXBgkBKUk0jDZq94q03G7MMTn awYNNyLKTq22nlocHt4vAUN8rGsDROUUjeHuL2k1zEeosP2z5aAw7MLL9uohKZMI 5IheodkYbmgqnd/DjbkDuk0jFQUuG6rbg2+E7k0GFAxs3wKDuhm9ZqFK0NhfMZPf Fpft9l16xPRnqDJeuPA5FdDVkeAM3LuK6Q48iH3mJWodhI7CVGDKiGa6ZECteDl3 FI8F9MQC6ajRMjggODU8WqJtlvhJg1CGCaTJon62b7ida9CiTW05FhS3SHd5iItp qHi9iNeSswQuhU5K9toS9GEHKMv7Ezvw+v2fIuZ5rr8Bui/iGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLWDz6xZUHe0/Sp+arqgtsYarapHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hYTcx NzFiMC00ODQ3LTQ2MmUtYjczMi0xYzdlZDZiM2IwYjEvYWE3MTcxYjAtNDg0Ny00 NjJlLWI3MzItMWM3ZWQ2YjNiMGIxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWE3MTcxYjAtNDg0Ny00NjJlLWI3 MzItMWM3ZWQ2YjNiMGIxL2FhNzE3MWIwLTQ4NDctNDYyZS1iNzMyLTFjN2VkNmIz YjBiMS5jcmwwHwYDVR0jBBgwFoAU+Qzb2jiKFVGdTieVBabLAR11op8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hYTcxNzFiMC00ODQ3LTQ2MmUtYjczMi0xYzdl ZDZiM2IwYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6sQbFFHvkeW1uoipVm5Bi PhXbJ10vJkH2Ugb8XGWDlAJkC1Z5qshGO4JaDqbgxNqx4CSLNq8oukZ1/3Uj4mCi pBH/GH9yj4jm8vHKCgJEhPMxXMBEj7y5paH1QT3fGGhNW4X/EeWWPgKtZQLIc9js pmo9nJxo/HZ0lX7XaV3Ku1LIOfYs3mSao8v1ItioaHfJlWw58vUB/mkz+PG3yXlq p4fLC1Kr2uV8vHhrXdB1rjVIHeOz3xvJoFj0Du4ziJB37NmKU6jW9eWVt3OcZhzS me88OjYwmJ0lrdXrXZxxEgABCSxUtFj/ElZ/EvuEHi/UBhFRL2tJJcPzMTmHFCN7 -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:42 2026 by rpki-client