$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft File: af121a54-266e-447b-8176-bfcd1dc7867c.mft (raw, json) Hash identifier: CvYOa851dxHx+QGmu0UhR724k+P74g6f79RJxPzEXpA= Subject key identifier: 5E:B7:2E:FA:4E:3D:D9:D2:FC:94:BF:F0:D0:C1:66:C6:73:58:79:BF Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD Certificate issuer: /CN=af121a54-266e-447b-8176-bfcd1dc7867c Certificate serial: 010D0C9F4328584D06A0A3B3837A0E48704CA000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft Manifest number: 010D0C9F43285845726B239107AE1661CDA1AF56 Signing time: Sun 01 Mar 2026 17:00:04 +0000 Manifest this update: Sun 01 Mar 2026 17:00:04 +0000 Manifest next update: Tue 03 Mar 2026 17:00:00 +0000 Files and hashes: 1: 04922686-2f93-3d22-92a4-035fa202dc47.roa (hash: UhlacdT/xYBhswwDZZpXPwQiXvVqCGgm2uoeVFezHW0=) 2: 4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa (hash: idPAHF9kecZdA85FlziB2Vo5TaApDyOIx3bCsWPGkHc=) 3: a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa (hash: KV0mbPPXBCaCiHsiSu7tzt/bKqOuJe1VIC5R7Abab4I=) 4: af121a54-266e-447b-8176-bfcd1dc7867c.crl (hash: QTC0o45cC//l03ZudKc5Mplh197i1l1qJI6d899IAKE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:a0:a3:b3:83:7a:0e:48:70:4c:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c Validity Not Before: Mar 1 17:00:04 2026 GMT Not After : Mar 3 17:00:00 2026 GMT Subject: CN=028fdbd2-36ee-4cc5-8707-76f86c4d4b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:8b:b8:71:0d:4e:ff:dc:75:bc:01:c4:d0: 80:41:75:f7:df:01:eb:62:af:c4:0a:fc:7f:01:c0: f9:69:e6:63:34:04:90:16:26:0f:b9:cd:69:64:bf: a9:75:8c:7b:ff:99:1b:ef:09:81:f8:93:dd:38:07: b7:c0:18:a9:19:99:5b:be:0b:3d:ee:df:c2:93:52: 4a:85:e6:f9:5d:92:e0:52:2e:7c:1a:ac:4a:e5:6f: 95:b6:64:37:35:c3:c2:b5:94:33:6c:9c:9f:99:d7: dd:6a:05:97:ad:fd:77:35:84:ac:aa:65:b1:b5:98: 1d:4d:9e:8e:10:47:67:aa:a1:de:89:6d:c2:a2:62: 8c:cb:13:8e:d2:05:b7:6c:d6:6a:49:76:01:79:f4: 4a:9d:59:7a:3b:4d:a9:0c:d5:d2:5d:78:b4:0e:c1: 54:90:7f:34:a7:4a:21:1d:55:ab:13:b8:78:5e:28: f0:68:f8:3e:ea:13:1f:06:39:3f:9d:75:b7:d1:bf: fe:83:44:89:ac:78:80:c7:d2:28:66:3d:7f:7f:47: 99:e3:e1:f5:45:6b:07:e2:08:07:a5:19:04:b5:95: c9:c1:a3:83:bd:0a:c8:32:c4:e7:33:75:e0:18:88: e6:92:57:dc:d0:2b:83:5e:8c:ac:12:08:56:e9:80: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B7:2E:FA:4E:3D:D9:D2:FC:94:BF:F0:D0:C1:66:C6:73:58:79:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl X509v3 Authority Key Identifier: keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ea:c1:50:24:02:76:07:ea:af:bf:90:f9:2f:13:82:d7:1c: 94:ba:27:d3:7a:31:2d:a5:3b:ac:cc:ab:02:f2:1d:39:43:59: 79:62:fc:f8:5b:ae:ca:83:79:f0:cc:17:fb:28:ca:e1:98:b6: 7f:97:09:92:13:7b:ac:00:73:00:b1:b3:8e:9e:52:9a:07:7e: 98:e2:65:8c:5e:a9:13:02:27:b1:6f:56:38:cf:c7:ac:d0:24: c6:db:b8:cf:c3:8b:24:9a:2a:3f:bc:45:3e:06:10:49:36:ea: c8:b6:87:6e:d1:57:9c:59:f8:df:bc:ae:90:2d:9f:5c:03:70: 1c:db:db:03:c6:34:e1:ad:19:7f:16:12:65:ec:f0:32:47:fc: 0e:70:fb:e1:0d:27:dd:d4:c6:15:29:02:c2:24:ab:15:16:0d: 31:fe:56:76:82:5c:21:f0:41:a2:4b:f7:85:19:67:88:18:1c: fb:25:95:c8:aa:a1:8c:70:51:f1:53:c1:09:02:de:62:29:02: 4f:7c:83:4f:3c:ef:67:86:4f:3c:a6:36:f5:2b:b0:52:30:b3: 5b:69:b2:74:d7:ba:f8:6a:c4:5a:99:df:d0:c8:8d:bd:e3:3a: 5d:34:ec:c1:a6:3c:a9:83:49:3d:6b:9c:fb:a2:69:16:eb:b1: 89:3a:de:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GoKOzg3oOSHBMoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYxMjFhNTQtMjY2ZS00NDdiLTgxNzYtYmZjZDFkYzc4 NjdjMB4XDTI2MDMwMTE3MDAwNFoXDTI2MDMwMzE3MDAwMFowLzEtMCsGA1UEAxMk MDI4ZmRiZDItMzZlZS00Y2M1LTg3MDctNzZmODZjNGQ0YjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9mLuHENTv/cdbwBxNCAQXX33wHrYq/ECvx/ AcD5aeZjNASQFiYPuc1pZL+pdYx7/5kb7wmB+JPdOAe3wBipGZlbvgs97t/Ck1JK heb5XZLgUi58GqxK5W+VtmQ3NcPCtZQzbJyfmdfdagWXrf13NYSsqmWxtZgdTZ6O EEdnqqHeiW3ComKMyxOO0gW3bNZqSXYBefRKnVl6O02pDNXSXXi0DsFUkH80p0oh HVWrE7h4XijwaPg+6hMfBjk/nXW30b/+g0SJrHiAx9IoZj1/f0eZ4+H1RWsH4ggH pRkEtZXJwaODvQrIMsTnM3XgGIjmklfc0CuDXoysEghW6YASfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF63LvpOPdnS/JS/8NDBZsZzWHm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZjEy MWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNkMWRjNzg2N2MvYWYxMjFhNTQtMjY2ZS00 NDdiLTgxNzYtYmZjZDFkYzc4NjdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWYxMjFhNTQtMjY2ZS00NDdiLTgx NzYtYmZjZDFkYzc4NjdjL2FmMTIxYTU0LTI2NmUtNDQ3Yi04MTc2LWJmY2QxZGM3 ODY3Yy5jcmwwHwYDVR0jBBgwFoAUMnVcxUnAaQnSNG495BOLXF/85b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZjEyMWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNk MWRjNzg2N2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/6sFQJAJ2B+qvv5D5LxOC 1xyUuifTejEtpTuszKsC8h05Q1l5Yvz4W67Kg3nwzBf7KMrhmLZ/lwmSE3usAHMA sbOOnlKaB36Y4mWMXqkTAiexb1Y4z8es0CTG27jPw4skmio/vEU+BhBJNurItodu 0VecWfjfvK6QLZ9cA3Ac29sDxjThrRl/FhJl7PAyR/wOcPvhDSfd1MYVKQLCJKsV Fg0x/lZ2glwh8EGiS/eFGWeIGBz7JZXIqqGMcFHxU8EJAt5iKQJPfINPPO9nhk88 pjb1K7BSMLNbabJ017r4asRamd/QyI294zpdNOzBpjypg0k9a5z7omkW67GJOt7h -----END CERTIFICATE-----Generated at Mon Mar 2 04:40:39 2026 by rpki-client