$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft File: 1af0a650-f612-4b2a-9af3-b8090917fefd.mft (raw, json) Hash identifier: 8F18yHSV9xL2y1tWRhKXi1WX1IYi4vk62kcX7MsCqUs= Subject key identifier: 51:C3:6C:8C:A1:F5:CE:10:D3:78:08:48:FF:54:21:23:1B:0C:3E:91 Authority key identifier: 0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D Certificate issuer: /CN=1af0a650-f612-4b2a-9af3-b8090917fefd Certificate serial: 010D0C9F4328584D060BBDF933AA23A6AEB62580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft Manifest number: 010D0C9F4328584BE67F5BDBA8BBD49634FD196A Signing time: Sun 01 Mar 2026 12:00:03 +0000 Manifest this update: Sun 01 Mar 2026 12:00:03 +0000 Manifest next update: Tue 03 Mar 2026 12:00:00 +0000 Files and hashes: 1: 1af0a650-f612-4b2a-9af3-b8090917fefd.crl (hash: P5ztIU68a3EDKrHS2ij2F36h7cPIOWOO/1Nb3U2F4w8=) 2: a163ff4c-23b6-3304-be68-6017eeb9e220.roa (hash: EnhtYbEvpzIKa40xgKRYt7fe8/ho4rr5vrSmQ3V1oZ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:0b:bd:f9:33:aa:23:a6:ae:b6:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1af0a650-f612-4b2a-9af3-b8090917fefd Validity Not Before: Mar 1 12:00:03 2026 GMT Not After : Mar 3 12:00:00 2026 GMT Subject: CN=1f0f4fa5-5b2a-48a0-ab8d-17b012c3381f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:98:2c:0d:98:3b:55:79:7a:42:75:8d:c0:27: a3:db:1a:ae:c4:ac:d9:9e:c4:e7:fc:53:0a:9f:cf: fb:13:84:a2:24:b1:12:77:fa:70:b7:75:89:e0:34: 83:9c:70:83:af:6e:e4:3b:74:44:59:9f:28:3f:b5: d0:d2:9e:c2:f6:4e:e5:b0:b3:b7:93:5c:ae:23:53: e8:03:51:cf:25:30:c7:bd:b0:88:bb:bb:b4:03:20: 43:d1:10:14:36:de:33:d2:62:b8:21:86:fa:5a:49: 11:78:c8:d6:44:d1:1f:af:4c:c0:26:b5:2f:2d:fa: 15:81:44:df:86:fd:b1:95:51:f9:fc:39:c8:3c:b3: 6e:9d:5a:93:cf:d9:79:53:33:d4:9c:b7:97:76:af: a8:5a:d1:e0:9d:2c:93:d4:0c:4c:61:05:52:49:1e: 70:f7:4e:ea:33:bf:71:8b:25:dc:1d:b6:15:5f:5d: 3c:94:75:49:9b:40:0f:1a:ea:a5:2c:97:b8:7c:a4: ca:73:44:d5:6f:b6:cf:3e:af:66:e7:d0:f0:45:c1: 1a:af:57:d0:3e:ef:b2:57:9f:bd:25:8b:8f:2b:16: 81:bc:fe:c0:73:5c:99:dd:68:5f:67:fe:7f:60:e1: 8c:31:f0:0f:d8:55:db:d7:34:b9:a7:93:77:69:a4: c4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C3:6C:8C:A1:F5:CE:10:D3:78:08:48:FF:54:21:23:1B:0C:3E:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl X509v3 Authority Key Identifier: keyid:0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:05:cf:5c:30:16:a5:81:c8:83:57:0e:ef:58:bf:6b:a7:db: 11:12:1d:de:43:91:fe:1a:4b:dc:11:b9:e8:c5:b1:ed:38:11: a9:1a:f0:55:0d:ce:26:08:e9:19:c7:59:11:0d:c0:32:cd:fe: 1d:47:c6:ae:07:01:84:61:87:e1:56:0e:ee:a7:5f:38:f2:a4: 9c:6f:20:9c:fa:98:16:7e:01:c1:b2:e0:ca:cb:94:85:a1:c7: 98:80:7b:24:a9:b7:00:af:cb:56:92:3e:80:24:33:4b:89:ae: 1f:20:7f:a0:e1:d6:69:da:be:68:5f:ad:67:5a:ec:a8:19:fe: 16:2e:86:2c:76:0d:f7:0d:d5:c5:1d:32:6e:56:6f:8a:64:86: 8a:86:f1:53:4d:c9:b6:cf:e2:f4:bc:5a:2e:34:6e:45:63:28: bd:ae:5e:c4:eb:2e:18:c2:61:14:eb:c1:13:05:db:e9:d9:20: 16:9f:e0:a9:0a:02:3a:67:b8:72:6d:26:3a:1b:e4:71:3b:b0: 76:c1:a5:25:c7:cd:99:da:8c:a9:d9:c1:fe:67:3f:19:e7:55: 8a:79:7a:6a:45:87:a2:f1:a1:fc:51:ff:e8:87:81:a6:c8:7b: ff:a0:72:6a:0c:ce:69:0c:96:c4:7c:19:28:23:87:42:ef:c9: 96:13:23:87 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GC735M6ojpq62JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFmMGE2NTAtZjYxMi00YjJhLTlhZjMtYjgwOTA5MTdm ZWZkMB4XDTI2MDMwMTEyMDAwM1oXDTI2MDMwMzEyMDAwMFowLzEtMCsGA1UEAxMk MWYwZjRmYTUtNWIyYS00OGEwLWFiOGQtMTdiMDEyYzMzODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpgsDZg7VXl6QnWNwCej2xquxKzZnsTn/FMK n8/7E4SiJLESd/pwt3WJ4DSDnHCDr27kO3REWZ8oP7XQ0p7C9k7lsLO3k1yuI1Po A1HPJTDHvbCIu7u0AyBD0RAUNt4z0mK4IYb6WkkReMjWRNEfr0zAJrUvLfoVgUTf hv2xlVH5/DnIPLNunVqTz9l5UzPUnLeXdq+oWtHgnSyT1AxMYQVSSR5w907qM79x iyXcHbYVX108lHVJm0APGuqlLJe4fKTKc0TVb7bPPq9m59DwRcEar1fQPu+yV5+9 JYuPKxaBvP7Ac1yZ3WhfZ/5/YOGMMfAP2FXb1zS5p5N3aaTEsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFHDbIyh9c4Q03gISP9UISMbDD6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYw YTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5MDkxN2ZlZmQvMWFmMGE2NTAtZjYxMi00 YjJhLTlhZjMtYjgwOTA5MTdmZWZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWFmMGE2NTAtZjYxMi00YjJhLTlh ZjMtYjgwOTA5MTdmZWZkLzFhZjBhNjUwLWY2MTItNGIyYS05YWYzLWI4MDkwOTE3 ZmVmZC5jcmwwHwYDVR0jBBgwFoAUDWTi2ayqXnf8z1b/B9EFaOXwJJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYwYTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5 MDkxN2ZlZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsBc9cMBalgciDVw7vWL9r p9sREh3eQ5H+GkvcEbnoxbHtOBGpGvBVDc4mCOkZx1kRDcAyzf4dR8auBwGEYYfh Vg7up1848qScbyCc+pgWfgHBsuDKy5SFoceYgHskqbcAr8tWkj6AJDNLia4fIH+g 4dZp2r5oX61nWuyoGf4WLoYsdg33DdXFHTJuVm+KZIaKhvFTTcm2z+L0vFouNG5F Yyi9rl7E6y4YwmEU68ETBdvp2SAWn+CpCgI6Z7hybSY6G+RxO7B2waUlx82Z2oyp 2cH+Zz8Z51WKeXpqRYei8aH8Uf/oh4GmyHv/oHJqDM5pDJbEfBkoI4dC78mWEyOH -----END CERTIFICATE-----Generated at Mon Mar 2 02:38:42 2026 by rpki-client