$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft File: 0afa673e-ceeb-4048-b2ab-93cad45814ac.mft (raw, json) Hash identifier: 8tgwS7QbwhJ9ePiQ+mSS6QPPZyw3OUmAqcWvBl//+YA= Subject key identifier: EB:13:18:29:9A:42:86:CF:F2:1D:ED:3A:47:F7:6C:BB:3F:50:9A:15 Authority key identifier: BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 Certificate issuer: /CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Certificate serial: 010D0C9F4328584D0665172FFEA4748660690060 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft Manifest number: 010D0C9F432858408445775F932E1F42E1007818 Signing time: Sun 01 Mar 2026 15:00:03 +0000 Manifest this update: Sun 01 Mar 2026 15:00:03 +0000 Manifest next update: Tue 03 Mar 2026 15:00:00 +0000 Files and hashes: 1: 0afa673e-ceeb-4048-b2ab-93cad45814ac.crl (hash: 4HQEckhn/nevv/JHsYaXeiLygXpqE5APXKTi0kQfcYs=) 2: 0c95cc7e-347c-343b-9a60-43effbd437ce.roa (hash: yn+6nGcPU3/0m5jz/cvRWjlZITdenUR89HenfzMB9Lg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:65:17:2f:fe:a4:74:86:60:69:00:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Validity Not Before: Mar 1 15:00:03 2026 GMT Not After : Mar 3 15:00:00 2026 GMT Subject: CN=ce430c37-c7c7-442c-a55d-bf3aa1bdd0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:5e:18:d9:93:37:55:47:37:21:3c:ed:5e: b3:24:af:2a:4a:44:79:95:d7:20:6b:e9:e2:d8:96: 23:dd:8e:70:b2:86:ec:0b:69:b4:4f:0a:89:1d:09: 68:fc:90:8f:7a:f8:cb:06:40:98:c5:2a:eb:a0:e9: 3c:c9:ed:2e:77:ac:e5:42:82:15:bc:61:68:77:ee: 8a:56:26:5d:0d:9d:57:54:e1:e7:06:26:ba:4b:9a: fd:1e:35:8e:d7:b7:fd:4d:85:1c:9d:f3:73:68:5b: 5f:9e:88:13:b1:c7:3c:34:b4:ce:95:25:e4:66:6e: 00:80:96:44:a7:04:f2:7e:a0:94:41:04:99:ae:d8: 78:7c:ca:c0:21:de:ae:b8:51:9f:62:ef:09:90:22: a4:10:73:7e:e2:ba:f1:89:3c:12:86:5d:02:ae:d5: 0e:78:85:e3:5d:b7:bc:f8:eb:d7:f4:38:57:b6:cd: 6a:30:51:76:9a:a7:cf:4d:d1:e3:08:d3:41:2e:f3: 91:1e:d3:0a:7b:3f:e6:6c:ab:42:e1:fd:f1:09:64: 28:10:0e:46:fa:33:5c:83:c8:b9:c8:19:20:ea:ba: 54:5f:63:9a:05:34:79:3d:88:44:4c:00:9c:68:af: 6e:2e:2d:d1:e0:09:88:4a:2d:5e:fd:ec:89:08:7c: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:13:18:29:9A:42:86:CF:F2:1D:ED:3A:47:F7:6C:BB:3F:50:9A:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl X509v3 Authority Key Identifier: keyid:BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c4:6b:2c:43:ae:a4:72:05:34:89:59:07:ef:d2:01:ff:29: 46:5f:67:7a:bd:92:27:26:6d:89:11:f2:df:00:7d:6d:81:b3: dc:d7:01:28:d2:d9:d9:f6:c3:3b:e0:9a:f0:a3:37:4b:e3:ac: de:e6:4f:3f:36:9f:32:52:bf:0f:a5:a9:1f:07:88:5b:31:9a: db:d3:14:0a:2c:dc:2b:db:6f:3e:d9:c9:a1:2b:a7:1f:73:91: c1:da:82:2f:62:fd:a4:c4:13:d8:11:97:44:7a:63:93:f8:6d: a2:9b:b6:9a:56:3f:3b:de:c9:eb:d4:70:df:8a:5e:4a:5f:62: 9d:81:29:b2:ee:1d:97:eb:a6:6b:50:8f:02:e9:58:84:e8:78: f7:8a:70:18:f7:92:61:89:c9:3a:f1:cd:d3:b6:f8:c2:fd:b0: c7:ca:f4:b0:34:a7:43:3e:c8:21:2e:e8:0a:7e:55:df:b5:71: 52:f8:53:00:c5:b0:35:8d:12:13:c8:3f:40:8a:cf:e2:4e:83: 8a:ca:34:5b:4e:01:d2:a9:44:b3:f2:b7:63:76:52:f9:fc:f0: ee:2b:cf:6c:86:22:7f:24:dc:05:0e:16:4b:b8:d5:c2:ac:39: 47:df:38:a5:8f:3a:38:36:ed:08:29:0f:bf:32:d2:ec:95:29: 29:0b:4e:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GZRcv/qR0hmBpAGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmYTY3M2UtY2VlYi00MDQ4LWIyYWItOTNjYWQ0NTgx NGFjMB4XDTI2MDMwMTE1MDAwM1oXDTI2MDMwMzE1MDAwMFowLzEtMCsGA1UEAxMk Y2U0MzBjMzctYzdjNy00NDJjLWE1NWQtYmYzYWExYmRkMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnReGNmTN1VHNyE87V6zJK8qSkR5ldcga+ni 2JYj3Y5wsobsC2m0TwqJHQlo/JCPevjLBkCYxSrroOk8ye0ud6zlQoIVvGFod+6K ViZdDZ1XVOHnBia6S5r9HjWO17f9TYUcnfNzaFtfnogTscc8NLTOlSXkZm4AgJZE pwTyfqCUQQSZrth4fMrAId6uuFGfYu8JkCKkEHN+4rrxiTwShl0CrtUOeIXjXbe8 +OvX9DhXts1qMFF2mqfPTdHjCNNBLvORHtMKez/mbKtC4f3xCWQoEA5G+jNcg8i5 yBkg6rpUX2OaBTR5PYhETACcaK9uLi3R4AmISi1e/eyJCHykNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOsTGCmaQobP8h3tOkf3bLs/UJoVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWZh NjczZS1jZWViLTQwNDgtYjJhYi05M2NhZDQ1ODE0YWMvMGFmYTY3M2UtY2VlYi00 MDQ4LWIyYWItOTNjYWQ0NTgxNGFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmYTY3M2UtY2VlYi00MDQ4LWIy YWItOTNjYWQ0NTgxNGFjLzBhZmE2NzNlLWNlZWItNDA0OC1iMmFiLTkzY2FkNDU4 MTRhYy5jcmwwHwYDVR0jBBgwFoAUvVEvSLcAjCwb2JozS3ZOtFgF2GcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWZhNjczZS1jZWViLTQwNDgtYjJhYi05M2Nh ZDQ1ODE0YWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsxGssQ66kcgU0iVkH79IB /ylGX2d6vZInJm2JEfLfAH1tgbPc1wEo0tnZ9sM74JrwozdL46ze5k8/Np8yUr8P pakfB4hbMZrb0xQKLNwr228+2cmhK6cfc5HB2oIvYv2kxBPYEZdEemOT+G2im7aa Vj873snr1HDfil5KX2KdgSmy7h2X66ZrUI8C6ViE6Hj3inAY95Jhick68c3TtvjC /bDHyvSwNKdDPsghLugKflXftXFS+FMAxbA1jRITyD9Ais/iToOKyjRbTgHSqUSz 8rdjdlL5/PDuK89shiJ/JNwFDhZLuNXCrDlH3ziljzo4Nu0IKQ+/MtLslSkpC04U -----END CERTIFICATE-----Generated at Mon Mar 2 13:32:06 2026 by rpki-client