$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft File: af651adf-a795-466a-9b0b-afaaea21402a.mft (raw, json) Hash identifier: nLAIqA/fqHTtLT4xviVt+lkTo+VpSA2f2XxQWnA46tA= Subject key identifier: 83:75:B4:63:32:67:23:A3:10:72:87:6E:B3:21:12:B0:78:13:F9:F8 Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584D0682EC8B7503299FD76DD600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft Manifest number: 010D0C9F43285849B5E8BF14CBBF349B41F87C47 Signing time: Sun 01 Mar 2026 16:00:08 +0000 Manifest this update: Sun 01 Mar 2026 16:00:08 +0000 Manifest next update: Wed 04 Mar 2026 16:00:00 +0000 Files and hashes: 1: af651adf-a795-466a-9b0b-afaaea21402a.crl (hash: Y7zeO6eDZwU3QZvXfoSIFzw8iQar0l1mthJESKd+ghE=) 2: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (hash: cXc/r6a0ONFf3KT7Zamb0pVtGBccGa8fRx8Nss6n4rk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:82:ec:8b:75:03:29:9f:d7:6d:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Mar 1 16:00:08 2026 GMT Not After : Mar 4 16:00:00 2026 GMT Subject: CN=b85026c0-8071-4270-b0d2-61702d55ebca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fb:b4:3a:15:2d:c3:29:c8:06:6c:a4:17:63: a3:3b:d1:92:64:4d:f1:35:1a:1d:35:10:f4:85:19: be:d8:8a:ba:a8:71:0e:e7:4f:3a:be:2c:0f:1b:4a: b8:e5:73:8d:b3:4b:1e:b2:1b:a4:5a:2c:07:aa:d9: ab:8f:95:a6:b6:c5:f8:07:38:62:b4:3c:95:60:32: ca:f2:0d:64:2d:3f:4f:b0:86:9b:f0:24:d6:85:9b: c6:ec:4d:dd:37:94:fd:6e:1b:7d:59:8a:1c:0a:90: fc:47:0c:40:0a:70:d4:25:c6:0d:e4:84:84:1a:bb: 3a:4b:8f:23:bf:ca:ea:1c:1a:7e:4b:4c:24:c9:ea: 99:ef:61:d2:7c:41:44:1f:01:34:2e:55:65:70:5e: 54:48:22:ec:9f:6a:ac:10:12:24:20:cf:ab:f3:a0: 4d:29:32:ac:3e:7f:b4:ef:fe:bc:0e:ea:54:20:53: b0:06:3b:ec:de:1c:c7:b7:4e:29:7a:06:5e:e4:af: 14:79:16:14:48:fa:ab:17:9d:e8:a9:f9:f9:2c:0d: 37:6e:84:5d:08:03:64:73:df:65:24:9f:dc:60:6f: d6:9b:8a:77:2a:46:3e:1b:d7:64:95:18:68:69:90: 86:a6:58:3e:41:80:ea:e3:61:5c:3e:ba:4e:ed:26: d3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:75:B4:63:32:67:23:A3:10:72:87:6E:B3:21:12:B0:78:13:F9:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:74:b9:33:88:90:de:b5:80:33:4a:8a:41:88:88:e0:61:94: 7b:5c:8c:f3:5c:03:cf:ec:93:de:50:e0:2f:83:5c:f4:18:84: 66:dc:32:fc:e0:0a:f0:25:1f:65:db:19:ad:25:25:e6:82:2c: ff:0f:46:dc:57:8c:83:26:9b:69:fe:1c:57:7b:5e:09:ce:b7: c2:8a:96:65:b6:44:c5:cd:72:c9:2f:6c:cd:31:22:17:d3:0e: 4b:bd:eb:6d:84:7b:d1:60:18:74:2b:ba:c0:25:6d:ab:ca:66: d4:6d:3c:d5:be:2b:fb:c4:97:04:aa:c9:b2:ca:ee:f8:03:2b: d8:41:5f:3e:db:89:3c:61:31:e4:01:08:c6:0c:0f:7c:7f:0c: ea:3b:d8:bf:1b:b4:6f:64:50:0d:69:18:a3:d8:9a:72:ce:67: e3:ae:95:36:ed:10:eb:e3:a2:35:0b:ca:e3:b9:2b:23:fc:54: 4e:ac:7c:e1:b3:0f:d4:e1:a0:ab:a0:f2:a5:98:0f:9e:9e:f6: c1:08:01:fd:26:79:29:cc:96:a6:f8:a5:52:d3:1e:96:a3:93: 99:fa:26:85:68:81:a8:2b:3e:76:be:85:d7:b3:f7:1f:c5:07: d5:00:e0:ad:b7:d7:33:51:18:24:ca:16:b3:2f:99:4b:8f:ce: ba:f3:78:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GguyLdQMpn9dt1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI2MDMwMTE2MDAwOFoXDTI2MDMwNDE2MDAwMFowLzEtMCsGA1UEAxMk Yjg1MDI2YzAtODA3MS00MjcwLWIwZDItNjE3MDJkNTVlYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfu0OhUtwynIBmykF2OjO9GSZE3xNRodNRD0 hRm+2Iq6qHEO5086viwPG0q45XONs0seshukWiwHqtmrj5WmtsX4BzhitDyVYDLK 8g1kLT9PsIab8CTWhZvG7E3dN5T9bht9WYocCpD8RwxACnDUJcYN5ISEGrs6S48j v8rqHBp+S0wkyeqZ72HSfEFEHwE0LlVlcF5USCLsn2qsEBIkIM+r86BNKTKsPn+0 7/68DupUIFOwBjvs3hzHt04pegZe5K8UeRYUSPqrF53oqfn5LA03boRdCANkc99l JJ/cYG/Wm4p3KkY+G9dklRhoaZCGplg+QYDq42FcPrpO7SbT8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIN1tGMyZyOjEHKHbrMhErB4E/n4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvYWY2NTFhZGYtYTc5NS00 NjZhLTliMGItYWZhYWVhMjE0MDJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRdLkziJDetYAzSopBiIjg YZR7XIzzXAPP7JPeUOAvg1z0GIRm3DL84ArwJR9l2xmtJSXmgiz/D0bcV4yDJptp /hxXe14JzrfCipZltkTFzXLJL2zNMSIX0w5LvetthHvRYBh0K7rAJW2rymbUbTzV viv7xJcEqsmyyu74AyvYQV8+24k8YTHkAQjGDA98fwzqO9i/G7RvZFANaRij2Jpy zmfjrpU27RDr46I1C8rjuSsj/FROrHzhsw/U4aCroPKlmA+envbBCAH9JnkpzJam +KVS0x6Wo5OZ+iaFaIGoKz52voXXs/cfxQfVAOCtt9czURgkyhazL5lLj86683i5 -----END CERTIFICATE-----Generated at Mon Mar 2 17:29:44 2026 by rpki-client