$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft File: 1af0a650-f612-4b2a-9af3-b8090917fefd.mft (raw, json) Hash identifier: /jn0zC2QAoyEDmK8wx6rxcTiuQqVdgYhObm/YPlzRzM= Subject key identifier: BB:54:FB:E1:67:BE:27:03:07:FB:B7:F2:8C:9F:55:AE:3F:61:F6:82 Authority key identifier: 0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D Certificate issuer: /CN=1af0a650-f612-4b2a-9af3-b8090917fefd Certificate serial: 010D0C9F4328584CFDABB25A8C1DD8DF96B34280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft Manifest number: 010D0C9F4328584BE67F5BDBA8BBD49634FD1967 Signing time: Thu 26 Feb 2026 12:00:03 +0000 Manifest this update: Thu 26 Feb 2026 12:00:03 +0000 Manifest next update: Sun 01 Mar 2026 12:00:00 +0000 Files and hashes: 1: 1af0a650-f612-4b2a-9af3-b8090917fefd.crl (hash: kYPGXOcTUE6gxeeY2zgSebda4qavFGymbUlKHvloX0c=) 2: a163ff4c-23b6-3304-be68-6017eeb9e220.roa (hash: EnhtYbEvpzIKa40xgKRYt7fe8/ho4rr5vrSmQ3V1oZ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:ab:b2:5a:8c:1d:d8:df:96:b3:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1af0a650-f612-4b2a-9af3-b8090917fefd Validity Not Before: Feb 26 12:00:03 2026 GMT Not After : Mar 1 12:00:00 2026 GMT Subject: CN=6d9a54ba-7cf1-4cff-b998-0bcac4e17250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:83:ec:17:25:af:a4:ee:b6:a2:f4:2c:fe:e9: 3c:87:81:e1:d5:60:23:34:91:54:9c:6a:8b:d4:f7: 89:b2:0a:c0:1b:02:d4:fe:e3:d6:17:a3:41:0f:24: 62:38:0d:24:41:e1:73:c3:22:ed:f5:b4:a9:03:1a: b9:27:0c:78:07:34:cb:15:b9:3f:e4:da:aa:c3:13: 72:13:66:8d:68:82:24:af:25:fe:92:36:aa:03:73: f4:70:5f:4c:a2:f7:21:8d:11:82:87:52:1f:a5:ea: b9:ff:b3:43:13:1a:ad:cf:69:e6:0a:fd:d2:3f:56: 50:ad:a7:ec:f2:eb:6e:8b:39:2d:2c:67:a5:fb:d8: e2:ee:f3:c4:1a:05:4e:41:6a:b9:77:83:f9:eb:ca: d7:4a:d6:3e:24:b8:d7:9b:16:c6:c5:2c:8f:93:38: 49:95:68:5a:d6:87:f9:24:78:a6:96:0d:82:56:df: 14:c8:ad:d5:85:20:b2:ec:f9:0d:a3:76:03:63:69: a1:a9:25:92:87:82:e0:69:07:6f:6e:5a:72:ae:ff: e7:63:48:32:4b:9d:fe:02:36:0f:a4:22:8f:9f:09: cf:34:88:8c:df:79:b6:8b:9d:45:a3:1d:5b:b6:0a: a9:56:38:c7:94:f1:0d:ea:54:55:0e:c2:34:72:2d: 6d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:54:FB:E1:67:BE:27:03:07:FB:B7:F2:8C:9F:55:AE:3F:61:F6:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl X509v3 Authority Key Identifier: keyid:0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c5:2f:5d:e0:4f:20:77:fa:be:bc:de:c6:39:c1:6b:f5:88: ff:7a:cc:a8:e3:5c:53:d9:29:cb:55:a9:14:46:c8:36:d8:6e: c8:2b:9c:f8:50:c5:03:0f:a8:18:5c:7c:7d:ba:36:87:46:d9: 36:9f:e9:9d:02:dc:73:23:e0:7e:3e:21:de:cd:59:f9:d2:72: de:a7:ef:ca:a6:5d:e1:fd:0a:c6:b8:2d:d5:25:80:59:b0:d0: a8:94:33:07:9e:76:dd:dd:28:bd:74:82:81:16:bc:13:a1:d2: 85:2f:b0:ab:32:b6:32:b7:bf:ea:ba:4a:5f:c3:42:cb:2b:18: b1:ce:e9:98:d2:67:6a:bb:d8:7b:47:a4:9c:5a:03:ce:1b:f4: 21:24:fa:b0:d4:d8:f7:92:5b:f9:fe:dd:d3:aa:87:47:09:ea: e0:7d:17:61:85:df:d3:5a:e0:3a:be:0c:e9:ff:ce:86:37:e0: e6:43:88:88:9f:4c:98:2a:f6:2f:5c:b2:c8:da:2d:c9:2c:82: f8:9a:cf:2f:9f:a6:40:a5:7d:88:ce:df:32:db:05:07:6a:cd: ce:31:37:22:60:ab:7c:d8:2a:b9:6c:c6:3d:af:14:1c:7b:6c: 52:00:95:42:10:91:52:2c:74:5f:ca:a0:3c:73:9b:06:5b:fd: 78:54:00:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEz9q7JajB3Y35azQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFmMGE2NTAtZjYxMi00YjJhLTlhZjMtYjgwOTA5MTdm ZWZkMB4XDTI2MDIyNjEyMDAwM1oXDTI2MDMwMTEyMDAwMFowLzEtMCsGA1UEAxMk NmQ5YTU0YmEtN2NmMS00Y2ZmLWI5OTgtMGJjYWM0ZTE3MjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4PsFyWvpO62ovQs/uk8h4Hh1WAjNJFUnGqL 1PeJsgrAGwLU/uPWF6NBDyRiOA0kQeFzwyLt9bSpAxq5Jwx4BzTLFbk/5NqqwxNy E2aNaIIkryX+kjaqA3P0cF9MovchjRGCh1Ifpeq5/7NDExqtz2nmCv3SP1ZQrafs 8utuizktLGel+9ji7vPEGgVOQWq5d4P568rXStY+JLjXmxbGxSyPkzhJlWha1of5 JHimlg2CVt8UyK3VhSCy7PkNo3YDY2mhqSWSh4LgaQdvblpyrv/nY0gyS53+AjYP pCKPnwnPNIiM33m2i51Fox1btgqpVjjHlPEN6lRVDsI0ci1t1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLtU++FnvicDB/u38oyfVa4/YfaCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYw YTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5MDkxN2ZlZmQvMWFmMGE2NTAtZjYxMi00 YjJhLTlhZjMtYjgwOTA5MTdmZWZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWFmMGE2NTAtZjYxMi00YjJhLTlh ZjMtYjgwOTA5MTdmZWZkLzFhZjBhNjUwLWY2MTItNGIyYS05YWYzLWI4MDkwOTE3 ZmVmZC5jcmwwHwYDVR0jBBgwFoAUDWTi2ayqXnf8z1b/B9EFaOXwJJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYwYTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5 MDkxN2ZlZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrxS9d4E8gd/q+vN7GOcFr 9Yj/esyo41xT2SnLVakURsg22G7IK5z4UMUDD6gYXHx9ujaHRtk2n+mdAtxzI+B+ PiHezVn50nLep+/Kpl3h/QrGuC3VJYBZsNColDMHnnbd3Si9dIKBFrwTodKFL7Cr MrYyt7/qukpfw0LLKxixzumY0mdqu9h7R6ScWgPOG/QhJPqw1Nj3klv5/t3TqodH CergfRdhhd/TWuA6vgzp/86GN+DmQ4iIn0yYKvYvXLLI2i3JLIL4ms8vn6ZApX2I zt8y2wUHas3OMTciYKt82Cq5bMY9rxQce2xSAJVCEJFSLHRfyqA8c5sGW/14VAAD -----END CERTIFICATE-----Generated at Thu Feb 26 21:29:48 2026 by rpki-client