$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft File: 1af0a650-f612-4b2a-9af3-b8090917fefd.mft (raw, json) Hash identifier: 6IfABDR7BQXEyC7lK7SUbFPN9AWnxH+lXUQ0VsTrvDw= Subject key identifier: 20:C6:4F:BE:56:D7:4C:90:71:B6:0F:AD:BD:C5:B7:83:DC:23:3D:92 Authority key identifier: 0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D Certificate issuer: /CN=1af0a650-f612-4b2a-9af3-b8090917fefd Certificate serial: 010D0C9F4328584D4BD6D7FFAC7C72EF5D96BF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft Manifest number: 010D0C9F4328584BE67F5BDBA8BBD49634FD1984 Signing time: Thu 26 Mar 2026 12:00:03 +0000 Manifest this update: Thu 26 Mar 2026 12:00:03 +0000 Manifest next update: Sun 29 Mar 2026 12:00:00 +0000 Files and hashes: 1: 1af0a650-f612-4b2a-9af3-b8090917fefd.crl (hash: q3flocVUfua8TFxYu7FZ9nl3IyalkRnfmyzuwUX/NW8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:d6:d7:ff:ac:7c:72:ef:5d:96:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1af0a650-f612-4b2a-9af3-b8090917fefd Validity Not Before: Mar 26 12:00:03 2026 GMT Not After : Mar 29 12:00:00 2026 GMT Subject: CN=46d122fc-dad3-4e1e-9e0c-12a687664680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2d:10:fe:db:5d:5c:16:4c:21:af:6d:e1:96: b9:47:2b:67:9b:3b:55:e0:2f:55:ff:7d:b7:61:f8: 67:1e:ea:e0:cb:bd:45:c9:bd:28:33:f4:7f:b3:26: 59:28:9c:65:3d:06:e3:4e:fe:9c:e8:13:3d:ee:39: d7:5e:4b:de:e6:7c:2e:56:2f:90:d7:5b:e3:28:8b: e4:cc:61:d6:d7:89:a3:33:33:eb:67:f4:0b:8b:fb: b8:ff:9f:92:3a:c2:bc:7d:81:41:4e:64:03:c4:d7: 7b:31:5c:57:50:83:d7:8e:37:be:f8:84:0d:6a:c5: f6:84:ad:c4:e7:f1:a6:23:73:71:64:ce:06:ea:8f: de:24:3c:0d:04:9f:b6:c8:64:2c:58:54:75:af:11: 17:55:52:83:06:36:7c:b0:40:35:90:e3:a2:d1:f1: 73:e4:0c:85:2a:17:ba:9a:75:c8:12:bf:b1:1f:cf: 47:6b:f8:01:7f:67:d8:35:22:8f:ad:bf:29:78:89: 18:09:f2:23:78:7b:3b:5b:9f:83:27:1e:99:27:cc: 20:5d:fb:8b:7e:73:34:cc:8b:b9:b6:be:01:82:50: 71:ff:c1:b7:a2:53:b0:ea:bd:3c:7d:90:28:8e:85: b5:72:ae:e7:5c:59:f7:b6:af:4f:11:81:7c:97:1c: cf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C6:4F:BE:56:D7:4C:90:71:B6:0F:AD:BD:C5:B7:83:DC:23:3D:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl X509v3 Authority Key Identifier: keyid:0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:03:5c:e3:53:31:9e:58:c4:2f:13:7f:56:87:a5:cc:bb:db: cf:b1:c3:25:c6:0f:03:8d:5e:7e:79:7d:e3:de:b8:d1:a1:8c: 66:cd:0c:97:fd:c1:7b:f7:85:5a:80:a9:f3:c6:be:3c:35:e2: bf:c7:0a:d7:d3:b4:db:3d:34:38:8f:bf:32:03:c9:9d:46:6f: 13:df:a5:05:fc:56:11:65:d2:bb:31:6a:ee:4c:5b:5b:b3:eb: 44:1e:ae:9b:99:44:ba:b1:41:7a:3e:b8:09:cb:d4:ef:76:ce: f0:b4:8f:aa:e1:5c:0f:e2:81:32:7e:31:78:22:fa:5f:35:d7: d9:67:47:84:80:5c:ef:d7:f0:da:0c:85:f3:bd:ba:dc:41:e6: 32:2f:f0:61:a1:90:1d:7d:7c:68:95:a1:e1:7a:aa:be:e0:01: 9d:c9:4d:f3:11:c3:06:fb:80:c9:d3:2e:45:c9:3a:aa:89:69: 4e:1c:8a:db:b3:76:d6:a4:64:80:af:ff:a2:0e:04:0c:c1:fc: da:ee:c6:5e:4a:52:0b:73:74:50:5a:21:16:de:33:07:5f:5c: 84:ab:56:ae:72:5b:8d:c7:3b:3f:8e:68:a0:9a:b2:60:6f:de: 12:f8:a9:42:71:1e:93:a2:f6:9f:82:fc:f0:09:96:b0:bb:75: 26:41:12:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1L1tf/rHxy712WvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFmMGE2NTAtZjYxMi00YjJhLTlhZjMtYjgwOTA5MTdm ZWZkMB4XDTI2MDMyNjEyMDAwM1oXDTI2MDMyOTEyMDAwMFowLzEtMCsGA1UEAxMk NDZkMTIyZmMtZGFkMy00ZTFlLTllMGMtMTJhNjg3NjY0NjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8C0Q/ttdXBZMIa9t4Za5RytnmztV4C9V/323 YfhnHurgy71Fyb0oM/R/syZZKJxlPQbjTv6c6BM97jnXXkve5nwuVi+Q11vjKIvk zGHW14mjMzPrZ/QLi/u4/5+SOsK8fYFBTmQDxNd7MVxXUIPXjje++IQNasX2hK3E 5/GmI3NxZM4G6o/eJDwNBJ+2yGQsWFR1rxEXVVKDBjZ8sEA1kOOi0fFz5AyFKhe6 mnXIEr+xH89Ha/gBf2fYNSKPrb8peIkYCfIjeHs7W5+DJx6ZJ8wgXfuLfnM0zIu5 tr4BglBx/8G3olOw6r08fZAojoW1cq7nXFn3tq9PEYF8lxzPowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCDGT75W10yQcbYPrb3Ft4PcIz2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYw YTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5MDkxN2ZlZmQvMWFmMGE2NTAtZjYxMi00 YjJhLTlhZjMtYjgwOTA5MTdmZWZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWFmMGE2NTAtZjYxMi00YjJhLTlh ZjMtYjgwOTA5MTdmZWZkLzFhZjBhNjUwLWY2MTItNGIyYS05YWYzLWI4MDkwOTE3 ZmVmZC5jcmwwHwYDVR0jBBgwFoAUDWTi2ayqXnf8z1b/B9EFaOXwJJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYwYTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5 MDkxN2ZlZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/A1zjUzGeWMQvE39Wh6XM u9vPscMlxg8DjV5+eX3j3rjRoYxmzQyX/cF794VagKnzxr48NeK/xwrX07TbPTQ4 j78yA8mdRm8T36UF/FYRZdK7MWruTFtbs+tEHq6bmUS6sUF6PrgJy9Tvds7wtI+q 4VwP4oEyfjF4IvpfNdfZZ0eEgFzv1/DaDIXzvbrcQeYyL/BhoZAdfXxolaHheqq+ 4AGdyU3zEcMG+4DJ0y5FyTqqiWlOHIrbs3bWpGSAr/+iDgQMwfza7sZeSlILc3RQ WiEW3jMHX1yEq1aucluNxzs/jmigmrJgb94S+KlCcR6TovafgvzwCZawu3UmQRKB -----END CERTIFICATE-----Generated at Thu Mar 26 14:59:07 2026 by rpki-client