$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft File: af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft (raw, json) Hash identifier: xV2tU8SZgD6r67rncql+F4I4REjPkgr3hZDHcJT9Pe8= Subject key identifier: 04:87:F4:C3:66:B1:35:ED:50:BC:CA:1E:E8:3B:00:F0:72:E4:4B:0E Authority key identifier: 41:D5:22:44:65:72:BB:3C:67:67:65:E7:28:3E:BF:7D:34:17:18:20 Certificate issuer: /CN=af2f6961-091f-4bb2-90d1-dcdd969f1c75 Certificate serial: 010D0C9F4328584D49DC9DBD9F515D79EE68A380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft Manifest number: 010D0C9F4328584073A8233177FD88AEE3115AB5 Signing time: Wed 25 Mar 2026 19:00:04 +0000 Manifest this update: Wed 25 Mar 2026 19:00:04 +0000 Manifest next update: Fri 27 Mar 2026 19:00:00 +0000 Files and hashes: 1: 00b8bd76-9778-3e13-90d1-44c43d4c3610.roa (hash: k9Eya0nvGEmajNZSWmD/noady3dEhpzNiSlzxtjcUIE=) 2: af2f6961-091f-4bb2-90d1-dcdd969f1c75.crl (hash: OiF6tE8K2dKkl04hJXhq7dcwe7Ufd7hCz7cLC4a4+mU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:dc:9d:bd:9f:51:5d:79:ee:68:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af2f6961-091f-4bb2-90d1-dcdd969f1c75 Validity Not Before: Mar 25 19:00:04 2026 GMT Not After : Mar 27 19:00:00 2026 GMT Subject: CN=a188df11-678e-4f5d-84e0-aa391ba31ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b5:a9:b8:51:05:ca:43:f0:6b:ef:b1:b6:aa: 0a:c8:39:b0:cb:b5:b9:52:ab:b8:71:b4:59:3e:3c: 32:5e:7d:c3:a7:74:5a:43:d4:b7:a0:81:5d:73:6c: c2:3f:0d:fc:45:ac:bd:59:8b:a9:75:f4:3b:17:25: 4e:2e:44:d0:db:42:6c:33:53:cc:23:34:ce:7d:45: 4d:77:6e:82:b9:fd:18:ce:bc:c4:9b:f4:63:0e:e1: c6:d1:1e:e7:ab:ed:d1:ef:41:57:0a:4d:a6:76:a5: e1:e1:fb:e1:26:54:64:48:03:0a:0e:53:96:54:2f: 2b:57:c1:40:05:b8:2a:f1:c0:40:7f:75:24:22:14: 62:fc:c9:7b:e1:81:94:a4:01:e2:c4:c7:d1:4f:c1: eb:ab:b1:09:5e:ef:a1:ce:f3:2e:26:c6:6d:46:6b: 27:c7:4f:6d:25:94:6e:96:37:e5:cc:61:6b:6d:5c: ab:0a:4c:f2:e2:d3:6c:09:e3:18:3e:0e:70:fd:b4: 25:e8:7b:e0:52:6b:53:77:53:62:1b:05:ea:e9:3b: 90:a7:d1:d1:bc:ff:dd:d6:aa:df:7e:6a:ff:84:c8: 62:19:78:84:a1:09:e6:f6:64:b0:2a:9d:f6:ab:88: f5:ee:ff:3c:ca:cc:b9:b4:13:c0:ba:e7:4f:df:ce: ef:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:87:F4:C3:66:B1:35:ED:50:BC:CA:1E:E8:3B:00:F0:72:E4:4B:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.crl X509v3 Authority Key Identifier: keyid:41:D5:22:44:65:72:BB:3C:67:67:65:E7:28:3E:BF:7D:34:17:18:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:28:84:4b:18:b5:86:3d:90:76:59:6a:47:3f:40:2d:d2:66: 89:d1:02:97:a7:90:5c:e3:2e:6b:02:d5:20:bc:b8:22:b5:77: 13:36:3b:0c:c0:09:37:c8:00:52:34:1d:63:dd:6c:95:7f:25: d7:43:45:57:ec:00:67:07:4d:e7:a0:cc:7d:7c:35:e4:88:0a: 29:60:bb:d7:4d:19:f7:c9:ee:1d:d6:54:fb:24:9f:a8:97:31: c5:fa:50:ab:25:7d:28:e2:19:ed:19:90:eb:49:d3:e5:11:4d: 13:b5:d2:24:75:a6:9c:ae:9b:f6:f3:b9:67:88:e6:35:2e:40: f2:53:9d:35:16:2b:0d:55:0d:0c:0b:e9:bb:1e:94:c5:e8:6a: 40:69:84:8b:c0:64:a7:bf:2c:29:ed:57:fc:2d:8a:9f:89:ea: 58:30:83:c4:cd:e3:06:02:93:5b:00:c4:40:88:2b:05:67:62: f0:07:95:19:be:5f:cc:4a:f0:54:0e:d1:2c:19:43:b0:d7:40: 35:aa:92:4a:f8:41:a4:a8:87:31:b5:16:0a:93:d7:23:7a:3e: 38:a2:31:5c:e2:51:5c:25:4a:6d:8c:36:aa:cb:58:ab:17:b5: 3b:0a:0b:c9:c6:94:3e:24:2e:0a:2d:ae:b8:98:65:27:4f:c2: 5f:25:aa:9a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J3J29n1Fdee5oo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYyZjY5NjEtMDkxZi00YmIyLTkwZDEtZGNkZDk2OWYx Yzc1MB4XDTI2MDMyNTE5MDAwNFoXDTI2MDMyNzE5MDAwMFowLzEtMCsGA1UEAxMk YTE4OGRmMTEtNjc4ZS00ZjVkLTg0ZTAtYWEzOTFiYTMxYWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bWpuFEFykPwa++xtqoKyDmwy7W5Uqu4cbRZ PjwyXn3Dp3RaQ9S3oIFdc2zCPw38Ray9WYupdfQ7FyVOLkTQ20JsM1PMIzTOfUVN d26Cuf0YzrzEm/RjDuHG0R7nq+3R70FXCk2mdqXh4fvhJlRkSAMKDlOWVC8rV8FA Bbgq8cBAf3UkIhRi/Ml74YGUpAHixMfRT8Hrq7EJXu+hzvMuJsZtRmsnx09tJZRu ljflzGFrbVyrCkzy4tNsCeMYPg5w/bQl6HvgUmtTd1NiGwXq6TuQp9HRvP/d1qrf fmr/hMhiGXiEoQnm9mSwKp32q4j17v88ysy5tBPAuudP387v8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFASH9MNmsTXtULzKHug7APBy5EsOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZjJm Njk2MS0wOTFmLTRiYjItOTBkMS1kY2RkOTY5ZjFjNzUvYWYyZjY5NjEtMDkxZi00 YmIyLTkwZDEtZGNkZDk2OWYxYzc1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWYyZjY5NjEtMDkxZi00YmIyLTkw ZDEtZGNkZDk2OWYxYzc1L2FmMmY2OTYxLTA5MWYtNGJiMi05MGQxLWRjZGQ5Njlm MWM3NS5jcmwwHwYDVR0jBBgwFoAUQdUiRGVyuzxnZ2XnKD6/fTQXGCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZjJmNjk2MS0wOTFmLTRiYjItOTBkMS1kY2Rk OTY5ZjFjNzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0KIRLGLWGPZB2WWpHP0At 0maJ0QKXp5Bc4y5rAtUgvLgitXcTNjsMwAk3yABSNB1j3WyVfyXXQ0VX7ABnB03n oMx9fDXkiAopYLvXTRn3ye4d1lT7JJ+olzHF+lCrJX0o4hntGZDrSdPlEU0TtdIk daacrpv287lniOY1LkDyU501FisNVQ0MC+m7HpTF6GpAaYSLwGSnvywp7Vf8LYqf iepYMIPEzeMGApNbAMRAiCsFZ2LwB5UZvl/MSvBUDtEsGUOw10A1qpJK+EGkqIcx tRYKk9cjej44ojFc4lFcJUptjDaqy1irF7U7CgvJxpQ+JC4KLa64mGUnT8JfJaqa -----END CERTIFICATE-----Generated at Thu Mar 26 17:11:34 2026 by rpki-client