$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft File: afac962a-1647-4571-99e5-a23db5fd79d7.mft (raw, json) Hash identifier: L9DoWjZ7++QT8+zykOv0E01GNSMilTQ4cIOHMZnfhXY= Subject key identifier: 99:4F:4D:CF:FD:63:E4:E5:E0:A8:83:71:57:2E:08:B9:AB:C7:6D:3F Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584D4A53BBA1C5C74EA6E9572F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft Manifest number: 010D0C9F4328584073A82FF0EBCB41ACCF0589C4 Signing time: Wed 25 Mar 2026 23:00:03 +0000 Manifest this update: Wed 25 Mar 2026 23:00:03 +0000 Manifest next update: Fri 27 Mar 2026 23:00:00 +0000 Files and hashes: 1: 01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa (hash: jcMFe/3NX3r6chHhuTrYX4wT+AOo2l4PVkj4ntxIlFk=) 2: 0d8274da-0703-3d0a-ab87-cd190f0a1378.roa (hash: sLlceNZSMLqYaPYm0Zfenap80It+Be8w/DXaL+ZI7F4=) 3: afac962a-1647-4571-99e5-a23db5fd79d7.crl (hash: oTpxVAAtKKiPU6Jg7LW6HBqImmIkBhp5rb2O9z1LrYY=) 4: b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa (hash: sDHnvT/AX4lXRZ2lyrDmNxuLsW5CB8mO0sCBF/SVK88=) 5: e5e560e3-7114-3301-9261-7725a1241fa8.roa (hash: oZ4gRO7ybB1wDLDYsWaarCpzSmVl/pRtxLBdg2RbjXo=) 6: ed93203f-cf71-30b1-9801-397105ab7580.roa (hash: 629Ej0gcWdurlCxV2jsNDyhsiW4WF1OGfA29Pc0ctEE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:53:bb:a1:c5:c7:4e:a6:e9:57:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Mar 25 23:00:03 2026 GMT Not After : Mar 27 23:00:00 2026 GMT Subject: CN=5d44af72-a18b-4f7f-bf29-1300619627bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8e:91:08:f4:0a:47:f7:40:7d:2c:a4:20:5f: 64:78:17:42:2c:04:e4:f5:14:8a:83:1e:d3:80:14: ad:1c:f4:a5:9b:7f:fc:4d:07:d3:20:d7:2c:d7:52: d2:15:9e:2c:87:e7:ae:8a:b0:74:41:e6:ee:e0:9d: 07:89:ae:08:40:9b:55:63:65:6c:20:6d:2a:f9:ee: 56:44:44:b9:60:7e:e5:0f:dc:90:f0:62:02:0a:d9: b9:d6:7f:9c:cc:79:3d:6d:d4:d9:0f:28:0f:c6:ee: 16:a8:d6:30:66:03:05:ba:fb:1a:df:7a:77:18:4f: 99:d0:61:cb:8e:df:51:5f:7d:3b:fc:09:7f:db:3e: 04:79:db:cc:ab:e3:ad:c6:5e:79:ae:97:e4:35:42: 8a:e6:b4:55:08:96:07:72:89:d1:53:4c:3c:0d:35: fc:6b:81:30:5a:65:78:43:08:1d:2b:ea:c7:c4:47: 8c:36:99:aa:34:8a:f1:7c:7a:d2:73:e1:56:9c:5a: c7:fa:c0:6a:b3:77:12:c4:3c:e6:82:3e:66:32:61: 99:27:a4:7f:1a:eb:f9:4f:67:85:13:c3:da:e6:4f: 7f:e7:50:39:8b:58:5a:90:82:0c:7e:f0:d8:f1:c2: ff:48:8c:12:b8:71:e8:f9:e1:1d:85:4c:86:9d:6d: b6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4F:4D:CF:FD:63:E4:E5:E0:A8:83:71:57:2E:08:B9:AB:C7:6D:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d6:c8:b1:1b:62:41:c3:e0:fd:d5:7e:9e:91:aa:45:e9:3c: e2:81:e8:60:ff:64:22:67:6b:5c:18:75:ad:40:61:66:8e:d6: e5:78:3a:47:6e:14:5e:54:b3:d1:5c:22:bf:d1:4e:71:e8:c3: f7:85:60:cc:7e:16:d4:92:62:3b:6e:34:8b:e0:53:ee:6d:46: 35:f9:26:00:a1:3d:07:34:77:14:c7:ac:7b:4e:99:9c:50:62: 34:a1:bf:0e:2c:9f:e7:95:17:8b:d7:a9:54:e9:96:7b:5a:e4: a2:2d:cc:4c:64:08:24:a1:34:cb:ef:12:b6:d0:96:08:b8:61: be:2d:9e:76:ac:5d:28:82:08:5f:1d:3b:59:35:70:47:f6:d2: 5a:34:38:55:68:73:2f:2a:cf:bc:47:d7:06:6c:a1:54:59:93: 15:e1:7e:2c:9a:3b:b6:06:17:9f:21:7a:f6:18:4e:d8:78:19: b3:66:e8:2d:82:e3:68:84:89:81:38:ef:06:29:fd:38:c2:1c: 97:e2:43:27:74:45:6b:22:1b:74:d8:2d:28:f6:e7:0b:4a:fa: e4:94:67:94:04:aa:d4:48:12:a8:e7:bd:07:9d:1a:98:36:3f: e5:19:b5:ff:ad:a6:4b:02:aa:15:48:7c:24:de:b9:21:6c:cd: c8:68:79:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KU7uhxcdOpulXLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI2MDMyNTIzMDAwM1oXDTI2MDMyNzIzMDAwMFowLzEtMCsGA1UEAxMk NWQ0NGFmNzItYTE4Yi00ZjdmLWJmMjktMTMwMDYxOTYyN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI6RCPQKR/dAfSykIF9keBdCLATk9RSKgx7T gBStHPSlm3/8TQfTINcs11LSFZ4sh+euirB0Qebu4J0Hia4IQJtVY2VsIG0q+e5W RES5YH7lD9yQ8GICCtm51n+czHk9bdTZDygPxu4WqNYwZgMFuvsa33p3GE+Z0GHL jt9RX307/Al/2z4EedvMq+Otxl55rpfkNUKK5rRVCJYHconRU0w8DTX8a4EwWmV4 QwgdK+rHxEeMNpmqNIrxfHrSc+FWnFrH+sBqs3cSxDzmgj5mMmGZJ6R/Guv5T2eF E8Pa5k9/51A5i1hakIIMfvDY8cL/SIwSuHHo+eEdhUyGnW22xwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJlPTc/9Y+Tl4KiDcVcuCLmrx20/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvYWZhYzk2MmEtMTY0Ny00 NTcxLTk5ZTUtYTIzZGI1ZmQ3OWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBs1sixG2JBw+D91X6ekapF 6Tzigehg/2QiZ2tcGHWtQGFmjtbleDpHbhReVLPRXCK/0U5x6MP3hWDMfhbUkmI7 bjSL4FPubUY1+SYAoT0HNHcUx6x7TpmcUGI0ob8OLJ/nlReL16lU6ZZ7WuSiLcxM ZAgkoTTL7xK20JYIuGG+LZ52rF0ogghfHTtZNXBH9tJaNDhVaHMvKs+8R9cGbKFU WZMV4X4smju2BhefIXr2GE7YeBmzZugtguNohImBOO8GKf04whyX4kMndEVrIht0 2C0o9ucLSvrklGeUBKrUSBKo570HnRqYNj/lGbX/raZLAqoVSHwk3rkhbM3IaHl8 -----END CERTIFICATE-----Generated at Thu Mar 26 20:15:33 2026 by rpki-client