$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft File: afac962a-1647-4571-99e5-a23db5fd79d7.mft (raw, json) Hash identifier: nDM5XOrmH49jyyzFyVrJLX5GmVLRqPy1txXaG4yVwqA= Subject key identifier: 21:B7:9C:AC:24:68:F0:F7:59:F9:24:ED:D8:E4:BB:BE:5A:70:28:96 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584DD0549034D067646061342480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft Manifest number: 010D0C9F4328584073A82FF0EBCB41ACCF0589F6 Signing time: Tue 12 May 2026 23:00:03 +0000 Manifest this update: Tue 12 May 2026 23:00:03 +0000 Manifest next update: Thu 14 May 2026 23:00:00 +0000 Files and hashes: 1: 01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa (hash: jcMFe/3NX3r6chHhuTrYX4wT+AOo2l4PVkj4ntxIlFk=) 2: 0d8274da-0703-3d0a-ab87-cd190f0a1378.roa (hash: 4gzpCTi8JWFnGBC7a3pcNxdgUO1B+H8VjaxQird88zA=) 3: afac962a-1647-4571-99e5-a23db5fd79d7.crl (hash: HOteMHmfo7IZ+KWLV4ajxZUTTU3ylygf0L244SryCh4=) 4: b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa (hash: sDHnvT/AX4lXRZ2lyrDmNxuLsW5CB8mO0sCBF/SVK88=) 5: e5e560e3-7114-3301-9261-7725a1241fa8.roa (hash: oZ4gRO7ybB1wDLDYsWaarCpzSmVl/pRtxLBdg2RbjXo=) 6: ed93203f-cf71-30b1-9801-397105ab7580.roa (hash: 629Ej0gcWdurlCxV2jsNDyhsiW4WF1OGfA29Pc0ctEE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:54:90:34:d0:67:64:60:61:34:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: May 12 23:00:03 2026 GMT Not After : May 14 23:00:00 2026 GMT Subject: CN=e8f22cc5-6376-4fca-a875-9b43bcb07177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:aa:75:59:56:93:ba:f2:39:cb:9d:8d:64: 47:f6:1b:78:62:91:56:d0:e7:7e:be:47:03:ca:ef: 6e:cd:f6:77:31:05:5e:81:a5:9b:23:5a:dc:f8:85: aa:d3:02:2b:59:86:01:88:d5:a7:69:88:b5:dc:0f: fd:32:c1:0e:4d:88:43:ce:f7:f5:ea:6e:fb:f2:d3: 7f:b0:a0:62:f0:1f:80:6f:12:59:5e:9c:8d:41:e1: 2c:c3:09:64:09:41:f4:ff:8a:4a:44:d9:ae:75:ab: 14:88:73:5a:cf:1d:82:85:56:35:fd:c3:9b:f7:f5: 72:e8:45:b7:76:7b:4b:77:3d:44:d1:f6:b0:3c:11: c2:79:2d:e8:b0:66:56:75:36:17:41:46:ca:6c:0e: 1c:5b:4b:8d:1b:f8:fc:b4:6f:f7:57:37:3c:b9:78: 2a:f0:47:1b:48:4a:17:92:f7:4e:d0:a3:bf:ae:05: d8:ef:fc:51:db:2f:75:90:e5:01:fb:4a:5f:df:14: cc:b2:5f:3e:32:90:88:da:b2:b1:d5:d8:58:e7:42: 2b:87:14:73:53:d4:9b:85:d0:65:54:61:33:ea:a9: fa:41:1a:f9:9c:3e:a4:08:43:ed:e4:de:c7:d7:58: fa:34:d9:ff:c9:60:9c:8d:ab:27:a9:10:3c:c4:05: 2f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B7:9C:AC:24:68:F0:F7:59:F9:24:ED:D8:E4:BB:BE:5A:70:28:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5a:8a:70:d2:41:5d:6e:4d:e7:0b:ac:63:9b:70:2d:51:33: a4:30:b0:99:65:86:73:73:73:93:8f:a5:2b:39:6a:e2:1c:2a: fc:78:0d:e8:92:55:64:ca:02:a1:40:e3:28:0f:bf:68:2e:44: df:9e:9a:b9:32:cb:0d:54:30:6c:8a:7b:0d:31:cc:be:67:87: 41:f7:34:52:c7:bb:04:2d:47:92:4e:de:1f:b2:35:da:ca:0b: 4a:eb:fa:5b:f1:db:c6:86:66:f8:aa:a4:ca:fa:b2:1c:e8:b3: ca:93:77:8d:4b:a8:f9:9a:bb:09:60:1f:6c:99:35:56:82:8c: 33:f9:e5:6d:85:b6:04:64:e7:d1:c6:00:03:88:54:34:7e:5f: 2b:cb:0f:14:91:5d:ce:60:29:a5:70:de:ec:60:98:e7:ca:a5: bd:9a:7b:7f:a7:36:02:b9:5d:a0:d2:26:94:ea:d7:bd:66:09: f4:d2:39:7b:ab:47:48:88:cf:c3:27:c3:2e:f5:ef:6e:9e:7b: d4:23:c8:00:2b:16:23:b1:75:06:0d:ef:af:d5:d0:e8:83:19: 0e:12:f9:08:51:e2:69:71:1e:74:c8:12:4c:a2:21:64:2e:ac: 70:43:ed:fe:5d:17:f3:55:57:b0:5e:13:0e:25:97:68:43:c2: f6:74:0b:7d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3QVJA00GdkYGE0JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI2MDUxMjIzMDAwM1oXDTI2MDUxNDIzMDAwMFowLzEtMCsGA1UEAxMk ZThmMjJjYzUtNjM3Ni00ZmNhLWE4NzUtOWI0M2JjYjA3MTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7yqdVlWk7ryOcudjWRH9ht4YpFW0Od+vkcD yu9uzfZ3MQVegaWbI1rc+IWq0wIrWYYBiNWnaYi13A/9MsEOTYhDzvf16m778tN/ sKBi8B+AbxJZXpyNQeEswwlkCUH0/4pKRNmudasUiHNazx2ChVY1/cOb9/Vy6EW3 dntLdz1E0fawPBHCeS3osGZWdTYXQUbKbA4cW0uNG/j8tG/3Vzc8uXgq8EcbSEoX kvdO0KO/rgXY7/xR2y91kOUB+0pf3xTMsl8+MpCI2rKx1dhY50IrhxRzU9SbhdBl VGEz6qn6QRr5nD6kCEPt5N7H11j6NNn/yWCcjasnqRA8xAUvBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCG3nKwkaPD3Wfkk7djku75acCiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvYWZhYzk2MmEtMTY0Ny00 NTcxLTk5ZTUtYTIzZGI1ZmQ3OWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4Wopw0kFdbk3nC6xjm3At UTOkMLCZZYZzc3OTj6UrOWriHCr8eA3oklVkygKhQOMoD79oLkTfnpq5MssNVDBs insNMcy+Z4dB9zRSx7sELUeSTt4fsjXaygtK6/pb8dvGhmb4qqTK+rIc6LPKk3eN S6j5mrsJYB9smTVWgowz+eVthbYEZOfRxgADiFQ0fl8ryw8UkV3OYCmlcN7sYJjn yqW9mnt/pzYCuV2g0iaU6te9Zgn00jl7q0dIiM/DJ8Mu9e9unnvUI8gAKxYjsXUG De+v1dDogxkOEvkIUeJpcR50yBJMoiFkLqxwQ+3+XRfzVVewXhMOJZdoQ8L2dAt9 -----END CERTIFICATE-----Generated at Wed May 13 13:49:46 2026 by rpki-client