$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.mft File: afa70384-20ce-4e0a-b42a-581d05c70079.mft (raw, json) Hash identifier: A7qvyBVMUHIkswIDZa8ry09bBNM5G02rW6cFkzOUIN8= Subject key identifier: 8C:38:B7:1D:B1:7F:51:CB:A4:26:BB:8C:EB:92:25:73:CE:7F:EB:CC Authority key identifier: 6A:3F:DF:49:CB:0D:84:9D:16:C2:8B:30:9A:BB:45:B0:1D:83:B3:7E Certificate issuer: /CN=afa70384-20ce-4e0a-b42a-581d05c70079 Certificate serial: 010D0C9F4328584DCFA1E9A03425F8141E6BDA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.mft Manifest number: 010D0C9F4328584DB0F056F2C0AD7F653D70C6D0 Signing time: Tue 12 May 2026 17:00:03 +0000 Manifest this update: Tue 12 May 2026 17:00:03 +0000 Manifest next update: Thu 14 May 2026 17:00:00 +0000 Files and hashes: 1: 3ef05cee-c28f-3a10-96f4-b9da612fdb7d.roa (hash: TB/PD6HOoaYG/qudsXfW15sOdSxa7cenmjFKxreXXFM=) 2: 6cca8e1b-377b-3f09-b244-45469107fef2.roa (hash: 2AD+UCfXlxboHZYrl+b2NkQCeURa/0YFXPpp9tLXs80=) 3: 7bc8606c-cc83-3fcb-8644-53c8336f8e33.roa (hash: WPMrwoFpikXULda3I8iaiG+g9AdRZR/H0PTygC5cyu0=) 4: 9ea94d1b-f116-398c-bf4a-e38b16ace96f.roa (hash: 8wBWzPhxqNICoewV8qCsw+XmqCk2F3wLC96KJWbrnS0=) 5: afa70384-20ce-4e0a-b42a-581d05c70079.crl (hash: 7GZj3jaljd2+77iqgVOUVM27BoWGWRLzj8B34q92Ytk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:a1:e9:a0:34:25:f8:14:1e:6b:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa70384-20ce-4e0a-b42a-581d05c70079 Validity Not Before: May 12 17:00:03 2026 GMT Not After : May 14 17:00:00 2026 GMT Subject: CN=097d035d-87e8-4994-a32c-99871253d9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:29:55:d8:97:ff:a5:8a:b5:55:f6:ee:92: 91:77:5a:0c:cd:44:2c:26:d3:b0:70:ec:01:fd:13: 31:96:0e:e9:e5:3b:78:95:0f:ee:eb:90:83:9f:5e: fe:11:4f:36:6b:94:a5:b0:46:8f:2c:16:f2:21:23: 7d:1b:7c:01:e3:1b:96:cd:14:1d:7b:72:21:e4:b1: a1:14:47:c4:02:ea:98:3f:9e:0d:62:f2:40:27:05: 41:05:6c:bb:b5:1b:30:e8:e3:60:ef:98:35:a0:20: 56:2d:c5:5c:e9:cc:4e:0d:cf:dc:6e:41:2a:07:37: fb:74:89:78:b5:d4:9d:37:18:32:5f:a0:6d:a9:52: e9:8a:cf:2b:13:66:4b:e8:9c:99:80:36:2d:11:8a: e9:50:60:1f:a6:3a:ef:0b:49:a4:83:fc:93:5f:b6: a0:5d:6e:6f:c0:53:28:aa:3a:b3:29:89:1c:66:3d: 3a:6c:a3:24:30:e1:03:fc:ef:f0:28:7d:88:44:18: b1:74:69:16:70:22:a9:ca:ff:25:53:4d:58:f6:aa: 90:5b:e9:b9:c9:06:85:f9:02:6f:f5:b1:cc:bd:d9: 72:ce:0c:43:5d:d1:ae:70:65:56:f4:53:04:eb:f0: 2d:5c:2a:49:24:35:2a:aa:20:e0:4b:b1:f5:15:32: df:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:38:B7:1D:B1:7F:51:CB:A4:26:BB:8C:EB:92:25:73:CE:7F:EB:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.crl X509v3 Authority Key Identifier: keyid:6A:3F:DF:49:CB:0D:84:9D:16:C2:8B:30:9A:BB:45:B0:1D:83:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cf:11:a2:5c:91:c1:7a:db:99:57:cc:0b:9d:84:4b:ef:6b: bd:23:09:a4:a5:87:4e:d0:8e:de:dc:e1:63:9c:cf:2b:fd:ba: e2:a0:c3:3a:52:2b:c9:15:24:84:71:58:86:d3:5d:74:80:42: f8:7d:ff:61:6e:46:ab:bf:2a:71:fc:90:57:d5:e0:98:a5:dc: a7:12:29:55:3c:4d:b9:62:69:f7:7e:78:b9:b2:ec:cb:8b:c6: 5f:d8:14:ac:dc:82:4e:d7:e2:97:b8:94:1d:b6:f8:84:cf:87: 30:e0:25:b0:39:2a:4a:cb:b8:0c:b4:6a:f1:37:03:50:1d:bc: b5:49:15:19:95:ab:dc:84:da:89:9e:70:56:27:44:fc:b8:57: 09:c9:8d:c0:33:43:74:06:0f:c9:9c:7f:41:02:d9:d4:3e:bf: ec:c6:d4:63:54:50:eb:28:f2:0b:39:b7:91:8f:7b:b7:37:37: 77:af:f1:b1:38:56:2a:49:f2:6f:c9:2e:74:b5:7e:2c:ab:9d: 13:c4:dd:8f:dd:b3:69:ca:00:b0:7b:a0:6d:7e:d9:ba:9c:13: 4b:e4:dd:72:66:f3:ec:1f:f8:28:de:04:c2:ea:ae:04:22:e3: d6:22:91:61:9a:b1:81:91:68:fa:b5:b7:44:8b:06:de:71:cb: 56:52:19:5c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PoemgNCX4FB5r2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNzAzODQtMjBjZS00ZTBhLWI0MmEtNTgxZDA1Yzcw MDc5MB4XDTI2MDUxMjE3MDAwM1oXDTI2MDUxNDE3MDAwMFowLzEtMCsGA1UEAxMk MDk3ZDAzNWQtODdlOC00OTk0LWEzMmMtOTk4NzEyNTNkOWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIspVdiX/6WKtVX27pKRd1oMzUQsJtOwcOwB /RMxlg7p5Tt4lQ/u65CDn17+EU82a5SlsEaPLBbyISN9G3wB4xuWzRQde3Ih5LGh FEfEAuqYP54NYvJAJwVBBWy7tRsw6ONg75g1oCBWLcVc6cxODc/cbkEqBzf7dIl4 tdSdNxgyX6BtqVLpis8rE2ZL6JyZgDYtEYrpUGAfpjrvC0mkg/yTX7agXW5vwFMo qjqzKYkcZj06bKMkMOED/O/wKH2IRBixdGkWcCKpyv8lU01Y9qqQW+m5yQaF+QJv 9bHMvdlyzgxDXdGucGVW9FME6/AtXCpJJDUqqiDgS7H1FTLf/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIw4tx2xf1HLpCa7jOuSJXPOf+vMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hZmE3 MDM4NC0yMGNlLTRlMGEtYjQyYS01ODFkMDVjNzAwNzkvYWZhNzAzODQtMjBjZS00 ZTBhLWI0MmEtNTgxZDA1YzcwMDc5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWZhNzAzODQtMjBjZS00ZTBhLWI0 MmEtNTgxZDA1YzcwMDc5L2FmYTcwMzg0LTIwY2UtNGUwYS1iNDJhLTU4MWQwNWM3 MDA3OS5jcmwwHwYDVR0jBBgwFoAUaj/fScsNhJ0WwoswmrtFsB2Ds34wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hZmE3MDM4NC0yMGNlLTRlMGEtYjQyYS01ODFk MDVjNzAwNzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFzxGiXJHBetuZV8wLnYRL 72u9IwmkpYdO0I7e3OFjnM8r/brioMM6UivJFSSEcViG0110gEL4ff9hbkarvypx /JBX1eCYpdynEilVPE25Ymn3fni5suzLi8Zf2BSs3IJO1+KXuJQdtviEz4cw4CWw OSpKy7gMtGrxNwNQHby1SRUZlavchNqJnnBWJ0T8uFcJyY3AM0N0Bg/JnH9BAtnU Pr/sxtRjVFDrKPILObeRj3u3Nzd3r/GxOFYqSfJvyS50tX4sq50TxN2P3bNpygCw e6Btftm6nBNL5N1yZvPsH/go3gTC6q4EIuPWIpFhmrGBkWj6tbdEiwbecctWUhlc -----END CERTIFICATE-----Generated at Wed May 13 05:24:59 2026 by rpki-client