$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft File: af121a54-266e-447b-8176-bfcd1dc7867c.mft (raw, json) Hash identifier: Va/jNI/pl5np29W5RpEv9FSpEAOv2HngaAkFgK2y3ZI= Subject key identifier: 27:2C:41:68:2B:0A:29:9E:CA:F1:99:76:8A:CC:94:25:C5:58:23:9A Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD Certificate issuer: /CN=af121a54-266e-447b-8176-bfcd1dc7867c Certificate serial: 010D0C9F4328584D49A10F93DE695E41936E3A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft Manifest number: 010D0C9F43285845726B239107AE1661CDA1AF6E Signing time: Wed 25 Mar 2026 17:00:04 +0000 Manifest this update: Wed 25 Mar 2026 17:00:04 +0000 Manifest next update: Fri 27 Mar 2026 17:00:00 +0000 Files and hashes: 1: 04922686-2f93-3d22-92a4-035fa202dc47.roa (hash: UhlacdT/xYBhswwDZZpXPwQiXvVqCGgm2uoeVFezHW0=) 2: 4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa (hash: idPAHF9kecZdA85FlziB2Vo5TaApDyOIx3bCsWPGkHc=) 3: a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa (hash: KV0mbPPXBCaCiHsiSu7tzt/bKqOuJe1VIC5R7Abab4I=) 4: af121a54-266e-447b-8176-bfcd1dc7867c.crl (hash: I+4MqUGxrDp4eJV8MA7omFzWQc40g+u3hQI3R7dyONc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:a1:0f:93:de:69:5e:41:93:6e:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c Validity Not Before: Mar 25 17:00:04 2026 GMT Not After : Mar 27 17:00:00 2026 GMT Subject: CN=696982da-f2bf-4d3f-b4d2-a3acb191fe8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:72:db:75:29:72:cd:a0:0b:65:ce:22:55: 72:c7:3a:14:8f:a5:f6:ee:4f:00:8d:30:1c:9f:3f: 1b:b3:fa:57:ee:8a:d3:86:27:ab:51:da:b8:df:3b: d8:bd:ff:78:6d:05:2f:be:7f:10:a1:12:b3:a1:43: ee:90:94:4b:de:7f:5b:14:57:72:3d:09:70:11:a3: be:46:02:44:f1:5e:51:fc:04:25:12:fa:c7:62:a9: de:df:e3:31:ad:c7:7c:51:b2:c5:65:26:45:55:97: ab:41:d5:b8:ea:d3:1c:9a:96:19:39:6c:a1:f6:a3: b4:d4:39:2f:82:e5:a3:c3:77:49:73:22:d4:b4:a0: a1:1d:ef:38:20:d4:9c:37:28:e3:80:3f:39:da:bc: 0a:c3:13:97:ff:aa:d7:46:c3:51:34:a2:71:16:cd: 66:91:96:42:6d:05:a1:43:1e:8c:f6:39:c2:0b:26: ec:b5:d9:5c:05:80:63:93:ee:9c:c0:63:39:b4:0d: 17:1b:35:ea:88:49:04:fd:96:4b:fe:5d:18:08:0a: 35:81:8d:a9:94:c4:bb:09:34:a9:00:a7:ba:e1:da: b9:32:44:3a:9b:de:a4:fe:20:1f:da:05:bf:d7:30: fb:02:a0:ca:00:31:c8:72:85:b6:eb:a1:a7:a9:59: 36:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2C:41:68:2B:0A:29:9E:CA:F1:99:76:8A:CC:94:25:C5:58:23:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl X509v3 Authority Key Identifier: keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:cd:01:8f:d8:a7:33:f1:eb:80:09:1c:1f:12:11:27:fa:7e: ae:d9:a0:50:0b:41:9e:bc:9c:cc:90:ee:d5:a2:5e:fe:e6:5b: 3c:8e:7a:6f:ed:1a:be:0c:4b:14:1c:da:7d:50:ce:26:2d:c8: be:00:a8:dc:1e:3b:7d:7b:c9:b7:cc:0b:84:b4:a9:b4:9b:5f: 5e:3c:7f:18:9a:4c:41:7a:73:f2:56:c3:98:22:a7:0b:ca:04: 59:77:ec:cd:ec:28:fb:1b:f8:55:1d:64:38:ad:50:6c:6c:df: 58:a0:2a:f9:6a:75:d8:8b:ef:c0:56:87:18:a6:f2:5e:c0:80: 49:0d:c0:56:7f:bb:e9:60:92:40:3d:61:20:1d:fd:b2:8d:a7: 66:b8:93:a8:da:11:03:cb:de:c2:b6:f1:f5:c9:c5:12:75:a3: df:cd:61:88:cb:b9:0f:55:e9:fa:24:80:f0:a2:95:50:06:eb: 86:61:44:e3:a6:33:6f:29:fd:bb:e6:19:a1:5d:01:f4:fd:91: 3b:2a:eb:e0:23:59:aa:15:7b:4a:92:49:4c:22:2e:ee:cd:6b: cd:c1:52:fd:8c:5d:aa:52:57:6c:54:a7:de:d7:0c:9d:3a:88: 9a:5f:e1:49:b0:53:aa:07:cf:67:e0:8e:f8:05:02:0e:da:e1: ee:9d:57:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JoQ+T3mleQZNuOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYxMjFhNTQtMjY2ZS00NDdiLTgxNzYtYmZjZDFkYzc4 NjdjMB4XDTI2MDMyNTE3MDAwNFoXDTI2MDMyNzE3MDAwMFowLzEtMCsGA1UEAxMk Njk2OTgyZGEtZjJiZi00ZDNmLWI0ZDItYTNhY2IxOTFmZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Ry23Upcs2gC2XOIlVyxzoUj6X27k8AjTAc nz8bs/pX7orThierUdq43zvYvf94bQUvvn8QoRKzoUPukJRL3n9bFFdyPQlwEaO+ RgJE8V5R/AQlEvrHYqne3+Mxrcd8UbLFZSZFVZerQdW46tMcmpYZOWyh9qO01Dkv guWjw3dJcyLUtKChHe84INScNyjjgD852rwKwxOX/6rXRsNRNKJxFs1mkZZCbQWh Qx6M9jnCCybstdlcBYBjk+6cwGM5tA0XGzXqiEkE/ZZL/l0YCAo1gY2plMS7CTSp AKe64dq5MkQ6m96k/iAf2gW/1zD7AqDKADHIcoW266GnqVk2MQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCcsQWgrCimeyvGZdorMlCXFWCOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZjEy MWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNkMWRjNzg2N2MvYWYxMjFhNTQtMjY2ZS00 NDdiLTgxNzYtYmZjZDFkYzc4NjdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWYxMjFhNTQtMjY2ZS00NDdiLTgx NzYtYmZjZDFkYzc4NjdjL2FmMTIxYTU0LTI2NmUtNDQ3Yi04MTc2LWJmY2QxZGM3 ODY3Yy5jcmwwHwYDVR0jBBgwFoAUMnVcxUnAaQnSNG495BOLXF/85b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZjEyMWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNk MWRjNzg2N2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCzQGP2Kcz8euACRwfEhEn +n6u2aBQC0GevJzMkO7Vol7+5ls8jnpv7Rq+DEsUHNp9UM4mLci+AKjcHjt9e8m3 zAuEtKm0m19ePH8YmkxBenPyVsOYIqcLygRZd+zN7Cj7G/hVHWQ4rVBsbN9YoCr5 anXYi+/AVocYpvJewIBJDcBWf7vpYJJAPWEgHf2yjadmuJOo2hEDy97CtvH1ycUS daPfzWGIy7kPVen6JIDwopVQBuuGYUTjpjNvKf275hmhXQH0/ZE7KuvgI1mqFXtK kklMIi7uzWvNwVL9jF2qUldsVKfe1wydOoiaX+FJsFOqB89n4I74BQIO2uHunVfF -----END CERTIFICATE-----Generated at Thu Mar 26 00:18:56 2026 by rpki-client