$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft File: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft (raw, json) Hash identifier: 9gmJS+hcl7IF3FbBSDbr+SaZyTL+YBhcdP5f3FD8GtE= Subject key identifier: B8:99:3E:16:0C:C7:B9:BC:A6:03:36:11:AA:20:D5:38:E1:6E:69:6C Authority key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Certificate issuer: /CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Certificate serial: 010D0C9F4328584F46E3916CC22129ABCD765F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft Manifest number: 010D0C9F43285842F1887AD109A031873F5D59F1 Signing time: Thu 24 Sep 2026 03:00:24 +0000 Manifest this update: Thu 24 Sep 2026 03:00:24 +0000 Manifest next update: Sat 26 Sep 2026 03:00:00 +0000 Files and hashes: 1: 1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa (hash: 2xcHInuKcmuvIhmpWf6dSvQOCWYTOSpf+dFaXeapazI=) 2: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl (hash: fKDsfiYdRclpBMSZ3rUFNTvE9VS1iFUKvLS22OytBJ4=) 3: b6d01a71-1404-3909-bbb8-6b3acc6cf542.roa (hash: JzGjNPB9xksUJ/IvVyNTUSdauhZP4W1nha05Ls6T26s=) 4: fa314c8f-36bb-307a-a125-27ed88cc0172.roa (hash: cxO5fVPAvg+VcrB8HWZRn1n3ZP+OQaSxDDSXwYu/I2U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:e3:91:6c:c2:21:29:ab:cd:76:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Validity Not Before: Sep 24 03:00:24 2026 GMT Not After : Sep 26 03:00:00 2026 GMT Subject: CN=efd92376-f408-45a7-85af-1cf29e4e00d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:c6:62:44:4f:19:0c:d6:e9:13:e0:ba:11: 34:fb:9b:a5:1a:2b:ab:96:6f:2a:f6:57:bf:3c:b5: e6:71:94:07:57:9f:7c:ce:02:60:63:10:4f:29:f0: 66:4b:a4:32:27:22:82:78:0c:81:37:b2:ea:47:bb: 12:5f:de:3b:96:8c:30:4d:7f:ab:52:d8:dd:ea:53: ff:27:64:33:2f:df:c0:d0:f3:0e:02:e8:d5:48:15: c6:44:55:32:3f:cf:f3:38:fd:cf:9d:f4:01:be:db: 17:b4:00:5d:c4:4e:bb:df:44:64:46:65:ec:39:88: 78:a9:d7:cf:48:6c:c4:7b:9f:71:b3:9a:d9:7a:4d: a0:37:3f:b0:7e:2f:d3:03:85:2e:3b:6f:76:2d:a6: 2e:75:4a:85:75:4a:50:fb:3f:65:4b:f8:01:d2:cf: bd:b9:de:ba:f6:ee:3d:48:92:f9:5d:70:c1:2f:e0: ec:1d:42:d4:f2:01:34:07:ae:f3:c1:d7:b5:e9:03: 26:74:d2:d5:53:6d:6b:ae:0b:9c:c8:eb:6b:69:bd: 89:e3:fc:63:e0:44:ba:88:0f:d9:55:7f:97:ee:a1: 3d:0c:34:72:d8:22:3b:a7:b6:19:cf:ae:4e:ff:5c: 6f:95:26:8e:1c:4c:b1:45:fb:91:4f:16:b6:dc:fe: be:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:99:3E:16:0C:C7:B9:BC:A6:03:36:11:AA:20:D5:38:E1:6E:69:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl X509v3 Authority Key Identifier: keyid:DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:40:b4:6d:2f:13:4c:5e:c6:28:4b:4a:9a:6f:e9:86:87:bc: 2a:18:5e:95:40:dc:8d:56:51:6d:93:39:45:2d:74:1a:da:a8: 53:02:78:55:a3:ab:ea:ed:ad:9b:c6:5b:4c:70:dd:97:af:8c: 34:cd:f5:1f:92:16:4a:5b:a4:ed:74:a6:96:ba:a0:fa:9f:8d: 23:c8:98:22:79:22:79:33:09:02:89:7f:99:f7:18:7a:8e:ce: 1a:65:13:52:97:fd:08:d8:52:53:36:1a:50:76:21:6f:b6:28: 92:d6:e4:da:23:1b:a3:e5:27:ad:9c:22:ee:98:4a:4f:6b:2e: 8e:c2:16:ef:c3:65:26:3d:47:60:69:cd:77:b8:78:61:8d:f7: 04:5f:36:e8:ad:23:ac:d5:4b:61:cd:c2:3e:44:3c:9f:74:27: 42:f9:21:fc:a1:51:bb:d5:ed:05:4c:6c:16:df:16:29:cc:62: 3a:5b:b6:62:76:59:99:de:af:e5:de:42:af:6c:bb:d5:d8:d1: 6d:8d:2c:4a:66:2e:b7:9c:75:01:07:5d:c3:e8:82:cd:25:f5: a9:73:fa:16:97:8d:a1:d6:1e:7c:34:f7:d9:69:67:02:e7:45: d9:85:ef:fc:91:3b:40:f8:90:53:5d:5e:84:5f:d9:6e:29:0b: 8f:68:42:1e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9G45FswiEpq812X0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUy ZGZlMB4XDTI2MDkyNDAzMDAyNFoXDTI2MDkyNjAzMDAwMFowLzEtMCsGA1UEAxMk ZWZkOTIzNzYtZjQwOC00NWE3LTg1YWYtMWNmMjllNGUwMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI7GYkRPGQzW6RPguhE0+5ulGiurlm8q9le/ PLXmcZQHV598zgJgYxBPKfBmS6QyJyKCeAyBN7LqR7sSX947lowwTX+rUtjd6lP/ J2QzL9/A0PMOAujVSBXGRFUyP8/zOP3PnfQBvtsXtABdxE6730RkRmXsOYh4qdfP SGzEe59xs5rZek2gNz+wfi/TA4UuO292LaYudUqFdUpQ+z9lS/gB0s+9ud669u49 SJL5XXDBL+DsHULU8gE0B67zwde16QMmdNLVU21rrgucyOtrab2J4/xj4ES6iA/Z VX+X7qE9DDRy2CI7p7YZz65O/1xvlSaOHEyxRfuRTxa23P6+xQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLiZPhYMx7m8pgM2Eaog1TjhbmlsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0 NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvYWZkNDRiOWMtMjMxMi00 YWNiLWIyM2UtNDBhYWFhZmUyZGZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWZkNDRiOWMtMjMxMi00YWNiLWIy M2UtNDBhYWFhZmUyZGZlL2FmZDQ0YjljLTIzMTItNGFjYi1iMjNlLTQwYWFhYWZl MmRmZS5jcmwwHwYDVR0jBBgwFoAU3VPC1ExvAcI2CpURgEKTUANY04QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFh YWFmZTJkZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEQLRtLxNMXsYoS0qab+mG h7wqGF6VQNyNVlFtkzlFLXQa2qhTAnhVo6vq7a2bxltMcN2Xr4w0zfUfkhZKW6Tt dKaWuqD6n40jyJgieSJ5MwkCiX+Z9xh6js4aZRNSl/0I2FJTNhpQdiFvtiiS1uTa Ixuj5SetnCLumEpPay6Owhbvw2UmPUdgac13uHhhjfcEXzborSOs1UthzcI+RDyf dCdC+SH8oVG71e0FTGwW3xYpzGI6W7ZidlmZ3q/l3kKvbLvV2NFtjSxKZi63nHUB B13D6ILNJfWpc/oWl42h1h58NPfZaWcC50XZhe/8kTtA+JBTXV6EX9luKQuPaEIe -----END CERTIFICATE-----Generated at Thu Sep 24 23:31:33 2026 by rpki-client