$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.mft File: afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.mft (raw, json) Hash identifier: RJ+bJvOjXdWGHEl8QOMGoaniVORR6bg8LPxQV+Bms68= Subject key identifier: DA:8E:01:B6:24:07:74:75:AA:B1:A5:BF:3A:8E:C4:F9:D8:F6:48:C2 Authority key identifier: 41:F7:1F:2B:24:78:89:7D:9D:DD:A3:40:7E:D3:9F:61:5B:F0:14:E3 Certificate issuer: /CN=afdb7b70-bb28-4db3-8af5-2daa1a5b10e0 Certificate serial: 010D0C9F4328584F47EF8718F75CB1714BD73100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.mft Manifest number: 010D0C9F4328584F2C1E800F1FE9CD3847FF048F Signing time: Thu 24 Sep 2026 12:00:22 +0000 Manifest this update: Thu 24 Sep 2026 12:00:22 +0000 Manifest next update: Sun 27 Sep 2026 12:00:00 +0000 Files and hashes: 1: 1a43c809-86cd-3b9d-92ef-9d674b98686d.roa (hash: 7tcR8L/kHI+e95zlGldRzDijIbNei0a3OUv2HKEh4uo=) 2: 22d37483-343c-31c3-be0c-427b028706a3.roa (hash: qL/4WJOvk6F/ZmhBjJaqARRD5f5QBEHvztpIxiEDDco=) 3: 4c7dfc31-02af-3483-a8fc-c0f976824d3c.roa (hash: HLBIDp2uxFFSHLPQYp3CWdntJdGEbFx+lOroYRX3hR0=) 4: 511e7781-6311-316c-ae7d-3d5423cd616f.roa (hash: 68EMfNNTuxZkjOH2bVs7Rg4aLtfiBzzKLLIF2eY2TaQ=) 5: 8912293b-6856-310d-ba91-2ee5acd686f6.roa (hash: bZkOMc7R6qH266eE4aLRzvXMSepiTwUf+bkY1yOS5xI=) 6: afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.crl (hash: ynzWxNARY4aDJtOIINeLQxeDMiKAwXsQ8E6m+jUKlzU=) 7: e9fa6c74-fb89-3e3b-9ff3-ab2061f97f35.roa (hash: ioB405yRmeRb6KjZFJ56AVbevygAUR1exBgrp3jAT24=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:47:ef:87:18:f7:5c:b1:71:4b:d7:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afdb7b70-bb28-4db3-8af5-2daa1a5b10e0 Validity Not Before: Sep 24 12:00:22 2026 GMT Not After : Sep 27 12:00:00 2026 GMT Subject: CN=1d1af8bc-bdf3-4d3b-a33f-fb9befa8a78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:2c:3e:2c:0b:66:5a:e0:00:06:aa:b6:46: 85:75:db:1e:44:c8:ba:0f:19:28:00:2f:3d:6c:d8: 78:54:a4:e7:a4:56:db:d9:27:41:fc:f8:76:6c:c5: 45:b4:d6:6c:50:e2:dc:3e:69:0b:7d:ca:91:46:9d: bb:51:da:c2:2b:90:bc:3e:07:69:7e:a0:dd:7e:7d: 43:3b:df:fe:60:b9:02:df:b6:7f:11:13:4f:61:e9: e6:37:26:44:38:20:b0:16:c6:4c:ca:9e:5e:ec:b3: 32:60:20:0a:7a:bf:e8:a8:a4:15:06:91:7b:ef:5e: 38:10:49:92:5b:77:eb:77:f7:04:c1:21:8d:2e:46: 42:ee:78:b2:7f:f9:22:fd:c3:54:ac:db:86:73:9a: fb:b0:1c:0d:85:28:78:dc:22:ce:da:92:cb:c0:df: 70:98:65:44:33:8f:85:f3:85:c7:17:b1:00:48:88: 4c:ed:8c:c2:7e:37:6f:3e:1d:c6:1f:fc:02:ce:0b: 4e:e4:8a:45:f5:13:d3:fa:12:b6:4d:a3:69:de:f2: 21:6b:ed:75:80:f6:70:b3:c7:3d:7c:cb:99:4c:38: 99:2e:5b:5e:1a:af:53:f7:72:ff:fc:ed:14:33:1b: 4b:e3:2e:20:97:fe:59:90:48:ee:e3:5b:d7:10:6e: 29:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8E:01:B6:24:07:74:75:AA:B1:A5:BF:3A:8E:C4:F9:D8:F6:48:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.crl X509v3 Authority Key Identifier: keyid:41:F7:1F:2B:24:78:89:7D:9D:DD:A3:40:7E:D3:9F:61:5B:F0:14:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:d2:aa:85:a0:ca:34:a0:ff:7b:b9:5e:bf:25:aa:a5:30:1e: 67:92:cd:c8:a5:69:db:8e:c8:30:e0:05:eb:82:bb:65:1e:a2: 7e:0c:6b:7e:ea:96:5b:ee:5c:fc:b2:c0:2d:3f:70:24:ce:da: 97:8d:d6:35:55:62:42:fe:b1:97:51:b8:65:87:00:12:d0:ef: db:d0:2e:14:90:35:8f:46:e8:ca:50:e3:e4:b5:29:5b:37:51: e2:1e:e5:5e:37:07:4f:db:b7:e2:54:99:2d:a9:62:b5:ed:b4: 79:d5:8e:5d:51:20:36:7c:d8:ff:0e:12:4f:67:0f:67:7e:19: 38:ab:32:40:37:e5:36:69:3e:48:12:b7:29:28:de:e8:9c:fd: ec:9b:57:ce:95:da:94:7f:e0:ed:26:20:3b:12:46:2a:8a:97: 90:f3:8c:8e:c5:69:df:43:e3:e8:ef:64:e5:74:47:ca:b1:f0: dd:93:1b:de:7b:c8:28:7f:c2:4e:0f:13:d7:12:fe:22:63:b5: ef:37:99:ab:75:47:7c:04:73:67:b5:c2:12:15:ea:fb:60:21: 9b:6d:22:8e:7c:96:b5:bb:ae:f7:2e:5e:10:f2:b9:71:ca:23: 0d:51:88:f4:d3:81:87:d4:c8:26:f1:7d:d0:46:bd:f9:79:9f: a9:53:9b:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9H74cY91yxcUvXMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkYjdiNzAtYmIyOC00ZGIzLThhZjUtMmRhYTFhNWIx MGUwMB4XDTI2MDkyNDEyMDAyMloXDTI2MDkyNzEyMDAwMFowLzEtMCsGA1UEAxMk MWQxYWY4YmMtYmRmMy00ZDNiLWEzM2YtZmI5YmVmYThhNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkQsPiwLZlrgAAaqtkaFddseRMi6DxkoAC89 bNh4VKTnpFbb2SdB/Ph2bMVFtNZsUOLcPmkLfcqRRp27UdrCK5C8PgdpfqDdfn1D O9/+YLkC37Z/ERNPYenmNyZEOCCwFsZMyp5e7LMyYCAKer/oqKQVBpF77144EEmS W3frd/cEwSGNLkZC7niyf/ki/cNUrNuGc5r7sBwNhSh43CLO2pLLwN9wmGVEM4+F 84XHF7EASIhM7YzCfjdvPh3GH/wCzgtO5IpF9RPT+hK2TaNp3vIha+11gPZws8c9 fMuZTDiZLlteGq9T93L//O0UMxtL4y4gl/5ZkEju41vXEG4pdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNqOAbYkB3R1qrGlvzqOxPnY9kjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9hZmRi N2I3MC1iYjI4LTRkYjMtOGFmNS0yZGFhMWE1YjEwZTAvYWZkYjdiNzAtYmIyOC00 ZGIzLThhZjUtMmRhYTFhNWIxMGUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYWZkYjdiNzAtYmIyOC00ZGIzLThh ZjUtMmRhYTFhNWIxMGUwL2FmZGI3YjcwLWJiMjgtNGRiMy04YWY1LTJkYWExYTVi MTBlMC5jcmwwHwYDVR0jBBgwFoAUQfcfKyR4iX2d3aNAftOfYVvwFOMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9hZmRiN2I3MC1iYjI4LTRkYjMtOGFmNS0yZGFh MWE1YjEwZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZ0qqFoMo0oP97uV6/Jaql MB5nks3IpWnbjsgw4AXrgrtlHqJ+DGt+6pZb7lz8ssAtP3AkztqXjdY1VWJC/rGX UbhlhwAS0O/b0C4UkDWPRujKUOPktSlbN1HiHuVeNwdP27fiVJktqWK17bR51Y5d USA2fNj/DhJPZw9nfhk4qzJAN+U2aT5IErcpKN7onP3sm1fOldqUf+DtJiA7EkYq ipeQ84yOxWnfQ+Po72TldEfKsfDdkxvee8gof8JODxPXEv4iY7XvN5mrdUd8BHNn tcISFer7YCGbbSKOfJa1u673Ll4Q8rlxyiMNUYj004GH1Mgm8X3QRr35eZ+pU5uw -----END CERTIFICATE-----Generated at Fri Sep 25 07:31:01 2026 by rpki-client