$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft File: af4b288d-bc7b-443a-b3f4-52662b22717a.mft (raw, json) Hash identifier: CH8+fYUapbG4hCI3QrwwrpKMjvtmDD1bvR3ISSggT4g= Subject key identifier: 14:3D:2A:8F:71:8C:86:2E:B6:E4:E8:AD:46:AA:99:97:9C:E5:BF:E1 Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a Certificate serial: 010D0C9F4328584D47E26003A8EB1F585E9E4F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft Manifest number: 010D0C9F43285847A76E497E4523218081E8635F Signing time: Wed 25 Mar 2026 02:00:04 +0000 Manifest this update: Wed 25 Mar 2026 02:00:04 +0000 Manifest next update: Sat 28 Mar 2026 02:00:00 +0000 Files and hashes: 1: 842e43e1-9687-3482-aa4c-e20b9020a6ad.roa (hash: saz0yWcwVFuQzdTlWohV/M9plrs+ERoh13HIY9VDlY4=) 2: af4b288d-bc7b-443a-b3f4-52662b22717a.crl (hash: 4jhB47ZekOfGnkJFcR1KShLvBKjQTdE7+/JoYyARbiQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:e2:60:03:a8:eb:1f:58:5e:9e:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a Validity Not Before: Mar 25 02:00:04 2026 GMT Not After : Mar 28 02:00:00 2026 GMT Subject: CN=a2b1bae5-c3c2-4e15-865d-d39467b308bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3c:74:51:32:26:e8:76:82:80:56:a6:cf:32: 7b:57:ad:30:cf:50:58:c5:bb:04:23:4f:ff:15:d8: 8e:96:32:83:40:30:39:24:ac:81:a9:2d:a6:22:88: f5:af:a1:a5:69:ba:47:b3:6e:30:d7:0f:7f:09:de: 79:d7:7c:9c:18:96:42:42:a2:5e:42:3e:ff:f8:21: 5e:d7:96:93:51:eb:fe:df:45:04:4d:51:9f:bb:84: e5:e2:3f:b1:82:87:44:e5:ba:55:c0:85:d7:41:30: 29:6f:63:f8:24:5a:44:59:22:66:a3:f5:8f:b5:fa: 8c:e4:d2:47:68:cc:98:5b:32:46:cc:37:c2:51:4e: 4f:de:50:29:73:56:61:12:b2:ea:3d:99:12:f9:0f: f8:62:4d:42:cb:37:1c:79:30:00:f4:d2:d4:3a:4e: 46:7a:70:24:79:ab:c1:b5:45:32:6f:53:88:5b:db: 27:3b:30:93:86:ab:a4:bc:f4:11:aa:43:4a:de:c9: 9f:6f:8c:45:ab:8f:09:9e:85:66:6c:9a:65:1c:12: 29:19:42:61:29:5a:c3:46:ea:b8:03:92:f9:88:82: b5:79:b8:72:b4:15:18:f7:9f:b6:28:de:c4:6f:4b: 1c:94:96:ca:58:80:7b:c0:3b:30:76:e6:84:f4:c6: 28:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3D:2A:8F:71:8C:86:2E:B6:E4:E8:AD:46:AA:99:97:9C:E5:BF:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl X509v3 Authority Key Identifier: keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e3:87:4c:b8:16:a6:f5:a6:7c:67:a3:64:a2:e5:b5:ba:7e:ef: 0d:a8:ac:72:3c:c9:cb:66:54:1a:91:cb:35:0a:b1:c3:39:41: 1b:14:be:7b:0d:3e:d3:f8:21:df:3e:0e:ad:f5:2a:cb:19:ab: 22:fe:2e:db:ae:b6:48:1d:bc:ad:bc:27:e4:69:4f:bd:be:46: 2f:75:07:55:ee:a1:fb:a6:20:17:1c:87:8d:84:ed:b4:51:71: 01:d4:45:34:82:60:6e:a8:98:aa:22:d5:47:70:f3:fe:d3:1e: 97:84:8f:e9:ff:ac:7c:2a:13:36:a2:b4:01:df:f8:79:a6:f7: 0b:31:4d:a8:c8:0e:af:84:21:c4:26:bb:46:89:63:1e:11:ff: 31:1b:ab:f1:22:39:fe:f7:e0:8a:77:6b:9a:a5:b7:4a:53:43: 46:d2:fc:39:ce:b3:7c:b7:f0:ce:ae:35:d1:4d:dc:66:31:9e: 27:59:05:b0:2a:5e:64:2d:73:e9:26:bc:fd:8e:b1:6c:79:1c: 17:85:bf:17:55:c7:59:4d:75:8c:3e:3b:17:37:bf:67:35:30: cf:25:57:d3:eb:08:fc:45:83:af:50:dc:aa:f1:bb:cf:ea:ee: 66:79:15:fc:a4:ee:b3:52:d0:52:99:72:f3:38:ad:a0:0a:cf: f0:5f:a1:49 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1H4mADqOsfWF6eT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YjI4OGQtYmM3Yi00NDNhLWIzZjQtNTI2NjJiMjI3 MTdhMB4XDTI2MDMyNTAyMDAwNFoXDTI2MDMyODAyMDAwMFowLzEtMCsGA1UEAxMk YTJiMWJhZTUtYzNjMi00ZTE1LTg2NWQtZDM5NDY3YjMwOGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTx0UTIm6HaCgFamzzJ7V60wz1BYxbsEI0// FdiOljKDQDA5JKyBqS2mIoj1r6GlabpHs24w1w9/Cd5513ycGJZCQqJeQj7/+CFe 15aTUev+30UETVGfu4Tl4j+xgodE5bpVwIXXQTApb2P4JFpEWSJmo/WPtfqM5NJH aMyYWzJGzDfCUU5P3lApc1ZhErLqPZkS+Q/4Yk1CyzcceTAA9NLUOk5GenAkeavB tUUyb1OIW9snOzCThqukvPQRqkNK3smfb4xFq48JnoVmbJplHBIpGUJhKVrDRuq4 A5L5iIK1ebhytBUY95+2KN7Eb0sclJbKWIB7wDswduaE9MYoxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBQ9Ko9xjIYutuTorUaqmZec5b/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRi Mjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIyMjcxN2EvYWY0YjI4OGQtYmM3Yi00 NDNhLWIzZjQtNTI2NjJiMjI3MTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWY0YjI4OGQtYmM3Yi00NDNhLWIz ZjQtNTI2NjJiMjI3MTdhL2FmNGIyODhkLWJjN2ItNDQzYS1iM2Y0LTUyNjYyYjIy NzE3YS5jcmwwHwYDVR0jBBgwFoAUMwAGbg+QRP3FILa6x1LzfcnipMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2 MmIyMjcxN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDjh0y4Fqb1pnxno2Si5bW6 fu8NqKxyPMnLZlQakcs1CrHDOUEbFL57DT7T+CHfPg6t9SrLGasi/i7brrZIHbyt vCfkaU+9vkYvdQdV7qH7piAXHIeNhO20UXEB1EU0gmBuqJiqItVHcPP+0x6XhI/p /6x8KhM2orQB3/h5pvcLMU2oyA6vhCHEJrtGiWMeEf8xG6vxIjn+9+CKd2uapbdK U0NG0vw5zrN8t/DOrjXRTdxmMZ4nWQWwKl5kLXPpJrz9jrFseRwXhb8XVcdZTXWM PjsXN79nNTDPJVfT6wj8RYOvUNyq8bvP6u5meRX8pO6zUtBSmXLzOK2gCs/wX6FJ -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:18 2026 by rpki-client