$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft File: af4b288d-bc7b-443a-b3f4-52662b22717a.mft (raw, json) Hash identifier: fbNUFiZIy8PJxHCfaQljzur7yN0SY5WZm0DzBZfXTVo= Subject key identifier: 38:C5:6D:C3:79:B3:E0:D4:C5:F4:0D:82:1C:93:15:36:82:DE:1D:E6 Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a Certificate serial: 010D0C9F4328584F5A5090701F88D526BC976B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft Manifest number: 010D0C9F43285847A76E497E4523218081E86424 Signing time: Thu 01 Oct 2026 02:00:24 +0000 Manifest this update: Thu 01 Oct 2026 02:00:24 +0000 Manifest next update: Sun 04 Oct 2026 02:00:00 +0000 Files and hashes: 1: 842e43e1-9687-3482-aa4c-e20b9020a6ad.roa (hash: QvrB0+tHBxgcczGOFXhDmFEczfjfSd9ExGA//frvTEw=) 2: af4b288d-bc7b-443a-b3f4-52662b22717a.crl (hash: v+LlyB7ADp2NY/SaBHgDGqILJOm4l+XjF2P1+VMTtcg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:50:90:70:1f:88:d5:26:bc:97:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a Validity Not Before: Oct 1 02:00:24 2026 GMT Not After : Oct 4 02:00:00 2026 GMT Subject: CN=14dcae2b-dc5e-4638-aeb4-99cfba232b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:20:3c:13:79:17:80:91:17:0b:16:95:82:99: e6:9b:78:af:df:32:d4:59:f0:d9:80:28:46:20:91: 41:db:93:51:37:c7:23:89:6b:58:2b:2f:a1:4c:3a: 10:98:8a:54:04:33:5d:97:50:11:66:e5:04:fc:a9: 89:5d:4d:57:53:ee:45:09:98:15:e1:be:e4:26:95: 3f:ed:b4:95:e8:d0:0e:49:58:c1:83:cd:9e:bd:3e: 2e:55:c1:56:07:e9:c9:2c:26:31:fc:ee:d7:36:93: 7a:4a:09:ca:bf:43:d3:cf:7d:70:1f:3c:f4:e7:79: 46:7d:7c:38:1d:f2:ff:e2:1b:10:0e:b1:91:b1:01: cc:e8:af:47:29:97:d0:8e:e8:d9:87:2e:22:5f:1a: 75:2a:df:f3:b6:17:95:27:40:0f:3f:6a:4b:a1:b3: a6:fb:e7:4e:e0:17:2d:df:67:19:f1:db:43:f9:ea: 8e:bf:cf:40:7a:9c:c0:c5:45:9c:56:b2:43:d7:f5: 70:f6:cd:56:87:6a:f0:e7:f4:fc:3b:66:b8:23:73: 9f:9a:19:5f:89:3c:87:ea:b6:41:e6:4a:78:c1:93: 9a:25:0c:38:59:b7:ed:46:b4:65:46:68:89:c6:47: bd:b4:e6:01:5f:38:50:78:75:25:4d:20:2c:76:2d: c2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C5:6D:C3:79:B3:E0:D4:C5:F4:0D:82:1C:93:15:36:82:DE:1D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl X509v3 Authority Key Identifier: keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:8d:a5:59:4b:e6:7a:aa:58:a9:ef:42:b7:b8:ec:fc:81:28: 47:07:a9:22:38:33:e8:ee:d6:c4:42:19:84:7f:5e:1c:f7:10: 90:3f:18:3f:ae:20:b6:45:b2:e4:f3:a1:80:14:40:09:51:86: 35:0f:e9:a7:35:cf:19:02:06:3e:6c:17:45:fc:6a:6d:f8:09: 8a:5f:e0:86:ef:02:ac:82:f8:d6:d7:c1:9d:fc:50:d9:76:0d: f8:d4:a2:8f:c9:e0:9d:25:b2:40:f0:06:c4:09:bb:8f:87:37: 58:11:75:34:3a:7f:3b:a1:1a:20:e7:ca:71:d8:f7:da:3d:b3: 34:2b:73:cf:4b:73:e1:1e:7e:89:b0:fb:ed:3d:f4:8f:7e:77: a2:81:d5:2e:d2:c3:21:c8:18:d4:70:35:b4:37:53:09:2c:a5: de:06:5a:22:a5:b0:a3:36:03:59:f3:d2:7f:4b:07:6f:41:a2: 3b:bf:4a:86:54:2c:cc:ad:0b:04:33:f8:ad:56:c6:4a:02:38: 63:90:16:32:c9:4a:6b:05:2b:c7:ba:7b:b8:fb:e3:17:23:65: 66:42:ad:59:a7:31:cb:c8:57:61:d1:fe:a3:89:e6:99:5e:53: a0:36:11:96:b2:75:90:1a:61:ce:18:2b:0c:91:8f:18:56:06: 05:a0:2a:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9aUJBwH4jVJryXa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YjI4OGQtYmM3Yi00NDNhLWIzZjQtNTI2NjJiMjI3 MTdhMB4XDTI2MTAwMTAyMDAyNFoXDTI2MTAwNDAyMDAwMFowLzEtMCsGA1UEAxMk MTRkY2FlMmItZGM1ZS00NjM4LWFlYjQtOTljZmJhMjMyYjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCA8E3kXgJEXCxaVgpnmm3iv3zLUWfDZgChG IJFB25NRN8cjiWtYKy+hTDoQmIpUBDNdl1ARZuUE/KmJXU1XU+5FCZgV4b7kJpU/ 7bSV6NAOSVjBg82evT4uVcFWB+nJLCYx/O7XNpN6SgnKv0PTz31wHzz053lGfXw4 HfL/4hsQDrGRsQHM6K9HKZfQjujZhy4iXxp1Kt/ztheVJ0APP2pLobOm++dO4Bct 32cZ8dtD+eqOv89AepzAxUWcVrJD1/Vw9s1Wh2rw5/T8O2a4I3OfmhlfiTyH6rZB 5kp4wZOaJQw4WbftRrRlRmiJxke9tOYBXzhQeHUlTSAsdi3C1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDjFbcN5s+DUxfQNghyTFTaC3h3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRi Mjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIyMjcxN2EvYWY0YjI4OGQtYmM3Yi00 NDNhLWIzZjQtNTI2NjJiMjI3MTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWY0YjI4OGQtYmM3Yi00NDNhLWIz ZjQtNTI2NjJiMjI3MTdhL2FmNGIyODhkLWJjN2ItNDQzYS1iM2Y0LTUyNjYyYjIy NzE3YS5jcmwwHwYDVR0jBBgwFoAUMwAGbg+QRP3FILa6x1LzfcnipMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2 MmIyMjcxN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQjaVZS+Z6qlip70K3uOz8 gShHB6kiODPo7tbEQhmEf14c9xCQPxg/riC2RbLk86GAFEAJUYY1D+mnNc8ZAgY+ bBdF/Gpt+AmKX+CG7wKsgvjW18Gd/FDZdg341KKPyeCdJbJA8AbECbuPhzdYEXU0 On87oRog58px2PfaPbM0K3PPS3PhHn6JsPvtPfSPfneigdUu0sMhyBjUcDW0N1MJ LKXeBloipbCjNgNZ89J/SwdvQaI7v0qGVCzMrQsEM/itVsZKAjhjkBYyyUprBSvH unu4++MXI2VmQq1ZpzHLyFdh0f6jieaZXlOgNhGWsnWQGmHOGCsMkY8YVgYFoCqo -----END CERTIFICATE-----Generated at Fri Oct 2 07:38:20 2026 by rpki-client