$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft File: af7885f2-5b14-4ded-b2dd-7befe215db07.mft (raw, json) Hash identifier: QH+/I1nuT930GuQJmv50zabdf55yVY1WFnsX0JGV+QY= Subject key identifier: CB:63:39:BE:5E:2B:24:E8:4E:C5:3C:A3:C1:6F:77:33:7E:15:52:EA Authority key identifier: BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0 Certificate issuer: /CN=af7885f2-5b14-4ded-b2dd-7befe215db07 Certificate serial: 010D0C9F4328584F4BA879442DCE541FB9CA7D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft Manifest number: 010D0C9F432858481BF95EFA8661C57E4B2302E4 Signing time: Fri 25 Sep 2026 20:00:23 +0000 Manifest this update: Fri 25 Sep 2026 20:00:23 +0000 Manifest next update: Sun 27 Sep 2026 20:00:00 +0000 Files and hashes: 1: 5cc65789-e006-3aa4-ab5b-31603ba48809.roa (hash: 2by7KDRfhUbZ91qrKZTn1V0yNNCI95whpY18qkExPAQ=) 2: af7885f2-5b14-4ded-b2dd-7befe215db07.crl (hash: kVpVPOYy3yNoJ8akSYaRSZguHDltpQbh2TmojP3uack=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:a8:79:44:2d:ce:54:1f:b9:ca:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af7885f2-5b14-4ded-b2dd-7befe215db07 Validity Not Before: Sep 25 20:00:23 2026 GMT Not After : Sep 27 20:00:00 2026 GMT Subject: CN=0063917d-e8d0-4d48-896f-458122b04123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d5:e9:1c:58:59:53:5d:58:0b:f5:b9:63:b3: 01:9f:22:0a:29:7b:05:35:10:e7:b9:12:00:d2:0c: 57:9c:a6:05:eb:9a:8d:77:a7:21:18:4a:33:0c:06: 72:f8:ec:92:08:4d:41:92:7b:ee:26:b5:c1:d3:ff: d6:4f:aa:0c:3c:b4:da:6a:27:51:a3:8f:98:de:0b: 5c:e3:8b:bf:35:69:8f:b6:ba:65:fe:14:8d:9e:17: fc:33:1d:de:62:fd:54:c5:ba:22:2b:86:ad:46:1e: 70:ab:50:af:dd:0e:74:ac:0f:9f:7a:e8:bb:d7:6f: 87:53:0d:ee:69:3d:71:af:b7:09:35:45:f3:a3:82: 30:f2:0d:fa:c5:40:ea:50:5c:a3:af:e3:18:fc:03: f4:fd:d2:28:74:a3:e7:81:98:50:85:10:d8:eb:43: 1b:bb:ae:6e:d7:f4:f4:51:95:8f:99:7c:32:71:ea: 34:7e:78:4f:2c:cd:f1:00:da:17:10:2c:a8:7a:28: 78:c1:55:d2:7b:0b:01:f6:90:80:4e:79:b9:cc:1b: 21:76:4c:d0:bd:b7:6d:47:a0:c8:76:25:28:e7:04: 09:88:85:88:ae:7d:53:c1:a4:52:94:3f:dd:c8:3a: 09:18:28:af:9b:43:da:ad:f9:76:80:21:a9:8c:88: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:63:39:BE:5E:2B:24:E8:4E:C5:3C:A3:C1:6F:77:33:7E:15:52:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl X509v3 Authority Key Identifier: keyid:BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:4d:c1:bb:8a:f7:1d:f8:6f:d6:a8:ca:a0:13:d3:9c:d3:eb: 85:ad:35:87:e6:23:b8:07:3d:df:50:fc:29:3e:97:15:58:d7: 6b:8a:69:39:0b:c6:bd:11:9f:83:40:23:f3:51:62:e6:34:d3: bb:ba:af:3e:d4:fa:44:df:d0:bd:cd:db:f4:44:ad:cc:81:f2: be:b0:3d:31:4e:5a:db:b7:ac:87:f4:53:b0:70:34:7c:af:bb: 4b:1f:2c:eb:01:1d:b8:69:57:df:39:7f:af:8e:b4:eb:83:d9: 62:93:7c:c6:16:98:da:bb:ad:13:d1:67:99:96:6d:3c:1a:7a: a3:54:94:ea:3f:9d:c1:ac:84:4a:8e:69:4f:ed:7a:30:10:f0: f8:b8:bc:85:f0:4a:0f:0c:a5:ad:50:cb:98:a2:7a:17:e6:64: 6c:64:79:10:22:33:c8:f9:03:b1:a0:38:52:33:c0:ee:c0:af: e0:db:48:bd:55:cb:8f:db:05:03:ab:09:f9:13:ea:cc:bf:04: 82:4b:ff:be:d2:d2:4f:c4:6b:67:77:f4:65:1e:ea:f2:56:a7: da:0a:1c:fa:bc:d5:56:5b:4c:8b:1e:6c:ad:29:79:0a:84:0a: fd:6f:97:7b:0a:af:1c:0d:47:3f:53:19:c4:1b:81:83:fa:47: 69:f8:86:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9LqHlELc5UH7nKfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY3ODg1ZjItNWIxNC00ZGVkLWIyZGQtN2JlZmUyMTVk YjA3MB4XDTI2MDkyNTIwMDAyM1oXDTI2MDkyNzIwMDAwMFowLzEtMCsGA1UEAxMk MDA2MzkxN2QtZThkMC00ZDQ4LTg5NmYtNDU4MTIyYjA0MTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NXpHFhZU11YC/W5Y7MBnyIKKXsFNRDnuRIA 0gxXnKYF65qNd6chGEozDAZy+OySCE1BknvuJrXB0//WT6oMPLTaaidRo4+Y3gtc 44u/NWmPtrpl/hSNnhf8Mx3eYv1UxboiK4atRh5wq1Cv3Q50rA+feui712+HUw3u aT1xr7cJNUXzo4Iw8g36xUDqUFyjr+MY/AP0/dIodKPngZhQhRDY60Mbu65u1/T0 UZWPmXwyceo0fnhPLM3xANoXECyoeih4wVXSewsB9pCATnm5zBshdkzQvbdtR6DI diUo5wQJiIWIrn1TwaRSlD/dyDoJGCivm0Parfl2gCGpjIip8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMtjOb5eKyToTsU8o8FvdzN+FVLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZjc4 ODVmMi01YjE0LTRkZWQtYjJkZC03YmVmZTIxNWRiMDcvYWY3ODg1ZjItNWIxNC00 ZGVkLWIyZGQtN2JlZmUyMTVkYjA3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWY3ODg1ZjItNWIxNC00ZGVkLWIy ZGQtN2JlZmUyMTVkYjA3L2FmNzg4NWYyLTViMTQtNGRlZC1iMmRkLTdiZWZlMjE1 ZGIwNy5jcmwwHwYDVR0jBBgwFoAUvTSRSrAbYBKqzqEtwWTJvL7lYbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hZjc4ODVmMi01YjE0LTRkZWQtYjJkZC03YmVm ZTIxNWRiMDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZTcG7ivcd+G/WqMqgE9Oc 0+uFrTWH5iO4Bz3fUPwpPpcVWNdrimk5C8a9EZ+DQCPzUWLmNNO7uq8+1PpE39C9 zdv0RK3MgfK+sD0xTlrbt6yH9FOwcDR8r7tLHyzrAR24aVffOX+vjrTrg9lik3zG Fpjau60T0WeZlm08GnqjVJTqP53BrIRKjmlP7XowEPD4uLyF8EoPDKWtUMuYonoX 5mRsZHkQIjPI+QOxoDhSM8DuwK/g20i9VcuP2wUDqwn5E+rMvwSCS/++0tJPxGtn d/RlHuryVqfaChz6vNVWW0yLHmytKXkKhAr9b5d7Cq8cDUc/UxnEG4GD+kdp+IZR -----END CERTIFICATE-----Generated at Sat Sep 26 01:48:18 2026 by rpki-client