$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft File: af7885f2-5b14-4ded-b2dd-7befe215db07.mft (raw, json) Hash identifier: FwOCfgNVC4jD8So3DtHUE34AHBF1heCcOa4KWla+8e4= Subject key identifier: 87:8B:E0:E0:E4:7A:49:25:83:B5:CF:07:43:B9:D0:99:06:70:54:38 Authority key identifier: BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0 Certificate issuer: /CN=af7885f2-5b14-4ded-b2dd-7befe215db07 Certificate serial: 010D0C9F4328584FD73EB990A7FE5D1629D05680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft Manifest number: 010D0C9F432858481BF95EFA8661C57E4B230317 Signing time: Sat 14 Nov 2026 20:00:25 +0000 Manifest this update: Sat 14 Nov 2026 20:00:25 +0000 Manifest next update: Mon 16 Nov 2026 20:00:00 +0000 Files and hashes: 1: 5cc65789-e006-3aa4-ab5b-31603ba48809.roa (hash: a/728wCA42CSQHlTX+2HePbaZZ5JljEtD5dI7/TyOvI=) 2: af7885f2-5b14-4ded-b2dd-7befe215db07.crl (hash: KumdnNtE0miT5VltyOlP0TE8xcrO7sHkRYSBQOTeMLc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d7:3e:b9:90:a7:fe:5d:16:29:d0:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af7885f2-5b14-4ded-b2dd-7befe215db07 Validity Not Before: Nov 14 20:00:25 2026 GMT Not After : Nov 16 20:00:00 2026 GMT Subject: CN=fd78a258-ab82-4e5a-8c7d-faccac73c5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e9:d8:75:37:2a:f8:c6:62:13:08:b1:c9:02: ce:a3:f1:42:5f:20:22:28:15:3c:f7:bd:e2:7e:8e: 9e:d6:fa:6f:5a:dd:ca:50:88:fb:5d:27:26:07:c3: 84:d4:96:97:4d:05:1b:44:f0:57:53:0e:4f:55:ef: de:34:ef:90:35:35:80:8b:ac:7b:f1:c9:c1:b6:a7: 97:05:b9:76:99:4b:b1:b9:59:fc:94:ca:db:22:af: 7c:85:df:f2:3b:4d:50:55:69:6d:f8:9b:ea:1f:68: b2:91:de:4a:93:c4:c9:52:07:b3:7a:db:d0:4d:f6: 20:85:28:5b:1c:be:24:c2:cb:f0:ce:58:39:9e:fd: ca:a9:2e:95:c0:4f:d4:70:b8:24:e3:3b:da:91:85: 20:85:0f:75:2a:c4:3c:eb:29:27:44:a6:08:f2:1d: 81:30:dc:93:75:9a:b7:3a:8f:85:97:f7:d4:00:dd: 63:e9:f8:a7:3d:64:b2:68:d9:9f:f0:b0:77:23:71: 97:37:49:2f:96:71:47:81:0f:ed:15:7f:12:5f:5c: ef:ff:b2:67:51:00:2a:64:9e:e9:d3:60:df:8d:7a: 09:55:f4:dc:15:76:33:71:70:70:83:2e:53:2b:48: 00:07:83:fb:b9:98:8a:3d:4e:08:44:9a:16:5c:f4: e6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8B:E0:E0:E4:7A:49:25:83:B5:CF:07:43:B9:D0:99:06:70:54:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl X509v3 Authority Key Identifier: keyid:BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:db:1d:93:1b:77:6d:f8:cd:28:8c:c5:40:0f:a2:67:68:3b: e9:7e:ae:b9:2e:bd:fe:c5:3c:97:91:d7:ce:16:10:b4:9d:f4: 91:3d:0e:88:8a:ec:af:43:ce:11:cb:f0:ea:4e:a5:e9:8e:3e: 56:2c:aa:62:51:57:4b:45:6b:21:4c:1e:89:88:15:2b:32:9e: 45:3f:08:0a:2e:04:5c:58:1b:94:13:17:f7:3e:7c:6c:0f:31: 1f:70:28:70:a3:14:17:4b:5c:cb:c8:6b:6c:56:89:f5:58:d2: 4a:27:7e:c7:70:99:87:b4:04:5d:3d:21:88:ca:8d:f9:76:32: f7:70:ef:3d:5f:77:9c:56:b4:8f:b6:6e:48:9c:d1:5f:8b:8a: 02:c1:00:cd:9b:d0:87:e3:ff:9f:6f:49:2a:29:1f:4f:a6:dd: 9b:ee:bf:7d:1d:ce:82:1d:fb:17:4d:96:d1:45:90:13:76:8b: ab:69:a3:9e:9e:a7:e2:1f:14:5c:53:5b:c2:8f:39:2f:af:46: fe:99:74:4b:00:32:0c:8e:f8:14:d6:74:a0:88:29:1d:b0:25: b9:0b:a0:f5:27:05:48:9f:43:bc:07:f1:3a:2f:5b:f8:98:94: 4f:25:3a:88:a0:ec:2e:5c:be:6b:7d:e9:17:ba:49:c8:f4:6c: 27:78:38:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/XPrmQp/5dFinQVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY3ODg1ZjItNWIxNC00ZGVkLWIyZGQtN2JlZmUyMTVk YjA3MB4XDTI2MTExNDIwMDAyNVoXDTI2MTExNjIwMDAwMFowLzEtMCsGA1UEAxMk ZmQ3OGEyNTgtYWI4Mi00ZTVhLThjN2QtZmFjY2FjNzNjNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOnYdTcq+MZiEwixyQLOo/FCXyAiKBU8973i fo6e1vpvWt3KUIj7XScmB8OE1JaXTQUbRPBXUw5PVe/eNO+QNTWAi6x78cnBtqeX Bbl2mUuxuVn8lMrbIq98hd/yO01QVWlt+JvqH2iykd5Kk8TJUgezetvQTfYghShb HL4kwsvwzlg5nv3KqS6VwE/UcLgk4zvakYUghQ91KsQ86yknRKYI8h2BMNyTdZq3 Oo+Fl/fUAN1j6finPWSyaNmf8LB3I3GXN0kvlnFHgQ/tFX8SX1zv/7JnUQAqZJ7p 02DfjXoJVfTcFXYzcXBwgy5TK0gAB4P7uZiKPU4IRJoWXPTmbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIeL4ODkekklg7XPB0O50JkGcFQ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZjc4 ODVmMi01YjE0LTRkZWQtYjJkZC03YmVmZTIxNWRiMDcvYWY3ODg1ZjItNWIxNC00 ZGVkLWIyZGQtN2JlZmUyMTVkYjA3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWY3ODg1ZjItNWIxNC00ZGVkLWIy ZGQtN2JlZmUyMTVkYjA3L2FmNzg4NWYyLTViMTQtNGRlZC1iMmRkLTdiZWZlMjE1 ZGIwNy5jcmwwHwYDVR0jBBgwFoAUvTSRSrAbYBKqzqEtwWTJvL7lYbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hZjc4ODVmMi01YjE0LTRkZWQtYjJkZC03YmVm ZTIxNWRiMDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAI2x2TG3dt+M0ojMVAD6Jn aDvpfq65Lr3+xTyXkdfOFhC0nfSRPQ6IiuyvQ84Ry/DqTqXpjj5WLKpiUVdLRWsh TB6JiBUrMp5FPwgKLgRcWBuUExf3PnxsDzEfcChwoxQXS1zLyGtsVon1WNJKJ37H cJmHtARdPSGIyo35djL3cO89X3ecVrSPtm5InNFfi4oCwQDNm9CH4/+fb0kqKR9P pt2b7r99Hc6CHfsXTZbRRZATdouraaOenqfiHxRcU1vCjzkvr0b+mXRLADIMjvgU 1nSgiCkdsCW5C6D1JwVIn0O8B/E6L1v4mJRPJTqIoOwuXL5rfekXuknI9GwneDil -----END CERTIFICATE-----Generated at Sun Nov 15 14:20:48 2026 by rpki-client