$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft File: affcec42-3d91-4bd4-91a9-094e86b16e3a.mft (raw, json) Hash identifier: YcRDMP987dBU5t1D4nxqjHerB0dHtfaqf5fKIkjAf+Y= Subject key identifier: C6:30:69:FB:E0:3D:57:0B:AB:66:D8:D8:45:0C:B8:2D:80:13:FD:8D Authority key identifier: 00:C6:02:63:2D:43:DC:7C:16:1B:C3:B1:34:F6:1D:6A:16:86:4B:55 Certificate issuer: /CN=affcec42-3d91-4bd4-91a9-094e86b16e3a Certificate serial: 010D0C9F4328584F42D15B92D3C3EABBF2B08000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft Manifest number: 010D0C9F4328584BBA3E8DF885FAACDC304D00CC Signing time: Tue 22 Sep 2026 16:00:24 +0000 Manifest this update: Tue 22 Sep 2026 16:00:24 +0000 Manifest next update: Fri 25 Sep 2026 16:00:00 +0000 Files and hashes: 1: 4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa (hash: nX+G5+ErYuBR+Z4ixM7MkoSSJgfd2GfaBmK8LtNQVek=) 2: affcec42-3d91-4bd4-91a9-094e86b16e3a.crl (hash: cH4inrTQ7gz5j8fU2+p0mO4yg2sGwTfvN88R4rmouP0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:d1:5b:92:d3:c3:ea:bb:f2:b0:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affcec42-3d91-4bd4-91a9-094e86b16e3a Validity Not Before: Sep 22 16:00:24 2026 GMT Not After : Sep 25 16:00:00 2026 GMT Subject: CN=7de41c7e-3571-48d8-a13b-fe45c13963a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5f:66:8f:16:7b:fb:cb:38:2e:ae:06:27:43: 13:c8:c1:89:e2:43:04:94:6a:2b:b6:26:ab:5a:ad: 08:4e:31:02:4f:43:b0:5f:9d:05:ee:63:ca:82:63: 05:d2:e5:bb:57:58:cc:8a:2c:88:dd:30:54:5a:dc: 71:39:50:67:ec:d0:6c:b4:b6:e7:ca:67:ab:f6:58: 98:f0:2e:f8:a9:47:12:db:91:7a:61:fb:5d:14:0c: 24:f6:af:48:80:99:d4:35:00:ea:68:dc:a7:eb:ca: 6f:fb:90:3d:84:68:fc:a9:0a:b3:cf:e6:f5:10:6e: d0:4a:2f:7c:4f:28:5a:4a:42:e8:45:35:92:db:8c: 36:23:15:d5:c9:33:8d:bf:8a:54:24:d3:79:f8:6a: 49:04:4e:fd:18:6d:fe:34:6e:10:7b:6a:dc:6d:fb: c3:e1:40:f7:7c:2e:8d:5a:20:fd:0a:c3:c0:37:39: b6:88:24:9a:b7:18:9d:a1:01:23:e5:90:57:71:03: fd:d3:54:81:a7:b0:64:b8:80:ec:2d:f1:be:03:b6: c4:1e:36:a6:24:47:a6:a8:f8:51:b1:20:b9:77:58: a9:5e:b6:69:84:05:c4:92:d1:89:85:af:a1:66:67: 87:9a:68:ea:5c:d8:fb:7c:0f:53:c0:03:f7:21:a9: 49:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:30:69:FB:E0:3D:57:0B:AB:66:D8:D8:45:0C:B8:2D:80:13:FD:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.crl X509v3 Authority Key Identifier: keyid:00:C6:02:63:2D:43:DC:7C:16:1B:C3:B1:34:F6:1D:6A:16:86:4B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:52:30:94:9d:a4:1a:f3:51:c0:49:db:4a:64:98:dd:e4:fc: 2b:0a:f5:36:77:f8:f2:d0:85:e7:3e:c1:91:46:2c:f9:66:6b: 35:a1:ef:d1:8f:37:30:5d:ef:e3:9c:cc:db:04:23:8d:4e:60: dd:ac:9e:e4:24:5e:cf:8e:e6:e6:4f:69:93:2a:3d:d3:f3:55: 63:dd:98:11:fe:d9:5f:c9:09:b4:14:b6:c4:47:31:a2:ba:17: 47:3f:63:cb:ba:81:00:0f:14:9d:70:33:03:8a:bb:72:46:1c: f3:aa:b7:30:bf:a8:83:38:9b:3d:cd:9f:40:a8:2d:60:f4:6e: 08:a0:bf:8c:9f:ff:34:e8:44:e9:77:c2:dc:a8:97:a6:1e:80: 24:dc:8b:d3:68:bb:51:09:4b:5e:25:c9:dd:4b:de:54:68:fb: 50:30:2f:15:55:83:2f:42:fd:ae:00:c5:05:cf:a5:2a:23:dd: 0c:3d:82:71:13:54:18:3f:a9:af:c8:a9:29:db:18:7a:8f:e1: 1a:e6:18:3c:46:c3:05:27:ee:6e:37:ac:cb:6f:a2:a5:7c:02: dd:e2:08:68:a9:a9:5b:65:e4:80:ad:37:43:37:36:80:d7:bc: 86:17:76:dc:78:0d:89:a0:e6:fc:57:93:db:45:9e:b8:4d:69: dd:cd:66:4f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9C0VuS08Pqu/KwgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmY2VjNDItM2Q5MS00YmQ0LTkxYTktMDk0ZTg2YjE2 ZTNhMB4XDTI2MDkyMjE2MDAyNFoXDTI2MDkyNTE2MDAwMFowLzEtMCsGA1UEAxMk N2RlNDFjN2UtMzU3MS00OGQ4LWExM2ItZmU0NWMxMzk2M2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V9mjxZ7+8s4Lq4GJ0MTyMGJ4kMElGortiar Wq0ITjECT0OwX50F7mPKgmMF0uW7V1jMiiyI3TBUWtxxOVBn7NBstLbnymer9liY 8C74qUcS25F6YftdFAwk9q9IgJnUNQDqaNyn68pv+5A9hGj8qQqzz+b1EG7QSi98 TyhaSkLoRTWS24w2IxXVyTONv4pUJNN5+GpJBE79GG3+NG4Qe2rcbfvD4UD3fC6N WiD9CsPANzm2iCSatxidoQEj5ZBXcQP901SBp7BkuIDsLfG+A7bEHjamJEemqPhR sSC5d1ipXrZphAXEktGJha+hZmeHmmjqXNj7fA9TwAP3IalJkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMYwafvgPVcLq2bY2EUMuC2AE/2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZmZj ZWM0Mi0zZDkxLTRiZDQtOTFhOS0wOTRlODZiMTZlM2EvYWZmY2VjNDItM2Q5MS00 YmQ0LTkxYTktMDk0ZTg2YjE2ZTNhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWZmY2VjNDItM2Q5MS00YmQ0LTkx YTktMDk0ZTg2YjE2ZTNhL2FmZmNlYzQyLTNkOTEtNGJkNC05MWE5LTA5NGU4NmIx NmUzYS5jcmwwHwYDVR0jBBgwFoAUAMYCYy1D3HwWG8OxNPYdahaGS1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZmZjZWM0Mi0zZDkxLTRiZDQtOTFhOS0wOTRl ODZiMTZlM2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfUjCUnaQa81HASdtKZJjd 5PwrCvU2d/jy0IXnPsGRRiz5Zms1oe/RjzcwXe/jnMzbBCONTmDdrJ7kJF7Pjubm T2mTKj3T81Vj3ZgR/tlfyQm0FLbERzGiuhdHP2PLuoEADxSdcDMDirtyRhzzqrcw v6iDOJs9zZ9AqC1g9G4IoL+Mn/806ETpd8LcqJemHoAk3IvTaLtRCUteJcndS95U aPtQMC8VVYMvQv2uAMUFz6UqI90MPYJxE1QYP6mvyKkp2xh6j+Ea5hg8RsMFJ+5u N6zLb6KlfALd4ghoqalbZeSArTdDNzaA17yGF3bceA2JoOb8V5PbRZ64TWndzWZP -----END CERTIFICATE-----Generated at Wed Sep 23 13:17:09 2026 by rpki-client