$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.mft File: afc2bf64-2cba-4362-8b12-56844da30e4e.mft (raw, json) Hash identifier: Ik3BbQ4hAmNIfB3AZMwuQGJbQHa0CEgc8xgFzUkm/W0= Subject key identifier: 66:E2:BB:8A:B5:4A:C3:BD:CB:97:A7:55:7D:0A:B5:03:4D:B4:E0:0E Authority key identifier: 43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B Certificate issuer: /CN=afc2bf64-2cba-4362-8b12-56844da30e4e Certificate serial: 010D0C9F4328584D49FA74AF1AE733D74894EA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.mft Manifest number: 010D0C9F4328584810C8ACAA352E9C671E1160EA Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Fri 27 Mar 2026 20:00:00 +0000 Files and hashes: 1: add0a9ff-c124-381c-9d60-5f74979be3f7.roa (hash: 4KPXisaU2qKg6FNPEWTFRoYp3iXBT2OzefG+N8ilj24=) 2: afc2bf64-2cba-4362-8b12-56844da30e4e.crl (hash: HGWNZoc/kBI9DZQERuj2Km+TyJ2y8d+znetmGvZXoIU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:74:af:1a:e7:33:d7:48:94:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc2bf64-2cba-4362-8b12-56844da30e4e Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 27 20:00:00 2026 GMT Subject: CN=4eaa89f3-1442-42a0-88f2-fa8c9e0f15e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8c:1c:85:f0:8a:24:c6:0f:57:bb:5d:47:aa: f1:70:f4:60:3c:5a:81:c6:94:a4:ce:ae:10:45:72: f1:ff:52:07:5e:c7:9d:d1:67:81:4c:89:8c:06:00: 63:cb:3d:69:aa:47:cc:4d:7a:06:c4:b4:66:56:f5: 7f:6b:14:00:ce:19:30:79:dc:4c:9f:0f:e2:43:16: 85:b8:be:2a:bc:57:03:3d:fb:4d:fb:7b:99:77:ac: ad:49:3e:e3:98:f9:3d:e7:49:37:4f:67:24:e0:b2: fa:62:19:00:69:7a:68:17:d8:92:20:78:95:bc:d1: e8:b3:17:5e:67:e4:ae:36:bb:b2:b6:b7:4a:b2:16: af:60:25:79:1e:4e:9f:89:c7:b3:69:18:36:da:d8: f3:cd:8c:f5:39:4d:4a:0d:03:63:6f:3d:65:82:d5: a1:df:39:a7:8f:7e:6a:62:ad:73:fb:79:d7:25:f2: 1e:d1:33:74:c1:c9:8e:3b:44:dc:42:62:c7:db:43: ca:84:fe:6e:31:d1:ff:7d:80:bc:a4:8c:e9:0f:ef: b3:66:38:d3:4f:3e:78:51:d1:fa:7a:e3:0e:c3:b3: 8e:f7:dc:75:f9:d9:d7:bb:d5:5e:c0:cd:c6:59:cb: c1:b0:15:72:b6:75:ee:34:13:63:de:4f:60:0e:00: 0d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E2:BB:8A:B5:4A:C3:BD:CB:97:A7:55:7D:0A:B5:03:4D:B4:E0:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl X509v3 Authority Key Identifier: keyid:43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:2d:9a:b0:41:1a:1e:c3:ab:34:dd:e8:2b:40:bc:b4:4f:c1: a1:0d:1e:14:ee:23:28:75:4b:e7:23:e4:5d:82:83:c2:cb:91: 1f:07:f6:dd:37:f0:e8:3e:20:87:6e:e4:1f:24:ad:9c:5e:a4: 2d:87:19:34:90:9f:ba:db:16:ed:b3:57:66:fc:82:f6:5e:f8: 1a:57:22:cd:bd:1f:64:18:4b:dc:26:1f:a1:98:2e:f1:23:f0: 73:31:dc:dd:c9:0b:3e:be:c2:97:18:72:27:ab:c5:75:18:57: b4:3a:42:85:24:28:67:48:e9:46:9d:02:c9:2a:85:7f:de:7b: 1b:ec:b7:99:26:e6:c3:8b:15:60:89:42:54:d8:0e:1f:d9:6c: ca:86:2d:a1:ad:53:a5:da:92:36:03:48:ee:c1:4c:c2:b5:40: 0e:26:e1:24:5b:a9:f9:57:ad:a1:b6:ea:2a:39:2f:e6:68:3b: 33:13:34:65:a0:ae:40:e6:23:d7:e1:52:40:1f:79:6f:eb:77: da:70:3c:fd:72:9d:8c:d9:8b:92:b6:2d:b2:95:2f:49:43:ba: 55:3e:93:1f:88:cb:d2:dd:af:82:52:93:c3:ca:23:bc:c2:40: 96:0c:69:aa:37:0e:e5:a3:1a:46:47:4b:17:8a:50:b0:3d:9f: 87:dd:a2:79 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nSvGucz10iU6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjMmJmNjQtMmNiYS00MzYyLThiMTItNTY4NDRkYTMw ZTRlMB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyNzIwMDAwMFowLzEtMCsGA1UEAxMk NGVhYTg5ZjMtMTQ0Mi00MmEwLTg4ZjItZmE4YzllMGYxNWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYwchfCKJMYPV7tdR6rxcPRgPFqBxpSkzq4Q RXLx/1IHXsed0WeBTImMBgBjyz1pqkfMTXoGxLRmVvV/axQAzhkwedxMnw/iQxaF uL4qvFcDPftN+3uZd6ytST7jmPk950k3T2ck4LL6YhkAaXpoF9iSIHiVvNHosxde Z+SuNruytrdKshavYCV5Hk6ficezaRg22tjzzYz1OU1KDQNjbz1lgtWh3zmnj35q Yq1z+3nXJfIe0TN0wcmOO0TcQmLH20PKhP5uMdH/fYC8pIzpD++zZjjTTz54UdH6 euMOw7OO99x1+dnXu9VewM3GWcvBsBVytnXuNBNj3k9gDgANlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGbiu4q1SsO9y5enVX0KtQNNtOAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmMy YmY2NC0yY2JhLTQzNjItOGIxMi01Njg0NGRhMzBlNGUvYWZjMmJmNjQtMmNiYS00 MzYyLThiMTItNTY4NDRkYTMwZTRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZjMmJmNjQtMmNiYS00MzYyLThi MTItNTY4NDRkYTMwZTRlL2FmYzJiZjY0LTJjYmEtNDM2Mi04YjEyLTU2ODQ0ZGEz MGU0ZS5jcmwwHwYDVR0jBBgwFoAUQ11azSfNCa/JdmMsKHivc/qfX0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmMyYmY2NC0yY2JhLTQzNjItOGIxMi01Njg0 NGRhMzBlNGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCeLZqwQRoew6s03egrQLy0 T8GhDR4U7iModUvnI+RdgoPCy5EfB/bdN/DoPiCHbuQfJK2cXqQthxk0kJ+62xbt s1dm/IL2XvgaVyLNvR9kGEvcJh+hmC7xI/BzMdzdyQs+vsKXGHInq8V1GFe0OkKF JChnSOlGnQLJKoV/3nsb7LeZJubDixVgiUJU2A4f2WzKhi2hrVOl2pI2A0juwUzC tUAOJuEkW6n5V62htuoqOS/maDszEzRloK5A5iPX4VJAH3lv63facDz9cp2M2YuS ti2ylS9JQ7pVPpMfiMvS3a+CUpPDyiO8wkCWDGmqNw7loxpGR0sXilCwPZ+H3aJ5 -----END CERTIFICATE-----Generated at Thu Mar 26 08:49:07 2026 by rpki-client