$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.mft File: 2af9df74-e88e-4433-b765-051efef6177a.mft (raw, json) Hash identifier: KcR16d7ha7DGHO/G31yMwEAokQ27eJkZCQ4iT0HbFfg= Subject key identifier: A2:8A:2F:93:12:4C:4A:12:3E:51:EC:FF:46:7C:03:29:7A:32:FC:37 Authority key identifier: 8B:26:5A:51:23:75:D8:53:0B:3B:F1:97:63:92:96:17:B0:22:10:16 Certificate issuer: /CN=2af9df74-e88e-4433-b765-051efef6177a Certificate serial: 010D0C9F4328584D4A183B7A8A209DB11CBF9EA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.mft Manifest number: 010D0C9F4328584D0F81C7D34CA1FB8074F55BD9 Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Fri 27 Mar 2026 21:00:00 +0000 Files and hashes: 1: 2af9df74-e88e-4433-b765-051efef6177a.crl (hash: YWPGonC8NaKWTcOypIW9n/It69dcwQclvwuDsNLg84A=) 2: a8d5a0b8-4ade-3ec8-a517-cab3c3cac56a.roa (hash: 1UI7kRZCxcY66saYSxQ3wy8IqJTaaNR6lrcA1rtnB4s=) 3: ab71a37a-b8cf-3906-9b7c-2e450ae93e8a.roa (hash: ENwcmAlP6vVUXnhNwCe0MOBwfuNbJFFCGzwM358azYU=) 4: d6cd923e-8563-3f87-b541-9a33e4941679.roa (hash: 5fBIT3sKu6Vjr3RJ39xS232jfRPEaRfqHFjSvpXANqo=) 5: dbfccde8-68cd-3b37-92ba-ad228cee9fd9.roa (hash: CCsM4Mln6vNxIV/YWgi+JzrKLkeKqr+aHzbYEqYmKUE=) 6: e9c9af24-05f8-3c07-9145-76cea8ee0caf.roa (hash: uPLxJkZl7PhI0vF2WHIh3vhOf/bZW11kJD2glMqBC7A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:3b:7a:8a:20:9d:b1:1c:bf:9e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2af9df74-e88e-4433-b765-051efef6177a Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 27 21:00:00 2026 GMT Subject: CN=7c9622a7-df07-4298-8aad-e9bd761ff59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:c4:02:99:13:5b:03:ea:54:26:20:c1:08: 5f:60:31:bb:ac:a7:67:8d:b9:a4:bd:e5:06:71:a5: 9d:6c:5b:29:7c:24:e5:da:98:1a:48:d0:85:0f:dc: 6c:e2:92:9a:17:04:8b:89:64:95:84:3f:06:26:85: 5b:7a:dc:eb:69:8d:94:34:3d:90:22:f5:d0:11:30: 12:0e:e5:7b:ce:fc:48:cf:38:83:9a:17:34:8b:ec: e7:a3:d8:61:e1:9e:ef:ea:19:33:11:1e:9b:01:79: 39:09:43:c7:fd:c4:6e:84:cc:f9:6f:ff:ff:7e:3b: 04:ba:70:13:8d:de:b5:13:40:da:34:c6:d9:11:ee: 65:e5:bc:33:00:39:12:15:10:a0:fa:c7:3b:d8:76: 32:e4:7d:61:85:67:3e:d4:c5:17:50:d9:d0:e9:ed: 99:6a:79:03:e0:23:23:2e:7c:82:80:59:68:5e:5c: 41:2c:35:a6:7f:bd:5e:ab:89:4a:08:4b:a2:59:d0: 84:fa:9f:58:9f:87:36:81:42:82:fd:15:60:cf:d9: 07:d7:2e:5a:53:5c:e4:60:aa:d3:33:4d:e9:cf:4b: 5a:dd:18:e1:c9:82:e1:a4:75:63:ac:74:d6:5c:87: 44:92:52:a9:a0:98:a6:df:93:4d:27:d8:61:18:fd: 22:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8A:2F:93:12:4C:4A:12:3E:51:EC:FF:46:7C:03:29:7A:32:FC:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.crl X509v3 Authority Key Identifier: keyid:8B:26:5A:51:23:75:D8:53:0B:3B:F1:97:63:92:96:17:B0:22:10:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:3d:c9:8b:a6:16:23:02:48:32:2b:3e:66:6e:33:79:f7:a8: 29:9b:e4:5c:d9:07:2d:a3:95:75:de:83:92:4a:78:01:01:ec: f5:7c:b8:4b:db:2e:53:4f:af:94:2b:ca:f0:37:1b:e9:f9:fa: 58:a8:ec:39:09:18:4b:8b:65:26:1d:fb:6d:84:71:2b:40:75: 53:8f:85:d6:16:0c:11:e0:1c:0e:b3:9c:ef:fe:7d:83:fb:58: 23:cd:20:f3:1c:cb:13:84:20:0f:24:0c:93:e3:01:3e:b4:d6: c5:09:13:47:a9:c9:67:49:1a:4e:b7:14:8f:5e:66:08:ad:c8: 74:4d:45:16:8d:0d:6e:ee:7a:58:cb:10:71:2d:6a:61:ff:7d: 8d:4f:05:df:bb:05:f3:b7:cd:42:bd:40:13:72:2a:e8:81:b5: 19:2f:ed:31:bd:4b:2c:20:a3:fe:d8:9a:27:10:00:cd:af:b6: d6:66:8a:4f:a2:7b:23:44:c4:11:e4:7b:70:a3:ec:df:38:d0: 65:a6:65:eb:54:3b:47:da:1b:ae:c2:96:53:c1:86:85:87:13: 18:f7:28:af:59:08:28:03:75:25:50:77:cf:62:d9:03:45:22: 49:19:3a:da:98:2d:3d:4e:f4:d8:1f:c6:ec:ca:14:56:37:72: af:f4:8c:2a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDt6iiCdsRy/nqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFmOWRmNzQtZTg4ZS00NDMzLWI3NjUtMDUxZWZlZjYx NzdhMB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyNzIxMDAwMFowLzEtMCsGA1UEAxMk N2M5NjIyYTctZGYwNy00Mjk4LThhYWQtZTliZDc2MWZmNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQXEApkTWwPqVCYgwQhfYDG7rKdnjbmkveUG caWdbFspfCTl2pgaSNCFD9xs4pKaFwSLiWSVhD8GJoVbetzraY2UND2QIvXQETAS DuV7zvxIzziDmhc0i+zno9hh4Z7v6hkzER6bAXk5CUPH/cRuhMz5b///fjsEunAT jd61E0DaNMbZEe5l5bwzADkSFRCg+sc72HYy5H1hhWc+1MUXUNnQ6e2ZankD4CMj LnyCgFloXlxBLDWmf71eq4lKCEuiWdCE+p9Yn4c2gUKC/RVgz9kH1y5aU1zkYKrT M03pz0ta3RjhyYLhpHVjrHTWXIdEklKpoJim35NNJ9hhGP0iEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKKKL5MSTEoSPlHs/0Z8Ayl6Mvw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYWY5 ZGY3NC1lODhlLTQ0MzMtYjc2NS0wNTFlZmVmNjE3N2EvMmFmOWRmNzQtZTg4ZS00 NDMzLWI3NjUtMDUxZWZlZjYxNzdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmFmOWRmNzQtZTg4ZS00NDMzLWI3 NjUtMDUxZWZlZjYxNzdhLzJhZjlkZjc0LWU4OGUtNDQzMy1iNzY1LTA1MWVmZWY2 MTc3YS5jcmwwHwYDVR0jBBgwFoAUiyZaUSN12FMLO/GXY5KWF7AiEBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYWY5ZGY3NC1lODhlLTQ0MzMtYjc2NS0wNTFl ZmVmNjE3N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTPcmLphYjAkgyKz5mbjN5 96gpm+Rc2Qcto5V13oOSSngBAez1fLhL2y5TT6+UK8rwNxvp+fpYqOw5CRhLi2Um HftthHErQHVTj4XWFgwR4BwOs5zv/n2D+1gjzSDzHMsThCAPJAyT4wE+tNbFCRNH qclnSRpOtxSPXmYIrch0TUUWjQ1u7npYyxBxLWph/32NTwXfuwXzt81CvUATciro gbUZL+0xvUssIKP+2JonEADNr7bWZopPonsjRMQR5Htwo+zfONBlpmXrVDtH2huu wpZTwYaFhxMY9yivWQgoA3UlUHfPYtkDRSJJGTramC09TvTYH8bsyhRWN3Kv9Iwq -----END CERTIFICATE-----Generated at Thu Mar 26 00:21:42 2026 by rpki-client