$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.mft File: afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.mft (raw, json) Hash identifier: NHA7ivAW/V2k54nI/Hs/XJsRC6tXtT413RhurSsvgnY= Subject key identifier: 95:1A:86:AA:E0:1A:AC:31:24:82:F5:00:5E:8D:93:12:55:72:79:D4 Authority key identifier: 41:F7:1F:2B:24:78:89:7D:9D:DD:A3:40:7E:D3:9F:61:5B:F0:14:E3 Certificate issuer: /CN=afdb7b70-bb28-4db3-8af5-2daa1a5b10e0 Certificate serial: 010D0C9F4328584F3CC4D4615FF57697A272F600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.mft Manifest number: 010D0C9F4328584F2C1E800F1FE9CD3847FF048B Signing time: Sun 20 Sep 2026 12:00:24 +0000 Manifest this update: Sun 20 Sep 2026 12:00:24 +0000 Manifest next update: Wed 23 Sep 2026 12:00:00 +0000 Files and hashes: 1: 1a43c809-86cd-3b9d-92ef-9d674b98686d.roa (hash: 7tcR8L/kHI+e95zlGldRzDijIbNei0a3OUv2HKEh4uo=) 2: 22d37483-343c-31c3-be0c-427b028706a3.roa (hash: qL/4WJOvk6F/ZmhBjJaqARRD5f5QBEHvztpIxiEDDco=) 3: 4c7dfc31-02af-3483-a8fc-c0f976824d3c.roa (hash: HLBIDp2uxFFSHLPQYp3CWdntJdGEbFx+lOroYRX3hR0=) 4: 511e7781-6311-316c-ae7d-3d5423cd616f.roa (hash: 68EMfNNTuxZkjOH2bVs7Rg4aLtfiBzzKLLIF2eY2TaQ=) 5: 8912293b-6856-310d-ba91-2ee5acd686f6.roa (hash: bZkOMc7R6qH266eE4aLRzvXMSepiTwUf+bkY1yOS5xI=) 6: afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.crl (hash: HIVhV88zhJcC8a9XGOnegieJGzoDCBo2NYIx21xokjQ=) 7: e9fa6c74-fb89-3e3b-9ff3-ab2061f97f35.roa (hash: ioB405yRmeRb6KjZFJ56AVbevygAUR1exBgrp3jAT24=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:c4:d4:61:5f:f5:76:97:a2:72:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afdb7b70-bb28-4db3-8af5-2daa1a5b10e0 Validity Not Before: Sep 20 12:00:24 2026 GMT Not After : Sep 23 12:00:00 2026 GMT Subject: CN=e9b8213e-4f3d-493e-bb7a-cc3fe84e2628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0b:51:43:2c:b9:03:ae:e3:16:e3:9a:cd:11: 73:51:d2:f6:79:4c:68:23:a3:3e:54:b4:53:1a:63: 07:17:73:05:a8:da:93:97:91:f4:6a:ee:81:ce:ec: ad:e9:28:64:b3:44:92:d6:0d:91:51:8e:b3:4f:3c: e5:0f:2d:24:3e:e2:60:1c:20:37:b6:97:fc:97:a8: 27:80:2c:94:b1:ad:36:ec:e7:55:ac:5b:4b:04:37: 33:41:35:d7:96:d8:49:53:af:69:b9:0c:ab:5b:66: 11:2d:ba:18:67:98:0c:2e:37:cd:33:a2:e8:b5:90: 4f:d7:eb:4f:1f:78:76:b5:d2:c6:ed:fc:21:5d:e5: a8:1b:08:d0:d6:64:30:5f:6d:f9:25:f0:3a:f1:ad: 8a:a5:2f:26:7b:09:26:9f:7d:e1:5e:67:4f:10:fa: 6f:9e:f4:7b:66:bf:b6:0a:ad:e9:d6:56:06:15:7f: f0:6e:bd:97:12:7c:07:ca:90:1f:89:46:80:d4:3a: 71:2a:cf:6d:b0:d6:84:ce:76:36:17:07:61:59:08: b2:0d:c0:b5:43:26:49:0a:89:07:3d:eb:21:c3:ee: db:63:6e:4f:de:18:72:9e:be:ea:24:ac:38:b3:f3: 2b:c6:dc:40:a2:b0:32:10:be:aa:94:d3:b9:de:44: 18:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1A:86:AA:E0:1A:AC:31:24:82:F5:00:5E:8D:93:12:55:72:79:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.crl X509v3 Authority Key Identifier: keyid:41:F7:1F:2B:24:78:89:7D:9D:DD:A3:40:7E:D3:9F:61:5B:F0:14:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:0f:9a:d4:9e:93:74:ff:74:df:d8:89:7a:95:cb:63:6e:e6: 1f:5b:b6:80:0b:3e:51:a6:72:e2:ab:e0:42:63:4f:e4:8c:9b: e7:dc:93:c7:f5:6f:e6:97:fd:f0:b6:95:55:5d:18:e1:19:6b: 11:e8:5a:74:69:88:d0:70:cc:f3:ad:d9:94:aa:dd:48:01:8d: 54:4e:90:8b:bf:a5:df:23:0b:4a:e7:7a:6d:dc:68:d4:ed:a8: ce:7f:1e:4a:be:df:4f:be:40:a6:95:bf:af:d7:39:bd:c4:51: 67:8a:38:ab:73:b4:37:da:bd:29:32:13:df:0c:04:2c:58:c8: f2:3e:50:c2:93:2c:26:74:c6:35:a6:32:aa:b7:d4:91:37:51: df:b2:e0:69:2d:b4:52:bb:54:4f:01:a5:da:d0:85:7a:39:db: 8d:ff:b3:19:0f:3c:37:99:50:91:67:90:b4:33:57:ac:8a:5d: f9:47:54:29:c4:9d:b7:9d:fd:d6:dd:2d:a1:88:41:f1:b7:7a: d7:dc:32:41:af:d9:21:f7:94:e4:b4:e6:e1:90:95:b6:93:5f: 8f:fb:8a:b7:ff:4b:24:28:a3:ed:a7:db:6f:7a:6a:11:c3:fd: 66:c0:1d:c8:4f:e5:f0:89:e1:69:b5:82:95:d6:98:bb:5c:df: 76:3a:44:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE88xNRhX/V2l6Jy9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkYjdiNzAtYmIyOC00ZGIzLThhZjUtMmRhYTFhNWIx MGUwMB4XDTI2MDkyMDEyMDAyNFoXDTI2MDkyMzEyMDAwMFowLzEtMCsGA1UEAxMk ZTliODIxM2UtNGYzZC00OTNlLWJiN2EtY2MzZmU4NGUyNjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwtRQyy5A67jFuOazRFzUdL2eUxoI6M+VLRT GmMHF3MFqNqTl5H0au6Bzuyt6Shks0SS1g2RUY6zTzzlDy0kPuJgHCA3tpf8l6gn gCyUsa027OdVrFtLBDczQTXXlthJU69puQyrW2YRLboYZ5gMLjfNM6LotZBP1+tP H3h2tdLG7fwhXeWoGwjQ1mQwX235JfA68a2KpS8mewkmn33hXmdPEPpvnvR7Zr+2 Cq3p1lYGFX/wbr2XEnwHypAfiUaA1DpxKs9tsNaEznY2FwdhWQiyDcC1QyZJCokH Peshw+7bY25P3hhynr7qJKw4s/MrxtxAorAyEL6qlNO53kQYUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJUahqrgGqwxJIL1AF6NkxJVcnnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9hZmRi N2I3MC1iYjI4LTRkYjMtOGFmNS0yZGFhMWE1YjEwZTAvYWZkYjdiNzAtYmIyOC00 ZGIzLThhZjUtMmRhYTFhNWIxMGUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYWZkYjdiNzAtYmIyOC00ZGIzLThh ZjUtMmRhYTFhNWIxMGUwL2FmZGI3YjcwLWJiMjgtNGRiMy04YWY1LTJkYWExYTVi MTBlMC5jcmwwHwYDVR0jBBgwFoAUQfcfKyR4iX2d3aNAftOfYVvwFOMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9hZmRiN2I3MC1iYjI4LTRkYjMtOGFmNS0yZGFh MWE1YjEwZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDED5rUnpN0/3Tf2Il6lctj buYfW7aACz5RpnLiq+BCY0/kjJvn3JPH9W/ml/3wtpVVXRjhGWsR6Fp0aYjQcMzz rdmUqt1IAY1UTpCLv6XfIwtK53pt3GjU7ajOfx5Kvt9PvkCmlb+v1zm9xFFnijir c7Q32r0pMhPfDAQsWMjyPlDCkywmdMY1pjKqt9SRN1HfsuBpLbRSu1RPAaXa0IV6 OduN/7MZDzw3mVCRZ5C0M1esil35R1QpxJ23nf3W3S2hiEHxt3rX3DJBr9kh95Tk tObhkJW2k1+P+4q3/0skKKPtp9tvemoRw/1mwB3IT+XwieFptYKV1pi7XN92OkQC -----END CERTIFICATE-----Generated at Mon Sep 21 10:58:43 2026 by rpki-client