$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft File: af4b288d-bc7b-443a-b3f4-52662b22717a.mft (raw, json) Hash identifier: 1TSV4huuQUlklrMtMYdWfULEBHecc3ZsO8O/qj5l4FU= Subject key identifier: 50:AB:E6:4D:C2:32:6C:B6:0B:DB:0D:28:1E:29:FF:9D:F1:93:0F:1C Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a Certificate serial: 010D0C9F4328584F41306EDC139201FA9088CC92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft Manifest number: 010D0C9F43285847A76E497E4523218081E8641A Signing time: Tue 22 Sep 2026 02:00:23 +0000 Manifest this update: Tue 22 Sep 2026 02:00:23 +0000 Manifest next update: Thu 24 Sep 2026 02:00:00 +0000 Files and hashes: 1: 842e43e1-9687-3482-aa4c-e20b9020a6ad.roa (hash: lPQbwU8rT1nKRKCTvBUqNM9eOekg9rql9dbXthUDCSw=) 2: af4b288d-bc7b-443a-b3f4-52662b22717a.crl (hash: eFKs4WmQ9fckD2j711uj+9dlhEAmtprvWF2sZkuoQ04=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:30:6e:dc:13:92:01:fa:90:88:cc:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a Validity Not Before: Sep 22 02:00:23 2026 GMT Not After : Sep 24 02:00:00 2026 GMT Subject: CN=8deddcfd-75c9-486b-bf0f-2d30989b99bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:59:69:4f:fd:b8:13:ad:cc:28:c7:38:ea: 50:19:07:2e:60:92:61:46:9d:92:02:8b:70:66:ab: 94:29:37:24:07:9c:6a:94:9d:86:80:e7:7f:58:d9: 73:f7:c3:c1:7d:c7:2a:e4:82:68:b9:5f:83:80:29: 91:7e:45:41:b8:9f:69:78:8c:1c:83:9a:cd:61:3e: aa:c5:e5:0b:07:cb:6c:6d:55:6f:1d:58:22:b6:2c: ae:87:03:20:41:40:22:c8:16:9d:49:6f:35:a7:16: 8c:64:05:02:66:d4:ec:2d:62:5a:39:bb:69:ac:a8: 66:1a:71:b8:ed:7e:6b:5d:e7:21:91:9b:dd:43:7a: 2e:ae:43:70:68:00:f2:cd:0b:b9:e1:17:df:eb:b4: 1f:05:4f:bf:a9:9c:e2:0c:32:19:84:8d:6c:cb:70: c7:39:16:51:bf:6b:c2:7c:e9:2d:b6:7e:92:af:b3: 86:7a:23:71:c2:19:a5:ff:dd:a8:f9:e9:49:3d:5a: 7c:8e:d0:cb:8b:fc:a6:c8:d6:54:d8:b6:76:d0:39: 83:90:bc:2a:5f:85:e0:45:7a:15:25:75:90:51:79: e7:83:e7:35:23:24:96:85:22:9a:99:3d:7d:27:34: 87:5c:b1:e8:a3:95:92:2c:5d:a6:e7:3f:8e:ee:62: db:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AB:E6:4D:C2:32:6C:B6:0B:DB:0D:28:1E:29:FF:9D:F1:93:0F:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl X509v3 Authority Key Identifier: keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:fd:28:04:68:56:b6:bd:cb:f9:67:2c:af:33:ad:f4:cb:44: ed:ef:a9:df:06:68:fc:cd:62:10:9b:bd:d9:80:ee:03:79:66: 44:0d:2a:32:26:03:6e:ad:7f:eb:5f:81:af:4d:69:d4:de:40: f6:16:1a:2b:91:8f:db:60:35:db:c7:66:7c:ea:47:37:04:87: 0e:53:40:29:f1:87:c0:a5:2e:5d:7b:6c:c1:2f:21:ee:b8:76: 8e:8a:be:28:0a:d7:ed:5a:59:63:84:26:f2:1f:4a:9d:b0:9c: a1:aa:32:57:56:d5:90:dd:8e:1f:7e:d0:37:53:d5:fe:20:83: 96:33:e2:bf:86:07:09:cc:a7:48:48:fb:ad:8e:95:07:1f:c3: 02:62:e8:ee:c1:45:cf:63:2c:1d:d1:ec:33:b1:06:86:20:6d: eb:18:5f:6e:91:d9:19:ef:f4:d9:0f:55:13:d4:38:eb:44:31: 8e:26:7b:ad:a9:1b:45:79:26:10:ff:12:3b:ae:0e:16:3d:be: 98:35:9c:76:7a:bc:44:e1:7d:af:b6:ee:9f:d0:a1:2a:44:5b: ae:7e:2a:59:ef:f5:be:d6:74:3b:41:2a:91:87:db:74:e8:e4: c7:45:b8:a8:90:47:de:1a:e2:5d:f1:b1:fe:31:29:65:2e:96: 19:c6:ce:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9BMG7cE5IB+pCIzJIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YjI4OGQtYmM3Yi00NDNhLWIzZjQtNTI2NjJiMjI3 MTdhMB4XDTI2MDkyMjAyMDAyM1oXDTI2MDkyNDAyMDAwMFowLzEtMCsGA1UEAxMk OGRlZGRjZmQtNzVjOS00ODZiLWJmMGYtMmQzMDk4OWI5OWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIxZaU/9uBOtzCjHOOpQGQcuYJJhRp2SAotw ZquUKTckB5xqlJ2GgOd/WNlz98PBfccq5IJouV+DgCmRfkVBuJ9peIwcg5rNYT6q xeULB8tsbVVvHVgitiyuhwMgQUAiyBadSW81pxaMZAUCZtTsLWJaObtprKhmGnG4 7X5rXechkZvdQ3ourkNwaADyzQu54Rff67QfBU+/qZziDDIZhI1sy3DHORZRv2vC fOkttn6Sr7OGeiNxwhml/92o+elJPVp8jtDLi/ymyNZU2LZ20DmDkLwqX4XgRXoV JXWQUXnng+c1IySWhSKamT19JzSHXLHoo5WSLF2m5z+O7mLbtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFCr5k3CMmy2C9sNKB4p/53xkw8cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRi Mjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIyMjcxN2EvYWY0YjI4OGQtYmM3Yi00 NDNhLWIzZjQtNTI2NjJiMjI3MTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWY0YjI4OGQtYmM3Yi00NDNhLWIz ZjQtNTI2NjJiMjI3MTdhL2FmNGIyODhkLWJjN2ItNDQzYS1iM2Y0LTUyNjYyYjIy NzE3YS5jcmwwHwYDVR0jBBgwFoAUMwAGbg+QRP3FILa6x1LzfcnipMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2 MmIyMjcxN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAD/SgEaFa2vcv5ZyyvM630 y0Tt76nfBmj8zWIQm73ZgO4DeWZEDSoyJgNurX/rX4GvTWnU3kD2FhorkY/bYDXb x2Z86kc3BIcOU0Ap8YfApS5de2zBLyHuuHaOir4oCtftWlljhCbyH0qdsJyhqjJX VtWQ3Y4fftA3U9X+IIOWM+K/hgcJzKdISPutjpUHH8MCYujuwUXPYywd0ewzsQaG IG3rGF9ukdkZ7/TZD1UT1DjrRDGOJnutqRtFeSYQ/xI7rg4WPb6YNZx2erxE4X2v tu6f0KEqRFuufipZ7/W+1nQ7QSqRh9t06OTHRbiokEfeGuJd8bH+MSllLpYZxs5e -----END CERTIFICATE-----Generated at Tue Sep 22 23:55:01 2026 by rpki-client