$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft File: af7885f2-5b14-4ded-b2dd-7befe215db07.mft (raw, json) Hash identifier: 6iRk1APcXzbR5/nc6rhAubbsmxTzhbXlMpESx202qyo= Subject key identifier: 93:27:A3:73:7E:FF:CC:8D:05:64:15:75:A7:2C:6C:E6:74:6B:71:CD Authority key identifier: BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0 Certificate issuer: /CN=af7885f2-5b14-4ded-b2dd-7befe215db07 Certificate serial: 010D0C9F4328584D876571BA3B67DEF4D6EF62E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft Manifest number: 010D0C9F432858481BF95EFA8661C57E4B23023E Signing time: Thu 16 Apr 2026 20:00:03 +0000 Manifest this update: Thu 16 Apr 2026 20:00:03 +0000 Manifest next update: Sat 18 Apr 2026 20:00:00 +0000 Files and hashes: 1: 5cc65789-e006-3aa4-ab5b-31603ba48809.roa (hash: Pj2JtvPK9sLNP2CVx9NSRhQLyf4HNQp1tiTKWPlIqUY=) 2: af7885f2-5b14-4ded-b2dd-7befe215db07.crl (hash: 5qv+FdYdtLv0wxutiBl+CZqHN8YJIjsN2SM2PvBIbiQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:65:71:ba:3b:67:de:f4:d6:ef:62:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af7885f2-5b14-4ded-b2dd-7befe215db07 Validity Not Before: Apr 16 20:00:03 2026 GMT Not After : Apr 18 20:00:00 2026 GMT Subject: CN=ea2c637b-ec2e-4836-88b5-db80fe38ba1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:7a:45:fe:6e:72:d5:39:2c:ed:44:98:8c: fe:b3:6a:02:7e:ea:61:d7:65:06:56:53:f8:e2:a7: e3:61:37:a7:67:07:8c:23:6d:70:7e:59:38:ce:40: e8:19:7a:2b:03:c8:24:35:9c:2b:6e:48:46:c5:e3: c1:a3:e9:e1:1a:1d:ba:7e:56:7a:63:95:bc:41:b8: f9:5a:14:ff:e8:4f:cb:10:55:b4:c1:73:2a:2b:fe: 8d:c9:93:e0:8e:a3:51:0b:25:1b:ab:be:6c:f3:92: 12:3a:1e:c0:15:e6:11:d9:55:8e:8e:b3:c0:85:07: cc:7c:73:8f:2e:3a:8c:8d:eb:43:1d:c1:13:09:18: d3:69:66:7b:83:9f:82:fd:91:95:40:d6:d0:d6:c9: c4:63:f3:1f:b5:79:99:80:d4:da:38:e0:a1:46:75: 0f:72:d3:66:6c:b2:64:9f:9a:83:31:52:71:cc:6b: 96:74:43:d2:84:58:57:61:ca:f1:10:1e:c4:72:5c: 4a:79:a5:b8:dd:11:97:dc:b0:54:2a:86:fd:46:fd: 74:16:a6:36:ad:1e:f2:4b:b9:dd:35:db:a6:db:c6: c6:45:4a:2f:a8:f2:42:c1:9d:65:f8:b1:f4:b2:de: ed:ab:1e:ce:de:c6:55:76:c6:58:e1:a6:e9:18:bd: db:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:27:A3:73:7E:FF:CC:8D:05:64:15:75:A7:2C:6C:E6:74:6B:71:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl X509v3 Authority Key Identifier: keyid:BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:0e:27:b4:db:7e:ee:11:5d:63:8d:c1:95:2a:be:c8:35:b3: 95:7f:73:2e:43:5c:e7:5b:59:2d:8b:f0:da:4d:7d:24:ff:4d: 67:2b:73:26:ff:07:f1:c9:27:68:96:24:52:d3:1b:b8:7a:61: 75:8d:59:17:ee:0a:61:12:fd:58:50:e6:92:2d:80:69:53:4d: 2b:18:f9:9e:f8:73:4c:e0:12:37:aa:ac:e0:f5:2a:fb:ed:e8: 5b:0d:ff:4b:21:54:71:0c:85:7e:bd:8e:22:a2:9b:d9:8d:37: 4e:00:66:24:45:c9:e0:67:15:04:81:12:76:7f:4e:9f:96:1e: 02:07:de:2e:34:0e:0d:0a:65:c5:5c:7d:5d:32:fd:ce:72:8b: 15:92:90:6b:74:eb:d0:e5:ad:5a:c5:d4:bd:01:db:5d:58:85: 33:dd:e0:46:03:f6:76:08:6a:10:c3:10:9d:ca:29:fe:c7:1d: 6f:56:1f:93:96:7c:db:1e:38:c8:1a:a2:0e:f8:95:c2:ef:04: 9c:15:49:6d:95:e4:13:ac:44:51:34:da:3f:ce:ad:22:82:a8: 89:6e:44:38:44:22:1f:62:a9:0d:48:04:0d:8b:81:2d:2f:ad: d0:37:01:3b:9c:cd:c4:5b:73:7b:f4:72:6c:56:fc:5f:ba:52: bd:da:e8:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HZXG6O2fe9NbvYuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY3ODg1ZjItNWIxNC00ZGVkLWIyZGQtN2JlZmUyMTVk YjA3MB4XDTI2MDQxNjIwMDAwM1oXDTI2MDQxODIwMDAwMFowLzEtMCsGA1UEAxMk ZWEyYzYzN2ItZWMyZS00ODM2LTg4YjUtZGI4MGZlMzhiYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD16Rf5uctU5LO1EmIz+s2oCfuph12UGVlP4 4qfjYTenZweMI21wflk4zkDoGXorA8gkNZwrbkhGxePBo+nhGh26flZ6Y5W8Qbj5 WhT/6E/LEFW0wXMqK/6NyZPgjqNRCyUbq75s85ISOh7AFeYR2VWOjrPAhQfMfHOP LjqMjetDHcETCRjTaWZ7g5+C/ZGVQNbQ1snEY/MftXmZgNTaOOChRnUPctNmbLJk n5qDMVJxzGuWdEPShFhXYcrxEB7EclxKeaW43RGX3LBUKob9Rv10FqY2rR7yS7nd Ndum28bGRUovqPJCwZ1l+LH0st7tqx7O3sZVdsZY4abpGL3bWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJMno3N+/8yNBWQVdacsbOZ0a3HNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZjc4 ODVmMi01YjE0LTRkZWQtYjJkZC03YmVmZTIxNWRiMDcvYWY3ODg1ZjItNWIxNC00 ZGVkLWIyZGQtN2JlZmUyMTVkYjA3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWY3ODg1ZjItNWIxNC00ZGVkLWIy ZGQtN2JlZmUyMTVkYjA3L2FmNzg4NWYyLTViMTQtNGRlZC1iMmRkLTdiZWZlMjE1 ZGIwNy5jcmwwHwYDVR0jBBgwFoAUvTSRSrAbYBKqzqEtwWTJvL7lYbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hZjc4ODVmMi01YjE0LTRkZWQtYjJkZC03YmVm ZTIxNWRiMDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1Die0237uEV1jjcGVKr7I NbOVf3MuQ1znW1kti/DaTX0k/01nK3Mm/wfxySdoliRS0xu4emF1jVkX7gphEv1Y UOaSLYBpU00rGPme+HNM4BI3qqzg9Sr77ehbDf9LIVRxDIV+vY4iopvZjTdOAGYk RcngZxUEgRJ2f06flh4CB94uNA4NCmXFXH1dMv3OcosVkpBrdOvQ5a1axdS9Adtd WIUz3eBGA/Z2CGoQwxCdyin+xx1vVh+TlnzbHjjIGqIO+JXC7wScFUltleQTrERR NNo/zq0igqiJbkQ4RCIfYqkNSAQNi4EtL63QNwE7nM3EW3N79HJsVvxfulK92uhm -----END CERTIFICATE-----Generated at Fri Apr 17 16:33:21 2026 by rpki-client