$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft File: 1af0a650-f612-4b2a-9af3-b8090917fefd.mft (raw, json) Hash identifier: M3kVvFG000qafk9vQVTECu2wXCxnbQbYc9it3zrju+c= Subject key identifier: 03:58:1E:E6:66:83:B2:6B:23:6E:CF:B7:16:42:01:B6:41:8B:D0:DB Authority key identifier: 0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D Certificate issuer: /CN=1af0a650-f612-4b2a-9af3-b8090917fefd Certificate serial: 010D0C9F4328584F4848EF4F79F149A4DB4BD0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft Manifest number: 010D0C9F4328584BE67F5BDBA8BBD49634FD1A3F Signing time: Thu 24 Sep 2026 15:00:23 +0000 Manifest this update: Thu 24 Sep 2026 15:00:23 +0000 Manifest next update: Sun 27 Sep 2026 15:00:00 +0000 Files and hashes: 1: 1af0a650-f612-4b2a-9af3-b8090917fefd.crl (hash: XchJd1yzCnzmZaByEA6RUfh9qv1Uwmy+2busm2MAb7E=) 2: c9a357e8-5b34-3488-aff9-64850d85d2ab.roa (hash: dnR580swcZLsxOiXAL+6QWYrILf9dfhxuocqSI4qgKM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:48:ef:4f:79:f1:49:a4:db:4b:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1af0a650-f612-4b2a-9af3-b8090917fefd Validity Not Before: Sep 24 15:00:23 2026 GMT Not After : Sep 27 15:00:00 2026 GMT Subject: CN=dbbb3bf3-d9c0-4eb6-bc6c-2caaecb02f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:71:c0:54:d3:e2:d8:f6:93:5e:fe:b5:5a:86: d6:e7:b3:43:69:d0:1a:11:6a:7a:90:4f:db:97:19: 2d:dd:1a:a7:22:7b:af:d5:28:9f:b9:fe:59:8c:31: a5:e5:62:5f:96:67:a9:a7:15:5f:e1:c9:0c:7a:74: f2:7a:6a:6a:9f:4e:28:a6:af:53:69:dc:60:77:55: 5e:19:eb:f2:78:eb:33:0b:38:41:0a:22:2e:fc:fd: 19:76:4f:e6:2a:61:b0:e6:5d:70:dd:6b:7d:b3:9b: a4:94:d5:3b:f8:f6:14:57:0f:cc:66:65:34:33:3f: 71:86:df:02:8e:db:26:c2:75:d0:fd:65:c1:5a:12: 9a:0e:e1:0c:b8:52:6d:1f:b3:39:7b:bb:d4:02:15: de:58:26:61:b3:2f:87:dd:3b:a8:82:3d:e7:0c:86: ad:1d:61:ab:4c:e9:81:2c:8c:ed:c4:ab:5d:69:24: 1c:70:1e:36:a0:26:7f:cc:22:4f:c8:58:03:96:16: 51:06:e1:50:a4:00:e6:48:5e:48:4b:ee:51:82:16: d2:ff:19:a0:40:ec:26:ae:cd:5d:ea:0e:50:c9:50: da:57:4f:bd:da:36:cf:3a:61:9b:47:ef:b4:51:2f: 91:62:d2:0c:8e:6e:14:d0:ed:4b:9d:d8:e1:17:6e: 55:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:58:1E:E6:66:83:B2:6B:23:6E:CF:B7:16:42:01:B6:41:8B:D0:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl X509v3 Authority Key Identifier: keyid:0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:24:f3:dc:a8:90:51:33:02:49:cf:b3:ba:f9:19:28:e5:74: de:7c:f9:68:2d:a7:05:3e:a6:97:1e:07:9b:02:fc:63:42:a2: 00:58:6f:d9:a8:3f:a4:5d:6e:75:97:c5:fb:95:15:3a:81:d2: c8:b5:4f:4b:1d:1a:60:88:43:16:23:63:22:fb:75:2a:10:52: 78:65:6a:3b:e0:1d:7d:6e:7f:a4:8e:fe:91:5b:67:42:db:df: 00:e5:7e:2b:62:d5:2b:95:f0:17:a7:7e:a7:e0:33:50:b2:1d: fc:80:84:77:12:b4:c6:2d:49:a7:e0:e6:b0:07:a5:22:df:73: 0f:49:74:f8:2f:66:1e:fa:03:65:99:5b:db:fc:be:4f:75:c1: 28:89:cb:d1:ba:3a:cc:2a:44:94:7b:31:93:a2:3f:b5:20:08: 22:56:e1:91:f0:6e:72:ec:d4:44:89:2f:3b:2e:50:ac:82:02: d0:80:3a:67:09:aa:f3:06:ec:ec:2d:0b:4b:3d:36:e2:3a:62: 4e:cc:ce:1a:21:21:f3:84:28:58:33:b1:65:9d:4b:3b:69:59: a9:cd:e4:a1:54:97:48:85:fa:97:62:dd:9b:90:8c:9a:6d:31: 8c:15:e8:ff:99:fe:44:1d:e9:cd:26:85:03:4b:2c:06:e6:a8: 68:e2:7f:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9ISO9PefFJpNtL0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFmMGE2NTAtZjYxMi00YjJhLTlhZjMtYjgwOTA5MTdm ZWZkMB4XDTI2MDkyNDE1MDAyM1oXDTI2MDkyNzE1MDAwMFowLzEtMCsGA1UEAxMk ZGJiYjNiZjMtZDljMC00ZWI2LWJjNmMtMmNhYWVjYjAyZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXHAVNPi2PaTXv61WobW57NDadAaEWp6kE/b lxkt3RqnInuv1Sifuf5ZjDGl5WJflmeppxVf4ckMenTyempqn04opq9Tadxgd1Ve GevyeOszCzhBCiIu/P0Zdk/mKmGw5l1w3Wt9s5uklNU7+PYUVw/MZmU0Mz9xht8C jtsmwnXQ/WXBWhKaDuEMuFJtH7M5e7vUAhXeWCZhsy+H3Tuogj3nDIatHWGrTOmB LIztxKtdaSQccB42oCZ/zCJPyFgDlhZRBuFQpADmSF5IS+5RghbS/xmgQOwmrs1d 6g5QyVDaV0+92jbPOmGbR++0US+RYtIMjm4U0O1LndjhF25VqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFANYHuZmg7JrI27PtxZCAbZBi9DbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYw YTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5MDkxN2ZlZmQvMWFmMGE2NTAtZjYxMi00 YjJhLTlhZjMtYjgwOTA5MTdmZWZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWFmMGE2NTAtZjYxMi00YjJhLTlh ZjMtYjgwOTA5MTdmZWZkLzFhZjBhNjUwLWY2MTItNGIyYS05YWYzLWI4MDkwOTE3 ZmVmZC5jcmwwHwYDVR0jBBgwFoAUDWTi2ayqXnf8z1b/B9EFaOXwJJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYwYTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5 MDkxN2ZlZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6JPPcqJBRMwJJz7O6+Rko 5XTefPloLacFPqaXHgebAvxjQqIAWG/ZqD+kXW51l8X7lRU6gdLItU9LHRpgiEMW I2Mi+3UqEFJ4ZWo74B19bn+kjv6RW2dC298A5X4rYtUrlfAXp36n4DNQsh38gIR3 ErTGLUmn4OawB6Ui33MPSXT4L2Ye+gNlmVvb/L5PdcEoicvRujrMKkSUezGToj+1 IAgiVuGR8G5y7NREiS87LlCsggLQgDpnCarzBuzsLQtLPTbiOmJOzM4aISHzhChY M7FlnUs7aVmpzeShVJdIhfqXYt2bkIyabTGMFej/mf5EHenNJoUDSywG5qho4n+I -----END CERTIFICATE-----Generated at Fri Sep 25 10:00:35 2026 by rpki-client