$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft File: affcec42-3d91-4bd4-91a9-094e86b16e3a.mft (raw, json) Hash identifier: to7dfbcljNWvydbj9p6Nqc+MDNkBQz4IW+Yc1agTxHo= Subject key identifier: 6F:84:A5:6D:0E:8F:BA:70:A5:FF:65:A4:62:29:8A:0D:82:3B:04:5B Authority key identifier: 00:C6:02:63:2D:43:DC:7C:16:1B:C3:B1:34:F6:1D:6A:16:86:4B:55 Certificate issuer: /CN=affcec42-3d91-4bd4-91a9-094e86b16e3a Certificate serial: 010D0C9F4328584FBDA777AD67E6911A45C21A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft Manifest number: 010D0C9F4328584BBA3E8DF885FAACDC304D00FA Signing time: Thu 05 Nov 2026 16:00:24 +0000 Manifest this update: Thu 05 Nov 2026 16:00:24 +0000 Manifest next update: Sun 08 Nov 2026 16:00:00 +0000 Files and hashes: 1: 4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa (hash: ew27pnO4yRbwgZVEIjPxeKJwaVpxj267wopjBe5pWmc=) 2: affcec42-3d91-4bd4-91a9-094e86b16e3a.crl (hash: Irlo77XtY7rac8+jt3zZW9w0m2vYRtizEDWOCFuFnaY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:bd:a7:77:ad:67:e6:91:1a:45:c2:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affcec42-3d91-4bd4-91a9-094e86b16e3a Validity Not Before: Nov 5 16:00:24 2026 GMT Not After : Nov 8 16:00:00 2026 GMT Subject: CN=30525cd6-3efa-4372-adb5-d2fc5d98faeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:98:0b:ec:ee:8a:7c:44:06:15:b4:94:ce: 5d:03:c0:5b:85:0b:93:c5:85:d3:e1:01:95:40:31: a2:39:89:f3:dd:82:3a:2c:b5:97:02:5c:38:37:73: a1:c0:b5:bc:a6:80:ac:4c:28:1e:4f:1b:8c:d1:77: 06:cb:b7:ae:88:a1:5a:df:70:76:4c:f5:6b:53:9c: 14:04:f8:4b:06:61:61:6a:1b:ff:f5:f4:19:e1:91: 80:c3:56:bc:e9:76:51:6a:22:94:40:77:0f:00:98: 1f:f9:48:cd:6d:af:31:62:f1:52:e4:d8:1c:3d:75: 2a:ec:ff:95:da:d9:42:3c:07:ee:b5:c1:4e:df:23: be:fe:5f:04:4a:7e:99:a7:e0:32:7d:0d:ea:5a:49: 42:83:ea:f0:95:33:8a:6e:ed:1c:67:db:84:95:38: 20:7b:5a:30:93:49:a0:3d:ac:1b:ca:f6:be:24:50: 74:93:53:8f:05:91:91:cd:49:df:71:e6:14:23:10: 52:a4:7e:77:ec:bb:07:b8:3c:10:e7:e0:e8:59:dc: 34:cb:df:33:d0:81:a8:d2:86:b9:6f:95:ce:eb:70: 02:e8:dc:77:15:b8:4d:e1:fa:a5:d6:bd:df:f2:6e: 21:f8:ea:5c:67:7b:7f:11:62:38:51:43:d3:19:5e: fb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:84:A5:6D:0E:8F:BA:70:A5:FF:65:A4:62:29:8A:0D:82:3B:04:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.crl X509v3 Authority Key Identifier: keyid:00:C6:02:63:2D:43:DC:7C:16:1B:C3:B1:34:F6:1D:6A:16:86:4B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3e:26:3a:e9:8e:ff:f8:a0:06:bc:56:15:95:ee:54:e7:02: da:06:86:09:32:7b:35:6c:ad:86:49:ef:5c:d4:0f:38:2a:ef: fd:16:43:67:9e:bf:5f:9e:10:73:e2:62:1d:d0:78:2d:fa:48: 0e:c9:22:d0:29:4f:b2:39:49:88:43:89:17:d3:5c:27:9d:d1: f2:50:6b:0a:23:eb:b1:2e:00:3c:3f:79:f6:f7:7a:49:0b:6a: 08:21:1c:cd:dc:81:7a:fd:b3:ca:77:fb:2b:54:3c:b9:2a:e4: 54:90:83:05:5f:7d:5f:34:69:6e:52:26:a0:c0:cb:29:5e:59: 60:27:b5:ff:69:e0:5b:56:69:d1:d4:36:be:57:11:e8:f8:3b: 8b:45:23:0b:fc:8f:1b:78:3d:a3:92:ae:67:98:9a:f8:53:74: d7:fb:39:0d:e6:c2:32:23:e5:64:2c:97:9b:08:6c:71:88:2a: 09:02:b0:eb:68:3e:53:24:db:88:3d:0f:2e:71:a0:93:77:ba: 6b:c8:94:05:32:12:2b:b9:ed:24:db:46:59:3a:37:c4:a9:0d: 16:58:89:53:18:e7:16:9d:61:b3:cc:53:b9:a8:12:30:09:29: 05:78:df:37:19:58:c1:18:97:27:d0:f2:dc:35:6e:70:73:ff: 76:7e:cd:ef -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+9p3etZ+aRGkXCGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmY2VjNDItM2Q5MS00YmQ0LTkxYTktMDk0ZTg2YjE2 ZTNhMB4XDTI2MTEwNTE2MDAyNFoXDTI2MTEwODE2MDAwMFowLzEtMCsGA1UEAxMk MzA1MjVjZDYtM2VmYS00MzcyLWFkYjUtZDJmYzVkOThmYWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh6YC+zuinxEBhW0lM5dA8BbhQuTxYXT4QGV QDGiOYnz3YI6LLWXAlw4N3OhwLW8poCsTCgeTxuM0XcGy7euiKFa33B2TPVrU5wU BPhLBmFhahv/9fQZ4ZGAw1a86XZRaiKUQHcPAJgf+UjNba8xYvFS5NgcPXUq7P+V 2tlCPAfutcFO3yO+/l8ESn6Zp+AyfQ3qWklCg+rwlTOKbu0cZ9uElTgge1owk0mg Pawbyva+JFB0k1OPBZGRzUnfceYUIxBSpH537LsHuDwQ5+DoWdw0y98z0IGo0oa5 b5XO63AC6Nx3FbhN4fql1r3f8m4h+OpcZ3t/EWI4UUPTGV776QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG+EpW0Oj7pwpf9lpGIpig2COwRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZmZj ZWM0Mi0zZDkxLTRiZDQtOTFhOS0wOTRlODZiMTZlM2EvYWZmY2VjNDItM2Q5MS00 YmQ0LTkxYTktMDk0ZTg2YjE2ZTNhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWZmY2VjNDItM2Q5MS00YmQ0LTkx YTktMDk0ZTg2YjE2ZTNhL2FmZmNlYzQyLTNkOTEtNGJkNC05MWE5LTA5NGU4NmIx NmUzYS5jcmwwHwYDVR0jBBgwFoAUAMYCYy1D3HwWG8OxNPYdahaGS1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZmZjZWM0Mi0zZDkxLTRiZDQtOTFhOS0wOTRl ODZiMTZlM2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0PiY66Y7/+KAGvFYVle5U 5wLaBoYJMns1bK2GSe9c1A84Ku/9FkNnnr9fnhBz4mId0Hgt+kgOySLQKU+yOUmI Q4kX01wnndHyUGsKI+uxLgA8P3n293pJC2oIIRzN3IF6/bPKd/srVDy5KuRUkIMF X31fNGluUiagwMspXllgJ7X/aeBbVmnR1Da+VxHo+DuLRSML/I8beD2jkq5nmJr4 U3TX+zkN5sIyI+VkLJebCGxxiCoJArDraD5TJNuIPQ8ucaCTd7pryJQFMhIrue0k 20ZZOjfEqQ0WWIlTGOcWnWGzzFO5qBIwCSkFeN83GVjBGJcn0PLcNW5wc/92fs3v -----END CERTIFICATE-----Generated at Thu Nov 5 19:01:05 2026 by rpki-client