$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1/affd01e0-7563-4864-8869-e2d08b7eafd1.mft File: affd01e0-7563-4864-8869-e2d08b7eafd1.mft (raw, json) Hash identifier: wjA4ENv1Tj4Wru4OOeqRcFgnxJcIQEMOR50U1oU60po= Subject key identifier: 94:EC:FA:D3:F2:B5:98:41:E5:C1:36:9C:DF:2E:60:F3:1F:ED:EA:FD Authority key identifier: C2:01:52:C3:41:B4:2D:0B:60:A0:62:07:CF:CA:44:09:DA:76:AB:1E Certificate issuer: /CN=affd01e0-7563-4864-8869-e2d08b7eafd1 Certificate serial: 010D0C9F4328584FBDA770685BFDDAE1BB222300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1/affd01e0-7563-4864-8869-e2d08b7eafd1.mft Manifest number: 010D0C9F4328584FACF33576B48D2DC8C15D0A07 Signing time: Thu 05 Nov 2026 16:00:24 +0000 Manifest this update: Thu 05 Nov 2026 16:00:24 +0000 Manifest next update: Sun 08 Nov 2026 16:00:00 +0000 Files and hashes: 1: affd01e0-7563-4864-8869-e2d08b7eafd1.crl (hash: dl6udbx7TKQcO6igkOYQAK5TmSFQyLUFkSGt4+sComM=) 2: c38c7a61-2562-3420-8f70-5f213dfb8fb1.asa (hash: E+CQri8HB+nMe5LsBVyuFkIyltZ/vJAJK8y7fPMUTx8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1/affd01e0-7563-4864-8869-e2d08b7eafd1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1/affd01e0-7563-4864-8869-e2d08b7eafd1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:bd:a7:70:68:5b:fd:da:e1:bb:22:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affd01e0-7563-4864-8869-e2d08b7eafd1 Validity Not Before: Nov 5 16:00:24 2026 GMT Not After : Nov 8 16:00:00 2026 GMT Subject: CN=cc8e2f92-eed9-41c7-9e86-043e3a8e9625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:38:b1:63:81:ed:b4:d7:61:e4:b6:3c:25:a9: c5:9d:7d:93:c0:d9:2b:df:f9:ed:86:fa:fe:98:b7: 93:d0:1b:9a:3a:fb:67:ff:15:85:c0:46:59:77:71: 75:0b:54:71:97:c1:21:58:13:87:e6:24:87:5a:dd: 1f:5e:c0:3a:df:94:f8:c4:b9:9a:3f:6c:12:45:81: 56:9a:35:f4:dd:b8:a0:56:31:05:82:5f:69:d8:b7: 54:cd:c0:c9:cf:3d:33:c2:5d:87:f4:f5:e8:e6:c4: 3a:62:54:34:a4:ef:1f:cd:26:58:1c:f5:5d:5e:a0: 18:5f:08:75:0d:ec:2d:19:26:31:43:c5:7b:87:f4: 2f:06:d9:69:b9:2f:8c:41:8b:91:3e:e0:a2:e2:2b: 76:75:ea:30:30:ed:21:d5:16:96:05:40:9e:ff:cd: 98:d8:cc:ce:aa:73:51:82:8f:94:2f:14:82:c4:4b: dd:b1:16:03:37:6f:14:6c:46:ab:60:a9:dd:0d:2f: 5d:c7:56:1a:10:5a:01:8d:4e:d8:93:62:00:00:7b: 8b:26:14:ce:a3:e2:37:96:2f:9a:fb:8a:14:31:f5: ee:ec:4d:d3:68:05:8b:8e:5e:b3:0c:67:4b:98:a6: cb:a9:d1:c7:15:a8:4f:50:8d:2d:f8:90:85:ba:c0: 72:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EC:FA:D3:F2:B5:98:41:E5:C1:36:9C:DF:2E:60:F3:1F:ED:EA:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1/affd01e0-7563-4864-8869-e2d08b7eafd1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1/affd01e0-7563-4864-8869-e2d08b7eafd1.crl X509v3 Authority Key Identifier: keyid:C2:01:52:C3:41:B4:2D:0B:60:A0:62:07:CF:CA:44:09:DA:76:AB:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:f5:f0:c8:69:da:4a:5d:ad:ec:29:e7:74:78:92:53:bd:21: 4d:c5:54:f5:99:4b:4a:8e:23:ce:45:7f:a0:c6:c9:48:60:42: 80:b1:61:2c:d0:1f:eb:f8:77:d7:c6:99:b4:9b:67:48:dd:e1: 05:a1:9a:0a:1b:60:59:2d:49:f7:ab:31:9e:72:57:a1:58:a4: 4c:66:24:31:2b:d2:60:4d:09:d8:f6:df:78:a3:45:9e:79:6c: d2:d1:c5:9e:de:1d:c5:dd:f0:e6:54:7f:be:59:0c:c0:a4:00: 17:c8:1b:9c:5b:8a:de:d9:c8:ce:26:b0:cf:42:78:aa:50:f0: f6:ef:6e:bd:c9:b5:c1:13:e7:39:4b:4b:a5:1a:b7:a6:76:83: 4c:e1:ac:e0:9a:38:96:0e:dc:d2:8d:13:55:e3:19:21:59:0b: f4:b3:d4:d5:26:a7:af:61:b5:20:57:32:d5:50:88:a9:1a:d6: 1a:34:16:9e:39:2b:73:d0:c8:1a:29:cc:6a:de:25:72:42:90: 96:34:7f:d3:3f:35:6b:77:e4:5a:bf:dd:2f:28:77:de:18:e9: 8d:eb:da:74:9a:8a:4a:c6:8b:0f:d7:b9:bb:60:65:34:08:7b: 49:75:cc:40:b2:5f:54:d8:25:af:3a:f6:a5:16:f0:1f:c7:70: c3:75:a8:8c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+9p3BoW/3a4bsiIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmZDAxZTAtNzU2My00ODY0LTg4NjktZTJkMDhiN2Vh ZmQxMB4XDTI2MTEwNTE2MDAyNFoXDTI2MTEwODE2MDAwMFowLzEtMCsGA1UEAxMk Y2M4ZTJmOTItZWVkOS00MWM3LTllODYtMDQzZTNhOGU5NjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljixY4HttNdh5LY8JanFnX2TwNkr3/nthvr+ mLeT0BuaOvtn/xWFwEZZd3F1C1Rxl8EhWBOH5iSHWt0fXsA635T4xLmaP2wSRYFW mjX03bigVjEFgl9p2LdUzcDJzz0zwl2H9PXo5sQ6YlQ0pO8fzSZYHPVdXqAYXwh1 DewtGSYxQ8V7h/QvBtlpuS+MQYuRPuCi4it2deowMO0h1RaWBUCe/82Y2MzOqnNR go+ULxSCxEvdsRYDN28UbEarYKndDS9dx1YaEFoBjU7Yk2IAAHuLJhTOo+I3li+a +4oUMfXu7E3TaAWLjl6zDGdLmKbLqdHHFahPUI0t+JCFusBykQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJTs+tPytZhB5cE2nN8uYPMf7er9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hZmZk MDFlMC03NTYzLTQ4NjQtODg2OS1lMmQwOGI3ZWFmZDEvYWZmZDAxZTAtNzU2My00 ODY0LTg4NjktZTJkMDhiN2VhZmQxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzc1MjZhMC1m ZTRlLTQ3NDEtYjM5Yi0zMjMzNTNhMWViZjIvYWZmZDAxZTAtNzU2My00ODY0LTg4 NjktZTJkMDhiN2VhZmQxL2FmZmQwMWUwLTc1NjMtNDg2NC04ODY5LWUyZDA4Yjdl YWZkMS5jcmwwHwYDVR0jBBgwFoAUwgFSw0G0LQtgoGIHz8pECdp2qx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0 MS1iMzliLTMyMzM1M2ExZWJmMi9hZmZkMDFlMC03NTYzLTQ4NjQtODg2OS1lMmQw OGI3ZWFmZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCg9fDIadpKXa3sKed0eJJT vSFNxVT1mUtKjiPORX+gxslIYEKAsWEs0B/r+HfXxpm0m2dI3eEFoZoKG2BZLUn3 qzGeclehWKRMZiQxK9JgTQnY9t94o0WeeWzS0cWe3h3F3fDmVH++WQzApAAXyBuc W4re2cjOJrDPQniqUPD27269ybXBE+c5S0ulGremdoNM4azgmjiWDtzSjRNV4xkh WQv0s9TVJqevYbUgVzLVUIipGtYaNBaeOStz0MgaKcxq3iVyQpCWNH/TPzVrd+Ra v90vKHfeGOmN69p0mopKxosP17m7YGU0CHtJdcxAsl9U2CWvOvalFvAfx3DDdaiM -----END CERTIFICATE-----Generated at Thu Nov 5 19:51:48 2026 by rpki-client