$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft File: af651adf-a795-466a-9b0b-afaaea21402a.mft (raw, json) Hash identifier: GtZhORB8ekf17WU8IMuk9fAVqfYXF3TK1TaHpslgU2E= Subject key identifier: C2:18:00:96:7F:D9:29:C6:EC:7A:80:79:47:0C:5C:9F:8D:8E:CE:55 Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584D89B9088EDFA5B2939EB62680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft Manifest number: 010D0C9F43285849B5E8BF14CBBF349B41F87C78 Signing time: Fri 17 Apr 2026 16:00:03 +0000 Manifest this update: Fri 17 Apr 2026 16:00:03 +0000 Manifest next update: Sun 19 Apr 2026 16:00:00 +0000 Files and hashes: 1: af651adf-a795-466a-9b0b-afaaea21402a.crl (hash: P6GIUFoEch2vZh8fjMimSx/QzyjNvvDkSzySvJR6mfM=) 2: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (hash: 9bS+XVMe22CZJlPlo2j7vdNDRz7T/bFnBvSQiSSYum4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:b9:08:8e:df:a5:b2:93:9e:b6:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Apr 17 16:00:03 2026 GMT Not After : Apr 19 16:00:00 2026 GMT Subject: CN=cab5320a-634a-4c65-8d37-6ab53d37dfdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:37:bf:c9:3d:00:42:e9:60:56:8b:5b:26:f8: 4c:53:d6:49:57:85:27:b9:53:c5:b2:f2:e4:bd:9a: 9f:89:29:d7:97:85:1e:20:1b:aa:ee:12:85:62:bc: c1:17:50:18:f1:61:8d:02:b4:4c:50:21:f8:6b:a9: c3:13:27:f9:32:56:50:68:52:4d:6d:2c:95:1b:81: 73:4c:b3:35:99:2c:f1:c9:ff:6f:2e:b4:15:4a:89: 43:09:ab:4f:7d:22:5b:be:9e:8d:39:ca:b7:3f:37: fe:15:06:31:bb:e3:90:3c:06:80:52:b7:17:f3:14: 16:ee:f5:85:ff:6c:85:ec:fa:09:01:3b:c1:5d:60: e3:c3:91:28:4d:8c:59:4c:99:55:2f:68:f9:7c:7d: 2c:79:5a:25:54:4e:45:36:82:96:95:7c:3f:1b:3d: 9e:4c:27:5e:c8:d4:b7:26:ac:12:78:24:61:e8:80: e4:cb:e6:a5:4c:51:e8:26:53:37:47:7b:1d:e1:20: 81:41:b2:13:e1:6f:93:d6:01:8c:39:b0:5f:9f:9a: 11:6f:71:9c:ec:27:8c:6f:26:7c:be:eb:63:bd:dc: 25:5b:e5:f7:f8:ed:7e:1f:57:c6:48:e9:8b:90:da: 3f:ec:64:aa:df:ec:0c:44:b2:3c:ea:d8:f8:c0:22: 05:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:18:00:96:7F:D9:29:C6:EC:7A:80:79:47:0C:5C:9F:8D:8E:CE:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:9e:41:e2:fb:65:b6:80:94:b0:e4:6e:25:e4:4e:ea:0a:2e: 5f:a4:8e:ff:bb:34:86:15:a1:db:d5:5c:43:2e:ef:3e:99:d1: 6d:83:3f:97:d9:9e:f8:2d:c2:1c:24:28:74:c4:1b:77:4e:bb: 32:d3:a8:3b:45:8f:d4:79:15:a4:09:1a:cd:23:7a:3c:dd:74: 0d:e2:16:49:53:e4:3a:14:fd:9a:6c:09:8e:77:e1:07:6c:fd: f5:76:7f:c3:fa:bc:a6:78:9b:4a:2c:2c:ce:63:ee:93:0c:e9: ef:41:a9:8c:49:de:04:21:e4:28:34:ad:76:0c:8e:9a:d0:df: 09:3c:90:9d:81:fa:78:24:4c:8e:b0:5e:43:42:b6:62:11:3e: 7e:5d:b4:4d:0a:52:ff:1f:93:ed:46:d4:61:07:00:c7:52:df: 93:52:6a:30:ee:90:af:f0:3a:ba:c3:07:31:e3:62:28:0c:ca: 57:f2:4f:b4:51:96:14:f1:9d:4c:22:37:4b:9c:e8:e5:d8:6f: 0f:79:b6:a0:3b:16:e5:eb:88:2e:b4:89:0d:d6:5e:7d:cb:df: 69:08:27:28:1a:bc:15:e8:ba:ec:bb:1c:54:82:c1:f2:6b:62: 08:ac:fe:c9:fd:1b:ce:42:73:59:30:3b:a9:41:5d:5e:d6:d7: b1:45:b8:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2JuQiO36Wyk562JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI2MDQxNzE2MDAwM1oXDTI2MDQxOTE2MDAwMFowLzEtMCsGA1UEAxMk Y2FiNTMyMGEtNjM0YS00YzY1LThkMzctNmFiNTNkMzdkZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDe/yT0AQulgVotbJvhMU9ZJV4UnuVPFsvLk vZqfiSnXl4UeIBuq7hKFYrzBF1AY8WGNArRMUCH4a6nDEyf5MlZQaFJNbSyVG4Fz TLM1mSzxyf9vLrQVSolDCatPfSJbvp6NOcq3Pzf+FQYxu+OQPAaAUrcX8xQW7vWF /2yF7PoJATvBXWDjw5EoTYxZTJlVL2j5fH0seVolVE5FNoKWlXw/Gz2eTCdeyNS3 JqwSeCRh6IDky+alTFHoJlM3R3sd4SCBQbIT4W+T1gGMObBfn5oRb3Gc7CeMbyZ8 vutjvdwlW+X3+O1+H1fGSOmLkNo/7GSq3+wMRLI86tj4wCIFtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMIYAJZ/2SnG7HqAeUcMXJ+Njs5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvYWY2NTFhZGYtYTc5NS00 NjZhLTliMGItYWZhYWVhMjE0MDJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPnkHi+2W2gJSw5G4l5E7q Ci5fpI7/uzSGFaHb1VxDLu8+mdFtgz+X2Z74LcIcJCh0xBt3Trsy06g7RY/UeRWk CRrNI3o83XQN4hZJU+Q6FP2abAmOd+EHbP31dn/D+rymeJtKLCzOY+6TDOnvQamM Sd4EIeQoNK12DI6a0N8JPJCdgfp4JEyOsF5DQrZiET5+XbRNClL/H5PtRtRhBwDH Ut+TUmow7pCv8Dq6wwcx42IoDMpX8k+0UZYU8Z1MIjdLnOjl2G8PebagOxbl64gu tIkN1l59y99pCCcoGrwV6LrsuxxUgsHya2IIrP7J/RvOQnNZMDupQV1e1texRbha -----END CERTIFICATE-----Generated at Fri Apr 17 19:11:52 2026 by rpki-client