$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft File: af86fe52-5b77-46b6-9502-51ccccf3a755.mft (raw, json) Hash identifier: sKhs8xzRjPjwMMa7vyo7hu/JqC/4Ys8urVNzDzQDwDw= Subject key identifier: 5D:1A:4F:DE:AC:C5:E2:39:41:B8:BB:A1:89:DD:07:56:4B:BF:2B:12 Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA Certificate issuer: /CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Certificate serial: 010D0C9F4328584D6CDFF0D514D975E5975DA880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft Manifest number: 010D0C9F4328584073A8493AB2010A55F725C7E6 Signing time: Tue 07 Apr 2026 08:00:03 +0000 Manifest this update: Tue 07 Apr 2026 08:00:03 +0000 Manifest next update: Thu 09 Apr 2026 08:00:00 +0000 Files and hashes: 1: 01a7af66-3ab1-31fc-912e-d07e8faac6cd.roa (hash: bQUyi4jidvGpEqlcYKpyoU6etxUEVznvKqIWym35veQ=) 2: 4c146698-99de-3bf6-915e-d2a6ca46429b.roa (hash: Gf/WDGtS7Y2sjWyuWci+QXoFLh3DKXj7YEaZGrMsQBg=) 3: 5a7e3243-e10e-39bc-b5c4-a63afb63b901.roa (hash: TmNiuIeeJ/bkbYTO8itgYyNEIh1A1bx3D81AnDTkcrE=) 4: 9dbb5454-4382-3a81-8ec0-b1d7d76be66f.roa (hash: zG0DLGzWTacigr91jduW4V0Qm4b6nIekvCueGFi74Bw=) 5: af86fe52-5b77-46b6-9502-51ccccf3a755.crl (hash: WsdWDLwd4/ErPCmjiiNSDkds7oEFHoyf3/ytTfpUOLY=) 6: d3cac5c0-7a9d-3036-bd74-de0fa3dba8f7.roa (hash: aFKzkx6GW8wvVVx2nqzSllyJdiUgjQkNNTd4uRoI384=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:df:f0:d5:14:d9:75:e5:97:5d:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Validity Not Before: Apr 7 08:00:03 2026 GMT Not After : Apr 9 08:00:00 2026 GMT Subject: CN=0a2b1049-5da0-4408-99b2-13199f6cbeaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dd:10:18:33:c9:74:84:eb:54:e7:6a:d8:04: ea:53:2e:ca:0b:b2:13:8e:82:3c:de:97:82:c6:dc: 31:6b:d2:80:60:6a:db:b5:c5:33:3d:ba:3c:82:0e: 44:25:03:05:23:3e:c9:39:48:31:43:e8:d1:6e:ff: 36:c8:6d:12:4f:4a:76:88:e6:c2:2b:4a:3a:e8:c2: aa:a2:7b:55:1f:22:2f:72:05:4d:68:21:c3:1b:24: a7:d6:2c:d9:8e:f4:bf:6a:9a:ec:d6:f1:38:1a:67: bc:51:f0:9e:e5:20:9d:8c:8e:55:dd:2c:40:97:cf: d7:ce:72:3e:cb:36:bd:fe:b7:33:35:1b:95:68:aa: 66:4b:63:85:14:0c:39:8e:41:76:12:1a:d0:a6:bb: b0:02:81:bf:7c:88:d1:ee:1e:6d:85:16:04:62:67: 1e:4f:28:54:ea:5e:e2:b3:b1:e0:4e:1a:11:3c:8e: 6c:e0:09:ef:84:e6:3b:69:4d:2c:15:8c:16:84:6e: a1:a6:6c:47:46:33:5e:95:c6:0b:e3:e1:d1:3a:78: c0:08:54:3c:8a:38:5b:64:6b:e1:c7:ae:56:25:ba: 2f:c4:da:41:f7:c9:37:25:a8:44:c8:00:7e:d1:f4: d7:01:cf:32:ba:8f:d6:f1:71:62:d5:13:c0:26:53: 85:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1A:4F:DE:AC:C5:E2:39:41:B8:BB:A1:89:DD:07:56:4B:BF:2B:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl X509v3 Authority Key Identifier: keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f0:f9:52:70:83:d2:51:d2:64:5c:23:6d:ed:40:b8:a6:d0: e4:b7:35:56:0d:6a:4e:e0:15:54:10:2a:5f:dd:80:fb:e5:3f: e4:a0:3b:70:75:7e:8e:b6:4f:20:59:bb:fa:7a:8d:da:91:0e: ac:10:10:36:21:81:b9:b0:81:32:0b:3d:1d:5d:e2:e4:ea:1d: 1a:21:8f:88:fa:41:8d:c0:0b:84:30:4c:ad:6f:af:c3:3c:5d: f1:16:7e:05:43:c8:82:20:0b:3b:47:b7:15:2e:a2:53:bc:2d: 43:e0:96:0a:c2:69:97:64:62:f6:34:9e:ef:9e:85:46:9f:94: 95:8b:88:cc:45:27:79:5a:9f:11:12:4f:c6:82:6b:af:79:39: d6:11:e0:e1:1d:dd:d4:b7:b6:e3:92:af:e1:35:30:dc:4a:39: 77:f2:7b:6e:f5:88:05:4f:c6:7d:3b:ae:cd:57:c1:fc:3c:cd: 4b:68:e0:6a:c4:31:c1:6f:91:1a:a8:be:7e:d2:bc:fd:1e:c2: 19:61:7c:28:c8:d5:fa:09:5e:0f:9e:77:03:02:a0:53:1e:ce: c9:a4:b5:b5:f3:c7:bb:b3:5d:49:39:9a:59:ac:55:d1:39:a0: d5:7f:c3:fe:6d:6d:de:9c:1b:66:cf:6f:fb:f2:c2:94:ef:ec: 24:8f:d6:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1s3/DVFNl15ZddqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4NmZlNTItNWI3Ny00NmI2LTk1MDItNTFjY2NjZjNh NzU1MB4XDTI2MDQwNzA4MDAwM1oXDTI2MDQwOTA4MDAwMFowLzEtMCsGA1UEAxMk MGEyYjEwNDktNWRhMC00NDA4LTk5YjItMTMxOTlmNmNiZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN0QGDPJdITrVOdq2ATqUy7KC7ITjoI83peC xtwxa9KAYGrbtcUzPbo8gg5EJQMFIz7JOUgxQ+jRbv82yG0ST0p2iObCK0o66MKq ontVHyIvcgVNaCHDGySn1izZjvS/aprs1vE4Gme8UfCe5SCdjI5V3SxAl8/XznI+ yza9/rczNRuVaKpmS2OFFAw5jkF2EhrQpruwAoG/fIjR7h5thRYEYmceTyhU6l7i s7HgThoRPI5s4AnvhOY7aU0sFYwWhG6hpmxHRjNelcYL4+HROnjACFQ8ijhbZGvh x65WJbovxNpB98k3JahEyAB+0fTXAc8yuo/W8XFi1RPAJlOFfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF0aT96sxeI5Qbi7oYndB1ZLvysSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2 ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNjY2NmM2E3NTUvYWY4NmZlNTItNWI3Ny00 NmI2LTk1MDItNTFjY2NjZjNhNzU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWY4NmZlNTItNWI3Ny00NmI2LTk1 MDItNTFjY2NjZjNhNzU1L2FmODZmZTUyLTViNzctNDZiNi05NTAyLTUxY2NjY2Yz YTc1NS5jcmwwHwYDVR0jBBgwFoAUpCnYdby96fIjd9cnL82GRWj9YvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNj Y2NmM2E3NTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBP8PlScIPSUdJkXCNt7UC4 ptDktzVWDWpO4BVUECpf3YD75T/koDtwdX6Otk8gWbv6eo3akQ6sEBA2IYG5sIEy Cz0dXeLk6h0aIY+I+kGNwAuEMEytb6/DPF3xFn4FQ8iCIAs7R7cVLqJTvC1D4JYK wmmXZGL2NJ7vnoVGn5SVi4jMRSd5Wp8REk/GgmuveTnWEeDhHd3Ut7bjkq/hNTDc Sjl38ntu9YgFT8Z9O67NV8H8PM1LaOBqxDHBb5EaqL5+0rz9HsIZYXwoyNX6CV4P nncDAqBTHs7JpLW188e7s11JOZpZrFXROaDVf8P+bW3enBtmz2/78sKU7+wkj9aB -----END CERTIFICATE-----Generated at Tue Apr 7 12:07:47 2026 by rpki-client