$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft File: afac962a-1647-4571-99e5-a23db5fd79d7.mft (raw, json) Hash identifier: d0g8eHAGm7mICTA15xuACUbz+l6XivDZ8yiZNI86A3o= Subject key identifier: 2C:91:D1:69:68:0D:7C:8B:D5:38:83:3F:41:05:F4:E7:F9:8F:CC:40 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584DA3A9A0225F1FE112D1CDC200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft Manifest number: 010D0C9F4328584073A82FF0EBCB41ACCF0589E6 Signing time: Sun 26 Apr 2026 23:00:04 +0000 Manifest this update: Sun 26 Apr 2026 23:00:04 +0000 Manifest next update: Tue 28 Apr 2026 23:00:00 +0000 Files and hashes: 1: 01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa (hash: jcMFe/3NX3r6chHhuTrYX4wT+AOo2l4PVkj4ntxIlFk=) 2: 0d8274da-0703-3d0a-ab87-cd190f0a1378.roa (hash: 4gzpCTi8JWFnGBC7a3pcNxdgUO1B+H8VjaxQird88zA=) 3: afac962a-1647-4571-99e5-a23db5fd79d7.crl (hash: 4DYq7sCIZO9Aj+ZCprXqPxBfAraWArraRt1aEFT7uEM=) 4: b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa (hash: sDHnvT/AX4lXRZ2lyrDmNxuLsW5CB8mO0sCBF/SVK88=) 5: e5e560e3-7114-3301-9261-7725a1241fa8.roa (hash: oZ4gRO7ybB1wDLDYsWaarCpzSmVl/pRtxLBdg2RbjXo=) 6: ed93203f-cf71-30b1-9801-397105ab7580.roa (hash: 629Ej0gcWdurlCxV2jsNDyhsiW4WF1OGfA29Pc0ctEE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:a9:a0:22:5f:1f:e1:12:d1:cd:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Apr 26 23:00:04 2026 GMT Not After : Apr 28 23:00:00 2026 GMT Subject: CN=66cb5174-9e9d-4faa-8e64-f95fd5f270f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a7:3e:ed:3e:b4:c2:a0:87:87:f1:14:40:2d: e7:aa:31:20:ee:4f:4b:c0:39:40:c0:98:d3:4c:74: 16:67:54:81:43:16:04:e6:fe:cc:4f:20:23:b2:66: c8:4c:6c:4f:b5:26:79:99:6b:dc:15:81:ba:7d:93: b5:14:5a:10:08:8c:ed:47:71:06:c7:0d:b3:79:e0: 1a:f7:db:fa:06:70:ca:28:e6:ad:b2:aa:62:ef:ff: f3:29:2a:8e:99:e9:b5:e7:44:d3:9e:6e:63:7a:5b: 71:80:52:73:ca:6c:82:7e:b0:f9:87:d8:96:90:c6: e9:5b:c3:47:3c:b7:a0:f7:ea:13:21:48:a4:3f:7b: e9:c6:35:15:37:04:f8:2c:c6:3d:55:73:97:9a:d3: 1e:34:d7:bd:17:20:2a:6c:3b:bf:ce:10:0e:ce:b2: f8:55:be:fc:87:63:74:ec:1a:0b:ec:f0:7d:de:5a: ba:f7:71:9c:4e:10:f7:cc:e5:4a:9d:31:bb:7a:5c: 6a:16:38:8c:00:5e:fc:2c:b8:9e:fe:8d:2a:d8:04: cf:da:80:34:1a:96:d4:42:31:b3:1a:c2:03:23:e5: 95:53:8b:ea:04:67:d9:58:96:04:4c:5c:5d:37:f5: 2a:28:11:f5:1a:90:9a:95:8b:7e:10:43:8d:b4:0c: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:91:D1:69:68:0D:7C:8B:D5:38:83:3F:41:05:F4:E7:F9:8F:CC:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:60:6a:24:cd:ed:ca:fb:15:6d:64:78:4d:66:ba:28:ba:7a: 9f:2a:df:af:92:39:11:b5:c6:83:82:62:50:57:0a:c7:3b:f8: b1:a2:44:cc:f6:19:08:b5:cb:36:c7:8f:5e:c4:3d:65:e4:d7: 03:b2:f5:2d:bd:54:4a:02:93:b0:eb:e3:eb:30:d8:8e:bf:c6: 9b:54:8b:fe:3b:a5:5f:c0:1b:d8:d6:58:ff:21:2c:44:55:b6: 80:2c:3b:51:37:3e:95:ff:5c:94:e3:db:36:9d:d4:c9:95:a9: 45:70:62:12:69:07:59:f2:9d:3c:20:71:61:33:65:4f:af:e9: fc:28:c4:f3:8c:cf:52:31:81:98:ce:69:ac:e8:16:bf:73:11: 21:db:a2:ea:6d:d0:9f:37:78:ca:22:17:ac:00:c7:17:f8:37: fc:d0:57:ce:17:e2:d0:46:1c:27:89:f7:ec:1f:4b:1a:25:f6: 62:98:01:3d:3b:19:fc:09:f3:0a:66:40:c8:49:d8:58:40:b9: b0:36:85:2e:ab:9d:9a:8a:6c:8f:4c:e5:35:45:51:84:ce:c3: 18:4c:ad:86:ae:cd:c4:b4:59:3e:9f:33:6d:b8:7c:18:dc:e6: 1f:23:03:0f:6d:b9:fc:ea:c1:d6:15:43:3e:99:3e:76:7e:95: 32:59:98:fd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2jqaAiXx/hEtHNwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI2MDQyNjIzMDAwNFoXDTI2MDQyODIzMDAwMFowLzEtMCsGA1UEAxMk NjZjYjUxNzQtOWU5ZC00ZmFhLThlNjQtZjk1ZmQ1ZjI3MGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6c+7T60wqCHh/EUQC3nqjEg7k9LwDlAwJjT THQWZ1SBQxYE5v7MTyAjsmbITGxPtSZ5mWvcFYG6fZO1FFoQCIztR3EGxw2zeeAa 99v6BnDKKOatsqpi7//zKSqOmem150TTnm5jeltxgFJzymyCfrD5h9iWkMbpW8NH PLeg9+oTIUikP3vpxjUVNwT4LMY9VXOXmtMeNNe9FyAqbDu/zhAOzrL4Vb78h2N0 7BoL7PB93lq693GcThD3zOVKnTG7elxqFjiMAF78LLie/o0q2ATP2oA0GpbUQjGz GsIDI+WVU4vqBGfZWJYETFxdN/UqKBH1GpCalYt+EEONtAzTzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCyR0WloDXyL1TiDP0EF9Of5j8xAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvYWZhYzk2MmEtMTY0Ny00 NTcxLTk5ZTUtYTIzZGI1ZmQ3OWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7YGokze3K+xVtZHhNZroo unqfKt+vkjkRtcaDgmJQVwrHO/ixokTM9hkItcs2x49exD1l5NcDsvUtvVRKApOw 6+PrMNiOv8abVIv+O6VfwBvY1lj/ISxEVbaALDtRNz6V/1yU49s2ndTJlalFcGIS aQdZ8p08IHFhM2VPr+n8KMTzjM9SMYGYzmms6Ba/cxEh26LqbdCfN3jKIhesAMcX +Df80FfOF+LQRhwniffsH0saJfZimAE9Oxn8CfMKZkDISdhYQLmwNoUuq52aimyP TOU1RVGEzsMYTK2Grs3EtFk+nzNtuHwY3OYfIwMPbbn86sHWFUM+mT52fpUyWZj9 -----END CERTIFICATE-----Generated at Mon Apr 27 07:18:13 2026 by rpki-client