$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9/afc860c0-ce45-47c2-a938-201b0950b4c9.mft File: afc860c0-ce45-47c2-a938-201b0950b4c9.mft (raw, json) Hash identifier: 7I1dKD3ogum3btZwtXUyGu0puMd23Gj8gBQyQRiPLrc= Subject key identifier: 3F:E2:1D:34:B2:68:E7:8C:3E:CB:4D:D9:F2:6E:39:13:56:64:4C:09 Authority key identifier: 8A:03:F0:6D:D3:E0:5E:2C:19:9C:4A:BA:BD:40:EA:89:21:D5:C5:76 Certificate issuer: /CN=afc860c0-ce45-47c2-a938-201b0950b4c9 Certificate serial: 010D0C9F4328584FAF3ADBD1766CBED322EDB080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9/afc860c0-ce45-47c2-a938-201b0950b4c9.mft Manifest number: 010D0C9F4328584F425E21D54F785DAC91CB95E8 Signing time: Sat 31 Oct 2026 12:00:24 +0000 Manifest this update: Sat 31 Oct 2026 12:00:24 +0000 Manifest next update: Mon 02 Nov 2026 12:00:00 +0000 Files and hashes: 1: 1696dcff-7a9e-38ed-986a-9f1aa229677b.roa (hash: lCX6V7zUpec98qGCejtp1nDxmP3hMxZjsmm3ayDo2aU=) 2: afc860c0-ce45-47c2-a938-201b0950b4c9.crl (hash: BUsrHmN9MmjA1pAScuW4cbWO4UVcloSwEbOoLk8rnyM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9/afc860c0-ce45-47c2-a938-201b0950b4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9/afc860c0-ce45-47c2-a938-201b0950b4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:af:3a:db:d1:76:6c:be:d3:22:ed:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc860c0-ce45-47c2-a938-201b0950b4c9 Validity Not Before: Oct 31 12:00:24 2026 GMT Not After : Nov 2 12:00:00 2026 GMT Subject: CN=3f5135af-1cfd-46a7-9dbd-c4f7ecb039a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:0f:6e:b1:fd:24:eb:c8:a0:c3:5f:0d:70: ed:3a:60:24:c1:40:23:51:a0:c4:28:0f:d7:a4:af: e6:c3:8d:52:1a:54:bb:41:ae:cf:a3:c3:7f:56:b6: 9f:3a:97:7c:70:c9:09:62:4b:57:31:90:1d:d6:cf: 48:d0:e7:b8:04:bc:01:ea:92:96:8b:48:24:f5:f8: 12:9e:08:fd:b9:a2:80:cb:f9:6a:a3:5b:66:ba:d9: 4a:cc:31:20:87:0c:ba:02:bb:c9:1e:0a:7e:0e:a4: 0b:44:c7:fc:60:d2:37:2d:f7:ca:f4:e7:f1:85:0e: 4d:5d:e2:a3:f4:5f:fc:b3:a6:bd:1b:40:ba:a7:93: 70:9e:b5:84:dd:c5:a6:ab:69:66:04:70:77:fc:85: 88:56:ae:86:e3:2c:b7:b5:a1:cc:2d:23:11:d2:2d: 40:17:aa:d9:76:29:d0:a9:d1:5f:0f:e7:62:bc:43: cc:08:a5:69:d6:06:28:02:a7:1e:15:30:e6:bd:c4: c0:c2:f8:dd:ac:26:d4:a7:23:43:ca:2a:7e:78:0f: 08:d7:02:64:3b:cd:d2:35:fc:79:f3:e2:e7:5e:83: 7d:78:e5:eb:2c:11:b1:50:86:d8:5c:8a:35:73:45: f2:7d:ca:e3:3d:66:49:23:cb:52:cb:fa:d9:19:e6: a4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E2:1D:34:B2:68:E7:8C:3E:CB:4D:D9:F2:6E:39:13:56:64:4C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9/afc860c0-ce45-47c2-a938-201b0950b4c9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9/afc860c0-ce45-47c2-a938-201b0950b4c9.crl X509v3 Authority Key Identifier: keyid:8A:03:F0:6D:D3:E0:5E:2C:19:9C:4A:BA:BD:40:EA:89:21:D5:C5:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:bc:6b:54:64:98:cc:9b:a3:a8:63:c4:20:a5:4e:82:d8:b9: 35:33:19:63:d0:6d:86:65:1d:d6:81:b0:98:85:85:82:5b:57: 40:f0:48:c2:0f:e7:ba:a9:83:f4:87:52:93:01:e1:c3:b7:ab: f4:e2:fc:e0:ad:77:91:12:98:ae:41:b0:08:9d:bc:86:12:cd: 55:d4:46:24:28:11:13:9e:d0:4f:d6:7e:fc:d4:85:02:f2:67: 99:55:3a:44:67:91:91:0a:d6:52:e2:a7:d0:21:4c:c6:ed:cd: f3:1a:b0:b0:d8:c6:93:1b:bb:20:d4:73:7d:4d:53:53:d0:a9: 21:8d:2d:c0:7d:12:02:5d:c2:a9:9b:b6:cd:ea:8c:fb:fc:7e: 96:6c:22:05:00:52:15:e2:33:5a:fb:e3:8a:03:60:63:ca:45: d9:22:bd:05:15:07:e8:eb:ba:ec:48:6f:8f:49:50:44:94:85: 72:4d:98:38:f9:da:97:fb:33:9a:a7:52:b8:72:9b:eb:02:47: a0:4f:7d:1b:6d:89:63:34:65:b7:02:de:9b:dd:e3:2b:61:3d: af:b1:ac:54:1b:ac:ce:27:97:73:f1:18:2c:4d:3a:ad:76:a4: 23:5a:c0:6f:dc:85:81:37:a0:84:5c:fa:6c:6d:68:56:18:04: db:8d:5e:f8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+vOtvRdmy+0yLtsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjODYwYzAtY2U0NS00N2MyLWE5MzgtMjAxYjA5NTBi NGM5MB4XDTI2MTAzMTEyMDAyNFoXDTI2MTEwMjEyMDAwMFowLzEtMCsGA1UEAxMk M2Y1MTM1YWYtMWNmZC00NmE3LTlkYmQtYzRmN2VjYjAzOWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty4PbrH9JOvIoMNfDXDtOmAkwUAjUaDEKA/X pK/mw41SGlS7Qa7Po8N/VrafOpd8cMkJYktXMZAd1s9I0Oe4BLwB6pKWi0gk9fgS ngj9uaKAy/lqo1tmutlKzDEghwy6ArvJHgp+DqQLRMf8YNI3LffK9OfxhQ5NXeKj 9F/8s6a9G0C6p5NwnrWE3cWmq2lmBHB3/IWIVq6G4yy3taHMLSMR0i1AF6rZdinQ qdFfD+divEPMCKVp1gYoAqceFTDmvcTAwvjdrCbUpyNDyip+eA8I1wJkO83SNfx5 8+LnXoN9eOXrLBGxUIbYXIo1c0XyfcrjPWZJI8tSy/rZGeak6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD/iHTSyaOeMPstN2fJuORNWZEwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9hZmM4 NjBjMC1jZTQ1LTQ3YzItYTkzOC0yMDFiMDk1MGI0YzkvYWZjODYwYzAtY2U0NS00 N2MyLWE5MzgtMjAxYjA5NTBiNGM5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYWZjODYwYzAtY2U0NS00N2MyLWE5 MzgtMjAxYjA5NTBiNGM5L2FmYzg2MGMwLWNlNDUtNDdjMi1hOTM4LTIwMWIwOTUw YjRjOS5jcmwwHwYDVR0jBBgwFoAUigPwbdPgXiwZnEq6vUDqiSHVxXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9hZmM4NjBjMC1jZTQ1LTQ3YzItYTkzOC0yMDFi MDk1MGI0YzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBovGtUZJjMm6OoY8QgpU6C 2Lk1Mxlj0G2GZR3WgbCYhYWCW1dA8EjCD+e6qYP0h1KTAeHDt6v04vzgrXeREpiu QbAInbyGEs1V1EYkKBETntBP1n781IUC8meZVTpEZ5GRCtZS4qfQIUzG7c3zGrCw 2MaTG7sg1HN9TVNT0KkhjS3AfRICXcKpm7bN6oz7/H6WbCIFAFIV4jNa++OKA2Bj ykXZIr0FFQfo67rsSG+PSVBElIVyTZg4+dqX+zOap1K4cpvrAkegT30bbYljNGW3 At6b3eMrYT2vsaxUG6zOJ5dz8RgsTTqtdqQjWsBv3IWBN6CEXPpsbWhWGATbjV74 -----END CERTIFICATE-----Generated at Sun Nov 1 14:37:21 2026 by rpki-client