$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft File: af121a54-266e-447b-8176-bfcd1dc7867c.mft (raw, json) Hash identifier: VKXMUV0e3eHE1RWFd0rMMuuUHs6yfw5NezQPadkMZhY= Subject key identifier: 70:97:86:C4:E0:B8:30:54:FC:21:26:B9:82:F2:96:22:0C:B3:88:D5 Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD Certificate issuer: /CN=af121a54-266e-447b-8176-bfcd1dc7867c Certificate serial: 010D0C9F4328584D54CBCC173296C0712A846880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft Manifest number: 010D0C9F43285845726B239107AE1661CDA1AF73 Signing time: Sun 29 Mar 2026 17:00:03 +0000 Manifest this update: Sun 29 Mar 2026 17:00:03 +0000 Manifest next update: Tue 31 Mar 2026 17:00:00 +0000 Files and hashes: 1: 04922686-2f93-3d22-92a4-035fa202dc47.roa (hash: UhlacdT/xYBhswwDZZpXPwQiXvVqCGgm2uoeVFezHW0=) 2: 4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa (hash: idPAHF9kecZdA85FlziB2Vo5TaApDyOIx3bCsWPGkHc=) 3: a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa (hash: UdFHjV3R4M7BxJXTaiVVK/wdTPilwXc5CSh1j28RZOM=) 4: af121a54-266e-447b-8176-bfcd1dc7867c.crl (hash: PSNrFRzwer9g4AIpavIE94qQCi/499Dq7Q9/oqd96JY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:54:cb:cc:17:32:96:c0:71:2a:84:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c Validity Not Before: Mar 29 17:00:03 2026 GMT Not After : Mar 31 17:00:00 2026 GMT Subject: CN=add48f03-888c-4aa1-813d-831a283e8621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:18:a9:6a:31:9d:be:f2:87:27:80:3e:eb: bd:f4:b3:74:a8:44:45:e6:3f:2f:c9:2c:3b:2d:65: 21:b0:cc:f4:2d:7c:8d:74:26:7d:6b:c0:c0:e6:c4: 54:08:59:e1:8e:fe:92:fe:4b:f9:4f:cc:eb:18:31: 73:fd:3e:50:c5:96:23:ed:52:fc:b0:82:18:a5:ec: 0f:6d:45:dd:30:b1:f1:52:a3:f1:4f:59:17:c3:f3: ac:e5:92:07:2c:b4:d6:d2:a2:5c:26:df:4d:66:dd: 3c:23:1e:43:12:c4:25:20:ca:aa:0f:a9:67:db:c2: ce:f1:85:60:5a:9c:b2:dd:4b:1c:5a:28:9a:81:26: 28:74:05:2d:4e:6c:f0:ec:94:fe:c4:b8:cc:ee:d2: 56:a5:19:33:30:c1:0b:68:c1:65:ce:67:3e:01:aa: 6a:3e:7e:5f:75:96:87:34:7d:9f:df:68:ad:2f:9d: 8e:3e:34:5c:23:52:6e:a8:f7:00:eb:96:ec:cd:5f: cf:7d:65:64:70:4b:46:92:53:31:11:36:29:81:e6: c7:67:b3:cf:fc:22:f4:3d:e0:1c:16:fe:00:c5:5e: 9e:2c:10:b9:94:49:bd:61:f8:8e:7f:86:0b:66:40: 77:4d:3d:26:a2:5d:ae:4a:b8:bb:e7:88:26:65:80: 41:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:97:86:C4:E0:B8:30:54:FC:21:26:B9:82:F2:96:22:0C:B3:88:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl X509v3 Authority Key Identifier: keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:9b:40:db:51:32:c5:5a:dd:87:86:93:29:5f:30:b1:74:bb: 81:b3:c5:7a:77:ec:31:45:0c:c6:56:02:bb:a8:f9:ca:f3:9f: a2:1e:dd:99:ba:51:98:88:a0:8e:b3:86:5f:8f:de:c9:93:20: af:cc:cb:15:76:5c:2a:b5:3f:0b:53:9b:0a:3c:b0:49:70:c0: 18:65:84:b9:db:c3:a1:a9:84:1a:c4:fb:e8:2c:83:67:5e:40: 7d:20:2b:ff:4b:06:ea:77:9b:5a:22:91:24:91:f8:58:9c:8e: ab:aa:22:86:94:5e:9f:f6:b8:45:e0:c1:32:01:97:a2:96:34: 9f:80:f9:7a:1b:05:3e:44:aa:ca:f2:91:f2:b2:34:36:b5:9d: ab:d4:64:3f:33:88:92:96:e7:57:2b:f6:17:72:09:5e:67:e0: cc:b7:75:3b:1f:d9:a1:0b:af:dc:f6:05:b6:3f:aa:8e:32:bd: f6:97:74:ad:e8:e1:6d:99:d9:77:fd:00:9a:a2:22:f4:0f:ad: 9b:1f:b9:0b:25:df:fb:17:ef:3b:89:03:b6:72:b0:2b:71:9a: 24:86:e2:15:96:5c:5a:b8:2f:70:a9:0a:cb:21:f5:45:34:5a: 85:c2:8d:cd:eb:f7:e1:19:7a:13:28:38:f4:0b:cc:2f:cf:8f: 73:56:17:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Uy8wXMpbAcSqEaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYxMjFhNTQtMjY2ZS00NDdiLTgxNzYtYmZjZDFkYzc4 NjdjMB4XDTI2MDMyOTE3MDAwM1oXDTI2MDMzMTE3MDAwMFowLzEtMCsGA1UEAxMk YWRkNDhmMDMtODg4Yy00YWExLTgxM2QtODMxYTI4M2U4NjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZsYqWoxnb7yhyeAPuu99LN0qERF5j8vySw7 LWUhsMz0LXyNdCZ9a8DA5sRUCFnhjv6S/kv5T8zrGDFz/T5QxZYj7VL8sIIYpewP bUXdMLHxUqPxT1kXw/Os5ZIHLLTW0qJcJt9NZt08Ix5DEsQlIMqqD6ln28LO8YVg Wpyy3UscWiiagSYodAUtTmzw7JT+xLjM7tJWpRkzMMELaMFlzmc+AapqPn5fdZaH NH2f32itL52OPjRcI1JuqPcA65bszV/PfWVkcEtGklMxETYpgebHZ7PP/CL0PeAc Fv4AxV6eLBC5lEm9YfiOf4YLZkB3TT0mol2uSri754gmZYBBrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHCXhsTguDBU/CEmuYLyliIMs4jVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZjEy MWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNkMWRjNzg2N2MvYWYxMjFhNTQtMjY2ZS00 NDdiLTgxNzYtYmZjZDFkYzc4NjdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWYxMjFhNTQtMjY2ZS00NDdiLTgx NzYtYmZjZDFkYzc4NjdjL2FmMTIxYTU0LTI2NmUtNDQ3Yi04MTc2LWJmY2QxZGM3 ODY3Yy5jcmwwHwYDVR0jBBgwFoAUMnVcxUnAaQnSNG495BOLXF/85b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZjEyMWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNk MWRjNzg2N2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5m0DbUTLFWt2HhpMpXzCx dLuBs8V6d+wxRQzGVgK7qPnK85+iHt2ZulGYiKCOs4Zfj97JkyCvzMsVdlwqtT8L U5sKPLBJcMAYZYS528OhqYQaxPvoLINnXkB9ICv/Swbqd5taIpEkkfhYnI6rqiKG lF6f9rhF4MEyAZeiljSfgPl6GwU+RKrK8pHysjQ2tZ2r1GQ/M4iSludXK/YXcgle Z+DMt3U7H9mhC6/c9gW2P6qOMr32l3St6OFtmdl3/QCaoiL0D62bH7kLJd/7F+87 iQO2crArcZokhuIVllxauC9wqQrLIfVFNFqFwo3N6/fhGXoTKDj0C8wvz49zVhdz -----END CERTIFICATE-----Generated at Sun Mar 29 20:03:08 2026 by rpki-client