$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft File: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft (raw, json) Hash identifier: j2WEhpZN6K5+4eIVhbe51hwckrb1+F6Tb65n9e0ECUI= Subject key identifier: BB:BC:0C:A7:EE:E2:37:22:3F:C6:30:39:1C:AC:3E:61:14:0C:C3:40 Authority key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Certificate issuer: /CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Certificate serial: 010D0C9F4328584F765935826E99E5A762026D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft Manifest number: 010D0C9F43285842F1887AD109A031873F5D5A04 Signing time: Sun 11 Oct 2026 03:00:24 +0000 Manifest this update: Sun 11 Oct 2026 03:00:24 +0000 Manifest next update: Wed 14 Oct 2026 03:00:00 +0000 Files and hashes: 1: 1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa (hash: 2xcHInuKcmuvIhmpWf6dSvQOCWYTOSpf+dFaXeapazI=) 2: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl (hash: QIvN5FXUvk3Y0Pf8k3RC6ba1z5Jcd4HJNSjaSB4MflM=) 3: b6d01a71-1404-3909-bbb8-6b3acc6cf542.roa (hash: KeeOVWBsAva15uhnnfmzH0CoRkyCHStwr7rOmXKtRss=) 4: fa314c8f-36bb-307a-a125-27ed88cc0172.roa (hash: cxO5fVPAvg+VcrB8HWZRn1n3ZP+OQaSxDDSXwYu/I2U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:59:35:82:6e:99:e5:a7:62:02:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Validity Not Before: Oct 11 03:00:24 2026 GMT Not After : Oct 14 03:00:00 2026 GMT Subject: CN=cbe4c54e-f01c-4e8d-93e9-d12a0a2b49e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:56:6f:95:af:fc:8a:9e:a5:b3:f5:e4:7a: fc:63:c0:dc:52:5d:1a:d4:57:8f:da:ed:a6:b1:7a: d1:bf:8f:9a:bb:ae:f6:bd:42:e3:22:11:9b:63:09: fb:ea:03:ae:aa:b6:3b:7e:5f:49:55:f5:eb:5e:76: 47:87:8f:75:d3:5c:66:85:f7:c2:85:05:f3:70:f6: 98:a1:2e:b5:dc:ec:58:ca:81:ef:97:cf:24:7c:d7: 77:ab:20:56:4e:ab:1b:a2:e7:6f:ed:e9:f9:58:a1: bb:3b:04:0e:52:71:e6:a6:4b:f4:86:16:45:b9:4d: 54:07:cf:ff:34:09:d5:ed:a2:07:57:43:0f:af:25: b5:dc:7f:a1:c6:c1:18:f8:f2:62:87:c2:46:2c:e2: 12:d8:f8:c2:35:d4:23:80:05:b0:f4:ca:45:bd:0c: a4:c5:ee:23:72:59:ca:65:55:69:2d:08:b8:7b:34: a6:d6:80:43:e3:85:b7:64:0b:69:c9:e2:75:54:89: 1d:af:25:c2:d1:bf:e1:6c:19:6e:77:4f:dd:59:f0: 74:47:6f:cb:53:e3:ec:5f:60:eb:dd:33:a6:3f:a3: 2b:ed:a2:fa:00:2d:cf:33:6c:8c:29:d8:cd:90:93: 42:83:9e:25:05:5e:2f:50:ea:4a:6e:0d:20:14:04: 45:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BC:0C:A7:EE:E2:37:22:3F:C6:30:39:1C:AC:3E:61:14:0C:C3:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl X509v3 Authority Key Identifier: keyid:DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:41:01:14:a2:5a:30:55:0a:aa:4b:e6:ea:0e:d2:50:3f:67: 5c:16:21:bb:d9:98:bc:62:97:b5:e3:74:22:df:ca:d8:07:05: 53:2d:99:15:58:4e:65:5c:d4:92:37:db:0e:71:67:69:89:92: eb:d7:06:a2:a6:81:f1:36:e6:2f:f2:2b:6f:75:6a:00:b7:7d: 3f:f4:b1:63:5a:9e:a0:a4:1b:fd:e0:13:4f:a9:0d:50:2a:06: 48:d5:a8:24:17:ee:a8:0c:11:e7:31:29:2a:c9:94:6a:62:c2: 29:48:3a:05:6c:66:e5:5b:21:cb:cf:ce:db:86:c7:e8:04:56: 78:4d:4a:5b:21:42:8b:07:ec:c1:46:10:46:c7:d8:54:4c:be: 62:80:33:f2:5e:13:e0:11:8f:df:41:82:a8:9b:3c:11:15:56: 3f:9e:bb:08:f0:bb:f0:b5:aa:80:cf:d8:f7:d6:78:a1:51:54: df:0d:8d:46:c8:62:b8:b7:f8:2a:b8:b7:8d:3f:4e:ee:c5:55: 48:9c:af:d7:08:cc:8e:98:55:3c:89:f2:24:e7:b6:fd:40:9b: 68:23:a5:28:73:ac:d0:83:d4:8a:60:a2:dc:7f:95:a0:00:14: d4:b3:b5:ef:58:34:64:f0:03:5c:44:09:a7:e6:54:f4:b5:fe: b5:e6:1c:36 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE92WTWCbpnlp2ICbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUy ZGZlMB4XDTI2MTAxMTAzMDAyNFoXDTI2MTAxNDAzMDAwMFowLzEtMCsGA1UEAxMk Y2JlNGM1NGUtZjAxYy00ZThkLTkzZTktZDEyYTBhMmI0OWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthhWb5Wv/IqepbP15Hr8Y8DcUl0a1FeP2u2m sXrRv4+au672vULjIhGbYwn76gOuqrY7fl9JVfXrXnZHh49101xmhffChQXzcPaY oS613OxYyoHvl88kfNd3qyBWTqsboudv7en5WKG7OwQOUnHmpkv0hhZFuU1UB8// NAnV7aIHV0MPryW13H+hxsEY+PJih8JGLOIS2PjCNdQjgAWw9MpFvQykxe4jclnK ZVVpLQi4ezSm1oBD44W3ZAtpyeJ1VIkdryXC0b/hbBlud0/dWfB0R2/LU+PsX2Dr 3TOmP6Mr7aL6AC3PM2yMKdjNkJNCg54lBV4vUOpKbg0gFARF+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLu8DKfu4jciP8YwORysPmEUDMNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0 NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvYWZkNDRiOWMtMjMxMi00 YWNiLWIyM2UtNDBhYWFhZmUyZGZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWZkNDRiOWMtMjMxMi00YWNiLWIy M2UtNDBhYWFhZmUyZGZlL2FmZDQ0YjljLTIzMTItNGFjYi1iMjNlLTQwYWFhYWZl MmRmZS5jcmwwHwYDVR0jBBgwFoAU3VPC1ExvAcI2CpURgEKTUANY04QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFh YWFmZTJkZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIQQEUolowVQqqS+bqDtJQ P2dcFiG72Zi8Ype143Qi38rYBwVTLZkVWE5lXNSSN9sOcWdpiZLr1waipoHxNuYv 8itvdWoAt30/9LFjWp6gpBv94BNPqQ1QKgZI1agkF+6oDBHnMSkqyZRqYsIpSDoF bGblWyHLz87bhsfoBFZ4TUpbIUKLB+zBRhBGx9hUTL5igDPyXhPgEY/fQYKomzwR FVY/nrsI8LvwtaqAz9j31nihUVTfDY1GyGK4t/gquLeNP07uxVVInK/XCMyOmFU8 ifIk57b9QJtoI6Uoc6zQg9SKYKLcf5WgABTUs7XvWDRk8ANcRAmn5lT0tf615hw2 -----END CERTIFICATE-----Generated at Sun Oct 11 13:37:53 2026 by rpki-client