$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft File: af4b288d-bc7b-443a-b3f4-52662b22717a.mft (raw, json) Hash identifier: KInRYK5Ecsv7ihxKQ9YNQMvPYEbPypHNYbR1TDnfrWY= Subject key identifier: 89:67:35:22:F7:D8:AD:23:CE:69:B7:9D:6B:CB:F0:88:7C:0F:DC:AF Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a Certificate serial: 010D0C9F4328584DEF636BC8092F656096E5D900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft Manifest number: 010D0C9F43285847A76E497E4523218081E8639E Signing time: Sun 24 May 2026 02:00:03 +0000 Manifest this update: Sun 24 May 2026 02:00:03 +0000 Manifest next update: Wed 27 May 2026 02:00:00 +0000 Files and hashes: 1: 842e43e1-9687-3482-aa4c-e20b9020a6ad.roa (hash: DVqSVMI3BMG8MhtWS9mXwO/dJgQZZvcIqlNjE34K9SA=) 2: af4b288d-bc7b-443a-b3f4-52662b22717a.crl (hash: aSjQ592VbLDx4OC32eGVdGKU82v6DeEqR1BCVJlGoc0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:63:6b:c8:09:2f:65:60:96:e5:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a Validity Not Before: May 24 02:00:03 2026 GMT Not After : May 27 02:00:00 2026 GMT Subject: CN=a41571d0-8ec6-4447-bfe7-49148d1c3054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:7b:de:e8:00:b0:78:fb:da:ad:a8:0e:7e: 2c:4f:16:c0:33:06:f2:5d:ca:a9:a3:75:98:3e:c0: 2d:0b:7f:e8:bc:d8:a6:fe:66:1f:0f:ab:bf:b7:b4: 7c:54:48:9b:8b:5d:3e:d1:88:42:fe:c7:25:75:09: 49:a5:8d:46:49:17:62:4d:1c:d4:aa:87:89:cf:4e: d6:b9:ee:1a:ad:53:05:cb:fb:96:40:fe:d0:0a:6c: 2e:c4:c9:cb:89:a3:5f:50:7b:96:cc:54:73:a0:2a: 8c:45:69:a2:52:52:86:a9:f8:7f:a4:a2:b8:c7:32: dd:63:42:4e:37:67:ba:c5:e1:a5:1d:e9:bf:11:08: f1:e5:f0:a0:e2:1f:bb:4d:5a:67:e5:9d:73:4c:6d: 9e:cf:30:a9:81:db:16:58:aa:a4:96:a0:e8:a7:18: 41:5f:f2:e5:5d:5c:aa:61:82:c8:cc:45:c0:d4:18: 39:76:ad:fd:f4:00:c8:49:6a:2e:25:fc:f5:9b:23: 31:f1:34:fe:d9:ff:63:83:fa:d0:74:34:f9:63:39: 3d:b5:d9:c4:44:b1:3f:c1:b1:9b:f4:e5:4a:67:bd: 7d:a6:cf:75:54:e5:53:e2:7e:70:eb:f5:9d:be:10: b1:00:29:c7:65:e2:57:ce:35:bf:e2:18:8a:f6:9d: 89:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:67:35:22:F7:D8:AD:23:CE:69:B7:9D:6B:CB:F0:88:7C:0F:DC:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl X509v3 Authority Key Identifier: keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:fa:af:3d:8b:36:94:38:8c:e7:eb:55:97:e7:d7:7f:54:4f: 0a:ca:76:af:b7:93:07:1c:73:1b:93:34:a1:8f:ee:fd:6d:cf: a1:46:b4:30:f3:02:66:5a:85:27:f9:29:3c:40:38:5d:6f:9d: 30:4e:46:3e:00:b1:17:6b:ca:a4:00:aa:a9:ea:54:f9:21:1d: d9:11:c5:a7:c5:ab:9f:e8:32:64:bd:00:67:75:20:46:5e:1b: b6:04:cc:b4:d2:c6:11:52:d8:aa:e0:54:4a:fa:f5:9d:3b:6c: 8e:99:e5:f1:95:e6:15:e0:56:1b:09:25:4a:fb:a0:b0:b4:92: f2:67:d3:b1:b1:b1:a0:6d:22:9f:2c:3c:99:56:4e:eb:f1:57: 5e:94:33:39:92:d9:02:fb:b4:28:75:f3:da:8a:5e:7d:99:f8: d1:4a:f1:f8:d3:3e:9f:38:f4:d3:bc:65:d8:e5:d2:91:fe:44: d1:ba:b9:24:1c:d2:4f:34:b2:de:c4:99:93:89:1f:c1:dc:42: df:a0:96:0f:09:13:8c:dd:78:02:56:97:6c:07:45:ff:22:b4: 14:75:c3:6d:69:79:ae:b1:c5:cc:d9:d2:08:55:b5:b3:ec:0a: 64:d1:c8:ec:49:b1:1b:26:30:1c:b0:b4:4a:bc:a1:eb:55:7e: b4:df:08:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3vY2vICS9lYJbl2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YjI4OGQtYmM3Yi00NDNhLWIzZjQtNTI2NjJiMjI3 MTdhMB4XDTI2MDUyNDAyMDAwM1oXDTI2MDUyNzAyMDAwMFowLzEtMCsGA1UEAxMk YTQxNTcxZDAtOGVjNi00NDQ3LWJmZTctNDkxNDhkMWMzMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Rx73ugAsHj72q2oDn4sTxbAMwbyXcqpo3WY PsAtC3/ovNim/mYfD6u/t7R8VEibi10+0YhC/scldQlJpY1GSRdiTRzUqoeJz07W ue4arVMFy/uWQP7QCmwuxMnLiaNfUHuWzFRzoCqMRWmiUlKGqfh/pKK4xzLdY0JO N2e6xeGlHem/EQjx5fCg4h+7TVpn5Z1zTG2ezzCpgdsWWKqklqDopxhBX/LlXVyq YYLIzEXA1Bg5dq399ADISWouJfz1myMx8TT+2f9jg/rQdDT5Yzk9tdnERLE/wbGb 9OVKZ719ps91VOVT4n5w6/WdvhCxACnHZeJXzjW/4hiK9p2JOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIlnNSL32K0jzmm3nWvL8Ih8D9yvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRi Mjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIyMjcxN2EvYWY0YjI4OGQtYmM3Yi00 NDNhLWIzZjQtNTI2NjJiMjI3MTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWY0YjI4OGQtYmM3Yi00NDNhLWIz ZjQtNTI2NjJiMjI3MTdhL2FmNGIyODhkLWJjN2ItNDQzYS1iM2Y0LTUyNjYyYjIy NzE3YS5jcmwwHwYDVR0jBBgwFoAUMwAGbg+QRP3FILa6x1LzfcnipMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2 MmIyMjcxN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAU+q89izaUOIzn61WX59d/ VE8Kynavt5MHHHMbkzShj+79bc+hRrQw8wJmWoUn+Sk8QDhdb50wTkY+ALEXa8qk AKqp6lT5IR3ZEcWnxauf6DJkvQBndSBGXhu2BMy00sYRUtiq4FRK+vWdO2yOmeXx leYV4FYbCSVK+6CwtJLyZ9OxsbGgbSKfLDyZVk7r8VdelDM5ktkC+7QodfPail59 mfjRSvH40z6fOPTTvGXY5dKR/kTRurkkHNJPNLLexJmTiR/B3ELfoJYPCROM3XgC VpdsB0X/IrQUdcNtaXmuscXM2dIIVbWz7Apk0cjsSbEbJjAcsLRKvKHrVX603wgO -----END CERTIFICATE-----Generated at Sun May 24 06:02:33 2026 by rpki-client