$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft File: affcec42-3d91-4bd4-91a9-094e86b16e3a.mft (raw, json) Hash identifier: bbjN6DDtVuZGBBV0sBaeZ29prko6JMtJ5LAI6lk2i7w= Subject key identifier: 70:57:9A:6C:89:BA:92:C4:EA:97:DA:D0:E1:EE:37:91:FC:0D:BA:80 Authority key identifier: 00:C6:02:63:2D:43:DC:7C:16:1B:C3:B1:34:F6:1D:6A:16:86:4B:55 Certificate issuer: /CN=affcec42-3d91-4bd4-91a9-094e86b16e3a Certificate serial: 010D0C9F4328584D7BC39740E08C473C59114800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft Manifest number: 010D0C9F4328584BBA3E8DF885FAACDC304D0025 Signing time: Sun 12 Apr 2026 16:00:03 +0000 Manifest this update: Sun 12 Apr 2026 16:00:03 +0000 Manifest next update: Tue 14 Apr 2026 16:00:00 +0000 Files and hashes: 1: 4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa (hash: GKr+TYFBSP3JZx1+QkLVNgmH9V8Ks4xZcutP5MRyRyo=) 2: affcec42-3d91-4bd4-91a9-094e86b16e3a.crl (hash: rc86JpV/6goROxMjWjaeko9bNmW9c0iK4FESlzesUUc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:c3:97:40:e0:8c:47:3c:59:11:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affcec42-3d91-4bd4-91a9-094e86b16e3a Validity Not Before: Apr 12 16:00:03 2026 GMT Not After : Apr 14 16:00:00 2026 GMT Subject: CN=e81c3af6-0cd4-496d-b8f2-be31c5606e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:87:5a:03:cf:c7:03:68:cf:f2:b1:d2:82:0d: 36:80:75:52:68:66:8f:7b:75:cd:42:cd:d2:68:2e: c9:40:f1:9b:fa:0b:45:90:53:43:6c:bd:aa:dc:4f: e5:c0:2d:ef:a7:1c:6e:52:d9:0c:b6:3d:ec:de:6b: fb:65:a0:e9:87:d4:c1:e8:e2:90:18:3d:87:17:eb: be:fe:38:0a:1a:77:e2:1e:89:73:b3:ce:99:76:92: 2c:85:b5:46:28:3a:e0:91:03:ff:b1:5d:27:6c:d2: df:3c:39:14:5c:e5:a8:81:16:56:53:86:7c:7d:83: f7:f8:bc:d1:4c:84:f1:92:29:ad:94:07:11:41:bb: e8:35:f9:44:8b:4b:b0:6a:a5:19:59:48:59:36:d3: 85:b4:1d:08:68:06:61:48:2d:39:5e:ff:46:e1:ce: 01:eb:42:e8:5c:7a:6b:98:6c:21:b3:1d:cf:de:ca: 6f:95:f0:06:97:5b:db:fa:c7:0e:49:60:bc:2a:5c: f7:d8:17:8a:ce:e1:b7:3c:27:be:57:eb:91:4e:39: 1d:7b:ef:ab:94:4a:52:76:88:29:ca:7b:5c:73:34: 4a:d5:7e:a1:5c:b7:69:78:8b:71:58:d6:1e:93:6c: fc:e2:2e:20:21:17:42:0f:7f:4e:fd:7c:1f:1c:a6: 57:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:57:9A:6C:89:BA:92:C4:EA:97:DA:D0:E1:EE:37:91:FC:0D:BA:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.crl X509v3 Authority Key Identifier: keyid:00:C6:02:63:2D:43:DC:7C:16:1B:C3:B1:34:F6:1D:6A:16:86:4B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e9:54:37:1c:cf:a1:8b:34:d8:6a:78:ac:81:d5:1c:c9:ca: 43:8f:f6:68:43:4c:e2:93:0e:89:80:17:4e:af:15:d0:aa:3e: 86:19:05:ee:5c:8a:c6:55:09:50:22:1d:fd:7e:f7:29:35:f3: 1e:d2:51:b3:4a:87:3e:a5:51:8a:af:68:0e:a7:b6:42:6d:8e: 23:5c:cf:00:a8:b6:00:96:da:81:3e:13:c4:4a:64:79:bb:1b: 08:0d:b2:9c:bf:46:d4:bc:76:a2:e2:c3:f5:5b:38:f1:b4:e1: c7:6f:da:e4:31:09:9f:f9:6b:cc:0b:30:f5:7d:6e:30:e6:b5: ca:2c:76:d9:5d:37:e6:95:1a:3c:a1:47:10:da:ff:5c:7d:4d: 0c:02:54:58:47:dc:4f:73:f4:5e:6c:63:fa:02:89:79:62:39: ae:ea:f4:1f:6b:bf:64:c7:c8:35:3c:2a:c2:4b:e8:f1:78:f2: 59:f2:3c:c4:04:26:ae:56:11:82:05:b0:2a:51:fd:81:e5:d2: 71:36:44:a3:00:4b:62:ee:98:4c:92:6c:01:e1:25:36:ed:2d: 35:24:80:4d:9a:a7:e9:72:ff:34:2d:d3:92:4c:bd:4f:3e:a2: ed:90:92:a4:94:b4:9a:6c:a5:05:73:67:54:e4:90:f4:ca:b3: 34:27:45:c8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE17w5dA4IxHPFkRSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmY2VjNDItM2Q5MS00YmQ0LTkxYTktMDk0ZTg2YjE2 ZTNhMB4XDTI2MDQxMjE2MDAwM1oXDTI2MDQxNDE2MDAwMFowLzEtMCsGA1UEAxMk ZTgxYzNhZjYtMGNkNC00OTZkLWI4ZjItYmUzMWM1NjA2ZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIdaA8/HA2jP8rHSgg02gHVSaGaPe3XNQs3S aC7JQPGb+gtFkFNDbL2q3E/lwC3vpxxuUtkMtj3s3mv7ZaDph9TB6OKQGD2HF+u+ /jgKGnfiHolzs86ZdpIshbVGKDrgkQP/sV0nbNLfPDkUXOWogRZWU4Z8fYP3+LzR TITxkimtlAcRQbvoNflEi0uwaqUZWUhZNtOFtB0IaAZhSC05Xv9G4c4B60LoXHpr mGwhsx3P3spvlfAGl1vb+scOSWC8Klz32BeKzuG3PCe+V+uRTjkde++rlEpSdogp yntcczRK1X6hXLdpeItxWNYek2z84i4gIRdCD39O/XwfHKZXfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHBXmmyJupLE6pfa0OHuN5H8DbqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZmZj ZWM0Mi0zZDkxLTRiZDQtOTFhOS0wOTRlODZiMTZlM2EvYWZmY2VjNDItM2Q5MS00 YmQ0LTkxYTktMDk0ZTg2YjE2ZTNhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWZmY2VjNDItM2Q5MS00YmQ0LTkx YTktMDk0ZTg2YjE2ZTNhL2FmZmNlYzQyLTNkOTEtNGJkNC05MWE5LTA5NGU4NmIx NmUzYS5jcmwwHwYDVR0jBBgwFoAUAMYCYy1D3HwWG8OxNPYdahaGS1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZmZjZWM0Mi0zZDkxLTRiZDQtOTFhOS0wOTRl ODZiMTZlM2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA66VQ3HM+hizTYanisgdUc ycpDj/ZoQ0zikw6JgBdOrxXQqj6GGQXuXIrGVQlQIh39fvcpNfMe0lGzSoc+pVGK r2gOp7ZCbY4jXM8AqLYAltqBPhPESmR5uxsIDbKcv0bUvHai4sP1WzjxtOHHb9rk MQmf+WvMCzD1fW4w5rXKLHbZXTfmlRo8oUcQ2v9cfU0MAlRYR9xPc/RebGP6Aol5 Yjmu6vQfa79kx8g1PCrCS+jxePJZ8jzEBCauVhGCBbAqUf2B5dJxNkSjAEti7phM kmwB4SU27S01JIBNmqfpcv80LdOSTL1PPqLtkJKklLSabKUFc2dU5JD0yrM0J0XI -----END CERTIFICATE-----Generated at Mon Apr 13 08:07:33 2026 by rpki-client