$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1/affd01e0-7563-4864-8869-e2d08b7eafd1.mft File: affd01e0-7563-4864-8869-e2d08b7eafd1.mft (raw, json) Hash identifier: jd9zLnv3HsVW7iyrvGpBe0nPwV58zGdW/xy+V+rkMLM= Subject key identifier: 5A:32:6B:63:DC:81:A7:23:89:E5:07:97:36:BD:79:EE:38:C6:79:7E Authority key identifier: C2:01:52:C3:41:B4:2D:0B:60:A0:62:07:CF:CA:44:09:DA:76:AB:1E Certificate issuer: /CN=affd01e0-7563-4864-8869-e2d08b7eafd1 Certificate serial: 010D0C9F4328584FB27CB7C0BCF129250DFA1040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1/affd01e0-7563-4864-8869-e2d08b7eafd1.mft Manifest number: 010D0C9F4328584FACF33576B48D2DC8C15D0A03 Signing time: Sun 01 Nov 2026 16:00:27 +0000 Manifest this update: Sun 01 Nov 2026 16:00:27 +0000 Manifest next update: Wed 04 Nov 2026 16:00:00 +0000 Files and hashes: 1: affd01e0-7563-4864-8869-e2d08b7eafd1.crl (hash: 5MAfym/ki3vEFLuCH92AjrRcZf/suzrvnHWFtQoDNqA=) 2: c38c7a61-2562-3420-8f70-5f213dfb8fb1.asa (hash: E+CQri8HB+nMe5LsBVyuFkIyltZ/vJAJK8y7fPMUTx8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1/affd01e0-7563-4864-8869-e2d08b7eafd1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1/affd01e0-7563-4864-8869-e2d08b7eafd1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:7c:b7:c0:bc:f1:29:25:0d:fa:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affd01e0-7563-4864-8869-e2d08b7eafd1 Validity Not Before: Nov 1 16:00:27 2026 GMT Not After : Nov 4 16:00:00 2026 GMT Subject: CN=00e8058b-afae-4fdd-b176-77d08ef816f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:13:f2:80:6f:cc:6f:db:1b:c9:cd:c5:dd:e3: bc:98:bf:1a:be:c6:d9:e0:fd:08:c3:d7:d9:d1:a5: c6:71:ec:c0:c2:73:1e:15:bc:cd:50:bd:51:5d:94: 3a:0f:e6:97:f3:af:af:b1:47:48:c2:9d:39:7a:0f: bd:c3:00:ff:99:91:aa:96:8a:4f:73:f5:eb:34:2f: 2a:b4:d3:13:4f:0a:0d:ab:04:fe:ad:67:20:83:b1: 24:1e:a2:8f:e5:25:f3:9e:c3:33:32:be:81:bd:a2: 26:88:21:83:c6:17:a6:cb:df:4a:b0:95:9a:c6:b8: 39:61:7c:44:b9:57:f2:fa:d8:a4:54:60:86:ff:5c: c5:d9:84:d2:df:9c:74:12:ce:76:38:74:2d:9b:75: e2:dd:33:75:ec:b2:0a:db:09:64:ea:9d:06:a0:ff: a9:76:ca:ef:ef:1b:ca:2f:92:a9:87:fe:ae:ff:89: 7f:88:00:2e:6c:0a:14:fb:73:0e:7f:6c:bd:3e:12: f4:30:65:a4:6c:20:c3:8b:4e:d8:8b:d7:b4:8c:60: 64:43:29:d7:02:99:31:df:02:ee:2d:89:ba:e0:0d: c5:15:78:ce:4d:0c:3a:04:f8:39:84:ca:9c:6f:ee: 36:71:dc:17:f9:04:27:70:b6:c9:0e:56:eb:58:33: 0e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:32:6B:63:DC:81:A7:23:89:E5:07:97:36:BD:79:EE:38:C6:79:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1/affd01e0-7563-4864-8869-e2d08b7eafd1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1/affd01e0-7563-4864-8869-e2d08b7eafd1.crl X509v3 Authority Key Identifier: keyid:C2:01:52:C3:41:B4:2D:0B:60:A0:62:07:CF:CA:44:09:DA:76:AB:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/affd01e0-7563-4864-8869-e2d08b7eafd1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:af:6f:9c:cb:1a:25:96:4d:93:7b:9e:f8:ac:a0:8e:85:da: 4d:9f:3b:b3:4e:3d:2b:11:e6:ff:c1:86:42:7c:4f:52:c5:a4: 11:b9:c3:81:41:4a:57:da:c9:5c:5a:6b:5a:47:56:ce:ad:f3: a2:e1:10:3a:a7:ff:a3:d3:45:78:b9:31:e0:00:6f:83:3d:34: 33:04:54:0f:10:f3:04:38:7d:ee:d6:1d:bb:04:c1:32:52:08: 25:4c:30:db:57:b9:4d:47:98:a2:f9:db:2b:d7:f8:e9:02:b7: 36:8c:bb:c6:00:6e:da:95:4b:d5:ae:d4:2c:db:e9:d6:91:d8: fe:b8:8f:22:3f:2f:e1:90:ec:0f:e8:74:6a:ef:46:56:3e:ae: 01:a7:1e:ae:c5:a9:2d:49:78:52:8b:93:da:12:04:9e:b8:db: 08:47:8c:95:52:aa:a3:63:cc:28:de:75:47:d6:0d:28:08:3b: 36:b6:c8:14:27:d5:d8:b9:46:57:eb:67:81:39:d6:3c:38:76: e7:56:38:a6:c9:77:d0:f2:99:70:13:1d:af:be:20:9f:96:d6: 77:e0:39:5e:bb:de:8a:74:dc:26:7d:05:b5:20:cc:db:86:40: d6:68:58:09:8b:39:dd:81:82:b4:e9:02:9a:48:56:72:5e:04: eb:23:62:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+yfLfAvPEpJQ36EEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmZDAxZTAtNzU2My00ODY0LTg4NjktZTJkMDhiN2Vh ZmQxMB4XDTI2MTEwMTE2MDAyN1oXDTI2MTEwNDE2MDAwMFowLzEtMCsGA1UEAxMk MDBlODA1OGItYWZhZS00ZmRkLWIxNzYtNzdkMDhlZjgxNmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRPygG/Mb9sbyc3F3eO8mL8avsbZ4P0Iw9fZ 0aXGcezAwnMeFbzNUL1RXZQ6D+aX86+vsUdIwp05eg+9wwD/mZGqlopPc/XrNC8q tNMTTwoNqwT+rWcgg7EkHqKP5SXznsMzMr6BvaImiCGDxhemy99KsJWaxrg5YXxE uVfy+tikVGCG/1zF2YTS35x0Es52OHQtm3Xi3TN17LIK2wlk6p0GoP+pdsrv7xvK L5Kph/6u/4l/iAAubAoU+3MOf2y9PhL0MGWkbCDDi07Yi9e0jGBkQynXApkx3wLu LYm64A3FFXjOTQw6BPg5hMqcb+42cdwX+QQncLbJDlbrWDMO+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFoya2PcgacjieUHlza9ee44xnl+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hZmZk MDFlMC03NTYzLTQ4NjQtODg2OS1lMmQwOGI3ZWFmZDEvYWZmZDAxZTAtNzU2My00 ODY0LTg4NjktZTJkMDhiN2VhZmQxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzc1MjZhMC1m ZTRlLTQ3NDEtYjM5Yi0zMjMzNTNhMWViZjIvYWZmZDAxZTAtNzU2My00ODY0LTg4 NjktZTJkMDhiN2VhZmQxL2FmZmQwMWUwLTc1NjMtNDg2NC04ODY5LWUyZDA4Yjdl YWZkMS5jcmwwHwYDVR0jBBgwFoAUwgFSw0G0LQtgoGIHz8pECdp2qx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0 MS1iMzliLTMyMzM1M2ExZWJmMi9hZmZkMDFlMC03NTYzLTQ4NjQtODg2OS1lMmQw OGI3ZWFmZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByr2+cyxollk2Te574rKCO hdpNnzuzTj0rEeb/wYZCfE9SxaQRucOBQUpX2slcWmtaR1bOrfOi4RA6p/+j00V4 uTHgAG+DPTQzBFQPEPMEOH3u1h27BMEyUgglTDDbV7lNR5ii+dsr1/jpArc2jLvG AG7alUvVrtQs2+nWkdj+uI8iPy/hkOwP6HRq70ZWPq4Bpx6uxaktSXhSi5PaEgSe uNsIR4yVUqqjY8wo3nVH1g0oCDs2tsgUJ9XYuUZX62eBOdY8OHbnVjimyXfQ8plw Ex2vviCfltZ34Dleu96KdNwmfQW1IMzbhkDWaFgJizndgYK06QKaSFZyXgTrI2JK -----END CERTIFICATE-----Generated at Mon Nov 2 07:09:09 2026 by rpki-client