$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft File: af651adf-a795-466a-9b0b-afaaea21402a.mft (raw, json) Hash identifier: F83zkmh/WaXgyijgxsj9MSpzIKVXAYF4Lyw2whcPKro= Subject key identifier: 6D:49:33:EA:A2:0D:5C:71:A1:E9:5D:09:2D:43:7F:91:C2:8D:9F:0D Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584D8158F63BF198FBCFB6102080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft Manifest number: 010D0C9F43285849B5E8BF14CBBF349B41F87C75 Signing time: Tue 14 Apr 2026 16:00:03 +0000 Manifest this update: Tue 14 Apr 2026 16:00:03 +0000 Manifest next update: Fri 17 Apr 2026 16:00:00 +0000 Files and hashes: 1: af651adf-a795-466a-9b0b-afaaea21402a.crl (hash: pC2o/jhSHHbwTa7JWriq7ZsFr3rDaRaqZc1OBqoPALY=) 2: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (hash: 9bS+XVMe22CZJlPlo2j7vdNDRz7T/bFnBvSQiSSYum4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:58:f6:3b:f1:98:fb:cf:b6:10:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Apr 14 16:00:03 2026 GMT Not After : Apr 17 16:00:00 2026 GMT Subject: CN=57f99b84-5291-457b-8ef0-acf10d46aa9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1e:0c:18:2f:7f:e3:ec:1e:5a:e6:3c:54:de: 5b:1a:b8:6b:00:5d:8a:9e:f6:01:8d:b2:48:b0:5d: 1c:cf:a0:a1:d7:a2:1c:3b:f8:2c:31:50:89:b2:7d: 50:9f:99:c6:74:1c:a4:c2:0e:67:59:92:bc:6a:bf: 13:dc:f4:ee:2e:64:10:77:6a:28:92:5b:9a:22:d8: 23:f1:fe:10:1f:b2:1d:53:cb:c1:a0:f2:32:90:44: 51:f5:19:c3:62:8c:ec:81:37:18:b6:4e:94:3d:00: eb:16:1b:50:fc:01:fc:bc:e7:cd:2f:f9:6e:c9:5c: 36:89:07:76:51:58:b2:a3:10:40:db:3a:67:c0:99: ba:7f:1e:63:a2:2f:99:e1:9b:54:8c:a8:9a:54:81: 71:72:ba:64:d0:a0:76:6a:cb:4d:0a:a2:5c:6f:10: 01:c5:b8:85:da:bc:40:97:60:7d:3b:76:99:1e:a2: 5f:f7:b4:1b:94:c3:2d:54:7f:77:ee:4e:53:eb:25: 8b:60:cc:bd:61:58:4a:28:8f:cb:8c:98:89:24:ab: 2e:7d:a5:58:45:9d:fe:ef:fa:d3:f0:25:38:37:0e: 2f:6c:96:4c:5c:06:e8:fc:22:11:1d:fd:3e:db:ea: dd:7d:28:9b:d2:1b:72:52:c7:f2:51:1d:c9:1f:29: cf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:49:33:EA:A2:0D:5C:71:A1:E9:5D:09:2D:43:7F:91:C2:8D:9F:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:51:60:89:29:3d:c9:bf:8c:df:23:54:bc:df:29:7c:5f:1f: 2d:5c:69:1a:9e:55:fa:41:bf:47:09:4f:fa:12:5c:35:d1:96: 15:74:a7:ec:26:bc:6d:35:67:a8:b0:ea:be:3d:c1:05:41:23: 2f:ee:ee:a3:61:d3:1e:96:a2:74:e9:11:1c:20:5f:4b:68:c2: 4b:10:14:68:67:4d:83:03:2e:87:ec:f9:e6:1a:1a:a7:d7:99: 1f:80:a2:7d:35:68:e1:c0:58:ed:f6:5c:5e:b4:b4:0c:fb:c9: d3:82:24:86:33:db:78:a5:a8:26:93:d8:4b:61:2b:8e:20:3b: 1d:f0:dd:5e:50:ee:f7:3f:61:ce:7c:9f:1d:20:c6:1e:e9:be: ff:f5:ab:e9:a3:d7:d6:16:00:36:3c:9b:b6:bc:1c:64:4d:38: 82:11:4f:37:43:a8:9a:6b:c6:61:42:c0:d6:84:7f:1a:2f:c0: d6:f0:6e:9c:33:b5:5b:09:ed:83:1f:a0:6b:61:ee:73:86:0e: 8e:22:13:d1:d6:3c:63:d4:0d:9a:a6:06:18:74:08:11:1e:cc: 6f:57:b7:b0:6a:63:fe:f5:bd:cd:5c:b5:1e:04:c1:e0:25:70: 4d:48:51:08:f9:3b:d4:1f:a0:2f:6e:52:4a:77:97:97:d3:d2: b6:10:86:16 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2BWPY78Zj7z7YQIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI2MDQxNDE2MDAwM1oXDTI2MDQxNzE2MDAwMFowLzEtMCsGA1UEAxMk NTdmOTliODQtNTI5MS00NTdiLThlZjAtYWNmMTBkNDZhYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx4MGC9/4+weWuY8VN5bGrhrAF2KnvYBjbJI sF0cz6Ch16IcO/gsMVCJsn1Qn5nGdBykwg5nWZK8ar8T3PTuLmQQd2ookluaItgj 8f4QH7IdU8vBoPIykERR9RnDYozsgTcYtk6UPQDrFhtQ/AH8vOfNL/luyVw2iQd2 UViyoxBA2zpnwJm6fx5joi+Z4ZtUjKiaVIFxcrpk0KB2astNCqJcbxABxbiF2rxA l2B9O3aZHqJf97QblMMtVH937k5T6yWLYMy9YVhKKI/LjJiJJKsufaVYRZ3+7/rT 8CU4Nw4vbJZMXAbo/CIRHf0+2+rdfSib0htyUsfyUR3JHynPvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG1JM+qiDVxxoeldCS1Df5HCjZ8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvYWY2NTFhZGYtYTc5NS00 NjZhLTliMGItYWZhYWVhMjE0MDJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPUWCJKT3Jv4zfI1S83yl8 Xx8tXGkanlX6Qb9HCU/6Elw10ZYVdKfsJrxtNWeosOq+PcEFQSMv7u6jYdMelqJ0 6REcIF9LaMJLEBRoZ02DAy6H7PnmGhqn15kfgKJ9NWjhwFjt9lxetLQM+8nTgiSG M9t4pagmk9hLYSuOIDsd8N1eUO73P2HOfJ8dIMYe6b7/9avpo9fWFgA2PJu2vBxk TTiCEU83Q6iaa8ZhQsDWhH8aL8DW8G6cM7VbCe2DH6BrYe5zhg6OIhPR1jxj1A2a pgYYdAgRHsxvV7ewamP+9b3NXLUeBMHgJXBNSFEI+TvUH6AvblJKd5eX09K2EIYW -----END CERTIFICATE-----Generated at Wed Apr 15 14:38:11 2026 by rpki-client