$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft File: af651adf-a795-466a-9b0b-afaaea21402a.mft (raw, json) Hash identifier: QMKi5EF1zbocHazN9AIBsB3PTXmZ/gfwbNN6upc5T3g= Subject key identifier: 2C:AB:38:A5:EA:66:E5:CB:A9:61:BF:0A:B8:8A:83:36:DF:26:15:4C Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584F9EF1E3D7911BC33FF6E72060 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft Manifest number: 010D0C9F43285849B5E8BF14CBBF349B41F87D3C Signing time: Sun 25 Oct 2026 16:00:23 +0000 Manifest this update: Sun 25 Oct 2026 16:00:23 +0000 Manifest next update: Wed 28 Oct 2026 16:00:00 +0000 Files and hashes: 1: af651adf-a795-466a-9b0b-afaaea21402a.crl (hash: CuXQUrWKDCqJgydeu39CToizarmWU+5c3m4wFFJF+mA=) 2: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (hash: Dq7+3ze0AwSaptWWwJs7P8QejrrH+KyAH1orhiUO0JU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:f1:e3:d7:91:1b:c3:3f:f6:e7:20:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Oct 25 16:00:23 2026 GMT Not After : Oct 28 16:00:00 2026 GMT Subject: CN=3d34ceb0-a489-43c2-a183-e0bc7b478c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:e5:9a:8a:01:33:20:e7:fc:17:07:f2:ea: 18:75:7a:c4:f2:9a:26:0d:59:5d:5f:fa:18:9c:8e: 91:93:7f:87:a0:c4:fc:30:6e:0f:27:43:67:18:39: c3:71:2f:51:9e:06:7e:2f:65:95:76:50:df:bb:74: a1:bf:d9:74:e3:96:8a:fb:81:fd:19:91:ee:16:97: 59:d7:e2:b2:13:40:3b:40:d3:4a:d1:d6:14:7d:0b: 09:c5:52:a3:63:de:19:cb:1d:8e:e1:1d:f5:91:cc: 29:7f:66:6e:d6:4e:bd:71:02:a7:1e:3d:66:3c:1d: a6:d9:4e:77:9b:bb:16:3f:86:0b:3e:12:ef:99:e2: f5:a9:9c:c5:a1:0f:05:90:4f:5e:91:59:80:3f:cb: db:ad:c3:0a:d3:06:ba:44:8c:bc:f8:8d:5d:0c:ea: 01:eb:4a:24:4d:3d:75:4b:18:05:cd:14:64:d9:4a: c2:a4:d3:41:96:3c:96:42:c4:fc:95:16:d2:b4:36: 26:43:d2:e7:5a:0b:db:ad:d3:2f:40:b8:f3:8c:a4: c0:80:0d:0b:29:96:02:97:42:e5:2f:b2:5d:b0:e7: 8f:ca:b3:8a:e9:77:ae:e3:68:86:4f:97:dd:4d:15: e2:8e:e5:a5:a9:6b:1e:fc:80:11:90:a4:36:aa:6c: 22:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AB:38:A5:EA:66:E5:CB:A9:61:BF:0A:B8:8A:83:36:DF:26:15:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d9:10:1e:97:fc:e3:4f:f3:34:2c:8a:a4:20:3f:d5:17:77: a3:7a:b5:59:62:82:1b:9d:54:63:cd:03:b2:c9:2d:0b:25:cd: b8:1e:55:56:91:18:b6:16:44:52:c5:4d:a7:91:5a:4d:df:4f: c3:3c:dd:13:88:bc:31:a6:15:4c:f1:19:ab:10:99:25:c4:21: ab:e8:fd:b5:df:f1:71:48:ce:2b:b3:ef:f9:07:15:37:5d:1e: 00:e1:1f:5a:90:0d:e0:0b:45:c6:12:6a:56:60:0f:11:de:2b: f5:f5:72:52:5f:26:f5:43:0d:98:f2:e5:e8:07:2b:19:76:3e: 96:31:a9:81:69:bc:0c:d4:c1:0d:26:19:70:3e:9c:f1:1f:73: 49:99:8e:e1:7b:80:4c:93:95:6e:35:95:cc:af:ad:d2:5c:2b: 05:c0:75:4d:93:cd:5f:00:38:81:41:d4:09:16:52:bd:86:8f: fa:63:8c:9e:3b:bb:97:be:f4:c3:f6:de:ed:e3:51:80:b1:ea: e7:39:eb:96:df:29:7d:1b:95:9d:65:8f:1b:d7:c6:3e:da:a9: dc:fa:24:0b:d0:c1:45:88:fb:fb:07:b7:30:c4:a8:2f:10:f4: 06:8f:20:84:18:6b:0f:79:96:05:7d:f4:51:cc:0a:6a:20:99: 9a:e9:d4:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+e8ePXkRvDP/bnIGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI2MTAyNTE2MDAyM1oXDTI2MTAyODE2MDAwMFowLzEtMCsGA1UEAxMk M2QzNGNlYjAtYTQ4OS00M2MyLWExODMtZTBiYzdiNDc4Yzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFvlmooBMyDn/BcH8uoYdXrE8pomDVldX/oY nI6Rk3+HoMT8MG4PJ0NnGDnDcS9RngZ+L2WVdlDfu3Shv9l045aK+4H9GZHuFpdZ 1+KyE0A7QNNK0dYUfQsJxVKjY94Zyx2O4R31kcwpf2Zu1k69cQKnHj1mPB2m2U53 m7sWP4YLPhLvmeL1qZzFoQ8FkE9ekVmAP8vbrcMK0wa6RIy8+I1dDOoB60okTT11 SxgFzRRk2UrCpNNBljyWQsT8lRbStDYmQ9LnWgvbrdMvQLjzjKTAgA0LKZYCl0Ll L7JdsOePyrOK6Xeu42iGT5fdTRXijuWlqWse/IARkKQ2qmwieQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCyrOKXqZuXLqWG/CriKgzbfJhVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvYWY2NTFhZGYtYTc5NS00 NjZhLTliMGItYWZhYWVhMjE0MDJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCS2RAel/zjT/M0LIqkID/V F3ejerVZYoIbnVRjzQOyyS0LJc24HlVWkRi2FkRSxU2nkVpN30/DPN0TiLwxphVM 8RmrEJklxCGr6P213/FxSM4rs+/5BxU3XR4A4R9akA3gC0XGEmpWYA8R3iv19XJS Xyb1Qw2Y8uXoBysZdj6WMamBabwM1MENJhlwPpzxH3NJmY7he4BMk5VuNZXMr63S XCsFwHVNk81fADiBQdQJFlK9ho/6Y4yeO7uXvvTD9t7t41GAsernOeuW3yl9G5Wd ZY8b18Y+2qnc+iQL0MFFiPv7B7cwxKgvEPQGjyCEGGsPeZYFffRRzApqIJma6dSz -----END CERTIFICATE-----Generated at Mon Oct 26 17:59:49 2026 by rpki-client