$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/af661c18-5dff-4d85-9a6f-659490c4ca99.mft File: af661c18-5dff-4d85-9a6f-659490c4ca99.mft (raw, json) Hash identifier: hy4eLOtDF8vVou+Gi9QSAVxIA4Opcml7aR77I6JGvpw= Subject key identifier: 58:49:51:88:4C:8D:36:34:1D:1A:93:80:F2:11:49:5B:98:C0:1B:CC Authority key identifier: 41:26:26:80:04:A2:FF:06:D2:8D:7E:7F:84:0A:A0:46:6A:12:D2:E6 Certificate issuer: /CN=af661c18-5dff-4d85-9a6f-659490c4ca99 Certificate serial: 010D0C9F4328584EF7E7F7C4A7EE0E52FB8FB4C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/af661c18-5dff-4d85-9a6f-659490c4ca99.mft Manifest number: 010D0C9F4328584C8C36BC971418B14796C390A8 Signing time: Wed 26 Aug 2026 20:00:23 +0000 Manifest this update: Wed 26 Aug 2026 20:00:23 +0000 Manifest next update: Sat 29 Aug 2026 20:00:00 +0000 Files and hashes: 1: af661c18-5dff-4d85-9a6f-659490c4ca99.crl (hash: Ku6hd8IiNxYeAilt525/yVon3ProDIK2dYsqE7UKnJc=) 2: d81b35d0-6073-370a-af7b-e3600929036c.roa (hash: vxI5Va71J7dGDI9RrNHM2ehl0WQLL8Q5xFCaD9dFmWw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/af661c18-5dff-4d85-9a6f-659490c4ca99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/af661c18-5dff-4d85-9a6f-659490c4ca99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:e7:f7:c4:a7:ee:0e:52:fb:8f:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af661c18-5dff-4d85-9a6f-659490c4ca99 Validity Not Before: Aug 26 20:00:23 2026 GMT Not After : Aug 29 20:00:00 2026 GMT Subject: CN=0f99f6d4-a7fb-4bb8-9d6f-08639d7ccf3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ab:13:8b:51:dd:22:59:31:a3:d9:65:88:a5: 56:b5:2c:48:82:25:ca:ab:bf:58:75:59:dc:01:1d: 07:34:e4:90:58:5d:2f:16:7f:e6:68:13:86:88:3b: 81:8b:a5:c7:5a:97:98:5f:7f:12:aa:3c:4b:df:19: 78:32:19:38:7a:a9:67:15:d2:04:be:6e:c5:fa:2e: a0:48:91:93:18:f3:e7:6c:9b:b1:75:d7:55:44:c7: 7b:ef:4e:d8:e6:8f:90:d5:b8:7e:33:0d:52:97:37: c3:68:79:df:0b:b5:a3:fb:9d:cc:af:74:82:06:df: 7b:4d:fd:88:bb:d3:53:cd:de:6d:a8:8e:3a:b8:ca: 5d:6c:4c:62:73:13:0d:84:9b:a3:d3:8d:76:63:17: 6c:b3:28:75:47:2e:13:62:92:b1:5a:97:04:74:92: f6:66:ea:02:f8:30:df:ca:27:8b:76:91:5b:29:26: 60:ad:e9:c1:d0:a6:6f:db:6a:f7:07:16:65:05:4f: 43:9f:23:95:35:52:02:55:8c:60:36:0f:fc:f3:21: b9:b2:44:4f:0f:d1:37:79:ae:73:2a:75:92:78:a8: 12:48:24:3a:5b:5e:f7:80:c9:3c:4a:43:16:60:ab: 1a:d4:28:ad:c7:90:7d:bc:12:9a:5b:6d:ba:de:5f: 1a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:49:51:88:4C:8D:36:34:1D:1A:93:80:F2:11:49:5B:98:C0:1B:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/af661c18-5dff-4d85-9a6f-659490c4ca99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/af661c18-5dff-4d85-9a6f-659490c4ca99.crl X509v3 Authority Key Identifier: keyid:41:26:26:80:04:A2:FF:06:D2:8D:7E:7F:84:0A:A0:46:6A:12:D2:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:44:a2:72:63:86:44:38:80:94:7a:9d:12:0f:97:e8:3b:16: d9:96:8c:d5:bc:7e:99:31:d0:9a:7b:64:a9:cd:40:97:7a:7c: bc:f8:12:ca:e9:78:f3:6f:ad:f4:8b:5f:7f:a9:4b:32:0e:7b: 6c:9e:79:0f:c0:39:27:c9:4d:9d:e0:7a:58:e2:bd:6d:e2:5d: 41:92:cf:38:fc:08:38:52:1a:30:3d:02:a6:d9:89:61:6b:19: 35:1a:e0:65:23:4d:e6:fe:d0:d1:9b:2a:19:a3:22:61:7e:aa: d6:66:ad:2e:0d:6f:48:52:1b:e3:35:c2:5f:19:91:91:ac:e6: 4b:0c:e7:32:f2:0f:33:1f:ef:84:da:4d:17:4c:62:41:8c:7a: 71:06:d5:e6:cf:d5:e9:6b:02:9c:25:d9:74:8f:09:50:8b:20: 24:5e:16:bc:7d:a9:96:19:4f:73:d1:f1:09:50:25:fc:55:26: 92:35:d5:cb:84:17:1c:9d:66:31:36:fa:57:25:4b:fe:b8:b7: 97:f7:1c:44:a0:24:5a:11:b2:80:bf:4b:32:9e:8a:83:c9:3f: c7:36:c2:6a:e2:74:96:77:ab:6b:58:f6:32:dc:67:f5:55:fb: 83:04:69:b3:51:4e:eb:45:b5:1e:94:c2:61:a0:8a:9c:c0:cb: ee:50:43:15 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE735/fEp+4OUvuPtMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NjFjMTgtNWRmZi00ZDg1LTlhNmYtNjU5NDkwYzRj YTk5MB4XDTI2MDgyNjIwMDAyM1oXDTI2MDgyOTIwMDAwMFowLzEtMCsGA1UEAxMk MGY5OWY2ZDQtYTdmYi00YmI4LTlkNmYtMDg2MzlkN2NjZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqsTi1HdIlkxo9lliKVWtSxIgiXKq79YdVnc AR0HNOSQWF0vFn/maBOGiDuBi6XHWpeYX38SqjxL3xl4Mhk4eqlnFdIEvm7F+i6g SJGTGPPnbJuxdddVRMd7707Y5o+Q1bh+Mw1SlzfDaHnfC7Wj+53Mr3SCBt97Tf2I u9NTzd5tqI46uMpdbExicxMNhJuj0412Yxdssyh1Ry4TYpKxWpcEdJL2ZuoC+DDf yieLdpFbKSZgrenB0KZv22r3BxZlBU9DnyOVNVICVYxgNg/88yG5skRPD9E3ea5z KnWSeKgSSCQ6W173gMk8SkMWYKsa1Citx5B9vBKaW2263l8aiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFhJUYhMjTY0HRqTgPIRSVuYwBvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hZjY2 MWMxOC01ZGZmLTRkODUtOWE2Zi02NTk0OTBjNGNhOTkvYWY2NjFjMTgtNWRmZi00 ZDg1LTlhNmYtNjU5NDkwYzRjYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYWY2NjFjMTgtNWRmZi00ZDg1LTlh NmYtNjU5NDkwYzRjYTk5L2FmNjYxYzE4LTVkZmYtNGQ4NS05YTZmLTY1OTQ5MGM0 Y2E5OS5jcmwwHwYDVR0jBBgwFoAUQSYmgASi/wbSjX5/hAqgRmoS0uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hZjY2MWMxOC01ZGZmLTRkODUtOWE2Zi02NTk0 OTBjNGNhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7RKJyY4ZEOICUep0SD5fo OxbZlozVvH6ZMdCae2SpzUCXeny8+BLK6Xjzb630i19/qUsyDntsnnkPwDknyU2d 4HpY4r1t4l1Bks84/Ag4UhowPQKm2Ylhaxk1GuBlI03m/tDRmyoZoyJhfqrWZq0u DW9IUhvjNcJfGZGRrOZLDOcy8g8zH++E2k0XTGJBjHpxBtXmz9XpawKcJdl0jwlQ iyAkXha8famWGU9z0fEJUCX8VSaSNdXLhBccnWYxNvpXJUv+uLeX9xxEoCRaEbKA v0synoqDyT/HNsJq4nSWd6trWPYy3Gf1VfuDBGmzUU7rRbUelMJhoIqcwMvuUEMV -----END CERTIFICATE-----Generated at Thu Aug 27 00:08:57 2026 by rpki-client