$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft File: cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft (raw, json) Hash identifier: isXka/Jn8Boe1eLpxks1A0KHQ5qXlBsUARkUz2ZVVl8= Subject key identifier: 54:7E:FF:F8:82:D5:E6:DD:C1:A2:98:9F:27:A4:1E:A2:E4:07:9C:D1 Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 Certificate issuer: /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Certificate serial: 010D0C9F4328584D7003F76B94199DB282241DA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft Manifest number: 010D0C9F4328584073A85028723997B010B8C462 Signing time: Wed 08 Apr 2026 11:00:03 +0000 Manifest this update: Wed 08 Apr 2026 11:00:03 +0000 Manifest next update: Sat 11 Apr 2026 11:00:00 +0000 Files and hashes: 1: 2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa (hash: LQ5gYqxZIHw4YowINHlCCoTBlNSNJbuZkBnRL8tZvug=) 2: 3c5bec82-2ad3-3d58-b0a8-72139bfcd6d0.roa (hash: 4p+RElkb5N1mNS9lQheJpC2y5bDirJRo+127gPTSG3g=) 3: 941a96f8-a316-39b6-a890-04ab7a60873f.roa (hash: 7ceQ4jYLZ06suV52uom1OnQ6/ykxIwMKHqufZgnwLtY=) 4: c4d49987-7b4b-3be2-8e42-497758e9897c.roa (hash: e3LgxQxHGeGKd/uOgWD0ZnxYglniTJQgwC/HhEPKPd8=) 5: cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl (hash: W6KzkBoc2xbxQHRhHetJDDv4WO6LcEvqNPBmuz67zbU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:03:f7:6b:94:19:9d:b2:82:24:1d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Validity Not Before: Apr 8 11:00:03 2026 GMT Not After : Apr 11 11:00:00 2026 GMT Subject: CN=9148fd00-0fdc-436a-bade-e882fefb7da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:38:13:7d:b4:26:44:55:cc:75:3e:9d:b2:69: 25:a3:2b:1b:45:09:01:57:96:07:5a:07:f5:33:fe: 2d:30:a0:9d:c0:13:50:84:de:04:c2:76:0f:25:8e: 43:90:c4:0d:aa:2e:31:fc:4a:f7:2f:97:31:fc:aa: c1:34:35:09:26:ec:0e:ac:d9:d2:15:9e:de:29:fc: 8c:fe:84:1f:a1:87:fd:f6:33:c8:0f:d2:b5:2b:a1: 59:2a:cd:16:b4:14:7a:68:98:d3:30:c2:d5:e9:9e: 50:79:0b:f7:13:78:71:d0:e2:f1:8a:5e:67:56:8b: e2:f1:01:e3:aa:fa:65:62:8e:fb:d7:2e:7a:13:e7: fa:34:83:aa:93:cc:af:8b:34:bf:41:09:44:dc:6b: 15:f3:50:0a:82:fb:86:fa:1f:f4:d5:91:a3:6f:2e: b5:ae:89:4a:0a:ba:aa:9c:54:f7:52:7b:d0:dd:ff: 66:8d:c8:b3:10:9f:37:b2:c3:c1:15:3d:02:cc:85: 5f:9f:ac:28:bf:8c:8d:9b:14:9e:2d:d3:88:a7:64: e8:cc:f0:ff:14:86:b0:c8:07:22:01:58:db:f3:78: d2:28:65:83:28:b8:6f:8c:ee:39:5e:cc:53:3b:69: fb:fd:56:e9:67:43:55:63:4c:ce:d1:a5:48:35:fb: 49:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7E:FF:F8:82:D5:E6:DD:C1:A2:98:9F:27:A4:1E:A2:E4:07:9C:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl X509v3 Authority Key Identifier: keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c6:33:96:48:66:e3:f8:52:79:1b:de:c2:88:92:8c:58:0a: a7:b4:e8:92:d8:17:25:fd:e8:0e:c8:8a:fc:a0:ce:c9:88:b7: 28:22:7e:a7:b2:f9:8f:c8:18:81:85:17:40:e5:74:ab:b8:25: 76:fe:a0:37:66:e7:9f:58:e9:60:b4:28:a5:a8:a6:c2:6b:f6: 18:78:c9:94:8b:84:bd:e8:83:aa:d1:73:08:8a:08:5b:71:b9: 2a:9c:2c:c9:70:7f:92:53:07:b8:65:41:aa:6c:98:2d:9d:ad: 88:fa:ba:78:5c:9a:db:23:70:4a:04:a8:58:5b:5d:bb:c8:71: 84:f9:c1:ac:50:81:d4:8c:ed:59:2a:be:c9:04:16:8b:52:e1: 2c:37:da:a7:89:48:20:a7:9e:0c:37:5c:25:bd:98:cc:c0:ab: 16:26:8f:98:19:9d:e7:22:d0:4b:73:1b:af:75:16:b2:18:9f: 87:6c:ee:0f:d7:cc:bf:6b:df:2d:4c:3e:ad:71:5f:ab:43:59: 68:7c:2e:2e:57:ef:78:36:ca:a4:eb:a6:dd:0b:17:d6:e0:0f: b3:08:db:4d:d7:56:a1:1a:17:17:67:90:01:7c:f8:04:12:31: be:b7:ea:83:11:42:11:06:eb:2b:70:b7:ca:1e:c9:5c:76:21: 37:3c:35:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1wA/drlBmdsoIkHaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZjZjE2MDYtYzExYy00OGU5LWI4ZWUtYzVlN2FiOWU1 M2JkMB4XDTI2MDQwODExMDAwM1oXDTI2MDQxMTExMDAwMFowLzEtMCsGA1UEAxMk OTE0OGZkMDAtMGZkYy00MzZhLWJhZGUtZTg4MmZlZmI3ZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzgTfbQmRFXMdT6dsmkloysbRQkBV5YHWgf1 M/4tMKCdwBNQhN4EwnYPJY5DkMQNqi4x/Er3L5cx/KrBNDUJJuwOrNnSFZ7eKfyM /oQfoYf99jPID9K1K6FZKs0WtBR6aJjTMMLV6Z5QeQv3E3hx0OLxil5nVovi8QHj qvplYo771y56E+f6NIOqk8yvizS/QQlE3GsV81AKgvuG+h/01ZGjby61rolKCrqq nFT3UnvQ3f9mjcizEJ83ssPBFT0CzIVfn6wov4yNmxSeLdOIp2TozPD/FIawyAci AVjb83jSKGWDKLhvjO45XsxTO2n7/VbpZ0NVY0zO0aVINftJWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFR+//iC1ebdwaKYnyekHqLkB5zRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNm MTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3YWI5ZTUzYmQvY2ZjZjE2MDYtYzExYy00 OGU5LWI4ZWUtYzVlN2FiOWU1M2JkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZjZjE2MDYtYzExYy00OGU5LWI4 ZWUtYzVlN2FiOWU1M2JkL2NmY2YxNjA2LWMxMWMtNDhlOS1iOGVlLWM1ZTdhYjll NTNiZC5jcmwwHwYDVR0jBBgwFoAUfO8iqAJFGnAVzpkedn06U2E2SmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNmMTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3 YWI5ZTUzYmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2xjOWSGbj+FJ5G97CiJKM WAqntOiS2Bcl/egOyIr8oM7JiLcoIn6nsvmPyBiBhRdA5XSruCV2/qA3ZuefWOlg tCilqKbCa/YYeMmUi4S96IOq0XMIighbcbkqnCzJcH+SUwe4ZUGqbJgtna2I+rp4 XJrbI3BKBKhYW127yHGE+cGsUIHUjO1ZKr7JBBaLUuEsN9qniUggp54MN1wlvZjM wKsWJo+YGZ3nItBLcxuvdRayGJ+HbO4P18y/a98tTD6tcV+rQ1lofC4uV+94Nsqk 66bdCxfW4A+zCNtN11ahGhcXZ5ABfPgEEjG+t+qDEUIRBusrcLfKHslcdiE3PDXL -----END CERTIFICATE-----Generated at Wed Apr 8 13:31:12 2026 by rpki-client