$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.mft File: cd857ccf-b825-416d-8fd1-7332947e606d.mft (raw, json) Hash identifier: yOmefbe6jcKIHABi7wX5pCGkZvu8qWeW5x7QeR/zd+8= Subject key identifier: 8F:AE:86:DC:33:E2:58:7E:18:C6:0F:47:DF:EE:90:22:68:28:F0:88 Authority key identifier: AD:24:3D:43:2A:80:E6:F2:26:A8:C3:91:F6:CD:6D:DF:2C:BA:7D:8F Certificate issuer: /CN=cd857ccf-b825-416d-8fd1-7332947e606d Certificate serial: 010D0C9F4328584DE0BB59FEA92B522B560BE060 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.mft Manifest number: 010D0C9F4328584D200751185F467C4731F98B40 Signing time: Mon 18 May 2026 20:00:04 +0000 Manifest this update: Mon 18 May 2026 20:00:04 +0000 Manifest next update: Wed 20 May 2026 20:00:00 +0000 Files and hashes: 1: 04c244df-9f55-3c39-a781-590ef8c8097d.roa (hash: K4NhMmhvKBbEyVrpQJTtz5Hq20AiAD6arEd8lOnpwxc=) 2: 70c81cf0-9630-3aa4-9ae6-ec1ac57b6c09.roa (hash: plMtT9V2ofZIUyia7L9YiBKHfZmgyW82b6kxRf8aCrY=) 3: 756c9d6b-36dd-373d-8693-5f58ebf1d8b6.roa (hash: gy/8Qs1ApQN2oIwMRuC5+prI+wdsT4syHM4Hi9xemWo=) 4: cd857ccf-b825-416d-8fd1-7332947e606d.crl (hash: TSxMmx/BG9iR6LRNK8yFV/V5lJa7OoruJbr5jrUT4r4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 20 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e0:bb:59:fe:a9:2b:52:2b:56:0b:e0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd857ccf-b825-416d-8fd1-7332947e606d Validity Not Before: May 18 20:00:04 2026 GMT Not After : May 20 20:00:00 2026 GMT Subject: CN=cfa6e561-d640-4f6f-8885-afd2a4e021c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:77:e9:02:cb:39:5a:a6:ab:4b:e3:19:89:2e: b3:26:de:af:e2:5c:70:0b:b4:82:32:65:03:d1:90: 8f:41:bc:93:78:12:36:9d:89:74:d6:4c:27:3b:e2: 5f:5e:53:5b:42:d3:27:b9:54:f5:c4:1c:db:33:68: 48:69:cc:0b:bc:06:ca:c4:66:65:50:49:64:3f:4f: ce:13:7b:60:a4:ea:fe:f3:a4:24:b8:74:ea:19:a7: bd:24:50:69:b1:9a:6a:5b:83:96:03:8d:51:9a:8a: 6b:b2:a3:d7:c0:fb:bd:3e:cc:85:c3:b5:de:1d:57: 59:d7:60:b5:4a:11:72:aa:1b:95:ac:6c:68:fd:af: e3:69:f5:22:c9:30:cb:0c:50:43:09:bc:de:a2:f6: ef:f3:11:fe:80:6a:c9:42:a7:b8:8a:b9:6a:f8:2d: 86:f4:a8:4b:b3:e2:74:ec:6e:92:85:30:28:f7:38: da:48:5e:72:ae:c6:69:2b:4f:63:9a:ca:b8:35:d9: 22:14:77:90:59:f3:2f:37:da:e0:bd:72:9c:a0:e5: 85:65:b0:b7:e5:47:5b:ff:25:60:ef:08:05:17:ed: 60:92:6b:a3:c4:e4:d3:bf:2c:14:c0:e6:47:d5:fa: fc:f3:ce:71:62:18:a1:48:10:1f:a1:cb:8f:94:0b: fc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AE:86:DC:33:E2:58:7E:18:C6:0F:47:DF:EE:90:22:68:28:F0:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.crl X509v3 Authority Key Identifier: keyid:AD:24:3D:43:2A:80:E6:F2:26:A8:C3:91:F6:CD:6D:DF:2C:BA:7D:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:62:95:15:26:2f:28:91:04:97:55:66:b0:f8:de:08:6c:83: ca:87:ca:99:26:d5:a6:f9:2b:12:29:de:0a:81:2e:7c:a8:c4: 13:8e:b9:df:98:e9:6b:7b:05:c7:37:a7:be:58:e0:1c:20:3e: b3:27:8f:95:89:12:db:ae:2a:6e:6f:67:5c:63:d8:5b:9b:00: 2c:de:42:49:62:81:9b:70:21:1a:d2:af:08:f6:02:cc:27:a1: 86:27:66:49:06:22:df:1d:3c:0b:dd:19:07:f4:10:bb:32:f6: 03:1b:ab:19:8c:30:69:72:18:63:a1:a7:05:bb:78:36:07:c1: 6b:ab:93:36:0a:c4:93:62:51:42:36:ee:0b:9d:8e:0d:2d:29: 8b:5f:5b:43:90:a8:d2:e3:a1:15:75:e0:31:86:3b:5f:93:ba: 8a:7d:19:93:38:e8:05:ec:c0:2d:20:53:7e:1e:4e:14:62:8c: ac:88:13:5f:41:32:bc:48:f9:69:a3:8a:55:96:6a:33:7d:33: 51:38:22:4d:f6:37:55:4a:6f:25:c5:bc:62:32:19:3c:ac:65: 3f:d4:15:3d:04:9e:bf:37:d8:f4:b7:5b:17:27:5b:ad:07:43: ef:06:95:ea:3b:de:d9:b5:24:c9:f1:c3:06:77:98:0f:f3:e3: 68:02:63:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3gu1n+qStSK1YL4GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q4NTdjY2YtYjgyNS00MTZkLThmZDEtNzMzMjk0N2U2 MDZkMB4XDTI2MDUxODIwMDAwNFoXDTI2MDUyMDIwMDAwMFowLzEtMCsGA1UEAxMk Y2ZhNmU1NjEtZDY0MC00ZjZmLTg4ODUtYWZkMmE0ZTAyMWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHfpAss5WqarS+MZiS6zJt6v4lxwC7SCMmUD 0ZCPQbyTeBI2nYl01kwnO+JfXlNbQtMnuVT1xBzbM2hIacwLvAbKxGZlUElkP0/O E3tgpOr+86QkuHTqGae9JFBpsZpqW4OWA41RmoprsqPXwPu9PsyFw7XeHVdZ12C1 ShFyqhuVrGxo/a/jafUiyTDLDFBDCbzeovbv8xH+gGrJQqe4irlq+C2G9KhLs+J0 7G6ShTAo9zjaSF5yrsZpK09jmsq4NdkiFHeQWfMvN9rgvXKcoOWFZbC35Udb/yVg 7wgFF+1gkmujxOTTvywUwOZH1fr8885xYhihSBAfocuPlAv8iQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI+uhtwz4lh+GMYPR9/ukCJoKPCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDg1 N2NjZi1iODI1LTQxNmQtOGZkMS03MzMyOTQ3ZTYwNmQvY2Q4NTdjY2YtYjgyNS00 MTZkLThmZDEtNzMzMjk0N2U2MDZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Q4NTdjY2YtYjgyNS00MTZkLThm ZDEtNzMzMjk0N2U2MDZkL2NkODU3Y2NmLWI4MjUtNDE2ZC04ZmQxLTczMzI5NDdl NjA2ZC5jcmwwHwYDVR0jBBgwFoAUrSQ9QyqA5vImqMOR9s1t3yy6fY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDg1N2NjZi1iODI1LTQxNmQtOGZkMS03MzMy OTQ3ZTYwNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATYpUVJi8okQSXVWaw+N4I bIPKh8qZJtWm+SsSKd4KgS58qMQTjrnfmOlrewXHN6e+WOAcID6zJ4+ViRLbripu b2dcY9hbmwAs3kJJYoGbcCEa0q8I9gLMJ6GGJ2ZJBiLfHTwL3RkH9BC7MvYDG6sZ jDBpchhjoacFu3g2B8Frq5M2CsSTYlFCNu4LnY4NLSmLX1tDkKjS46EVdeAxhjtf k7qKfRmTOOgF7MAtIFN+Hk4UYoysiBNfQTK8SPlpo4pVlmozfTNROCJN9jdVSm8l xbxiMhk8rGU/1BU9BJ6/N9j0t1sXJ1utB0PvBpXqO97ZtSTJ8cMGd5gP8+NoAmMu -----END CERTIFICATE-----Generated at Tue May 19 07:53:39 2026 by rpki-client