$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json) Hash identifier: WH/d8cfkXAn6UpguupLYOS6zlUiflXkTPoiZvRUsxrM= Subject key identifier: 32:0F:5B:00:50:9F:0E:28:44:43:A8:E6:88:96:EA:DB:A3:FF:CC:6F Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584E48B9873C20EF2AE27B1CE340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft Manifest number: 010D0C9F4328584073A83840A2BEE7D9A3337ABC Signing time: Thu 25 Jun 2026 02:00:22 +0000 Manifest this update: Thu 25 Jun 2026 02:00:22 +0000 Manifest next update: Sun 28 Jun 2026 02:00:00 +0000 Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: qJHvTinNv+TM0KgUJitjI8JODnLwvIxtmp0nSensGaw=) 2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: zuRnyeklFq+GfQhkrKWe4Etk3Syf8dkTbcK5PVPSJXQ=) 3: b24dbab2-534c-3e59-b62f-16d920e96e56.asa (hash: 0Ut6RFLFdN9maUOz9GLXi1tuKI6TciU3JliikBUqW7o=) 4: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: hnGEJIkVLGEZqsMk+kJmokLOnshCNl6L6YyX2f2qTso=) 5: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: 8tliYP05At/8bRDxljvnrnVdGSzMgT/YcaDx5vEx4co=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:b9:87:3c:20:ef:2a:e2:7b:1c:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Jun 25 02:00:22 2026 GMT Not After : Jun 28 02:00:00 2026 GMT Subject: CN=dc2c121b-5d45-4e36-bce2-1b1a756fb065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f2:b5:f4:e7:36:50:bb:db:1b:61:9b:81:49: 9c:d6:18:ec:5c:2d:63:c7:d6:5d:56:85:d0:8e:4e: 28:fa:f9:59:46:42:5e:0e:1c:1e:19:57:f3:d9:0c: d2:59:21:eb:49:83:38:74:77:86:33:89:37:ab:aa: b6:88:f0:ab:37:65:b9:95:63:e0:7e:0c:21:e4:2d: a3:38:a7:2b:de:f1:2a:97:7f:e2:9d:5f:47:15:04: 83:02:d3:f5:c1:59:69:fd:32:b4:36:f8:ef:eb:92: 30:11:bc:35:ef:2c:37:55:ac:ad:7c:df:f4:36:6c: 04:50:4e:12:cc:67:4c:4f:ed:fa:cd:11:d5:5e:21: d3:09:24:5a:6f:9c:3a:1b:8c:b2:b9:96:00:e9:1c: 50:ce:70:22:d8:03:8a:7f:c7:03:57:2a:62:1e:01: 4a:17:1f:c4:23:fe:45:fe:f7:0c:15:96:4f:a5:32: 07:a2:7c:aa:c9:46:34:09:00:51:29:d8:bb:12:cc: f9:cd:6a:46:40:5e:09:ce:b6:6e:3e:92:7b:6a:e5: 24:f3:22:b5:44:8c:21:36:5f:21:a4:d1:59:d7:52: f3:ea:a0:72:b5:47:1f:90:41:d4:e4:5a:fc:e2:61: 09:a4:9f:90:1a:6a:ff:c2:60:50:2c:c6:9d:72:d5: 6b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0F:5B:00:50:9F:0E:28:44:43:A8:E6:88:96:EA:DB:A3:FF:CC:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4d:c3:bb:e2:5d:f2:b8:d4:91:77:fb:1f:7c:52:49:ac:7c: 13:5e:13:fb:0e:d3:47:ee:c0:59:2d:28:a4:b8:6f:85:23:0f: fc:14:04:04:e6:fa:67:2b:0d:3f:f9:4b:23:1d:57:64:2b:70: 33:b5:76:5c:95:22:b5:c3:fa:bd:45:7b:1c:b2:e3:88:2a:90: 0f:1e:b8:23:e8:b7:a3:12:69:9a:dc:f6:1f:3c:12:8e:1c:20: 96:fb:3e:12:79:d8:e6:52:e7:50:ce:e3:bf:90:c9:d6:88:8c: 45:4e:2e:ab:30:49:99:a1:2f:d9:49:57:fc:79:30:fb:64:14: 1a:01:ab:57:c2:25:3a:ff:08:a9:2a:0c:7c:ad:28:e3:7e:52: 71:f0:f5:28:47:ac:c5:cf:71:18:11:a7:96:39:42:d6:a1:ca: da:be:75:07:d6:87:db:d9:f3:00:67:64:7b:66:f9:e6:ba:74: eb:ce:30:5e:97:a5:aa:e3:f7:2a:30:63:42:d9:39:1a:d0:c9: d5:23:e4:44:22:31:bd:20:e4:84:a7:1a:f9:76:36:6b:b2:30: 7a:99:d0:a9:76:0d:dd:61:a7:8a:a8:35:37:87:23:dc:80:d2: 31:a7:54:a8:aa:1b:8d:c9:a8:95:7d:a8:3c:e1:da:0c:2d:1d: 31:56:84:e0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE5IuYc8IO8q4nsc40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI2MDYyNTAyMDAyMloXDTI2MDYyODAyMDAwMFowLzEtMCsGA1UEAxMk ZGMyYzEyMWItNWQ0NS00ZTM2LWJjZTItMWIxYTc1NmZiMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvK19Oc2ULvbG2GbgUmc1hjsXC1jx9ZdVoXQ jk4o+vlZRkJeDhweGVfz2QzSWSHrSYM4dHeGM4k3q6q2iPCrN2W5lWPgfgwh5C2j OKcr3vEql3/inV9HFQSDAtP1wVlp/TK0Nvjv65IwEbw17yw3VaytfN/0NmwEUE4S zGdMT+36zRHVXiHTCSRab5w6G4yyuZYA6RxQznAi2AOKf8cDVypiHgFKFx/EI/5F /vcMFZZPpTIHonyqyUY0CQBRKdi7Esz5zWpGQF4JzrZuPpJ7auUk8yK1RIwhNl8h pNFZ11Lz6qBytUcfkEHU5Fr84mEJpJ+QGmr/wmBQLMadctVrrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDIPWwBQnw4oREOo5oiW6tuj/8xvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00 NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbTcO74l3yuNSRd/sffFJJ rHwTXhP7DtNH7sBZLSikuG+FIw/8FAQE5vpnKw0/+UsjHVdkK3AztXZclSK1w/q9 RXscsuOIKpAPHrgj6LejEmma3PYfPBKOHCCW+z4SedjmUudQzuO/kMnWiIxFTi6r MEmZoS/ZSVf8eTD7ZBQaAatXwiU6/wipKgx8rSjjflJx8PUoR6zFz3EYEaeWOULW ocravnUH1ofb2fMAZ2R7ZvnmunTrzjBel6Wq4/cqMGNC2Tka0MnVI+REIjG9IOSE pxr5djZrsjB6mdCpdg3dYaeKqDU3hyPcgNIxp1SoqhuNyaiVfag84doMLR0xVoTg -----END CERTIFICATE-----Generated at Thu Jun 25 08:33:20 2026 by rpki-client