$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft File: dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft (raw, json) Hash identifier: z5sNvbxZbGAmuDrchzwB0raw7zREkQVftrjv770ZR4M= Subject key identifier: 70:7A:4B:D5:C1:F3:5A:3C:46:C6:AE:72:BB:B2:6B:57:BE:65:DC:B0 Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF Certificate issuer: /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Certificate serial: 010D0C9F4328584DB575BCBEFDC166EBA28FD740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft Manifest number: 010D0C9F4328584073A84684C5F38B644F883BF8 Signing time: Sun 03 May 2026 08:00:03 +0000 Manifest this update: Sun 03 May 2026 08:00:03 +0000 Manifest next update: Tue 05 May 2026 08:00:00 +0000 Files and hashes: 1: 28bf01a1-e0a0-3223-944c-d3b6117da09c.roa (hash: WAdyqGWZ3KL7CiqBAgu1tlv8ftHWN2Z+ghxqnl4NSnc=) 2: 3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa (hash: 4U2guniQ7UvRkUfxsdJCwes6LI51jHNNilm1bCafNkI=) 3: 5e0eab60-d72b-3d6b-a734-f57f01a45b0f.roa (hash: LjpuO2xpIGF92wG9MbWbkz4DJ/AWdZue7Ga161a09G0=) 4: c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa (hash: /ecQeRSowX4X0vY3Tjz9UBRjTucjLZz5gMJeWD+QCXU=) 5: dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl (hash: kMnh7HqJuiyN7kJZrBdxuvcZWqpwRuz8M84oWNvwyvg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b5:75:bc:be:fd:c1:66:eb:a2:8f:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Validity Not Before: May 3 08:00:03 2026 GMT Not After : May 5 08:00:00 2026 GMT Subject: CN=2a58cfa9-c56d-481f-bc8e-c1f4e5a444b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6d:fd:92:de:4e:43:5b:da:46:db:1c:7c:ff: 94:c9:19:b8:91:18:b1:03:ba:35:ee:e3:7b:aa:cb: d1:05:00:f5:c4:34:8d:c9:ed:92:c8:02:fd:29:64: 22:b9:45:2c:10:01:73:d1:94:33:6c:54:9e:7c:81: b0:44:5a:1a:ee:fc:c4:f7:57:d0:86:e8:d0:b4:ba: 12:50:b8:84:be:03:95:aa:32:cd:ce:f5:d8:63:49: 86:e5:a6:ca:e3:9d:e9:db:eb:8b:4a:38:41:33:00: 91:46:26:f6:96:6e:ca:3d:98:ac:c9:c0:ca:ed:6a: 8c:aa:a4:a9:b5:ec:02:97:9a:aa:3f:05:dd:60:f5: 44:c8:28:77:15:af:19:4b:bc:86:17:ae:eb:3f:11: 80:a7:2e:0f:06:18:fa:7d:a0:e2:94:d6:8c:1f:94: a8:b8:20:0f:55:84:f6:7a:d1:79:fa:28:e6:79:17: d5:9a:73:9e:20:56:e7:85:d4:76:9a:14:e0:4c:ed: 26:55:17:d1:81:ca:9f:d0:ce:33:67:c2:13:19:bb: 97:4b:65:97:b9:39:76:d4:f6:da:cc:0d:71:72:8b: cc:74:4f:68:0a:9e:b3:16:34:c1:f3:c9:1b:a3:82: ac:f6:7c:20:48:08:15:92:ca:d2:3c:24:4f:46:20: f7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7A:4B:D5:C1:F3:5A:3C:46:C6:AE:72:BB:B2:6B:57:BE:65:DC:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl X509v3 Authority Key Identifier: keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:6a:9d:fa:aa:47:54:62:c9:ca:72:17:fb:e0:4c:4d:ed:45: 73:f5:aa:e0:d5:6b:f4:bc:0a:6a:8f:33:27:ab:c4:94:99:dc: 11:ca:7f:02:c4:7c:34:b3:28:90:52:9a:8a:21:11:9f:a2:67: d6:31:97:91:ae:a6:46:d1:ed:9d:3b:b0:03:61:35:5a:f6:e5: 4b:87:fb:3b:04:01:e2:6f:2a:c5:0e:98:df:6f:be:18:98:95: e5:d6:1a:4a:16:81:66:79:0d:8d:97:38:c9:d0:aa:91:43:bd: 11:4a:0a:a7:73:18:4e:fa:38:01:83:fe:8e:67:1e:be:f1:2b: 96:d2:84:a7:01:cf:a4:fb:f9:95:ba:53:1e:f3:14:6f:7c:f8: fc:80:03:50:de:8a:8e:cc:8c:8b:52:3c:b3:98:2e:1e:8d:3b: d9:0b:92:5c:97:69:79:dc:f4:71:bd:8f:5f:77:2b:05:2e:44: b0:df:db:dd:2b:41:79:2f:d4:b6:40:d5:6f:f1:c7:b1:4a:c9: 1e:78:fc:42:b3:db:e6:bb:42:1a:ca:4e:7f:d2:33:11:d0:73: d1:ab:c7:27:12:e1:9c:c1:23:da:29:e0:9b:85:fb:1e:bc:30: 94:0a:c9:ef:06:43:8c:f8:69:c7:13:e2:98:73:44:c7:f2:77: a7:ce:5f:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE21dby+/cFm66KP10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmMWEwNWYtZWZhYy00ZWYzLThiMjMtNWZkYmUzY2I0 ZTg4MB4XDTI2MDUwMzA4MDAwM1oXDTI2MDUwNTA4MDAwMFowLzEtMCsGA1UEAxMk MmE1OGNmYTktYzU2ZC00ODFmLWJjOGUtYzFmNGU1YTQ0NGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh239kt5OQ1vaRtscfP+UyRm4kRixA7o17uN7 qsvRBQD1xDSNye2SyAL9KWQiuUUsEAFz0ZQzbFSefIGwRFoa7vzE91fQhujQtLoS ULiEvgOVqjLNzvXYY0mG5abK453p2+uLSjhBMwCRRib2lm7KPZisycDK7WqMqqSp tewCl5qqPwXdYPVEyCh3Fa8ZS7yGF67rPxGApy4PBhj6faDilNaMH5SouCAPVYT2 etF5+ijmeRfVmnOeIFbnhdR2mhTgTO0mVRfRgcqf0M4zZ8ITGbuXS2WXuTl21Pba zA1xcovMdE9oCp6zFjTB88kbo4Ks9nwgSAgVksrSPCRPRiD3zwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHB6S9XB81o8Rsaucruya1e+ZdywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Yx YTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRiZTNjYjRlODgvZGNmMWEwNWYtZWZhYy00 ZWYzLThiMjMtNWZkYmUzY2I0ZTg4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmMWEwNWYtZWZhYy00ZWYzLThi MjMtNWZkYmUzY2I0ZTg4L2RjZjFhMDVmLWVmYWMtNGVmMy04YjIzLTVmZGJlM2Ni NGU4OC5jcmwwHwYDVR0jBBgwFoAUMR6T8lfYI525l+itPI4ghmPqWe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2YxYTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRi ZTNjYjRlODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvap36qkdUYsnKchf74ExN 7UVz9arg1Wv0vApqjzMnq8SUmdwRyn8CxHw0syiQUpqKIRGfomfWMZeRrqZG0e2d O7ADYTVa9uVLh/s7BAHibyrFDpjfb74YmJXl1hpKFoFmeQ2NlzjJ0KqRQ70RSgqn cxhO+jgBg/6OZx6+8SuW0oSnAc+k+/mVulMe8xRvfPj8gANQ3oqOzIyLUjyzmC4e jTvZC5Jcl2l53PRxvY9fdysFLkSw39vdK0F5L9S2QNVv8cexSskeePxCs9vmu0Ia yk5/0jMR0HPRq8cnEuGcwSPaKeCbhfsevDCUCsnvBkOM+GnHE+KYc0TH8nenzl/D -----END CERTIFICATE-----Generated at Sun May 3 16:14:32 2026 by rpki-client