$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft File: cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft (raw, json) Hash identifier: l0vfDxZLi5E95yk4afdykXyCZkWeGao0zA8ogNjXREg= Subject key identifier: 52:A1:FF:64:47:4C:01:D6:59:EA:42:D4:A6:BD:93:16:86:C1:9B:EB Authority key identifier: 2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 Certificate issuer: /CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Certificate serial: 010D0C9F4328584F9708FD50C91FA64EFF825100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft Manifest number: 010D0C9F4328584C72DC04738F61ECAAC4343FA8 Signing time: Thu 22 Oct 2026 20:00:24 +0000 Manifest this update: Thu 22 Oct 2026 20:00:24 +0000 Manifest next update: Sun 25 Oct 2026 20:00:00 +0000 Files and hashes: 1: cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl (hash: uqU9dAwwTH3gBNS7xZfTKvlZrVMI/EjTEpQulFKn+v8=) 2: dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa (hash: RroiRQ0QTy9l1f5yvhbxWWvKVFiiD7sB+6Yatw0yybU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:08:fd:50:c9:1f:a6:4e:ff:82:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Validity Not Before: Oct 22 20:00:24 2026 GMT Not After : Oct 25 20:00:00 2026 GMT Subject: CN=46aaa4be-d6bd-429c-a8ab-43d3fa555381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ef:5d:db:48:f6:76:82:7d:a8:fe:a0:49:4a: 47:c4:52:40:75:b8:09:50:31:d0:85:5a:9f:0d:4a: 62:8d:54:fc:7b:4f:b7:f1:12:59:cf:ba:a0:92:3c: 57:43:e1:b9:d6:31:a0:64:c1:b1:af:34:89:01:48: d7:86:c9:2b:3b:c2:1c:bf:9b:b1:25:cf:70:70:98: d5:d8:67:b2:cf:90:ca:f3:55:b8:55:8c:16:2a:41: e2:45:1c:8c:64:a4:35:c2:7e:8a:ff:fd:35:b1:3f: d1:d7:56:29:33:f8:97:23:08:fc:a4:79:49:89:d3: 0f:8c:76:bd:20:e6:74:62:70:63:83:0f:41:ee:72: 24:a5:0f:53:64:a2:e7:a4:7e:6f:ee:d5:6b:27:f8: 36:0c:03:c9:3d:0f:0b:ed:3c:9c:62:8b:0c:4d:db: 82:77:5a:1a:25:50:9f:79:0a:69:1e:4f:e5:d4:64: 6e:c5:4e:06:6d:28:3b:b7:51:be:b4:d4:7c:14:1f: 38:33:5f:8c:56:ca:06:48:ed:5b:42:f1:88:1e:92: eb:ad:88:02:6c:7d:69:91:05:36:9c:d5:29:82:be: ff:67:51:9d:15:fb:8e:f0:ca:8d:cf:c6:49:1b:55: 2a:39:c7:c7:bb:de:72:ad:e6:d9:89:6b:f9:93:00: 9e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A1:FF:64:47:4C:01:D6:59:EA:42:D4:A6:BD:93:16:86:C1:9B:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl X509v3 Authority Key Identifier: keyid:2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1a:28:51:0f:5d:64:11:65:99:59:e7:7f:de:95:40:6d:d5: 72:5f:56:b4:28:cc:bb:48:29:4a:fb:75:1c:9b:1b:75:83:42: 43:a1:e9:d7:e3:3c:91:4a:bc:f8:1c:7b:1b:e5:0c:8d:3d:ba: 32:fe:2d:57:3b:03:6b:82:5c:41:54:54:fa:6b:4d:48:18:ed: 48:b0:6d:24:80:54:15:8e:5b:cf:b6:ac:ea:0d:c2:58:f9:dd: b4:9e:3e:c0:0b:a4:bc:4f:7a:9b:8b:89:f2:69:94:4d:c1:7d: 8c:9c:d4:f6:96:35:13:8f:e8:bb:bd:67:e4:13:cc:d3:65:28: d5:3e:ea:88:68:fa:a2:18:a0:61:d6:4d:10:45:4d:26:76:6e: c2:e8:4a:e9:6d:5e:76:bb:65:4a:67:c2:43:6f:87:bf:d4:f5: 56:7f:a2:b0:9a:a4:92:fd:95:60:46:3e:28:e5:15:84:42:ca: 8d:7d:ee:e3:69:3d:8e:7d:97:97:88:f6:57:5c:ec:e0:92:0c: 60:70:64:70:07:58:1d:b2:34:aa:fd:bc:8a:e7:9b:07:0d:1d: 89:d3:02:b9:55:ff:dd:72:2a:24:c2:12:ca:c3:3f:09:7c:d6: 73:5d:74:00:9f:58:cc:2b:a3:b1:9e:e2:2e:cb:fb:27:7a:31: d8:4e:31:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+XCP1QyR+mTv+CUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhZjk1ZjEtOGQwOC00ODg3LWFlMjItNTQ0YTBkMmIz MTZjMB4XDTI2MTAyMjIwMDAyNFoXDTI2MTAyNTIwMDAwMFowLzEtMCsGA1UEAxMk NDZhYWE0YmUtZDZiZC00MjljLWE4YWItNDNkM2ZhNTU1MzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+9d20j2doJ9qP6gSUpHxFJAdbgJUDHQhVqf DUpijVT8e0+38RJZz7qgkjxXQ+G51jGgZMGxrzSJAUjXhskrO8Icv5uxJc9wcJjV 2Geyz5DK81W4VYwWKkHiRRyMZKQ1wn6K//01sT/R11YpM/iXIwj8pHlJidMPjHa9 IOZ0YnBjgw9B7nIkpQ9TZKLnpH5v7tVrJ/g2DAPJPQ8L7TycYosMTduCd1oaJVCf eQppHk/l1GRuxU4GbSg7t1G+tNR8FB84M1+MVsoGSO1bQvGIHpLrrYgCbH1pkQU2 nNUpgr7/Z1GdFfuO8MqNz8ZJG1UqOcfHu95yrebZiWv5kwCeSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFKh/2RHTAHWWepC1Ka9kxaGwZvrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFm OTVmMS04ZDA4LTQ4ODctYWUyMi01NDRhMGQyYjMxNmMvY2ZhZjk1ZjEtOGQwOC00 ODg3LWFlMjItNTQ0YTBkMmIzMTZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2ZhZjk1ZjEtOGQwOC00ODg3LWFl MjItNTQ0YTBkMmIzMTZjL2NmYWY5NWYxLThkMDgtNDg4Ny1hZTIyLTU0NGEwZDJi MzE2Yy5jcmwwHwYDVR0jBBgwFoAULdnKfHriUiZs4BntkptikWoqMUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFmOTVmMS04ZDA4LTQ4ODctYWUyMi01NDRh MGQyYjMxNmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRGihRD11kEWWZWed/3pVA bdVyX1a0KMy7SClK+3Ucmxt1g0JDoenX4zyRSrz4HHsb5QyNPboy/i1XOwNrglxB VFT6a01IGO1IsG0kgFQVjlvPtqzqDcJY+d20nj7AC6S8T3qbi4nyaZRNwX2MnNT2 ljUTj+i7vWfkE8zTZSjVPuqIaPqiGKBh1k0QRU0mdm7C6ErpbV52u2VKZ8JDb4e/ 1PVWf6KwmqSS/ZVgRj4o5RWEQsqNfe7jaT2OfZeXiPZXXOzgkgxgcGRwB1gdsjSq /byK55sHDR2J0wK5Vf/dciokwhLKwz8JfNZzXXQAn1jMK6OxnuIuy/snejHYTjGz -----END CERTIFICATE-----Generated at Fri Oct 23 15:50:20 2026 by rpki-client