$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft File: cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft (raw, json) Hash identifier: VfLd3IOwDU4q68rcfI8V+yNNAfOoUGZmMsDdXeY2oFQ= Subject key identifier: 06:72:96:71:DF:66:4B:C3:7E:1F:53:CC:45:30:14:E5:33:75:81:6A Authority key identifier: 2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 Certificate issuer: /CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Certificate serial: 010D0C9F4328584D7C3AB72A2BB7B458F00234F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft Manifest number: 010D0C9F4328584C72DC04738F61ECAAC4343EE2 Signing time: Sun 12 Apr 2026 20:00:03 +0000 Manifest this update: Sun 12 Apr 2026 20:00:03 +0000 Manifest next update: Tue 14 Apr 2026 20:00:00 +0000 Files and hashes: 1: cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl (hash: 48UIqtGu3fkBb15Fdnnnn/GbNhBZw0SuWkgcXVKs6I4=) 2: dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa (hash: ATbw9ztD+YiA6EJyk1XJtLTN8+NTCE1nOucmrUS4APk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:3a:b7:2a:2b:b7:b4:58:f0:02:34:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Validity Not Before: Apr 12 20:00:03 2026 GMT Not After : Apr 14 20:00:00 2026 GMT Subject: CN=d586a617-9c34-4999-87c4-a00ca8bfc657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:87:6f:f6:1b:c4:02:b7:41:07:fa:53:11:93: 58:f0:10:1e:38:7d:17:b8:c8:51:b3:13:a0:11:1d: 8c:b7:f8:5e:3b:4d:67:75:7e:42:29:05:72:fa:4e: 7b:69:81:4b:c9:53:82:d2:9f:20:dc:17:6a:20:a8: af:e6:74:5d:0b:dd:12:2f:33:b1:c3:93:4c:e2:23: 03:ac:f7:52:06:a5:81:82:75:c5:f6:bf:fc:3b:9a: 4f:d2:22:11:64:58:a3:0c:27:8e:25:86:1c:cf:80: 02:54:0b:dc:d8:64:d1:07:78:8e:97:36:c5:bb:79: 3b:90:46:29:2d:9f:c1:7b:2d:19:b8:e1:98:90:ed: 65:7d:a2:2a:f2:70:b8:ac:c6:16:a9:f0:d8:72:95: b3:ba:5f:5d:a2:16:eb:d3:da:d5:ac:5a:16:d5:89: 20:3e:21:b5:23:e3:92:55:83:01:bf:98:bd:8b:4d: 15:c8:0c:7f:b4:f7:65:31:1d:e4:7e:b2:cd:06:1b: a0:24:1f:f2:80:1d:f0:fe:d3:96:3d:e0:6b:9b:b0: 61:ca:38:b6:9e:b2:4e:a5:00:9e:aa:e8:5e:5b:dc: d1:f4:9e:01:fa:e1:89:16:43:98:9b:b4:f8:af:6a: 0c:e4:76:e3:5a:1e:77:a0:3d:3b:f1:6e:a0:7a:1d: b2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:72:96:71:DF:66:4B:C3:7E:1F:53:CC:45:30:14:E5:33:75:81:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl X509v3 Authority Key Identifier: keyid:2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:62:41:06:90:a1:63:40:83:cc:9e:bb:13:ed:07:a5:22:15: fb:0c:3c:12:e1:bc:f8:06:46:36:5c:77:69:d1:f7:bb:14:82: 23:55:2b:a3:80:74:3b:53:d1:8f:f7:9c:13:9a:4a:07:95:e0: 0f:53:91:f1:0f:8c:cc:38:7a:8a:95:b5:97:69:28:87:66:42: 9b:72:c6:1f:4c:41:1b:59:e1:02:fa:41:3d:00:99:ae:cc:80: bb:e5:a1:1a:c6:02:8c:8d:8f:50:ae:fc:f5:9e:69:21:d8:f6: fc:de:c3:2c:72:2b:02:d4:61:3a:94:12:6f:3e:3b:87:53:31: ca:b6:89:5b:ab:42:30:1b:b9:b8:b1:51:2c:b5:19:4f:e4:ad: 18:96:33:71:12:16:f8:7f:4d:98:22:d1:27:65:72:cc:5c:4c: 56:36:7b:7e:96:6a:30:19:38:b0:4f:47:ba:d4:3d:c2:91:5a: 6c:b5:a3:e2:d0:9d:75:b0:2a:09:10:a9:7b:18:fb:e8:4f:f8: 4a:35:15:19:3f:e9:9b:f8:2f:39:90:2f:ec:8d:98:74:74:81: 77:d2:64:26:a9:9b:cd:92:98:63:43:75:88:61:3a:82:a0:88: 7d:f6:56:6a:12:9e:18:58:60:7b:bc:8c:6d:9a:26:d5:a0:1e: 4e:e5:78:3c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE18OrcqK7e0WPACNPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhZjk1ZjEtOGQwOC00ODg3LWFlMjItNTQ0YTBkMmIz MTZjMB4XDTI2MDQxMjIwMDAwM1oXDTI2MDQxNDIwMDAwMFowLzEtMCsGA1UEAxMk ZDU4NmE2MTctOWMzNC00OTk5LTg3YzQtYTAwY2E4YmZjNjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5odv9hvEArdBB/pTEZNY8BAeOH0XuMhRsxOg ER2Mt/heO01ndX5CKQVy+k57aYFLyVOC0p8g3BdqIKiv5nRdC90SLzOxw5NM4iMD rPdSBqWBgnXF9r/8O5pP0iIRZFijDCeOJYYcz4ACVAvc2GTRB3iOlzbFu3k7kEYp LZ/Bey0ZuOGYkO1lfaIq8nC4rMYWqfDYcpWzul9dohbr09rVrFoW1YkgPiG1I+OS VYMBv5i9i00VyAx/tPdlMR3kfrLNBhugJB/ygB3w/tOWPeBrm7Bhyji2nrJOpQCe quheW9zR9J4B+uGJFkOYm7T4r2oM5HbjWh53oD078W6geh2ynwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAZylnHfZkvDfh9TzEUwFOUzdYFqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFm OTVmMS04ZDA4LTQ4ODctYWUyMi01NDRhMGQyYjMxNmMvY2ZhZjk1ZjEtOGQwOC00 ODg3LWFlMjItNTQ0YTBkMmIzMTZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2ZhZjk1ZjEtOGQwOC00ODg3LWFl MjItNTQ0YTBkMmIzMTZjL2NmYWY5NWYxLThkMDgtNDg4Ny1hZTIyLTU0NGEwZDJi MzE2Yy5jcmwwHwYDVR0jBBgwFoAULdnKfHriUiZs4BntkptikWoqMUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFmOTVmMS04ZDA4LTQ4ODctYWUyMi01NDRh MGQyYjMxNmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMYkEGkKFjQIPMnrsT7Qel IhX7DDwS4bz4BkY2XHdp0fe7FIIjVSujgHQ7U9GP95wTmkoHleAPU5HxD4zMOHqK lbWXaSiHZkKbcsYfTEEbWeEC+kE9AJmuzIC75aEaxgKMjY9Qrvz1nmkh2Pb83sMs cisC1GE6lBJvPjuHUzHKtolbq0IwG7m4sVEstRlP5K0YljNxEhb4f02YItEnZXLM XExWNnt+lmowGTiwT0e61D3CkVpstaPi0J11sCoJEKl7GPvoT/hKNRUZP+mb+C85 kC/sjZh0dIF30mQmqZvNkphjQ3WIYTqCoIh99lZqEp4YWGB7vIxtmibVoB5O5Xg8 -----END CERTIFICATE-----Generated at Mon Apr 13 10:39:14 2026 by rpki-client