$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft File: cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft (raw, json) Hash identifier: eM95dQ2ynqTaSvZg7HSMBD+8vtNRjxtR7JxGU3Y2+Io= Subject key identifier: 50:E1:44:9D:56:AC:5E:C8:61:09:CE:58:17:97:6E:EC:5D:6E:82:C4 Authority key identifier: 43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 Certificate issuer: /CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Certificate serial: 010D0C9F4328584D3C5E4E66C0BF81769FA698D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft Manifest number: 010D0C9F4328584ACB090E855DD5D7EE923FD464 Signing time: Fri 20 Mar 2026 23:00:04 +0000 Manifest this update: Fri 20 Mar 2026 23:00:04 +0000 Manifest next update: Mon 23 Mar 2026 23:00:00 +0000 Files and hashes: 1: cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl (hash: jOG+L5zS66BaKfyftMnTVsUimX7SXCUeOXMR4ROKhmc=) 2: eb089fd3-de83-32fc-94eb-491970ba886f.roa (hash: NEv5PERJ9yiU4Gzduf+UsNDltzFnyLY9eG74eJyUSuA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3c:5e:4e:66:c0:bf:81:76:9f:a6:98:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Validity Not Before: Mar 20 23:00:04 2026 GMT Not After : Mar 23 23:00:00 2026 GMT Subject: CN=537d8f0d-ea13-4e19-ac6d-5937e223de20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:59:32:67:29:01:31:0a:37:6a:ee:22:81: d6:35:e8:3a:19:46:6d:5e:40:c3:ef:00:a7:d9:c9: 4e:78:0a:63:22:5c:c5:8e:a7:50:f8:0b:eb:69:72: bb:56:c1:78:35:d2:d2:87:13:ec:1c:08:f8:4f:98: e2:a9:70:bc:e1:f8:b9:0a:fb:c9:b8:be:27:b4:50: 79:c9:cc:bd:49:e0:69:d6:df:57:67:32:df:dd:bc: 7c:ee:b1:a5:54:f8:d5:25:29:07:12:b0:99:21:d2: c4:8f:b2:e0:3e:1d:2d:ae:9f:7e:59:08:44:12:ba: f1:ba:d2:7f:a4:e8:bc:d3:bc:1c:84:2d:55:93:8e: 0b:78:f0:c9:bc:4e:df:29:f9:c2:c9:14:3c:2d:46: 07:6c:8f:a1:96:52:9f:17:92:d6:90:a3:2f:1e:af: d8:22:4b:ab:36:fd:01:c1:10:eb:07:68:80:6f:a5: 50:90:39:4c:c0:5c:fe:c2:65:67:9f:33:07:98:ca: fe:b8:3f:38:53:43:5f:3c:4d:cf:62:ba:0d:fd:53: c5:8d:bc:02:0e:29:47:14:a0:c2:1c:82:d3:83:f8: e8:8c:e5:c6:03:25:06:05:4e:25:ba:e7:5a:65:34: b4:88:7a:02:4c:06:ff:40:d5:9b:1d:d1:bd:ce:f2: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E1:44:9D:56:AC:5E:C8:61:09:CE:58:17:97:6E:EC:5D:6E:82:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl X509v3 Authority Key Identifier: keyid:43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c8:8d:02:66:09:23:1c:3d:00:bc:8d:bb:1e:28:b4:84:07: d0:7f:70:8f:2d:51:28:ba:f1:ef:7b:47:db:7d:44:a1:8c:6c: ae:7d:72:97:66:2a:e6:5c:0a:81:19:ba:ec:bb:19:9c:d2:7d: e6:a5:71:7c:5b:49:89:e4:d5:63:ab:4d:6b:dd:c4:ef:8b:e5: 68:d5:c1:2d:13:83:b4:63:5b:93:1b:b8:bf:9c:71:d0:22:5f: b0:45:3f:ee:35:76:83:7f:73:0e:3b:17:c2:2a:b3:20:6c:4e: c5:ae:aa:37:f6:5c:98:ac:6d:a0:7b:60:85:de:48:3a:ce:f1: df:d0:1a:5c:2a:54:24:e9:ae:cd:d8:10:e8:1e:61:09:c7:b9: 5f:81:b8:a5:6a:a8:5b:68:26:7c:1a:a2:83:1e:a8:4d:6a:26: 82:ef:4d:a8:b5:8d:92:09:e8:2d:88:33:a9:3f:47:39:74:0c: 74:3c:58:00:39:32:e5:b5:01:bf:a4:f2:c4:74:b3:b9:7e:fe: 75:f1:da:7e:58:6f:3a:a3:45:a4:d3:03:50:98:8f:01:f3:18: 3f:8a:9b:43:0a:cd:36:b3:22:a0:9a:33:5c:d9:55:6b:b4:00: fa:de:28:79:ca:e8:e4:29:44:a8:86:e4:9d:67:da:08:40:87: fb:2b:69:65 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE08Xk5mwL+Bdp+mmNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhYWVkOTAtY2U2OC00ZTIyLTg3MGItN2I3ZDg2ZTk0 OWUwMB4XDTI2MDMyMDIzMDAwNFoXDTI2MDMyMzIzMDAwMFowLzEtMCsGA1UEAxMk NTM3ZDhmMGQtZWExMy00ZTE5LWFjNmQtNTkzN2UyMjNkZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/RZMmcpATEKN2ruIoHWNeg6GUZtXkDD7wCn 2clOeApjIlzFjqdQ+AvraXK7VsF4NdLShxPsHAj4T5jiqXC84fi5CvvJuL4ntFB5 ycy9SeBp1t9XZzLf3bx87rGlVPjVJSkHErCZIdLEj7LgPh0trp9+WQhEErrxutJ/ pOi807wchC1Vk44LePDJvE7fKfnCyRQ8LUYHbI+hllKfF5LWkKMvHq/YIkurNv0B wRDrB2iAb6VQkDlMwFz+wmVnnzMHmMr+uD84U0NfPE3PYroN/VPFjbwCDilHFKDC HILTg/jojOXGAyUGBU4luudaZTS0iHoCTAb/QNWbHdG9zvJ6PQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFDhRJ1WrF7IYQnOWBeXbuxdboLEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFh ZWQ5MC1jZTY4LTRlMjItODcwYi03YjdkODZlOTQ5ZTAvY2ZhYWVkOTAtY2U2OC00 ZTIyLTg3MGItN2I3ZDg2ZTk0OWUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2ZhYWVkOTAtY2U2OC00ZTIyLTg3 MGItN2I3ZDg2ZTk0OWUwL2NmYWFlZDkwLWNlNjgtNGUyMi04NzBiLTdiN2Q4NmU5 NDllMC5jcmwwHwYDVR0jBBgwFoAUQ1d28aCRQRKJ6nwwWq3ggQNAXicwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFhZWQ5MC1jZTY4LTRlMjItODcwYi03Yjdk ODZlOTQ5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtyI0CZgkjHD0AvI27Hii0 hAfQf3CPLVEouvHve0fbfUShjGyufXKXZirmXAqBGbrsuxmc0n3mpXF8W0mJ5NVj q01r3cTvi+Vo1cEtE4O0Y1uTG7i/nHHQIl+wRT/uNXaDf3MOOxfCKrMgbE7Frqo3 9lyYrG2ge2CF3kg6zvHf0BpcKlQk6a7N2BDoHmEJx7lfgbilaqhbaCZ8GqKDHqhN aiaC702otY2SCegtiDOpP0c5dAx0PFgAOTLltQG/pPLEdLO5fv518dp+WG86o0Wk 0wNQmI8B8xg/iptDCs02syKgmjNc2VVrtAD63ih5yujkKUSohuSdZ9oIQIf7K2ll -----END CERTIFICATE-----Generated at Sat Mar 21 13:17:27 2026 by rpki-client