$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft File: cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft (raw, json) Hash identifier: 54FltyhGOPezkHz2Iu1fFn1EWK0TNxvn+okSZwBAA5g= Subject key identifier: 0E:D2:9D:E8:28:86:39:E9:DA:29:61:80:F0:61:F8:8F:DA:76:96:5D Authority key identifier: 43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 Certificate issuer: /CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Certificate serial: 010D0C9F4328584EB80B8F82CF76AC5869B4EC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft Manifest number: 010D0C9F4328584ACB090E855DD5D7EE923FD4F0 Signing time: Mon 03 Aug 2026 23:00:22 +0000 Manifest this update: Mon 03 Aug 2026 23:00:22 +0000 Manifest next update: Thu 06 Aug 2026 23:00:00 +0000 Files and hashes: 1: cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl (hash: DRuSqVZLxUMGG1k6EXqDMyyqpmuxDMXgjdkon+iAxD0=) 2: eb089fd3-de83-32fc-94eb-491970ba886f.roa (hash: Yq70P/gVD3u2ZOvq4qnxgCikRuDmDwpSYRbaM2Dbnbo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:0b:8f:82:cf:76:ac:58:69:b4:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Validity Not Before: Aug 3 23:00:22 2026 GMT Not After : Aug 6 23:00:00 2026 GMT Subject: CN=84bf7e4b-46a9-436c-ad86-b60e6a2ba160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:4f:17:8b:51:6d:3a:2c:fe:b4:9f:0f:33: 84:c4:48:a5:41:2e:a9:57:2e:14:52:80:ad:ec:ff: 1f:6b:9d:a5:38:ba:ca:66:a4:c8:8c:82:a4:d0:29: 19:f0:74:f9:c5:3c:40:1a:03:47:01:67:6c:f8:d9: 33:6e:de:59:6c:6b:a1:dd:98:54:21:2c:fc:2c:a5: 49:6c:17:85:30:6a:8c:f7:fe:52:7d:e9:76:b2:1e: 28:e3:e3:55:9d:eb:21:59:69:b8:3e:70:96:cb:da: ca:9f:e1:00:9c:98:3c:6b:99:64:d5:7e:59:0b:15: 87:18:64:13:da:59:6a:d9:8a:aa:d4:0e:44:b4:11: f6:30:57:77:e3:1e:3d:c7:bf:1d:df:f4:f9:b9:87: 94:d6:35:5b:33:a6:9b:05:c9:4b:a2:90:43:e4:6f: 86:43:53:f8:78:10:f0:5b:cc:e6:b1:53:28:8d:88: 3e:64:42:17:0d:ba:c2:d2:af:e2:4e:fa:bc:ce:62: b1:5b:bb:4d:8e:aa:c6:d1:75:bb:52:10:bb:15:8d: e9:bd:75:20:9b:1d:59:3b:d9:ca:da:bc:44:b1:86: b8:fa:c2:79:c0:e1:91:89:e2:45:b0:50:ae:4b:6f: 98:85:7b:65:71:a0:3d:03:9e:28:eb:0b:57:d2:31: d2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D2:9D:E8:28:86:39:E9:DA:29:61:80:F0:61:F8:8F:DA:76:96:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl X509v3 Authority Key Identifier: keyid:43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:44:ce:73:c2:60:63:b0:25:c3:ce:47:8e:aa:e4:5e:c3:e4: b3:b6:0c:63:3c:5b:da:81:cf:53:f9:24:66:b0:83:d2:e4:c3: 87:27:9d:9a:de:5d:2d:37:51:76:e1:07:1b:26:8b:f0:8b:ac: 0d:1d:5c:3e:e1:34:b8:72:d9:f0:51:a6:9f:89:4f:af:54:9d: be:71:05:5a:86:fe:0d:d1:9c:09:9a:2a:e3:46:50:fd:fc:e6: 0b:64:54:01:b3:4d:3b:a2:ea:b8:0d:17:d3:bc:fa:6e:e0:b4: 4b:82:2d:57:9f:2e:a4:13:e6:a1:4a:70:21:ad:b4:27:7e:27: 9d:45:59:94:a7:33:ce:df:26:87:f7:82:ae:b9:07:ae:e5:b4: dd:3b:33:01:8f:ac:24:06:89:59:51:ea:93:2f:f6:ed:19:83: 21:ff:48:15:b1:55:07:73:c6:5b:9c:3f:28:a9:c2:24:1f:fc: e3:b7:ee:85:97:6f:b7:c7:77:12:72:7d:74:79:f6:f1:55:30: f8:4b:f3:78:45:ab:ca:24:ff:f1:73:a7:1f:a2:f6:f9:9a:17: e7:c4:39:63:73:3e:4d:d6:91:82:43:88:65:c6:f9:97:5b:64: 29:65:f2:d9:11:08:57:38:e1:54:76:6c:6e:b9:2c:fe:2e:6f: 9f:fd:e1:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE64C4+Cz3asWGm07IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhYWVkOTAtY2U2OC00ZTIyLTg3MGItN2I3ZDg2ZTk0 OWUwMB4XDTI2MDgwMzIzMDAyMloXDTI2MDgwNjIzMDAwMFowLzEtMCsGA1UEAxMk ODRiZjdlNGItNDZhOS00MzZjLWFkODYtYjYwZTZhMmJhMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4BPF4tRbTos/rSfDzOExEilQS6pVy4UUoCt 7P8fa52lOLrKZqTIjIKk0CkZ8HT5xTxAGgNHAWds+Nkzbt5ZbGuh3ZhUISz8LKVJ bBeFMGqM9/5Sfel2sh4o4+NVneshWWm4PnCWy9rKn+EAnJg8a5lk1X5ZCxWHGGQT 2llq2Yqq1A5EtBH2MFd34x49x78d3/T5uYeU1jVbM6abBclLopBD5G+GQ1P4eBDw W8zmsVMojYg+ZEIXDbrC0q/iTvq8zmKxW7tNjqrG0XW7UhC7FY3pvXUgmx1ZO9nK 2rxEsYa4+sJ5wOGRieJFsFCuS2+YhXtlcaA9A54o6wtX0jHSTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA7Snegohjnp2ilhgPBh+I/adpZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFh ZWQ5MC1jZTY4LTRlMjItODcwYi03YjdkODZlOTQ5ZTAvY2ZhYWVkOTAtY2U2OC00 ZTIyLTg3MGItN2I3ZDg2ZTk0OWUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2ZhYWVkOTAtY2U2OC00ZTIyLTg3 MGItN2I3ZDg2ZTk0OWUwL2NmYWFlZDkwLWNlNjgtNGUyMi04NzBiLTdiN2Q4NmU5 NDllMC5jcmwwHwYDVR0jBBgwFoAUQ1d28aCRQRKJ6nwwWq3ggQNAXicwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFhZWQ5MC1jZTY4LTRlMjItODcwYi03Yjdk ODZlOTQ5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCRM5zwmBjsCXDzkeOquRe w+SztgxjPFvagc9T+SRmsIPS5MOHJ52a3l0tN1F24QcbJovwi6wNHVw+4TS4ctnw UaafiU+vVJ2+cQVahv4N0ZwJmirjRlD9/OYLZFQBs007ouq4DRfTvPpu4LRLgi1X ny6kE+ahSnAhrbQnfiedRVmUpzPO3yaH94KuuQeu5bTdOzMBj6wkBolZUeqTL/bt GYMh/0gVsVUHc8ZbnD8oqcIkH/zjt+6Fl2+3x3cScn10efbxVTD4S/N4RavKJP/x c6cfovb5mhfnxDljcz5N1pGCQ4hlxvmXW2QpZfLZEQhXOOFUdmxuuSz+Lm+f/eGI -----END CERTIFICATE-----Generated at Tue Aug 4 13:39:32 2026 by rpki-client