$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft File: cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft (raw, json) Hash identifier: tKeQnIPD0n2sF7eHoEm/bHUFLwDU3WW/iLm7aVQEB7c= Subject key identifier: 23:66:EA:63:63:AE:12:2B:51:D6:2E:A4:63:30:C4:5C:D9:CA:75:B5 Authority key identifier: 6D:55:02:5F:28:0E:73:C8:BD:52:3A:BB:E9:F6:0E:E6:68:22:5E:7F Certificate issuer: /CN=cfdd40eb-4c1a-4ba5-8446-676f83258a67 Certificate serial: 010D0C9F4328584D4AE89E3D0D87ECAA9F453480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft Manifest number: 010D0C9F4328584073A83C976385A31DD6B26315 Signing time: Thu 26 Mar 2026 04:00:03 +0000 Manifest this update: Thu 26 Mar 2026 04:00:03 +0000 Manifest next update: Sat 28 Mar 2026 04:00:00 +0000 Files and hashes: 1: 353cd56e-846c-3567-b16b-b7323fe728cd.roa (hash: 1IspQ622KhrHsJt1pJC3qheFC2J8yKmW+PAUdXA/WX8=) 2: cfdd40eb-4c1a-4ba5-8446-676f83258a67.crl (hash: t3tgfRaQ+kbB5hkME1FTjT+VjVQcx1JmzTQeurIpvNI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:e8:9e:3d:0d:87:ec:aa:9f:45:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfdd40eb-4c1a-4ba5-8446-676f83258a67 Validity Not Before: Mar 26 04:00:03 2026 GMT Not After : Mar 28 04:00:00 2026 GMT Subject: CN=cfbd9f42-7e17-42e8-b315-cc959552c64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:55:9a:7b:99:b1:45:39:6a:16:a1:79:0c: 23:b8:22:4b:0f:7b:d6:ef:e0:bd:48:4c:84:ae:e5: 5b:d0:05:4f:0c:b7:6f:6f:77:65:0e:7d:bd:6f:a9: 36:80:52:6c:0f:8c:7e:89:ef:6a:13:27:c5:e0:a3: ea:3f:d9:1b:62:a8:a6:e2:0d:02:94:5a:d2:f6:b1: 63:1d:bd:91:92:82:6f:0e:7e:aa:cd:7a:d6:89:5b: 3d:be:cc:22:08:a2:f8:99:32:b0:01:c6:68:5e:38: 63:ec:db:e1:89:81:4c:b2:9c:c7:75:5c:fc:d9:18: 4b:90:62:f9:74:e9:8a:ce:4e:a6:86:1d:16:0d:b2: c1:af:37:9d:d3:5d:45:19:c7:4d:75:2e:0b:68:88: b5:42:2f:e7:c2:b9:db:eb:04:7c:ce:c9:19:61:fb: 92:15:e6:7b:49:fc:c7:6d:bf:e8:ce:66:e1:74:0d: 81:25:55:aa:0b:d5:be:39:71:85:fb:c8:a8:3b:d2: 3b:3e:7c:fe:1b:c9:eb:d0:e9:5c:8c:31:fe:27:80: 8c:a6:3b:b1:07:7f:58:8c:ef:7f:5f:76:16:ad:df: 83:f8:1e:28:56:76:92:59:de:74:ae:4f:c5:1b:d2: 41:f3:1c:9e:b7:d3:8a:59:d8:83:fe:16:9b:11:88: 7e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:66:EA:63:63:AE:12:2B:51:D6:2E:A4:63:30:C4:5C:D9:CA:75:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.crl X509v3 Authority Key Identifier: keyid:6D:55:02:5F:28:0E:73:C8:BD:52:3A:BB:E9:F6:0E:E6:68:22:5E:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a6:3e:76:09:7a:26:25:25:9f:91:2c:8e:e1:bc:f5:78:5a: cf:9b:7f:9f:b7:83:38:39:66:d3:f2:7d:5f:d9:c1:a1:89:00: 85:6b:32:07:eb:75:80:95:5c:31:7e:89:a9:02:57:1f:3f:9f: 98:ad:67:fe:e4:69:06:9a:d8:b9:57:b1:52:32:d0:bd:ad:af: 94:28:09:55:c7:8f:bc:ff:19:43:b9:3e:67:00:a3:4e:cf:28: fe:15:e3:83:f5:da:05:b5:52:d1:b5:d2:1d:8b:f9:82:95:21: ea:bc:36:8e:8c:3d:58:ff:dc:1d:11:75:4d:c1:47:26:42:c0: 43:de:9c:49:25:58:0a:bd:94:66:4e:af:bb:3d:b2:87:76:a7: d1:a7:71:ab:4b:a6:14:5a:79:23:81:be:ea:ca:99:2e:e8:07: 07:df:d0:95:bf:29:b2:10:c2:1d:d5:2e:77:b7:00:bc:43:79: 8c:49:1e:fb:9e:48:b1:5f:ef:bc:16:41:b8:63:96:84:ee:47: 4e:f0:ab:b8:e0:59:2c:e8:0d:d2:8e:06:79:b8:fe:53:b8:79: 4e:d1:37:b3:4d:46:1b:26:43:4d:3b:72:2e:13:90:45:76:44: 58:16:b1:c3:c6:ea:7d:a8:5f:67:d2:20:b1:5b:50:c3:3e:58: da:91:ac:bf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1K6J49DYfsqp9FNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZkZDQwZWItNGMxYS00YmE1LTg0NDYtNjc2ZjgzMjU4 YTY3MB4XDTI2MDMyNjA0MDAwM1oXDTI2MDMyODA0MDAwMFowLzEtMCsGA1UEAxMk Y2ZiZDlmNDItN2UxNy00MmU4LWIzMTUtY2M5NTk1NTJjNjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLFVmnuZsUU5ahaheQwjuCJLD3vW7+C9SEyE ruVb0AVPDLdvb3dlDn29b6k2gFJsD4x+ie9qEyfF4KPqP9kbYqim4g0ClFrS9rFj Hb2RkoJvDn6qzXrWiVs9vswiCKL4mTKwAcZoXjhj7NvhiYFMspzHdVz82RhLkGL5 dOmKzk6mhh0WDbLBrzed011FGcdNdS4LaIi1Qi/nwrnb6wR8zskZYfuSFeZ7SfzH bb/ozmbhdA2BJVWqC9W+OXGF+8ioO9I7Pnz+G8nr0OlcjDH+J4CMpjuxB39YjO9/ X3YWrd+D+B4oVnaSWd50rk/FG9JB8xyet9OKWdiD/habEYh+twIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCNm6mNjrhIrUdYupGMwxFzZynW1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmRk NDBlYi00YzFhLTRiYTUtODQ0Ni02NzZmODMyNThhNjcvY2ZkZDQwZWItNGMxYS00 YmE1LTg0NDYtNjc2ZjgzMjU4YTY3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZkZDQwZWItNGMxYS00YmE1LTg0 NDYtNjc2ZjgzMjU4YTY3L2NmZGQ0MGViLTRjMWEtNGJhNS04NDQ2LTY3NmY4MzI1 OGE2Ny5jcmwwHwYDVR0jBBgwFoAUbVUCXygOc8i9Ujq76fYO5mgiXn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmRkNDBlYi00YzFhLTRiYTUtODQ0Ni02NzZm ODMyNThhNjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfpj52CXomJSWfkSyO4bz1 eFrPm3+ft4M4OWbT8n1f2cGhiQCFazIH63WAlVwxfompAlcfP5+YrWf+5GkGmti5 V7FSMtC9ra+UKAlVx4+8/xlDuT5nAKNOzyj+FeOD9doFtVLRtdIdi/mClSHqvDaO jD1Y/9wdEXVNwUcmQsBD3pxJJVgKvZRmTq+7PbKHdqfRp3GrS6YUWnkjgb7qypku 6AcH39CVvymyEMId1S53twC8Q3mMSR77nkixX++8FkG4Y5aE7kdO8Ku44Fks6A3S jgZ5uP5TuHlO0TezTUYbJkNNO3IuE5BFdkRYFrHDxup9qF9n0iCxW1DDPljakay/ -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:59 2026 by rpki-client