$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft File: cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft (raw, json) Hash identifier: SmrBTePgNli8QryyyaRgdzfELxibPDvOxT1Kk7pouUc= Subject key identifier: 35:1E:34:8C:9E:44:9D:AC:31:9B:FC:F9:1D:E2:DA:83:3B:80:83:81 Authority key identifier: 8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 Certificate issuer: /CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Certificate serial: 010D0C9F4328584D4F18A4C5834DB3F9EC148380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft Manifest number: 010D0C9F432858453FC397D9677135A132B028F2 Signing time: Fri 27 Mar 2026 16:00:03 +0000 Manifest this update: Fri 27 Mar 2026 16:00:03 +0000 Manifest next update: Sun 29 Mar 2026 16:00:00 +0000 Files and hashes: 1: 04e0c440-3c28-3d4a-b869-4387c175a350.roa (hash: k331d7b3lyH9e3xnqHvg4H0RjMBl0TmooAmLbnq9fpE=) 2: 31f547f0-5e98-3a6f-a158-ea22001e9fa7.roa (hash: H60+nf9tKMJclpbqlEG/5KrD2JQbNP4FJ0hVu/T/Pqo=) 3: 4fcf8fdb-2990-369f-8239-fd79baf2050a.roa (hash: YadptNqtlrXsWFghXh6ozUPTwzivxrw4T2vvJ5wqo7s=) 4: 659829db-6e05-3656-8a31-0b396982219d.roa (hash: Luw8E48e+Zr8X5Tov/j0RaDYskWamnkblc+zvJdBxQQ=) 5: b5ae4ab1-c64f-3049-b683-ceef08c95978.roa (hash: 7nuk/hHYMjq8/PLiOc4qhAPsFZKgTXwKKCZph+ENuhY=) 6: cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl (hash: ePB3XgIMAnlWp/InpxpYSpj9JB5uqbQEURTUUmAOfFs=) 7: d271dde0-2fa3-31de-8ce3-cc167fb544d6.roa (hash: MWcQlpiTlLkgGJzp4uLNDhK8TYc1Nn/Tp5GtNx3FSNQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:18:a4:c5:83:4d:b3:f9:ec:14:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Validity Not Before: Mar 27 16:00:03 2026 GMT Not After : Mar 29 16:00:00 2026 GMT Subject: CN=71c4c397-8adf-47be-9e46-f8a08ac1a457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e5:ba:09:e9:90:6e:3d:92:d1:94:bc:9b:75: 11:8e:99:df:5b:ed:e3:40:d5:5b:f4:73:e7:87:1e: 4f:c0:1f:e2:36:e2:6e:e5:ef:3f:14:95:03:01:fe: 73:75:7b:07:c9:cc:6e:5a:0e:3b:2a:ff:61:76:88: 90:27:df:96:3c:9e:42:3d:1e:2f:7a:74:2b:a4:b1: 8a:91:19:ef:a2:de:2e:9a:90:01:85:a8:77:e8:ea: 22:71:14:57:58:de:fc:ba:1a:85:26:61:0a:1e:ea: 5a:5d:a6:4d:e4:e8:2f:4d:45:19:be:33:00:9b:b1: c8:89:a6:04:f9:f1:1c:60:fc:96:b7:01:6a:7b:5f: 18:cb:c9:c2:9a:ea:da:81:c4:30:be:fc:7f:44:3d: 25:ad:79:e9:db:35:fc:0c:22:ac:b6:9c:ee:f2:d1: 1d:a6:0f:28:a2:5e:f4:6f:2f:ba:cc:6e:d9:6f:ab: bc:53:18:20:4f:e6:45:fa:0c:3a:89:d8:23:fb:30: 5c:f1:c8:c4:8b:46:4c:f5:5e:4d:db:65:61:d0:4d: b3:e1:ae:5b:70:99:3b:9d:41:36:fc:e0:09:f1:aa: b6:20:97:1a:35:36:b2:c8:d0:5f:e1:35:0a:70:c2: f4:f8:ed:5a:f4:ab:b0:23:7e:17:4b:f5:5f:ed:75: f5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1E:34:8C:9E:44:9D:AC:31:9B:FC:F9:1D:E2:DA:83:3B:80:83:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl X509v3 Authority Key Identifier: keyid:8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e0:96:12:42:08:c3:24:be:6a:cf:06:04:ae:52:d2:a6:00: c5:2e:92:65:e3:2a:41:48:ba:c1:fd:6f:97:9b:da:5e:74:9c: e6:b9:fb:ea:59:5e:9c:9f:af:fc:ad:b5:4e:90:7f:ee:f3:1b: 2f:e9:14:99:f8:71:47:b7:0e:c9:41:d6:b6:2c:5c:65:ff:0c: 7b:db:9b:17:08:47:23:02:f7:bc:8d:df:3d:2f:de:a9:e1:7f: 4c:ff:64:13:11:85:ab:6a:1b:0c:c2:48:57:e3:8d:10:57:eb: 0e:87:97:92:26:7c:83:51:b8:0b:4d:a8:e5:ec:62:c6:56:18: 83:e6:92:22:3b:51:49:be:9b:5d:80:d5:e2:f1:dd:32:ca:a7: 97:75:b3:dd:d4:c8:3e:50:6d:41:ad:71:4f:b7:28:87:80:98: e9:66:6d:d0:b5:5c:2e:d9:5e:16:97:9f:cb:e3:c2:d4:ad:20: bb:6c:a1:d0:32:e5:8a:7e:a7:73:e0:b3:8f:75:78:21:52:5c: 5e:b2:58:37:2a:3e:0b:a2:20:2a:cf:3d:0a:3e:e4:ad:98:21: 86:cb:70:c5:f4:0a:97:05:61:11:fd:ac:98:89:f7:de:89:59: 02:2c:29:23:bc:7e:a0:67:e7:a2:49:35:1b:32:07:c0:2a:92: 6e:9e:2d:60 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1PGKTFg02z+ewUg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwYThhOWItMzY0NS00MzhhLWE2ZTYtZTAzODViZmZj ZmVmMB4XDTI2MDMyNzE2MDAwM1oXDTI2MDMyOTE2MDAwMFowLzEtMCsGA1UEAxMk NzFjNGMzOTctOGFkZi00N2JlLTllNDYtZjhhMDhhYzFhNDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+W6CemQbj2S0ZS8m3URjpnfW+3jQNVb9HPn hx5PwB/iNuJu5e8/FJUDAf5zdXsHycxuWg47Kv9hdoiQJ9+WPJ5CPR4venQrpLGK kRnvot4umpABhah36OoicRRXWN78uhqFJmEKHupaXaZN5OgvTUUZvjMAm7HIiaYE +fEcYPyWtwFqe18Yy8nCmuragcQwvvx/RD0lrXnp2zX8DCKstpzu8tEdpg8ool70 by+6zG7Zb6u8UxggT+ZF+gw6idgj+zBc8cjEi0ZM9V5N22Vh0E2z4a5bcJk7nUE2 /OAJ8aq2IJcaNTayyNBf4TUKcML0+O1a9KuwI34XS/Vf7XX1wQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDUeNIyeRJ2sMZv8+R3i2oM7gIOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZjBh OGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4NWJmZmNmZWYvY2YwYThhOWItMzY0NS00 MzhhLWE2ZTYtZTAzODViZmZjZmVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2YwYThhOWItMzY0NS00MzhhLWE2 ZTYtZTAzODViZmZjZmVmL2NmMGE4YTliLTM2NDUtNDM4YS1hNmU2LWUwMzg1YmZm Y2ZlZi5jcmwwHwYDVR0jBBgwFoAUjCsazXsGgti+ixRdB44TtZA9XJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZjBhOGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4 NWJmZmNmZWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAk4JYSQgjDJL5qzwYErlLS pgDFLpJl4ypBSLrB/W+Xm9pedJzmufvqWV6cn6/8rbVOkH/u8xsv6RSZ+HFHtw7J Qda2LFxl/wx725sXCEcjAve8jd89L96p4X9M/2QTEYWrahsMwkhX440QV+sOh5eS JnyDUbgLTajl7GLGVhiD5pIiO1FJvptdgNXi8d0yyqeXdbPd1Mg+UG1BrXFPtyiH gJjpZm3QtVwu2V4Wl5/L48LUrSC7bKHQMuWKfqdz4LOPdXghUlxeslg3Kj4LoiAq zz0KPuStmCGGy3DF9AqXBWER/ayYiffeiVkCLCkjvH6gZ+eiSTUbMgfAKpJuni1g -----END CERTIFICATE-----Generated at Sat Mar 28 10:23:45 2026 by rpki-client