$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft File: cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft (raw, json) Hash identifier: Du52EnGk034CojFQQxihSLNEwPFRiSKCr7pRyqfT8nE= Subject key identifier: D2:95:2A:3A:CC:15:1E:FD:82:AF:95:5D:D6:DE:F8:3D:D3:72:D7:30 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584D4965821106F775D8EEEBE640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft Manifest number: 010D0C9F4328584073A85AE22C63106D5EA591E5 Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Sat 28 Mar 2026 15:00:00 +0000 Files and hashes: 1: 2b6966be-0a30-3097-a99a-d635fb439733.roa (hash: PtQpLkd7izBn7jt+/S1Dj9CWGZ9Ata9qJSI8mWb08IM=) 2: 3cd4923c-6128-376c-8446-baffa366fd39.roa (hash: 8Bd9k9djiokG90rQblk528orlzvLf43rU9dKSMfv+Hs=) 3: 46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa (hash: 2Dcidem3+aRRmCa43eIq2MK/58ALprwogzurGyJcN5w=) 4: 54b09de8-f12c-3e32-8666-1505aecbce63.roa (hash: bkVgokaKmVKaJg+yS37Fwcu6bL6z8gwS1n1tMpNJt34=) 5: 90a1c137-b937-3cb9-9a28-03dfcc73c2cb.roa (hash: WUBU/ThKULXfCKWi03dpJF5n9nlLJWDc4CSun4+j3ic=) 6: a0241a87-ee63-3ca4-8762-01bd022707da.roa (hash: 433t8ufeOVTQy6Y9kgzshh1zj8Lu3LefbbVzPe923To=) 7: cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl (hash: DfsAcP1D8StWbCjy0vScrhrNJhZNx35ZLep7Wscy3bc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:82:11:06:f7:75:d8:ee:eb:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 28 15:00:00 2026 GMT Subject: CN=4777a332-8d1f-41ca-a6e6-0ced829d90a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:03:e9:75:49:54:66:b3:8c:ec:2d:15:bb:38: 29:b9:c8:67:db:9e:11:f2:e8:46:7d:57:b6:5b:60: 9b:2f:c3:eb:8f:5d:e4:62:9c:84:90:51:b3:e0:41: 51:31:8f:d1:b3:2b:22:a2:3a:12:c6:68:a3:0e:4e: f5:ea:cb:af:61:0c:18:a9:17:3e:ca:e0:2a:70:a5: ed:f3:a4:b1:c8:1a:02:fb:d4:80:33:d6:f3:5c:1a: b8:7f:4d:ba:fc:4d:14:e9:de:f7:8c:73:9f:96:79: c3:ac:96:72:35:6f:62:49:b1:af:bb:f4:ab:78:7d: af:a4:ef:2f:46:16:d7:ff:34:c1:0f:7b:ee:f3:6f: 2e:a2:6c:44:ac:55:f7:b0:75:27:9c:a0:06:31:6d: 38:0d:7e:69:72:d2:62:5d:4c:c3:72:15:19:8c:fe: cd:ae:ba:db:1a:a4:e8:36:e3:15:81:3d:fc:76:94: f9:87:ec:37:a3:5c:f5:51:47:1e:5e:55:2a:44:64: f3:43:03:ac:fa:24:42:53:74:0a:f4:16:42:c9:d5: 87:70:59:eb:15:b8:77:66:42:05:b5:3e:f3:98:cf: 13:16:a9:17:f6:6d:be:03:d4:91:15:37:fc:2f:1a: 89:6f:73:03:f9:33:94:fb:17:99:20:b2:24:96:3c: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:95:2A:3A:CC:15:1E:FD:82:AF:95:5D:D6:DE:F8:3D:D3:72:D7:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:37:9f:9c:52:7b:96:61:58:7c:10:35:8d:4f:8e:08:1d:b7: c3:96:69:90:b8:52:a1:47:fd:55:f6:bf:18:9e:d6:2e:fa:5d: 92:fd:ed:66:eb:dd:9a:68:e2:f3:1a:e0:7b:cf:64:7d:8e:8c: 41:92:22:9b:b0:5f:b2:11:e8:bd:54:ae:a5:9a:17:4e:af:55: 69:4d:c2:e2:26:4d:b8:c0:3f:92:90:88:24:a9:d2:ee:a0:ec: 82:0e:92:75:5b:e3:17:f8:76:48:5b:fc:0e:53:a6:eb:85:1b: fd:ad:c4:7e:71:45:71:43:79:df:6b:dd:e7:63:63:a5:47:bd: 3d:74:11:9d:96:28:3e:24:d1:6c:cb:25:8c:c4:71:f1:8a:24: c6:17:4d:94:2c:db:c3:2c:85:4c:21:01:a9:84:c1:25:37:ce: a4:ec:13:d3:8a:8b:69:9b:ce:6a:d1:3f:8f:bd:7a:17:30:97: 0c:05:7e:60:df:73:2f:95:4e:73:9b:d1:49:f9:9f:88:a3:35: 2d:af:52:0a:7d:b3:af:ce:a4:75:37:88:4d:60:00:cf:b3:a9: a2:86:34:0b:2f:15:dc:44:dc:f6:66:cd:71:d6:c6:f8:d0:8e: 05:f4:28:02:fb:02:c5:7e:1c:6e:1b:9a:f4:49:96:70:45:f5: ea:8b:b6:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZYIRBvd12O7r5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyODE1MDAwMFowLzEtMCsGA1UEAxMk NDc3N2EzMzItOGQxZi00MWNhLWE2ZTYtMGNlZDgyOWQ5MGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQPpdUlUZrOM7C0Vuzgpuchn254R8uhGfVe2 W2CbL8Prj13kYpyEkFGz4EFRMY/RsysiojoSxmijDk716suvYQwYqRc+yuAqcKXt 86SxyBoC+9SAM9bzXBq4f026/E0U6d73jHOflnnDrJZyNW9iSbGvu/SreH2vpO8v RhbX/zTBD3vu828uomxErFX3sHUnnKAGMW04DX5pctJiXUzDchUZjP7NrrrbGqTo NuMVgT38dpT5h+w3o1z1UUceXlUqRGTzQwOs+iRCU3QK9BZCydWHcFnrFbh3ZkIF tT7zmM8TFqkX9m2+A9SRFTf8LxqJb3MD+TOU+xeZILIkljzipQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNKVKjrMFR79gq+VXdbe+D3TctcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvY2YwOWUxOTEtMWNiNy00 NjUwLTk1ZDYtNGUyNGMwYWVjNjlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJN5+cUnuWYVh8EDWNT44I HbfDlmmQuFKhR/1V9r8YntYu+l2S/e1m692aaOLzGuB7z2R9joxBkiKbsF+yEei9 VK6lmhdOr1VpTcLiJk24wD+SkIgkqdLuoOyCDpJ1W+MX+HZIW/wOU6brhRv9rcR+ cUVxQ3nfa93nY2OlR709dBGdlig+JNFsyyWMxHHxiiTGF02ULNvDLIVMIQGphMEl N86k7BPTiotpm85q0T+PvXoXMJcMBX5g33MvlU5zm9FJ+Z+IozUtr1IKfbOvzqR1 N4hNYADPs6mihjQLLxXcRNz2Zs1x1sb40I4F9CgC+wLFfhxuG5r0SZZwRfXqi7bn -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:06 2026 by rpki-client