$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft File: dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft (raw, json) Hash identifier: rNAafW0IjDjTgAxdzx5lOQpiK2sTloxtCjHSQ5LscAI= Subject key identifier: 90:F7:AC:A8:6C:AB:1E:44:04:2A:1B:0F:C8:93:90:D3:6A:2A:C3:66 Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF Certificate issuer: /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Certificate serial: 010D0C9F4328584DCF2BC721BAB5F5F13B49F080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft Manifest number: 010D0C9F4328584073A84684C5F38B644F883C02 Signing time: Tue 12 May 2026 13:02:03 +0000 Manifest this update: Tue 12 May 2026 13:02:03 +0000 Manifest next update: Fri 15 May 2026 08:00:00 +0000 Files and hashes: 1: 28bf01a1-e0a0-3223-944c-d3b6117da09c.roa (hash: WAdyqGWZ3KL7CiqBAgu1tlv8ftHWN2Z+ghxqnl4NSnc=) 2: 3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa (hash: 4U2guniQ7UvRkUfxsdJCwes6LI51jHNNilm1bCafNkI=) 3: 5e0eab60-d72b-3d6b-a734-f57f01a45b0f.roa (hash: LjpuO2xpIGF92wG9MbWbkz4DJ/AWdZue7Ga161a09G0=) 4: c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa (hash: /ecQeRSowX4X0vY3Tjz9UBRjTucjLZz5gMJeWD+QCXU=) 5: dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl (hash: 7qFZxMPG5P6YHlPAN1JDGGWK5rpxyJ8ckPhOhtj9K+s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:c7:21:ba:b5:f5:f1:3b:49:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Validity Not Before: May 12 13:02:03 2026 GMT Not After : May 15 08:00:00 2026 GMT Subject: CN=3ebd332c-5117-488e-9f6c-d28e9c4bf4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d6:1f:bc:80:25:a7:ca:65:23:b0:41:4c:9d: 2f:e0:ad:47:05:54:09:db:ab:28:f9:71:84:cc:57: 93:38:ec:2f:bf:f6:e5:48:89:b8:6b:4a:c5:71:d5: a3:42:29:dc:ac:5d:b6:99:95:df:9c:af:77:f3:2b: ea:59:0a:0a:5b:1a:93:6a:9c:0f:63:0e:2a:a5:78: 45:64:a4:97:eb:f9:7b:7b:4c:2e:5e:1d:dd:7a:08: cc:e4:da:2c:85:d8:c4:27:93:19:a7:ae:6c:47:7d: 2b:79:2a:41:26:08:ed:8b:87:fa:53:c5:e9:8b:4e: 65:3a:e8:b7:dd:34:a9:67:b8:23:79:58:a6:be:d5: b3:ab:9f:cf:e3:86:fe:7c:59:7f:09:45:1c:53:d1: 3b:2e:45:84:52:63:9c:74:40:22:d6:98:57:70:c1: fa:c7:7f:62:c1:d5:1d:ba:64:06:7a:27:e8:3e:18: d2:bf:ec:37:ee:40:64:02:fa:17:62:ff:d1:a6:26: 11:5c:51:f7:f5:06:02:86:b6:f5:e0:88:50:a7:73: 24:21:27:77:57:7b:b2:88:c4:06:cf:0f:33:f9:4f: 22:ba:29:3e:ff:4e:c5:7c:21:8f:7d:98:33:6e:1e: 6c:67:0f:79:96:82:71:aa:41:19:05:7c:08:68:7c: d6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F7:AC:A8:6C:AB:1E:44:04:2A:1B:0F:C8:93:90:D3:6A:2A:C3:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl X509v3 Authority Key Identifier: keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:95:e3:0c:37:87:9b:94:f6:70:0c:60:3d:95:18:fe:fc:88: 69:f7:ca:32:cb:14:9b:6c:2f:5c:b8:f8:0b:1d:fd:28:57:f8: a7:7e:3a:a6:5f:3d:d6:ec:35:73:71:dc:f5:ed:e6:8b:ee:5b: 3f:c4:50:81:76:c9:00:88:14:bb:1c:11:37:2b:37:f7:8f:d3: ee:64:c8:0e:3b:fc:0d:b2:63:2b:35:f1:f7:69:c5:57:85:b2: 9d:2f:23:b3:f9:6d:48:88:7c:0b:81:63:26:a8:ea:4a:6e:1b: 8d:88:03:63:2e:0c:e7:4f:a0:d7:cf:6e:52:ff:d4:f3:18:43: fa:38:43:a8:e8:d0:69:85:43:03:d0:c2:15:96:86:c5:bb:2e: e0:3d:5c:2c:7b:78:5e:3f:d8:43:94:1c:bc:55:f8:d1:5a:c1: bf:f5:e2:ea:b4:fa:ab:d7:1e:9d:f6:bf:d0:80:87:33:fd:0a: 16:08:9f:56:7f:45:71:ea:e0:44:91:65:49:e0:ef:2f:63:15: 2d:d8:a6:4c:b3:07:76:8a:4a:f2:9c:96:27:d4:8c:26:61:8a: 8b:0f:7d:5e:d5:44:2b:76:43:f3:79:7c:44:a7:e7:9f:fe:de: 88:b8:ce:04:49:13:45:8c:f2:0a:b8:fb:e7:96:92:41:7b:6f: d4:71:86:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PK8churX18TtJ8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmMWEwNWYtZWZhYy00ZWYzLThiMjMtNWZkYmUzY2I0 ZTg4MB4XDTI2MDUxMjEzMDIwM1oXDTI2MDUxNTA4MDAwMFowLzEtMCsGA1UEAxMk M2ViZDMzMmMtNTExNy00ODhlLTlmNmMtZDI4ZTljNGJmNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdYfvIAlp8plI7BBTJ0v4K1HBVQJ26so+XGE zFeTOOwvv/blSIm4a0rFcdWjQincrF22mZXfnK938yvqWQoKWxqTapwPYw4qpXhF ZKSX6/l7e0wuXh3degjM5NoshdjEJ5MZp65sR30reSpBJgjti4f6U8Xpi05lOui3 3TSpZ7gjeVimvtWzq5/P44b+fFl/CUUcU9E7LkWEUmOcdEAi1phXcMH6x39iwdUd umQGeifoPhjSv+w37kBkAvoXYv/RpiYRXFH39QYChrb14IhQp3MkISd3V3uyiMQG zw8z+U8iuik+/07FfCGPfZgzbh5sZw95loJxqkEZBXwIaHzW6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJD3rKhsqx5EBCobD8iTkNNqKsNmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Yx YTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRiZTNjYjRlODgvZGNmMWEwNWYtZWZhYy00 ZWYzLThiMjMtNWZkYmUzY2I0ZTg4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmMWEwNWYtZWZhYy00ZWYzLThi MjMtNWZkYmUzY2I0ZTg4L2RjZjFhMDVmLWVmYWMtNGVmMy04YjIzLTVmZGJlM2Ni NGU4OC5jcmwwHwYDVR0jBBgwFoAUMR6T8lfYI525l+itPI4ghmPqWe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2YxYTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRi ZTNjYjRlODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhleMMN4eblPZwDGA9lRj+ /Ihp98oyyxSbbC9cuPgLHf0oV/infjqmXz3W7DVzcdz17eaL7ls/xFCBdskAiBS7 HBE3Kzf3j9PuZMgOO/wNsmMrNfH3acVXhbKdLyOz+W1IiHwLgWMmqOpKbhuNiANj LgznT6DXz25S/9TzGEP6OEOo6NBphUMD0MIVlobFuy7gPVwse3heP9hDlBy8VfjR WsG/9eLqtPqr1x6d9r/QgIcz/QoWCJ9Wf0Vx6uBEkWVJ4O8vYxUt2KZMswd2ikry nJYn1IwmYYqLD31e1UQrdkPzeXxEp+ef/t6IuM4ESRNFjPIKuPvnlpJBe2/UcYZa -----END CERTIFICATE-----Generated at Wed May 13 00:52:53 2026 by rpki-client