$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft File: cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft (raw, json) Hash identifier: LyVCYPvB1Mlfj5FU9y8atEQnfzWscq+Ux2jTmauT9lU= Subject key identifier: 03:87:A8:D1:30:39:36:62:A0:33:05:9B:BC:3F:DD:50:F7:97:57:1E Authority key identifier: 2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 Certificate issuer: /CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Certificate serial: 010D0C9F4328584E98FCB4BFBC8C9BE4A22BBAA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft Manifest number: 010D0C9F4328584C72DC04738F61ECAAC4343F4A Signing time: Thu 23 Jul 2026 20:00:22 +0000 Manifest this update: Thu 23 Jul 2026 20:00:22 +0000 Manifest next update: Sat 25 Jul 2026 20:00:00 +0000 Files and hashes: 1: cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl (hash: jIymy889PP1QuV0AiLJWdDtVci3/C+Jw4cg24QOcUEs=) 2: dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa (hash: jZ5TqI8d4HwAlrFUv6jAYt1ywQaUjmorNeg9q+eyKbY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:98:fc:b4:bf:bc:8c:9b:e4:a2:2b:ba:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Validity Not Before: Jul 23 20:00:22 2026 GMT Not After : Jul 25 20:00:00 2026 GMT Subject: CN=e1bf7491-c799-444a-84dc-8ab6702d8499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:32:d9:18:ab:6c:0d:c6:ed:34:e5:b0:d2:c4: 54:46:ec:66:0b:c1:22:ff:c1:db:81:bf:e4:c5:32: b1:3b:39:06:39:3c:e8:f7:5f:64:01:af:18:1e:42: 28:19:a6:d3:7b:54:1f:4a:e6:9b:bb:14:68:ec:62: 3f:9b:56:9e:b6:7a:14:dd:46:96:c4:bf:92:2e:de: 19:e4:82:29:5c:9f:78:4e:a7:88:b9:d7:df:25:59: c1:bd:5c:d2:08:22:dc:71:45:c1:a7:3d:0f:59:fb: 76:c1:72:4d:71:df:04:47:0c:66:9a:e7:b1:89:aa: 5f:41:aa:ce:9a:ae:35:b7:e9:17:01:4c:9c:d7:c5: ad:5f:51:6d:6b:3e:2c:1e:d6:d2:71:ad:b6:3f:35: ef:d6:e5:16:44:13:41:06:fe:b4:1e:04:cb:ce:31: 60:a6:ce:b6:a4:22:63:9a:49:c2:c5:8f:ab:af:b1: da:c7:d4:60:c1:da:4b:78:a5:91:ec:7e:6c:48:3e: 3f:44:19:05:8e:bb:3c:27:4a:d0:2e:4b:2b:65:56: b3:b6:86:9f:c5:87:7f:7a:fb:fb:8a:1f:2c:81:2f: fa:0e:1a:a7:97:80:a7:59:53:15:ef:c5:28:25:25: af:c6:ef:7f:bf:a5:03:ad:dd:b4:1c:eb:d7:d2:6e: 98:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:87:A8:D1:30:39:36:62:A0:33:05:9B:BC:3F:DD:50:F7:97:57:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl X509v3 Authority Key Identifier: keyid:2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:78:df:e7:21:1a:78:67:21:0a:c1:cc:8b:d2:c5:0d:4c:6e: c8:d0:c5:28:fa:c5:c1:b3:9e:ed:ae:5a:d8:0f:b1:bf:15:89: cf:37:ac:eb:f0:42:1b:40:6c:7b:5b:7b:7b:21:31:27:b7:66: e4:1a:63:3c:b7:0c:ba:24:96:fa:13:9f:ae:15:0b:55:a3:b5: 40:d2:2e:03:72:6f:a0:3a:f9:b8:49:bc:86:8e:73:83:fb:7b: a4:8c:1b:e3:f6:12:98:98:47:ff:4d:3b:be:86:1c:fe:69:cc: 6e:ac:4a:b8:6b:0e:c4:60:91:58:8f:41:26:11:6d:b5:02:e1: c6:f0:c2:d5:ac:bb:48:46:df:9a:e0:f5:84:57:7b:c6:84:16: c4:7d:28:f1:c4:27:cc:7d:c7:73:08:71:54:c7:58:2f:64:54: 22:2e:1c:31:3d:bf:b5:d2:13:97:27:c9:42:cf:2c:20:2f:71: 71:ff:30:cb:cb:6e:8c:0b:0f:7f:19:22:e6:0f:d2:91:cc:2b: 96:49:41:33:f4:70:1f:ce:d5:14:c3:dc:01:67:69:c0:83:b1: c4:df:58:2e:ae:ec:d5:d5:b8:1f:52:21:7b:da:ad:08:42:dc: 54:52:8f:0c:71:23:5e:49:df:ca:41:b5:08:bc:72:dd:57:82: e6:ac:e8:ea -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6Y/LS/vIyb5KIruqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhZjk1ZjEtOGQwOC00ODg3LWFlMjItNTQ0YTBkMmIz MTZjMB4XDTI2MDcyMzIwMDAyMloXDTI2MDcyNTIwMDAwMFowLzEtMCsGA1UEAxMk ZTFiZjc0OTEtYzc5OS00NDRhLTg0ZGMtOGFiNjcwMmQ4NDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DLZGKtsDcbtNOWw0sRURuxmC8Ei/8Hbgb/k xTKxOzkGOTzo919kAa8YHkIoGabTe1QfSuabuxRo7GI/m1aetnoU3UaWxL+SLt4Z 5IIpXJ94TqeIudffJVnBvVzSCCLccUXBpz0PWft2wXJNcd8ERwxmmuexiapfQarO mq41t+kXAUyc18WtX1Ftaz4sHtbSca22PzXv1uUWRBNBBv60HgTLzjFgps62pCJj mknCxY+rr7Hax9RgwdpLeKWR7H5sSD4/RBkFjrs8J0rQLksrZVaztoafxYd/evv7 ih8sgS/6Dhqnl4CnWVMV78UoJSWvxu9/v6UDrd20HOvX0m6YJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAOHqNEwOTZioDMFm7w/3VD3l1ceMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFm OTVmMS04ZDA4LTQ4ODctYWUyMi01NDRhMGQyYjMxNmMvY2ZhZjk1ZjEtOGQwOC00 ODg3LWFlMjItNTQ0YTBkMmIzMTZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2ZhZjk1ZjEtOGQwOC00ODg3LWFl MjItNTQ0YTBkMmIzMTZjL2NmYWY5NWYxLThkMDgtNDg4Ny1hZTIyLTU0NGEwZDJi MzE2Yy5jcmwwHwYDVR0jBBgwFoAULdnKfHriUiZs4BntkptikWoqMUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFmOTVmMS04ZDA4LTQ4ODctYWUyMi01NDRh MGQyYjMxNmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAueN/nIRp4ZyEKwcyL0sUN TG7I0MUo+sXBs57trlrYD7G/FYnPN6zr8EIbQGx7W3t7ITEnt2bkGmM8twy6JJb6 E5+uFQtVo7VA0i4Dcm+gOvm4SbyGjnOD+3ukjBvj9hKYmEf/TTu+hhz+acxurEq4 aw7EYJFYj0EmEW21AuHG8MLVrLtIRt+a4PWEV3vGhBbEfSjxxCfMfcdzCHFUx1gv ZFQiLhwxPb+10hOXJ8lCzywgL3Fx/zDLy26MCw9/GSLmD9KRzCuWSUEz9HAfztUU w9wBZ2nAg7HE31guruzV1bgfUiF72q0IQtxUUo8McSNeSd/KQbUIvHLdV4LmrOjq -----END CERTIFICATE-----Generated at Thu Jul 23 22:55:59 2026 by rpki-client