$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft File: cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft (raw, json) Hash identifier: ipk3gT9mnMCOoW1nvKDa7JNlKYYSB/VLBcOfhnbJQXI= Subject key identifier: 36:7E:62:93:55:85:3A:4D:D8:EC:38:1F:00:63:6F:B8:78:06:A5:F2 Authority key identifier: 2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 Certificate issuer: /CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Certificate serial: 010D0C9F4328584D49BED643A48EDDDF7F813800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft Manifest number: 010D0C9F4328584C72DC04738F61ECAAC4343ECE Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Fri 27 Mar 2026 18:00:00 +0000 Files and hashes: 1: cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl (hash: TvzOjHMv6YlQLSXGab2kITjTaFK419vwqZ9qiw5I9Us=) 2: dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa (hash: Mj5ln4gIVd7xGAAoCIqaJRS9uIrroPPBVUYOnngu8vA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d6:43:a4:8e:dd:df:7f:81:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 27 18:00:00 2026 GMT Subject: CN=3ea649b7-f53f-46ee-ab99-ad471c98a9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c1:40:57:60:3e:24:e4:d8:1f:06:13:45:1c: 98:26:f9:79:d1:41:96:f4:e3:67:3b:47:61:a9:06: c3:16:14:c1:26:54:1e:55:ed:2b:f5:5e:a8:c4:fc: e8:99:60:40:3f:87:1f:d5:a0:00:10:a8:c2:f2:d4: c8:df:ac:c8:5f:02:a5:d9:4a:a5:e2:41:be:14:27: d7:5d:f8:03:29:22:20:13:6e:4e:dd:d1:22:46:bf: db:af:64:4a:54:c4:78:92:1b:95:6f:6c:45:ad:68: 72:f3:86:26:2e:2c:c8:b2:35:67:09:01:00:85:9c: 5f:46:20:05:74:0c:bc:9e:ca:f6:3a:86:0a:d2:15: d3:da:db:97:4c:3c:c8:19:ac:ec:82:85:ef:29:d3: 3c:90:30:ab:29:87:5b:ea:3a:b9:84:c2:19:f5:71: 36:e7:d4:79:45:d4:96:bc:26:eb:47:f0:9b:30:1b: 1c:fa:6c:16:b7:60:0d:e2:43:99:1f:57:8b:94:de: 32:b4:18:e3:d4:eb:d2:44:64:47:68:8b:ad:23:73: 9c:ab:47:8e:56:0a:cd:53:ea:eb:32:a2:f9:9b:3d: 77:98:7f:c3:a7:54:09:a1:d0:7d:03:57:21:d1:5a: 52:ef:14:c0:7d:06:e5:38:f4:31:1f:09:b2:53:d4: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7E:62:93:55:85:3A:4D:D8:EC:38:1F:00:63:6F:B8:78:06:A5:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl X509v3 Authority Key Identifier: keyid:2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5e:a9:01:ef:d7:7b:52:a3:5e:fd:97:74:76:06:40:66:98: f7:42:52:5b:74:f1:e4:92:37:d9:dc:53:55:ca:66:89:d2:0e: c7:fc:7b:75:56:90:16:93:18:e6:f8:d1:b8:1f:a7:cf:16:f8: b4:f4:e9:98:b1:20:f1:41:a5:5a:dc:d7:02:9e:d9:c5:bb:0a: d5:a5:48:ba:c4:b9:85:bf:b6:53:2f:55:c5:1b:d7:5b:67:39: 41:b8:ef:77:d2:c9:08:33:40:56:33:87:82:69:c8:03:5b:b0: 4d:50:c8:2b:6b:1f:1c:5a:0f:7e:f6:8e:a2:f9:5f:8b:72:50: 49:13:43:15:06:5c:c0:a4:b8:e9:1a:ae:53:43:1a:51:bb:d5: ea:b2:44:9f:1b:66:66:e3:44:6b:9e:b1:25:5e:e5:0a:ba:b9: cc:7b:c2:30:74:13:64:71:16:1f:da:fa:2a:35:c5:db:66:38: 4e:34:07:b6:b3:41:04:b3:ce:2a:22:f0:94:41:b5:34:b1:5c: 42:a9:32:a7:f8:d7:de:96:2b:95:91:66:6a:26:79:26:69:72: fe:64:58:9e:77:22:d0:a4:c5:40:bc:b8:91:72:22:f7:08:e4: df:bf:94:f6:da:79:1a:00:8f:1f:0c:27:55:8b:e4:3a:68:be: a0:8b:f5:04 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JvtZDpI7d33+BOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhZjk1ZjEtOGQwOC00ODg3LWFlMjItNTQ0YTBkMmIz MTZjMB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyNzE4MDAwMFowLzEtMCsGA1UEAxMk M2VhNjQ5YjctZjUzZi00NmVlLWFiOTktYWQ0NzFjOThhOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8FAV2A+JOTYHwYTRRyYJvl50UGW9ONnO0dh qQbDFhTBJlQeVe0r9V6oxPzomWBAP4cf1aAAEKjC8tTI36zIXwKl2Uql4kG+FCfX XfgDKSIgE25O3dEiRr/br2RKVMR4khuVb2xFrWhy84YmLizIsjVnCQEAhZxfRiAF dAy8nsr2OoYK0hXT2tuXTDzIGazsgoXvKdM8kDCrKYdb6jq5hMIZ9XE259R5RdSW vCbrR/CbMBsc+mwWt2AN4kOZH1eLlN4ytBjj1OvSRGRHaIutI3Ocq0eOVgrNU+rr MqL5mz13mH/Dp1QJodB9A1ch0VpS7xTAfQblOPQxHwmyU9Sk6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDZ+YpNVhTpN2Ow4HwBjb7h4BqXyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFm OTVmMS04ZDA4LTQ4ODctYWUyMi01NDRhMGQyYjMxNmMvY2ZhZjk1ZjEtOGQwOC00 ODg3LWFlMjItNTQ0YTBkMmIzMTZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2ZhZjk1ZjEtOGQwOC00ODg3LWFl MjItNTQ0YTBkMmIzMTZjL2NmYWY5NWYxLThkMDgtNDg4Ny1hZTIyLTU0NGEwZDJi MzE2Yy5jcmwwHwYDVR0jBBgwFoAULdnKfHriUiZs4BntkptikWoqMUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFmOTVmMS04ZDA4LTQ4ODctYWUyMi01NDRh MGQyYjMxNmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvXqkB79d7UqNe/Zd0dgZA Zpj3QlJbdPHkkjfZ3FNVymaJ0g7H/Ht1VpAWkxjm+NG4H6fPFvi09OmYsSDxQaVa 3NcCntnFuwrVpUi6xLmFv7ZTL1XFG9dbZzlBuO930skIM0BWM4eCacgDW7BNUMgr ax8cWg9+9o6i+V+LclBJE0MVBlzApLjpGq5TQxpRu9XqskSfG2Zm40RrnrElXuUK urnMe8IwdBNkcRYf2voqNcXbZjhONAe2s0EEs84qIvCUQbU0sVxCqTKn+NfeliuV kWZqJnkmaXL+ZFiedyLQpMVAvLiRciL3COTfv5T22nkaAI8fDCdVi+Q6aL6gi/UE -----END CERTIFICATE-----Generated at Thu Mar 26 06:56:47 2026 by rpki-client