$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft File: cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft (raw, json) Hash identifier: HfB/DUOlNx5N7MBF94r+Ws4HF9IQfIcuTJXpBJXxh/8= Subject key identifier: 86:C0:8A:69:26:F0:01:F7:CB:C5:46:73:C1:A7:78:8F:73:F9:61:C3 Authority key identifier: 99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA Certificate issuer: /CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Certificate serial: 010D0C9F4328584D4A35F3D2ABDC60ABBD4CC860 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft Manifest number: 010D0C9F43285847FFF5B47570110AB43EE70AF1 Signing time: Wed 25 Mar 2026 22:00:04 +0000 Manifest this update: Wed 25 Mar 2026 22:00:04 +0000 Manifest next update: Fri 27 Mar 2026 22:00:00 +0000 Files and hashes: 1: 0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa (hash: XguLcagZqRLRgmKnYJfgCCzveDXCGWytqawkh09fnqE=) 2: 3f4559cd-55eb-3ee4-96a6-22d37db39638.roa (hash: Cg4zf6ESkw9TzKFH2VnuBTHBeAtJLGsF8obEuWoEeLE=) 3: cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl (hash: TtDZc6Z7oqSZm8Cx+QwUUDvONkUHtmwur9fJHdstvsc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:35:f3:d2:ab:dc:60:ab:bd:4c:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Validity Not Before: Mar 25 22:00:04 2026 GMT Not After : Mar 27 22:00:00 2026 GMT Subject: CN=a58e752d-a93e-42e7-bdb0-7535d09d90f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fb:bc:b4:66:2d:68:72:14:d6:fd:c9:7a:0b: 46:5f:78:04:ac:c4:c4:2c:8b:61:a8:42:8f:18:f6: ad:01:6f:83:a0:f7:d6:a7:0e:1f:f9:26:43:25:14: 9c:76:e3:84:25:06:76:38:7a:b5:d3:b4:8c:7e:4d: 25:b7:bd:e3:d7:74:69:a1:ae:3c:a3:82:f0:77:e7: df:49:a6:dd:69:05:50:4c:64:8f:eb:60:d7:83:d6: 5a:e9:1d:a0:bf:a1:fa:c5:5a:aa:13:04:8b:7f:e2: e6:d1:2f:cf:3a:d6:88:79:33:d4:2f:e5:74:cb:bd: 1a:bc:ec:f3:70:35:b1:61:c7:e8:0c:e0:a7:b0:a6: fa:dc:1f:49:b6:75:66:fd:63:57:5a:59:00:c6:c2: db:42:d0:dc:60:ac:bd:e6:30:72:3c:f8:46:1b:25: d7:7e:73:1a:fd:e3:d8:de:41:1b:cd:ea:05:1c:bd: 95:a6:54:e3:ad:17:ca:9e:d3:19:5d:2e:fe:20:39: a3:77:62:46:9b:67:c4:91:c1:7a:58:d9:28:dd:42: 2c:6f:98:cd:ba:61:4d:c3:fa:77:0f:f6:3d:24:65: 1b:6f:a5:65:b8:ad:2a:a5:0e:39:62:e3:4e:d1:84: 3c:8f:11:0e:09:a4:d7:34:55:01:0f:65:d3:a7:ff: 8a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C0:8A:69:26:F0:01:F7:CB:C5:46:73:C1:A7:78:8F:73:F9:61:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl X509v3 Authority Key Identifier: keyid:99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:09:19:6f:11:b2:78:e9:d1:7f:a4:c2:e4:63:60:3e:3e:42: 49:1c:c0:57:13:f8:32:f4:03:4e:dd:b8:8e:fa:5d:f7:df:f6: fd:db:60:34:60:cb:4c:d0:13:d6:aa:46:3f:1a:db:8f:12:7c: 28:3f:79:a6:00:8c:4c:e2:99:7b:9e:25:b6:e4:8c:f2:6c:07: 65:67:4e:86:4a:d0:1b:d0:b5:22:42:41:09:92:17:b5:c4:a1: d3:c4:f2:a6:79:a7:bc:56:f3:d3:73:2b:ac:55:e6:c6:20:f9: 22:ff:6b:8f:d1:fc:a2:fd:2e:59:df:0b:10:a1:21:00:31:55: 37:72:a3:73:d5:53:ab:64:36:ec:03:12:fa:4d:fe:0b:0d:a8: 56:b6:a7:83:e5:7e:8b:9f:38:34:3e:50:22:b6:08:45:e0:25: fe:7d:ca:f7:02:e7:f3:cc:a0:20:dc:71:b0:04:9a:f9:e8:8a: d1:22:09:e3:19:68:01:19:aa:be:33:5d:44:98:b0:42:ea:1c: 97:f8:51:b7:30:0f:ca:68:62:47:ae:9d:b7:89:8f:79:49:71: fb:cc:43:62:99:93:3a:86:92:23:4d:46:ea:ea:e8:f9:2e:36: 06:f4:9d:16:1d:5b:c5:1d:0e:16:38:c1:fd:3b:d9:43:b5:7f: a1:0a:2f:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KNfPSq9xgq71MyGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhMGNlMjMtMzJjYi00NmZmLThhZjktODI1ZGU2NGYy MGExMB4XDTI2MDMyNTIyMDAwNFoXDTI2MDMyNzIyMDAwMFowLzEtMCsGA1UEAxMk YTU4ZTc1MmQtYTkzZS00MmU3LWJkYjAtNzUzNWQwOWQ5MGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfu8tGYtaHIU1v3JegtGX3gErMTELIthqEKP GPatAW+DoPfWpw4f+SZDJRScduOEJQZ2OHq107SMfk0lt73j13Rpoa48o4Lwd+ff SabdaQVQTGSP62DXg9Za6R2gv6H6xVqqEwSLf+Lm0S/POtaIeTPUL+V0y70avOzz cDWxYcfoDOCnsKb63B9JtnVm/WNXWlkAxsLbQtDcYKy95jByPPhGGyXXfnMa/ePY 3kEbzeoFHL2VplTjrRfKntMZXS7+IDmjd2JGm2fEkcF6WNko3UIsb5jNumFNw/p3 D/Y9JGUbb6VluK0qpQ45YuNO0YQ8jxEOCaTXNFUBD2XTp/+KjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIbAimkm8AH3y8VGc8GneI9z+WHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZmEw Y2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVkZTY0ZjIwYTEvY2ZhMGNlMjMtMzJjYi00 NmZmLThhZjktODI1ZGU2NGYyMGExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2ZhMGNlMjMtMzJjYi00NmZmLThh ZjktODI1ZGU2NGYyMGExL2NmYTBjZTIzLTMyY2ItNDZmZi04YWY5LTgyNWRlNjRm MjBhMS5jcmwwHwYDVR0jBBgwFoAUmVyhbjvmxeaJIKIBkipF5R21CrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZmEwY2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVk ZTY0ZjIwYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6CRlvEbJ46dF/pMLkY2A+ PkJJHMBXE/gy9ANO3biO+l333/b922A0YMtM0BPWqkY/GtuPEnwoP3mmAIxM4pl7 niW25IzybAdlZ06GStAb0LUiQkEJkhe1xKHTxPKmeae8VvPTcyusVebGIPki/2uP 0fyi/S5Z3wsQoSEAMVU3cqNz1VOrZDbsAxL6Tf4LDahWtqeD5X6Lnzg0PlAitghF 4CX+fcr3AufzzKAg3HGwBJr56IrRIgnjGWgBGaq+M11EmLBC6hyX+FG3MA/KaGJH rp23iY95SXH7zENimZM6hpIjTUbq6uj5LjYG9J0WHVvFHQ4WOMH9O9lDtX+hCi/3 -----END CERTIFICATE-----Generated at Thu Mar 26 22:04:14 2026 by rpki-client