$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft File: cff1a08e-9692-475a-9b04-916530111389.mft (raw, json) Hash identifier: 5Av7pvhiWspoqaQ0z+TUu4lxH72TGGSJQDnUBAx8i1c= Subject key identifier: A0:41:72:77:BA:69:F2:0E:AD:BD:24:2F:07:19:2E:28:4A:8C:A8:29 Authority key identifier: FF:BB:C0:9A:85:4C:31:0C:1B:9C:EF:DB:73:82:1C:CB:10:B9:F4:B1 Certificate issuer: /CN=cff1a08e-9692-475a-9b04-916530111389 Certificate serial: 010D0C9F4328584DCFA1EAA9D7086C50B08D0E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft Manifest number: 010D0C9F4328584CDA11893013BD4807BFFB12A0 Signing time: Tue 12 May 2026 17:00:03 +0000 Manifest this update: Tue 12 May 2026 17:00:03 +0000 Manifest next update: Fri 15 May 2026 17:00:00 +0000 Files and hashes: 1: 5143d672-ddfc-34fe-972f-167664e29a5f.roa (hash: aaaEKql3VnGInhE29wWTEjFU0/4oPq6BjIJYS9Ltd8Y=) 2: cff1a08e-9692-475a-9b04-916530111389.crl (hash: ebZDKqWl/pTzxZKbsk1wOPHdGWTcVMHT9SWyF97Omno=) 3: f23fd077-50eb-3af5-a740-69612230d97d.asa (hash: 57/58vncsOPrAwkQR0j3PqzG6orzjvVkKiumsb6QiTQ=) 4: f71ddcd1-bad1-3544-96ec-1a572beee366.roa (hash: G9nmtK2YezYgGZJ77o7PrBy0B96fJR5D7zkN1mOU/+4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:a1:ea:a9:d7:08:6c:50:b0:8d:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff1a08e-9692-475a-9b04-916530111389 Validity Not Before: May 12 17:00:03 2026 GMT Not After : May 15 17:00:00 2026 GMT Subject: CN=f33162b3-8dd1-465b-b2f8-ebbb232067f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:5e:68:5a:da:e9:ed:4b:db:6f:92:39:f4: 23:7e:9a:8a:08:95:f7:e3:bf:be:94:15:f8:12:8e: 00:3e:8c:3f:fa:dd:9c:35:b1:8d:38:ca:49:22:b2: 7f:0b:78:d3:27:60:8c:ba:62:b5:9e:67:90:c9:5e: e1:51:3a:01:31:29:1d:37:3a:42:8b:8b:aa:34:37: e7:9c:fc:68:61:dc:52:fe:55:dd:43:9a:0f:47:53: 66:03:43:59:45:0b:c9:c0:70:6a:bb:9c:58:56:ae: 3d:7d:c7:37:c7:af:17:c4:78:88:05:23:15:46:dd: 74:03:00:b9:ff:30:12:c3:6a:74:ad:9f:f4:df:88: c8:02:52:86:31:33:cb:05:c4:01:ff:76:51:ac:16: be:c5:8e:3c:b2:bd:6c:6a:ab:60:6c:35:d3:16:70: 18:86:40:b2:d8:ad:58:5c:1f:f7:27:d7:92:40:41: 7b:dc:d1:dd:38:86:86:07:7f:aa:ab:35:a0:89:96: fb:b0:51:e9:c6:2d:12:2e:fc:e5:92:c9:39:be:d7: 09:6e:60:b1:86:0a:d1:25:0f:f9:ac:d9:09:cf:dc: 87:42:41:c6:31:b7:da:fd:da:ac:d8:ff:c1:b5:f3: 38:31:a0:53:86:92:1f:e2:57:16:0b:f6:02:d5:c0: 44:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:41:72:77:BA:69:F2:0E:AD:BD:24:2F:07:19:2E:28:4A:8C:A8:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.crl X509v3 Authority Key Identifier: keyid:FF:BB:C0:9A:85:4C:31:0C:1B:9C:EF:DB:73:82:1C:CB:10:B9:F4:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:49:09:0c:7c:48:da:bd:e9:64:4f:b2:02:f9:57:ee:b2:b9: 4f:ea:8c:e4:c8:60:8c:8a:fe:5a:eb:3b:09:19:6d:69:8d:c9: d7:94:b1:d9:76:a6:df:99:74:9d:9b:84:0f:ec:cd:18:6b:ee: 72:50:ab:95:a6:af:08:9f:bd:62:e5:48:d7:bd:30:02:6a:e6: dd:90:17:05:e6:d5:8d:c5:75:e3:21:7b:f8:2b:b2:4f:f8:e7: 06:35:3e:0c:ff:07:33:6e:8c:af:89:6b:60:ac:2c:72:05:ed: 31:dc:4c:9c:37:cf:cc:43:44:1f:a4:43:5d:98:1e:b4:52:8b: dc:ec:9e:6d:89:52:99:7c:69:54:8b:75:21:79:d2:75:b5:93: dc:4f:1f:ab:74:f6:06:4b:44:1c:73:0d:b4:49:a8:18:6c:51: 36:34:5d:3f:41:e2:73:b1:8f:df:ca:c8:aa:63:d5:87:15:eb: c6:11:09:68:85:d7:e5:f0:52:9b:b5:64:d6:c8:75:ae:bd:b6: d5:65:13:a4:94:1c:94:22:e1:8f:8f:ac:3d:b5:51:ce:9c:0b: ad:96:55:67:a6:bc:db:17:7c:ad:4c:47:c0:54:6d:51:b5:bf: b5:86:c9:1d:f1:fd:9d:20:77:0f:f4:64:69:6a:5b:3e:7c:71: 9e:2a:fc:25 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3Poeqp1whsULCNDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmMWEwOGUtOTY5Mi00NzVhLTliMDQtOTE2NTMwMTEx Mzg5MB4XDTI2MDUxMjE3MDAwM1oXDTI2MDUxNTE3MDAwMFowLzEtMCsGA1UEAxMk ZjMzMTYyYjMtOGRkMS00NjViLWIyZjgtZWJiYjIzMjA2N2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgBeaFra6e1L22+SOfQjfpqKCJX347++lBX4 Eo4APow/+t2cNbGNOMpJIrJ/C3jTJ2CMumK1nmeQyV7hUToBMSkdNzpCi4uqNDfn nPxoYdxS/lXdQ5oPR1NmA0NZRQvJwHBqu5xYVq49fcc3x68XxHiIBSMVRt10AwC5 /zASw2p0rZ/034jIAlKGMTPLBcQB/3ZRrBa+xY48sr1saqtgbDXTFnAYhkCy2K1Y XB/3J9eSQEF73NHdOIaGB3+qqzWgiZb7sFHpxi0SLvzlksk5vtcJbmCxhgrRJQ/5 rNkJz9yHQkHGMbfa/dqs2P/BtfM4MaBThpIf4lcWC/YC1cBEuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKBBcne6afIOrb0kLwcZLihKjKgpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZmYx YTA4ZS05NjkyLTQ3NWEtOWIwNC05MTY1MzAxMTEzODkvY2ZmMWEwOGUtOTY5Mi00 NzVhLTliMDQtOTE2NTMwMTExMzg5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvY2ZmMWEwOGUtOTY5Mi00NzVhLTli MDQtOTE2NTMwMTExMzg5L2NmZjFhMDhlLTk2OTItNDc1YS05YjA0LTkxNjUzMDEx MTM4OS5jcmwwHwYDVR0jBBgwFoAU/7vAmoVMMQwbnO/bc4IcyxC59LEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZmYxYTA4ZS05NjkyLTQ3NWEtOWIwNC05MTY1 MzAxMTEzODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC4SQkMfEjavelkT7IC+Vfu srlP6ozkyGCMiv5a6zsJGW1pjcnXlLHZdqbfmXSdm4QP7M0Ya+5yUKuVpq8In71i 5UjXvTACaubdkBcF5tWNxXXjIXv4K7JP+OcGNT4M/wczboyviWtgrCxyBe0x3Eyc N8/MQ0QfpENdmB60Uovc7J5tiVKZfGlUi3UhedJ1tZPcTx+rdPYGS0Qccw20SagY bFE2NF0/QeJzsY/fysiqY9WHFevGEQlohdfl8FKbtWTWyHWuvbbVZROklByUIuGP j6w9tVHOnAutllVnprzbF3ytTEfAVG1Rtb+1hskd8f2dIHcP9GRpals+fHGeKvwl -----END CERTIFICATE-----Generated at Wed May 13 16:22:17 2026 by rpki-client