$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.mft File: cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.mft (raw, json) Hash identifier: Fo6ioA1Zdt/6xnCviPEBCCEF4UZ6WPVAJnkDnON9Eeo= Subject key identifier: 1B:C3:23:99:D2:73:20:08:F6:7B:04:F4:9A:C5:1B:E5:62:DB:3E:F5 Authority key identifier: 82:B6:6E:60:AF:4C:46:CB:04:58:D3:DF:12:5A:8F:B9:38:6F:8F:60 Certificate issuer: /CN=cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35 Certificate serial: 010D0C9F4328584D06DC340DC9243C59B3FAB240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.mft Manifest number: 010D0C9F4328584B23E4D921A679524045491073 Signing time: Sun 01 Mar 2026 19:00:03 +0000 Manifest this update: Sun 01 Mar 2026 19:00:03 +0000 Manifest next update: Tue 03 Mar 2026 19:00:00 +0000 Files and hashes: 1: b0b7b93f-b3bc-3bed-8790-a7d7c2dece2c.roa (hash: 1kI10LuLKCyG5DF9+KBHbGRaw1Vh/Rhix2308vFHe9s=) 2: cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.crl (hash: d0OKZMiHBfH/5U2a87hILAWOjKQpZzo2cPeQzqezCRQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:dc:34:0d:c9:24:3c:59:b3:fa:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35 Validity Not Before: Mar 1 19:00:03 2026 GMT Not After : Mar 3 19:00:00 2026 GMT Subject: CN=28bb3451-944a-4263-afc3-09002281b348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:42:54:bd:91:ee:04:5c:a3:7f:45:df:5c:3b: 69:f1:2f:dd:18:8e:1c:d9:b1:96:5c:59:06:ba:5c: a3:3a:2e:c5:e3:76:cf:8c:8c:b8:d9:27:34:e9:5c: a0:9e:e9:fe:2b:65:15:81:a9:68:c1:9d:a0:24:22: ee:63:d8:22:8c:c8:20:3f:af:35:2e:c3:3a:6a:ef: 04:57:f9:82:5d:ff:0b:f6:f8:74:3f:5a:9e:a3:a5: c1:25:37:5f:0c:61:b4:06:54:e7:02:26:15:b1:43: 14:77:43:21:1d:2d:81:aa:07:9e:d0:32:ba:b8:b1: bc:5f:85:b5:e4:25:8b:b3:62:9a:c0:c0:85:74:9b: 3d:dd:90:2d:42:37:b9:c9:43:10:d5:86:4a:ed:a9: 41:83:ca:34:80:09:57:48:5c:a5:97:69:8f:7d:44: a1:a5:06:35:4c:c7:6e:97:4f:14:b0:03:5c:92:dc: 90:0c:54:2b:f8:ac:6a:2f:c3:73:57:5c:13:c6:b3: e6:d1:51:6f:e1:76:13:2d:1c:48:46:03:ff:f9:34: 0b:af:7b:20:da:fb:51:0c:ba:7b:a7:b5:8d:7b:6e: d8:f7:99:b5:78:70:8c:2d:a4:4e:ba:de:b3:e2:ab: aa:80:fe:d1:a0:c2:ec:5f:f6:30:01:6a:5f:58:6b: 43:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C3:23:99:D2:73:20:08:F6:7B:04:F4:9A:C5:1B:E5:62:DB:3E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.crl X509v3 Authority Key Identifier: keyid:82:B6:6E:60:AF:4C:46:CB:04:58:D3:DF:12:5A:8F:B9:38:6F:8F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b7:42:56:65:8b:0c:9d:f0:d1:dc:e9:55:ae:0e:0c:aa:88: 80:04:d3:44:b6:35:c3:58:0e:f4:af:7a:86:0e:1c:9a:eb:77: 21:81:ee:3d:c3:31:c5:7c:9c:44:aa:53:b6:1d:f9:4a:76:ad: 4b:4d:0a:f7:f4:3c:30:38:d3:e0:5a:d2:85:44:4c:c4:fd:88: 03:ab:7c:30:be:94:88:e1:aa:13:07:44:40:46:f4:65:71:34: 33:6d:e1:6b:36:82:69:9e:ff:17:62:ca:7a:5e:6b:6d:dc:b5: e0:eb:3b:99:23:12:73:10:bd:64:b6:1f:b5:f2:45:05:7c:2e: c4:e6:ea:06:2f:9a:4e:2d:f4:3d:7d:62:5d:59:14:6c:f6:b9: 40:46:e5:be:af:b2:ba:95:5a:2e:78:f0:a1:19:f1:b8:88:a8: bb:91:df:13:c7:45:82:ae:3a:22:93:81:54:c1:8a:31:af:9f: 36:c3:cb:11:57:12:be:36:9e:f8:de:a0:f3:4c:70:a3:29:26: b1:7c:f1:7b:0e:51:28:4e:e5:a5:19:72:3d:98:20:71:53:f5: 8a:75:ed:72:c1:06:f6:7a:42:ac:89:1a:c4:49:6f:2e:f1:a0: 6a:be:5f:44:c0:dc:54:73:eb:20:2c:45:ed:51:b6:b2:ba:37: 2c:eb:6d:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0G3DQNySQ8WbP6skAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmYjUxODAtZWI2NS00YWEzLThjZTAtOWQyYmQ1N2U5 YTM1MB4XDTI2MDMwMTE5MDAwM1oXDTI2MDMwMzE5MDAwMFowLzEtMCsGA1UEAxMk MjhiYjM0NTEtOTQ0YS00MjYzLWFmYzMtMDkwMDIyODFiMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkJUvZHuBFyjf0XfXDtp8S/dGI4c2bGWXFkG ulyjOi7F43bPjIy42Sc06Vygnun+K2UVgalowZ2gJCLuY9gijMggP681LsM6au8E V/mCXf8L9vh0P1qeo6XBJTdfDGG0BlTnAiYVsUMUd0MhHS2Bqgee0DK6uLG8X4W1 5CWLs2KawMCFdJs93ZAtQje5yUMQ1YZK7alBg8o0gAlXSFyll2mPfUShpQY1TMdu l08UsANcktyQDFQr+KxqL8NzV1wTxrPm0VFv4XYTLRxIRgP/+TQLr3sg2vtRDLp7 p7WNe27Y95m1eHCMLaROut6z4quqgP7RoMLsX/YwAWpfWGtDFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBvDI5nScyAI9nsE9JrFG+Vi2z71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jYWZi NTE4MC1lYjY1LTRhYTMtOGNlMC05ZDJiZDU3ZTlhMzUvY2FmYjUxODAtZWI2NS00 YWEzLThjZTAtOWQyYmQ1N2U5YTM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2FmYjUxODAtZWI2NS00YWEzLThj ZTAtOWQyYmQ1N2U5YTM1L2NhZmI1MTgwLWViNjUtNGFhMy04Y2UwLTlkMmJkNTdl OWEzNS5jcmwwHwYDVR0jBBgwFoAUgrZuYK9MRssEWNPfElqPuThvj2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jYWZiNTE4MC1lYjY1LTRhYTMtOGNlMC05ZDJi ZDU3ZTlhMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3t0JWZYsMnfDR3OlVrg4M qoiABNNEtjXDWA70r3qGDhya63chge49wzHFfJxEqlO2HflKdq1LTQr39DwwONPg WtKFREzE/YgDq3wwvpSI4aoTB0RARvRlcTQzbeFrNoJpnv8XYsp6Xmtt3LXg6zuZ IxJzEL1kth+18kUFfC7E5uoGL5pOLfQ9fWJdWRRs9rlARuW+r7K6lVouePChGfG4 iKi7kd8Tx0WCrjoik4FUwYoxr582w8sRVxK+Np743qDzTHCjKSaxfPF7DlEoTuWl GXI9mCBxU/WKde1ywQb2ekKsiRrESW8u8aBqvl9EwNxUc+sgLEXtUbayujcs622l -----END CERTIFICATE-----Generated at Sun Mar 1 22:34:47 2026 by rpki-client