$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft File: cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft (raw, json) Hash identifier: 44wOWgE5X+/uExsmmRDKmsPO4mxMQCCyQq3dyZEJrpw= Subject key identifier: 70:D0:05:CB:30:3F:8F:72:76:93:C5:6A:AD:00:30:4F:2F:63:E7:6C Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584D8C65F0D78B1AB98CA77CCC40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft Manifest number: 010D0C9F4328584073A85AE22C63106D5EA59200 Signing time: Sat 18 Apr 2026 15:00:03 +0000 Manifest this update: Sat 18 Apr 2026 15:00:03 +0000 Manifest next update: Tue 21 Apr 2026 15:00:00 +0000 Files and hashes: 1: 2b6966be-0a30-3097-a99a-d635fb439733.roa (hash: 6MpWzINEXg5FqwhHpHGoyggUskxaNmdAntzymzN0+KY=) 2: 3cd4923c-6128-376c-8446-baffa366fd39.roa (hash: NH0yZs0OPCSJigQ21yHgM4omBF3ogOHPd9VIPd5K2KI=) 3: 46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa (hash: qcWJfanAv2BB7On+v1YEtGnh3+o+WZ0IR7DPB285Bns=) 4: 54b09de8-f12c-3e32-8666-1505aecbce63.roa (hash: Uf83cfckUjzTDBeaAdjfeHdRMQvHYMGlceJ9mbOAWtg=) 5: 90a1c137-b937-3cb9-9a28-03dfcc73c2cb.roa (hash: WUBU/ThKULXfCKWi03dpJF5n9nlLJWDc4CSun4+j3ic=) 6: a0241a87-ee63-3ca4-8762-01bd022707da.roa (hash: 433t8ufeOVTQy6Y9kgzshh1zj8Lu3LefbbVzPe923To=) 7: cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl (hash: 8+U7bGIy5zhxy5bSeEbJo01eY+IgmgqIwXA5xCyGRck=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:65:f0:d7:8b:1a:b9:8c:a7:7c:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Apr 18 15:00:03 2026 GMT Not After : Apr 21 15:00:00 2026 GMT Subject: CN=d7b2d559-3835-428b-8cdc-faee32adc01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:58:ff:ff:21:57:28:9f:ed:a1:c3:fc:f6:6f: dd:c9:4b:b5:02:31:ee:61:09:99:85:8c:1a:64:0c: 13:fd:14:23:24:32:cc:0a:53:a5:ad:9c:41:e1:94: 31:bf:d1:46:34:0f:31:26:f5:6b:46:57:b3:6e:9d: 67:38:6f:ff:67:89:94:10:70:cc:24:fa:5a:d2:0e: 7d:6f:c6:ec:67:38:28:f1:c3:d3:65:d7:4c:52:dd: 5b:c6:0b:b0:d3:92:d0:24:21:f2:db:c8:99:fa:b1: ae:67:3e:d1:04:93:b8:f6:cd:a2:d7:8a:12:7f:96: 3b:44:37:a2:8a:2c:24:19:a2:f4:38:1f:bb:a3:e5: 9f:ae:ea:f1:82:05:50:38:b0:b5:6e:df:c7:6c:f2: c9:c0:66:d7:bb:f0:27:19:0f:b5:37:81:55:3f:81: 67:bd:18:b4:7c:9b:a3:b5:e3:9c:a7:e4:b9:8c:0c: 9a:ce:9b:11:ba:a5:2a:6f:64:a6:6d:d4:03:e3:df: 93:2d:cf:96:97:9c:36:59:c4:f3:e6:45:35:d6:6b: ed:8a:35:02:03:1f:82:0c:ca:04:c9:67:de:6e:d9: 9e:ca:b5:c8:85:57:1a:40:37:6b:e7:a7:e6:f7:14: 99:9b:cc:06:ad:24:d7:07:0c:51:ef:9a:9c:67:ef: d9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D0:05:CB:30:3F:8F:72:76:93:C5:6A:AD:00:30:4F:2F:63:E7:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:57:ec:27:13:04:eb:76:84:96:6f:db:f5:be:27:71:4d:6b: 68:d9:fd:32:7d:25:a1:67:5b:59:b0:d9:e2:b3:65:8a:a4:09: 8d:74:23:7d:24:fa:99:0f:cc:1d:90:8a:fd:d7:e0:59:51:92: 7a:f8:b9:88:2b:d1:60:40:2b:3d:16:5a:88:76:06:5e:d2:15: fd:f4:c7:96:6a:af:a9:ac:a0:c8:05:e6:7c:eb:6e:75:37:8f: 4b:1a:48:c2:6d:4a:49:4d:b3:61:11:a7:c1:3d:9f:64:77:86: 87:25:d0:49:62:4c:d6:c9:eb:e0:37:7d:2c:85:60:f1:cd:13: 2f:80:c7:0c:07:fc:0e:b2:ab:0f:f4:20:8b:ce:79:1b:b9:b0: c7:26:e8:21:dd:66:76:b9:af:ba:eb:d7:c0:76:60:79:9a:76: 37:5f:5d:1a:1e:b2:8e:95:c5:4c:5d:5e:34:24:d2:16:53:72: e1:03:11:4c:d6:d6:ba:80:14:94:a9:df:bc:30:67:e6:09:6c: b0:25:29:c6:94:7d:3c:15:d2:98:5f:52:a9:a1:46:e0:3b:25: da:72:7c:22:58:42:62:09:a2:9f:01:f2:94:37:14:6b:a1:9a: 44:ef:d5:45:a9:27:33:77:6e:0a:f3:2b:fb:bd:34:74:6c:6e: 45:b0:9d:95 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2MZfDXixq5jKd8zEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI2MDQxODE1MDAwM1oXDTI2MDQyMTE1MDAwMFowLzEtMCsGA1UEAxMk ZDdiMmQ1NTktMzgzNS00MjhiLThjZGMtZmFlZTMyYWRjMDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVj//yFXKJ/tocP89m/dyUu1AjHuYQmZhYwa ZAwT/RQjJDLMClOlrZxB4ZQxv9FGNA8xJvVrRlezbp1nOG//Z4mUEHDMJPpa0g59 b8bsZzgo8cPTZddMUt1bxguw05LQJCHy28iZ+rGuZz7RBJO49s2i14oSf5Y7RDei iiwkGaL0OB+7o+WfrurxggVQOLC1bt/HbPLJwGbXu/AnGQ+1N4FVP4FnvRi0fJuj teOcp+S5jAyazpsRuqUqb2SmbdQD49+TLc+Wl5w2WcTz5kU11mvtijUCAx+CDMoE yWfebtmeyrXIhVcaQDdr56fm9xSZm8wGrSTXBwxR75qcZ+/ZhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHDQBcswP49ydpPFaq0AME8vY+dsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvY2YwOWUxOTEtMWNiNy00 NjUwLTk1ZDYtNGUyNGMwYWVjNjlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7V+wnEwTrdoSWb9v1vidx TWto2f0yfSWhZ1tZsNnis2WKpAmNdCN9JPqZD8wdkIr91+BZUZJ6+LmIK9FgQCs9 FlqIdgZe0hX99MeWaq+prKDIBeZ86251N49LGkjCbUpJTbNhEafBPZ9kd4aHJdBJ YkzWyevgN30shWDxzRMvgMcMB/wOsqsP9CCLznkbubDHJugh3WZ2ua+669fAdmB5 mnY3X10aHrKOlcVMXV40JNIWU3LhAxFM1ta6gBSUqd+8MGfmCWywJSnGlH08FdKY X1KpoUbgOyXacnwiWEJiCaKfAfKUNxRroZpE79VFqSczd24K8yv7vTR0bG5FsJ2V -----END CERTIFICATE-----Generated at Sun Apr 19 08:52:03 2026 by rpki-client