$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft File: cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft (raw, json) Hash identifier: T6kjWcKatbqaXwm3EvLPCGTz2abFWoQipY3oZvdBf1U= Subject key identifier: 98:30:38:4C:46:C2:5A:C6:39:BF:5F:DD:DA:E7:25:27:D2:14:8F:E5 Authority key identifier: 2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 Certificate issuer: /CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Certificate serial: 010D0C9F4328584FD73EB6203FAA07ABEB792760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft Manifest number: 010D0C9F4328584C72DC04738F61ECAAC4343FC0 Signing time: Sat 14 Nov 2026 20:00:25 +0000 Manifest this update: Sat 14 Nov 2026 20:00:25 +0000 Manifest next update: Mon 16 Nov 2026 20:00:00 +0000 Files and hashes: 1: cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl (hash: uDwZ2A2QBKp9BQwcCU4P+QrDieu+qnSapOEiMi5Y/Rs=) 2: dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa (hash: RroiRQ0QTy9l1f5yvhbxWWvKVFiiD7sB+6Yatw0yybU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d7:3e:b6:20:3f:aa:07:ab:eb:79:27:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Validity Not Before: Nov 14 20:00:25 2026 GMT Not After : Nov 16 20:00:00 2026 GMT Subject: CN=e3a2466f-5926-4145-b5d5-160a3c70fb3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:15:ce:4e:ed:d1:0a:47:68:92:6f:cc:0c:f2: 11:09:76:cf:8c:c2:37:c1:08:c8:12:20:54:45:61: 59:1c:88:b4:e8:b1:ba:74:e5:33:2f:00:c1:49:36: fe:3d:22:ac:cf:29:de:31:21:3c:b4:ea:c7:ea:88: cd:0e:0a:c1:0f:3c:b4:5c:b3:23:a5:46:e7:ae:05: b9:50:64:06:51:e1:21:2e:6d:95:24:02:f4:11:d7: db:7e:cf:aa:88:67:6b:85:14:a7:1f:a6:7c:f6:84: 8d:af:04:b8:71:27:90:54:7a:f0:bc:9e:d9:b2:e9: 59:99:63:e1:b3:c8:31:7e:f1:22:35:b3:5a:04:32: e8:af:78:ad:b4:07:b3:e1:c0:fd:b8:f6:f0:9c:72: 45:1b:df:9f:03:5b:47:99:1d:f3:b0:dc:ad:35:78: c6:27:aa:00:b0:11:89:92:79:a8:64:32:3e:a2:1a: 0c:07:ce:4c:15:89:a0:65:0b:9a:b2:92:b1:08:e2: 95:91:80:4d:34:85:bb:88:74:06:01:b3:c8:41:0b: 64:79:9b:b7:be:24:f1:29:53:a7:9e:e0:8f:67:5f: 1e:3b:c8:bc:14:5f:55:d6:04:a7:29:2c:dd:8b:f0: b4:4e:c7:73:f5:d6:d5:48:1c:8d:67:17:b3:e6:6c: 5f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:30:38:4C:46:C2:5A:C6:39:BF:5F:DD:DA:E7:25:27:D2:14:8F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl X509v3 Authority Key Identifier: keyid:2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:96:c2:c1:68:a8:98:7b:54:69:cb:01:27:ab:46:ea:5c:6a: 7a:a7:9c:76:5c:b2:25:1b:38:8e:78:17:30:35:d7:9c:4e:67: a2:1d:2d:39:f7:0b:15:42:31:0c:03:86:e4:d9:ef:58:a0:60: 00:89:40:28:ad:26:49:59:6b:bc:ef:92:ee:36:ab:51:fd:61: 36:d2:ab:90:d9:44:88:7b:50:25:32:fb:e0:96:c0:7c:a5:cf: b0:0c:6b:53:1e:c9:c9:b7:22:f0:33:0e:e3:17:72:62:a4:81: 63:6f:f9:8f:d6:f3:a5:4e:c0:dc:76:91:ca:44:1d:df:1e:9f: e3:56:7a:7d:90:d2:c9:89:d8:9e:e1:d5:2c:a5:c1:7c:c2:5e: c8:ed:85:0f:a3:22:c6:ad:4d:3a:5a:48:87:71:3a:98:43:19: af:2b:d4:d9:1d:43:c2:09:21:9b:0c:b0:f6:f3:ec:dc:79:e4: 11:54:b5:e8:6e:e4:e9:1b:60:c3:e8:f2:37:29:35:2d:5e:2a: 71:36:02:e7:33:b9:a0:65:38:60:fc:83:42:ed:b7:f0:30:18: ff:68:ef:c3:b7:27:34:3e:95:e8:7f:81:57:e3:55:71:14:f2: d8:67:43:2e:d0:43:14:b5:77:e4:12:e9:12:43:a7:ce:1e:80: f5:eb:9f:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/XPrYgP6oHq+t5J2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhZjk1ZjEtOGQwOC00ODg3LWFlMjItNTQ0YTBkMmIz MTZjMB4XDTI2MTExNDIwMDAyNVoXDTI2MTExNjIwMDAwMFowLzEtMCsGA1UEAxMk ZTNhMjQ2NmYtNTkyNi00MTQ1LWI1ZDUtMTYwYTNjNzBmYjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRXOTu3RCkdokm/MDPIRCXbPjMI3wQjIEiBU RWFZHIi06LG6dOUzLwDBSTb+PSKszyneMSE8tOrH6ojNDgrBDzy0XLMjpUbnrgW5 UGQGUeEhLm2VJAL0Edfbfs+qiGdrhRSnH6Z89oSNrwS4cSeQVHrwvJ7ZsulZmWPh s8gxfvEiNbNaBDLor3ittAez4cD9uPbwnHJFG9+fA1tHmR3zsNytNXjGJ6oAsBGJ knmoZDI+ohoMB85MFYmgZQuaspKxCOKVkYBNNIW7iHQGAbPIQQtkeZu3viTxKVOn nuCPZ18eO8i8FF9V1gSnKSzdi/C0Tsdz9dbVSByNZxez5mxfgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJgwOExGwlrGOb9f3drnJSfSFI/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFm OTVmMS04ZDA4LTQ4ODctYWUyMi01NDRhMGQyYjMxNmMvY2ZhZjk1ZjEtOGQwOC00 ODg3LWFlMjItNTQ0YTBkMmIzMTZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2ZhZjk1ZjEtOGQwOC00ODg3LWFl MjItNTQ0YTBkMmIzMTZjL2NmYWY5NWYxLThkMDgtNDg4Ny1hZTIyLTU0NGEwZDJi MzE2Yy5jcmwwHwYDVR0jBBgwFoAULdnKfHriUiZs4BntkptikWoqMUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFmOTVmMS04ZDA4LTQ4ODctYWUyMi01NDRh MGQyYjMxNmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxlsLBaKiYe1RpywEnq0bq XGp6p5x2XLIlGziOeBcwNdecTmeiHS059wsVQjEMA4bk2e9YoGAAiUAorSZJWWu8 75LuNqtR/WE20quQ2USIe1AlMvvglsB8pc+wDGtTHsnJtyLwMw7jF3JipIFjb/mP 1vOlTsDcdpHKRB3fHp/jVnp9kNLJidie4dUspcF8wl7I7YUPoyLGrU06WkiHcTqY QxmvK9TZHUPCCSGbDLD28+zceeQRVLXobuTpG2DD6PI3KTUtXipxNgLnM7mgZThg /INC7bfwMBj/aO/Dtyc0PpXof4FX41VxFPLYZ0Mu0EMUtXfkEukSQ6fOHoD1659R -----END CERTIFICATE-----Generated at Sun Nov 15 19:15:12 2026 by rpki-client