$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft File: cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft (raw, json) Hash identifier: mPsmUlZAG5rRpA5Ka/hEohgIdBpCLcMeh17Fa8Fv1iY= Subject key identifier: AF:FF:61:79:00:0B:2F:92:CC:46:D2:E9:E5:11:27:A5:CA:08:DF:D1 Authority key identifier: 2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 Certificate issuer: /CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Certificate serial: 010D0C9F4328584D03F3BBFD313E56E2E3F92F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft Manifest number: 010D0C9F4328584C72DC04738F61ECAAC4343EB5 Signing time: Sat 28 Feb 2026 18:00:04 +0000 Manifest this update: Sat 28 Feb 2026 18:00:04 +0000 Manifest next update: Tue 03 Mar 2026 18:00:00 +0000 Files and hashes: 1: cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl (hash: 94/lMM3xjrN9nftkWGMO4PXWxZzbwWJC1f+cfDLorRw=) 2: dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa (hash: Mj5ln4gIVd7xGAAoCIqaJRS9uIrroPPBVUYOnngu8vA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:f3:bb:fd:31:3e:56:e2:e3:f9:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Validity Not Before: Feb 28 18:00:04 2026 GMT Not After : Mar 3 18:00:00 2026 GMT Subject: CN=05356923-82aa-4c5c-9f7f-a7c58ed250aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6b:a8:6e:70:6a:61:4a:83:43:90:34:b3:b8: d1:64:83:f3:da:36:76:b9:01:dc:e8:7c:84:6f:1d: c3:04:82:78:08:af:2a:4a:a9:71:07:fa:74:ad:e7: 24:5a:7f:1e:4e:78:60:98:01:5f:d3:f4:f1:bc:d2: e8:24:60:3f:f8:c8:a4:af:39:d9:be:a3:46:0f:47: 98:c6:d6:6c:76:38:59:ec:d1:73:c2:fe:19:e9:f7: 48:d2:6e:71:83:5f:69:db:86:fb:1d:8a:af:39:07: 69:78:20:29:38:fb:b6:a5:76:44:37:4f:dd:67:31: 4c:6d:f9:8a:de:9e:2f:dc:c5:67:42:9d:bd:36:8d: 70:6a:b2:21:ca:9f:d0:8a:51:bf:1f:57:ed:5b:31: 82:41:c3:67:17:e0:ca:52:cf:a1:35:61:61:6c:89: 40:52:58:e9:4e:61:6e:c1:19:20:00:84:76:c0:d2: 01:54:a7:5a:3f:6b:d4:7c:5d:df:e7:49:26:0b:e0: b9:02:14:ec:73:5c:84:60:ce:56:10:b9:e8:59:36: 5f:32:88:fb:af:d8:e1:4b:9a:08:ab:ec:74:f9:c5: 6e:ec:b3:11:cc:a0:84:7f:86:90:ec:06:91:81:5c: 85:bc:96:6c:67:d0:2a:2f:1b:cc:dd:15:c7:c4:cd: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FF:61:79:00:0B:2F:92:CC:46:D2:E9:E5:11:27:A5:CA:08:DF:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl X509v3 Authority Key Identifier: keyid:2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a8:89:d1:45:fa:10:d1:b3:14:ac:db:24:22:6a:bb:08:d1: 8c:9e:32:3b:9e:66:b9:32:58:d4:1f:07:29:25:02:4e:35:3a: 11:60:64:56:c1:ef:da:00:bc:cc:8a:3f:92:ef:da:ba:de:78: d0:8a:68:23:03:48:9d:b1:b3:7a:e9:e7:b1:7d:85:ca:58:94: 8e:86:0f:af:56:c9:24:95:d7:08:e7:07:56:57:56:cc:33:4c: 43:73:83:e7:3a:cf:24:75:93:c8:f9:11:7b:a3:e8:a9:dc:fd: dc:7e:d6:02:25:d9:fa:90:c9:23:23:0f:19:49:c3:7f:e5:48: 1d:f9:73:08:c6:80:04:5c:32:1e:8b:85:53:ae:19:8a:0e:06: 3f:ad:cf:15:f5:bb:be:61:61:46:46:96:18:2b:f3:7a:aa:63: 27:b7:39:b8:8c:31:73:5b:51:5a:de:4d:6d:14:0f:4c:4c:9a: dc:16:9c:c7:02:8e:7d:66:44:f8:fc:ed:9a:f2:03:be:9d:b9: 94:13:8d:63:90:42:8f:88:aa:a1:3b:75:6b:76:3c:0f:30:3c: 65:e8:20:03:fd:aa:d8:e6:48:27:2a:b4:2a:6a:d2:30:9a:6a: 4a:27:5f:4d:68:b3:d2:50:71:71:e4:75:38:ba:34:e0:11:e2: 14:02:61:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0D87v9MT5W4uP5L0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhZjk1ZjEtOGQwOC00ODg3LWFlMjItNTQ0YTBkMmIz MTZjMB4XDTI2MDIyODE4MDAwNFoXDTI2MDMwMzE4MDAwMFowLzEtMCsGA1UEAxMk MDUzNTY5MjMtODJhYS00YzVjLTlmN2YtYTdjNThlZDI1MGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmuobnBqYUqDQ5A0s7jRZIPz2jZ2uQHc6HyE bx3DBIJ4CK8qSqlxB/p0reckWn8eTnhgmAFf0/TxvNLoJGA/+MikrznZvqNGD0eY xtZsdjhZ7NFzwv4Z6fdI0m5xg19p24b7HYqvOQdpeCApOPu2pXZEN0/dZzFMbfmK 3p4v3MVnQp29No1warIhyp/QilG/H1ftWzGCQcNnF+DKUs+hNWFhbIlAUljpTmFu wRkgAIR2wNIBVKdaP2vUfF3f50kmC+C5AhTsc1yEYM5WELnoWTZfMoj7r9jhS5oI q+x0+cVu7LMRzKCEf4aQ7AaRgVyFvJZsZ9AqLxvM3RXHxM1iYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK//YXkACy+SzEbS6eURJ6XKCN/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFm OTVmMS04ZDA4LTQ4ODctYWUyMi01NDRhMGQyYjMxNmMvY2ZhZjk1ZjEtOGQwOC00 ODg3LWFlMjItNTQ0YTBkMmIzMTZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2ZhZjk1ZjEtOGQwOC00ODg3LWFl MjItNTQ0YTBkMmIzMTZjL2NmYWY5NWYxLThkMDgtNDg4Ny1hZTIyLTU0NGEwZDJi MzE2Yy5jcmwwHwYDVR0jBBgwFoAULdnKfHriUiZs4BntkptikWoqMUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFmOTVmMS04ZDA4LTQ4ODctYWUyMi01NDRh MGQyYjMxNmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdqInRRfoQ0bMUrNskImq7 CNGMnjI7nma5MljUHwcpJQJONToRYGRWwe/aALzMij+S79q63njQimgjA0idsbN6 6eexfYXKWJSOhg+vVskkldcI5wdWV1bMM0xDc4PnOs8kdZPI+RF7o+ip3P3cftYC Jdn6kMkjIw8ZScN/5Ugd+XMIxoAEXDIei4VTrhmKDgY/rc8V9bu+YWFGRpYYK/N6 qmMntzm4jDFzW1Fa3k1tFA9MTJrcFpzHAo59ZkT4/O2a8gO+nbmUE41jkEKPiKqh O3VrdjwPMDxl6CAD/arY5kgnKrQqatIwmmpKJ19NaLPSUHFx5HU4ujTgEeIUAmHS -----END CERTIFICATE-----Generated at Sun Mar 1 18:10:03 2026 by rpki-client