$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft File: cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft (raw, json) Hash identifier: 9K4VpNyjbDwtvemh1gLKXZo/sm/w5fsWlzVhOP4gdAQ= Subject key identifier: 08:31:F4:0B:55:69:8B:65:6F:E2:6D:E6:9E:CB:BA:63:DC:A4:F4:71 Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Certificate serial: 010D0C9F4328584D8DCB433C48FFD7634B7F3A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft Manifest number: 010D0C9F4328584073A83A05DB045E275779D6EB Signing time: Sun 19 Apr 2026 03:00:03 +0000 Manifest this update: Sun 19 Apr 2026 03:00:03 +0000 Manifest next update: Tue 21 Apr 2026 03:00:00 +0000 Files and hashes: 1: 80176c29-2db4-33cf-b400-b52a4a80cd03.roa (hash: FmlcM2GoNTzwJVnRN8bIAHPz1HVPOJ0TqFO9wol3o1Y=) 2: b07e1f60-f694-3dd8-b507-9eb1a932eb67.roa (hash: DFuyWVZ0FA174QUd6G207ivPgHVsPtKNs92PrcsTUdo=) 3: c0423400-0048-3038-acb3-c7d67eb17923.roa (hash: WIuwAEE8qxThtptv4mv8o3KjYzWmYbNVpvrpBfgz5JU=) 4: cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl (hash: mZMWhSa0zUrPvbgBGxB1GLMP8fje7dBR/69PzigVQ78=) 5: d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa (hash: RduNrJmhFtpQI3FhOi75vP+H9Qt801sWWK/NIqex6AM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:cb:43:3c:48:ff:d7:63:4b:7f:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Validity Not Before: Apr 19 03:00:03 2026 GMT Not After : Apr 21 03:00:00 2026 GMT Subject: CN=eb2b81ed-c706-405e-b1fa-6f805b935cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:43:5b:02:00:6d:58:fd:40:ae:7e:f5:45:f8: 02:72:e9:92:8e:3c:ed:2b:4c:52:e2:9a:5f:e0:cc: 55:b6:f3:13:08:77:b5:16:e8:b7:06:f2:ee:1c:f5: 84:50:e9:b0:7e:bc:ad:4d:b3:e9:4e:64:a9:8a:c3: 51:a2:8c:47:78:56:ee:69:2b:78:71:83:71:d5:75: e4:1c:8c:2b:2d:35:a7:9e:ab:a9:1e:b6:a5:10:0b: 4c:9f:04:cf:e2:c0:d2:e6:27:45:92:39:c0:15:35: bd:3a:7b:f2:00:78:e4:3f:94:2d:84:65:08:c0:23: 26:a9:73:ae:e8:7a:7f:46:e5:c9:83:ac:8a:8e:85: 65:1a:40:ec:c8:24:38:68:16:77:cd:00:8d:90:19: 2f:2b:52:59:62:d8:d4:d1:29:d8:dc:cc:70:52:b4: 35:fd:67:f9:f5:70:91:dd:ca:eb:0d:d9:0b:46:73: 5f:73:6e:4d:e0:9f:3f:f2:e4:06:f2:96:ed:ce:12: 96:fd:0e:d4:7e:2d:74:9c:71:6e:89:82:e1:c4:b5: fc:cb:15:ee:e8:cb:ee:5b:b3:51:9b:45:99:c5:ad: 54:91:89:58:c7:5a:ed:28:47:55:6d:24:fd:eb:9e: 40:94:da:e1:ad:8d:8e:5e:79:b1:5b:1f:e2:e6:bd: 29:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:31:F4:0B:55:69:8B:65:6F:E2:6D:E6:9E:CB:BA:63:DC:A4:F4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl X509v3 Authority Key Identifier: keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d7:83:c2:97:bf:b5:62:79:89:cf:57:69:c8:45:93:25:76: 10:c3:eb:16:04:68:5a:7a:62:2b:92:04:2d:b0:f5:03:54:c2: bc:7b:f4:f6:28:58:21:ab:5e:0d:8f:8c:1a:b6:3b:9c:14:02: 1c:9d:eb:59:8d:3d:c2:e6:f1:43:55:ec:45:a1:27:17:f9:e1: 57:5b:04:75:2b:55:3c:89:34:fa:42:17:30:bf:83:d7:70:f9: 0d:4b:91:0a:50:4d:cb:09:d3:93:d0:f4:16:e6:db:7e:86:a9: 50:1e:c0:e2:b2:4e:35:93:f1:da:ce:95:bb:24:c6:b9:e8:c6: bc:d7:34:cc:6c:e5:bd:f4:ee:06:ae:e3:a9:31:75:10:87:7c: df:23:fa:6a:3c:2d:7e:f1:84:18:4c:54:47:41:9b:c4:e2:e2: 17:43:2d:8b:46:72:d1:68:1c:94:41:80:32:85:cb:0a:1e:03: 72:66:9d:9a:d9:07:17:a8:8c:9e:fb:3e:47:96:3e:9d:0c:63: 51:e2:d9:2d:99:37:2d:15:f2:e1:c5:5a:89:37:f0:bc:79:c9: 67:63:b0:a4:de:5d:76:f7:a9:eb:e2:98:85:b1:79:9e:2a:3b: 2f:9f:55:82:2e:1d:88:9c:fd:e0:b8:3c:1e:11:c8:53:99:8d: 4d:de:12:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Ny0M8SP/XY0t/OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYw NTdhMB4XDTI2MDQxOTAzMDAwM1oXDTI2MDQyMTAzMDAwMFowLzEtMCsGA1UEAxMk ZWIyYjgxZWQtYzcwNi00MDVlLWIxZmEtNmY4MDViOTM1Y2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkNbAgBtWP1Arn71RfgCcumSjjztK0xS4ppf 4MxVtvMTCHe1Fui3BvLuHPWEUOmwfrytTbPpTmSpisNRooxHeFbuaSt4cYNx1XXk HIwrLTWnnqupHralEAtMnwTP4sDS5idFkjnAFTW9OnvyAHjkP5QthGUIwCMmqXOu 6Hp/RuXJg6yKjoVlGkDsyCQ4aBZ3zQCNkBkvK1JZYtjU0SnY3MxwUrQ1/Wf59XCR 3crrDdkLRnNfc25N4J8/8uQG8pbtzhKW/Q7Ufi10nHFuiYLhxLX8yxXu6MvuW7NR m0WZxa1UkYlYx1rtKEdVbST9655AlNrhrY2OXnmxWx/i5r0pmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAgx9AtVaYtlb+Jt5p7LumPcpPRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZl MzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvY2JmZTMzYTgtNjFiOC00 ZTNkLWFjNzUtNmEzY2RlMmYwNTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JmZTMzYTgtNjFiOC00ZTNkLWFj NzUtNmEzY2RlMmYwNTdhL2NiZmUzM2E4LTYxYjgtNGUzZC1hYzc1LTZhM2NkZTJm MDU3YS5jcmwwHwYDVR0jBBgwFoAUBj/6j7Ngvw6CCzIXp8vTb1pEE6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNj ZGUyZjA1N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBG14PCl7+1YnmJz1dpyEWT JXYQw+sWBGhaemIrkgQtsPUDVMK8e/T2KFghq14Nj4watjucFAIcnetZjT3C5vFD VexFoScX+eFXWwR1K1U8iTT6Qhcwv4PXcPkNS5EKUE3LCdOT0PQW5tt+hqlQHsDi sk41k/HazpW7JMa56Ma81zTMbOW99O4GruOpMXUQh3zfI/pqPC1+8YQYTFRHQZvE 4uIXQy2LRnLRaByUQYAyhcsKHgNyZp2a2QcXqIye+z5Hlj6dDGNR4tktmTctFfLh xVqJN/C8eclnY7Ck3l1296nr4piFsXmeKjsvn1WCLh2InP3guDweEchTmY1N3hID -----END CERTIFICATE-----Generated at Sun Apr 19 08:48:51 2026 by rpki-client