$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft File: cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft (raw, json) Hash identifier: xPf0Z+SwrWoqHTGmosUHqGngb4J8IcbGaDKlQY7vsZ0= Subject key identifier: 4D:3A:36:80:50:B7:3B:7A:6F:EB:7D:27:BC:FE:46:35:0B:DE:76:35 Authority key identifier: 43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 Certificate issuer: /CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Certificate serial: 010D0C9F4328584EA480C8A24A3FBE045EDB4000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft Manifest number: 010D0C9F4328584ACB090E855DD5D7EE923FD4E9 Signing time: Mon 27 Jul 2026 23:00:22 +0000 Manifest this update: Mon 27 Jul 2026 23:00:22 +0000 Manifest next update: Wed 29 Jul 2026 23:00:00 +0000 Files and hashes: 1: cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl (hash: pFPvZq1Lhu2D3EBcW2BcjMmRA2quCf9xcBg4K/iamew=) 2: eb089fd3-de83-32fc-94eb-491970ba886f.roa (hash: Yq70P/gVD3u2ZOvq4qnxgCikRuDmDwpSYRbaM2Dbnbo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:80:c8:a2:4a:3f:be:04:5e:db:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Validity Not Before: Jul 27 23:00:22 2026 GMT Not After : Jul 29 23:00:00 2026 GMT Subject: CN=a9c39ea2-e74c-472a-8b64-7d22b55d091f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:70:60:20:e5:94:b9:3c:15:30:14:79:df:cf: 92:e8:50:3e:66:d7:07:b0:66:de:f7:53:68:3e:f5: a8:5f:dd:e3:68:2e:ba:a6:be:44:63:ed:1b:22:7a: ff:2f:73:d7:65:0c:7b:4b:18:ba:d3:22:1c:7c:60: cb:63:33:42:b9:2b:f4:1d:f4:17:d2:05:b4:0f:90: 51:9f:f6:3f:2c:c7:b2:c9:98:41:05:2c:5a:2b:fd: f5:c0:52:c5:e3:4d:59:b8:e9:e4:13:54:c9:f2:26: 8c:2b:28:a9:4c:20:3a:6e:a6:0d:5c:f3:fb:d9:fe: f3:bb:89:1f:83:a5:54:4a:ad:f3:1c:a0:81:70:13: fc:56:f8:97:d7:a3:fa:1c:af:e5:f9:20:14:8f:dc: bb:dc:14:d5:77:81:f7:45:64:48:47:7c:08:d8:64: ff:ab:e1:b7:db:10:70:02:f4:09:2c:ed:79:88:5f: 53:4d:08:82:0f:ba:0a:e5:b6:14:3d:f5:de:9f:36: 1c:98:4c:4a:b4:4c:3f:5b:87:44:21:9d:b6:f5:b1: 4f:97:ba:ba:95:6f:bb:42:a2:47:48:6c:3e:05:ae: 80:21:30:55:04:ec:17:2d:d2:ef:be:be:02:5a:36: 18:8f:ab:61:f9:c1:df:ff:f8:d7:08:12:7f:dc:11: f4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3A:36:80:50:B7:3B:7A:6F:EB:7D:27:BC:FE:46:35:0B:DE:76:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl X509v3 Authority Key Identifier: keyid:43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:93:3b:05:8b:14:9a:10:a1:f8:7b:03:75:e3:12:bd:27:15: 4e:07:93:ae:9e:36:99:8b:d2:1c:89:21:63:20:0f:8a:05:1e: 8c:e3:2a:eb:4e:1a:7d:0e:9b:1e:ee:94:74:38:01:26:c5:28: 7c:02:fb:6b:42:d1:22:bc:42:a4:5a:58:ab:37:df:9f:16:a2: 1a:53:1c:ed:52:e3:90:cc:8e:af:b6:bb:ad:46:7c:c3:7d:77: b5:44:12:f2:62:ba:a5:80:6c:4b:f8:a4:e3:f9:b3:97:76:19: 74:27:5e:e8:28:d9:0e:d6:61:76:71:72:09:56:8f:dc:dc:a2: 40:ec:47:95:66:8e:92:73:bb:95:b6:a4:0e:5f:d2:a6:ce:65: 70:7b:bc:c6:0d:16:e9:c3:89:5a:75:56:93:e6:3f:ba:47:73: 55:63:b4:54:56:99:2c:a7:46:d5:ab:49:7b:25:e7:88:89:24: b9:92:48:67:98:1b:e2:2d:5f:7c:d8:3b:1e:7a:01:ca:62:8c: f5:0a:3b:0a:ce:70:9e:bd:14:53:0f:15:65:9d:8c:86:39:55: 07:c1:28:c3:7b:f3:68:47:58:c0:05:94:43:a2:7c:d0:32:71: f1:77:d0:09:50:aa:01:8e:fa:ef:d0:22:03:58:d3:b5:ea:49: fd:ea:e1:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6kgMiiSj++BF7bQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhYWVkOTAtY2U2OC00ZTIyLTg3MGItN2I3ZDg2ZTk0 OWUwMB4XDTI2MDcyNzIzMDAyMloXDTI2MDcyOTIzMDAwMFowLzEtMCsGA1UEAxMk YTljMzllYTItZTc0Yy00NzJhLThiNjQtN2QyMmI1NWQwOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHBgIOWUuTwVMBR538+S6FA+ZtcHsGbe91No PvWoX93jaC66pr5EY+0bInr/L3PXZQx7Sxi60yIcfGDLYzNCuSv0HfQX0gW0D5BR n/Y/LMeyyZhBBSxaK/31wFLF401ZuOnkE1TJ8iaMKyipTCA6bqYNXPP72f7zu4kf g6VUSq3zHKCBcBP8VviX16P6HK/l+SAUj9y73BTVd4H3RWRIR3wI2GT/q+G32xBw AvQJLO15iF9TTQiCD7oK5bYUPfXenzYcmExKtEw/W4dEIZ229bFPl7q6lW+7QqJH SGw+Ba6AITBVBOwXLdLvvr4CWjYYj6th+cHf//jXCBJ/3BH0/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE06NoBQtzt6b+t9J7z+RjUL3nY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFh ZWQ5MC1jZTY4LTRlMjItODcwYi03YjdkODZlOTQ5ZTAvY2ZhYWVkOTAtY2U2OC00 ZTIyLTg3MGItN2I3ZDg2ZTk0OWUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2ZhYWVkOTAtY2U2OC00ZTIyLTg3 MGItN2I3ZDg2ZTk0OWUwL2NmYWFlZDkwLWNlNjgtNGUyMi04NzBiLTdiN2Q4NmU5 NDllMC5jcmwwHwYDVR0jBBgwFoAUQ1d28aCRQRKJ6nwwWq3ggQNAXicwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFhZWQ5MC1jZTY4LTRlMjItODcwYi03Yjdk ODZlOTQ5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARkzsFixSaEKH4ewN14xK9 JxVOB5OunjaZi9IciSFjIA+KBR6M4yrrThp9Dpse7pR0OAEmxSh8AvtrQtEivEKk WlirN9+fFqIaUxztUuOQzI6vtrutRnzDfXe1RBLyYrqlgGxL+KTj+bOXdhl0J17o KNkO1mF2cXIJVo/c3KJA7EeVZo6Sc7uVtqQOX9KmzmVwe7zGDRbpw4ladVaT5j+6 R3NVY7RUVpksp0bVq0l7JeeIiSS5kkhnmBviLV982DseegHKYoz1CjsKznCevRRT DxVlnYyGOVUHwSjDe/NoR1jABZRDonzQMnHxd9AJUKoBjvrv0CIDWNO16kn96uHp -----END CERTIFICATE-----Generated at Tue Jul 28 19:32:14 2026 by rpki-client