$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft File: cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft (raw, json) Hash identifier: xcOZjQvOICJgj29qBHSiqChlsTYZSE02JDCpOb76GuA= Subject key identifier: 89:40:D0:B9:04:5A:A5:85:96:35:48:68:97:0C:68:7A:CA:B1:AA:13 Authority key identifier: 43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 Certificate issuer: /CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Certificate serial: 010D0C9F4328584D87BECB578BF7182673DE3280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft Manifest number: 010D0C9F4328584ACB090E855DD5D7EE923FD481 Signing time: Thu 16 Apr 2026 23:00:03 +0000 Manifest this update: Thu 16 Apr 2026 23:00:03 +0000 Manifest next update: Sat 18 Apr 2026 23:00:00 +0000 Files and hashes: 1: cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl (hash: XOUepPdmjSb47dbKZoE4MvGkHdOLbwkB2OR1n6hHrsk=) 2: eb089fd3-de83-32fc-94eb-491970ba886f.roa (hash: MDdXNQfl1YAtg7IccgM530AYjQ8UDiVOP9W2dtHBqr0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:be:cb:57:8b:f7:18:26:73:de:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Validity Not Before: Apr 16 23:00:03 2026 GMT Not After : Apr 18 23:00:00 2026 GMT Subject: CN=c6e242a8-dfb9-4be4-a089-4044263d5177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:77:91:66:6b:2d:b3:16:65:dd:bc:35:cd:f2: 11:82:5c:c6:6d:7b:43:0b:92:0e:01:aa:fc:af:d4: d5:9a:46:74:41:4d:8d:fa:a8:c0:ab:90:61:4d:c6: 48:3c:f4:e8:4d:86:8d:49:fa:bb:db:e8:92:92:62: ec:eb:88:c8:ac:78:4a:51:4a:3e:69:f2:ca:bc:26: e4:c3:17:c3:0c:8b:3d:9b:f2:d9:db:51:32:b7:26: 0a:6b:af:af:20:f0:01:08:d4:c4:84:0c:fd:ba:0b: ed:9a:4f:a8:8f:6f:b0:54:b2:a9:25:71:7f:60:09: 9c:72:be:ed:1f:0a:23:8c:d9:93:59:bf:26:94:db: 57:f8:25:c5:fc:4e:46:02:57:e8:57:c6:1a:e2:87: c0:7d:21:98:70:51:eb:a6:3a:12:1d:a8:a0:f6:e0: b5:7e:51:d6:c7:78:c8:b9:bb:5d:11:23:99:5e:c7: 72:0b:71:7f:83:4c:7a:89:14:72:7b:18:fd:6b:68: 6c:b2:00:52:06:5a:c0:7d:1a:e9:63:96:b7:d2:cc: 41:9a:6f:33:23:ce:44:89:ca:24:14:36:f2:46:b3: 85:65:4d:7b:29:01:0e:69:a3:ec:2b:3e:68:13:d5: fe:8e:72:bb:8c:34:2e:d8:a2:0e:3d:ca:68:08:af: b5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:40:D0:B9:04:5A:A5:85:96:35:48:68:97:0C:68:7A:CA:B1:AA:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl X509v3 Authority Key Identifier: keyid:43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ae:33:6a:57:a6:f9:6f:16:2b:ef:07:5e:c9:7c:69:1a:1f: 1a:a2:62:55:b3:2f:91:e4:58:da:69:ba:ee:9e:9c:33:59:cb: 31:6e:dd:8c:12:66:99:55:18:84:ce:13:01:9d:43:dc:76:a9: 81:ab:c9:09:a5:42:71:5a:c2:4e:ea:61:4e:d3:42:c4:0a:a9: b5:4a:50:e9:b6:d2:6d:98:5c:34:cd:21:5b:ab:35:91:a4:45: 9b:87:d0:c9:bf:26:82:8c:89:8d:74:6e:da:bf:a8:a8:11:25: b0:22:c1:67:1b:8f:d9:d1:30:6c:c9:1a:32:0b:98:a4:f4:ac: 7b:35:2b:15:4c:7a:e4:d6:86:30:d8:17:d5:4a:82:dc:26:c4: c5:ce:6c:b4:1a:bc:0a:3e:19:b4:10:bc:68:2b:1f:0a:a6:dc: 58:89:7e:9a:2d:1f:33:34:77:db:bd:85:89:a2:fa:ed:1b:97: c3:fb:70:71:7d:c3:33:ef:42:d8:1f:67:80:13:eb:93:31:91: 65:51:6e:b6:8e:18:3c:37:cd:43:93:71:ac:8c:ba:75:cf:7a: fe:8a:91:d3:5b:46:cb:fc:9e:cd:46:0d:00:20:29:9c:6e:fd: 43:8d:89:0b:89:57:ad:4a:eb:38:a5:bf:8c:a0:34:12:f5:e4: f3:13:ac:5f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HvstXi/cYJnPeMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhYWVkOTAtY2U2OC00ZTIyLTg3MGItN2I3ZDg2ZTk0 OWUwMB4XDTI2MDQxNjIzMDAwM1oXDTI2MDQxODIzMDAwMFowLzEtMCsGA1UEAxMk YzZlMjQyYTgtZGZiOS00YmU0LWEwODktNDA0NDI2M2Q1MTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHeRZmstsxZl3bw1zfIRglzGbXtDC5IOAar8 r9TVmkZ0QU2N+qjAq5BhTcZIPPToTYaNSfq72+iSkmLs64jIrHhKUUo+afLKvCbk wxfDDIs9m/LZ21EytyYKa6+vIPABCNTEhAz9ugvtmk+oj2+wVLKpJXF/YAmccr7t HwojjNmTWb8mlNtX+CXF/E5GAlfoV8Ya4ofAfSGYcFHrpjoSHaig9uC1flHWx3jI ubtdESOZXsdyC3F/g0x6iRRyexj9a2hssgBSBlrAfRrpY5a30sxBmm8zI85Eicok FDbyRrOFZU17KQEOaaPsKz5oE9X+jnK7jDQu2KIOPcpoCK+1PQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIlA0LkEWqWFljVIaJcMaHrKsaoTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFh ZWQ5MC1jZTY4LTRlMjItODcwYi03YjdkODZlOTQ5ZTAvY2ZhYWVkOTAtY2U2OC00 ZTIyLTg3MGItN2I3ZDg2ZTk0OWUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2ZhYWVkOTAtY2U2OC00ZTIyLTg3 MGItN2I3ZDg2ZTk0OWUwL2NmYWFlZDkwLWNlNjgtNGUyMi04NzBiLTdiN2Q4NmU5 NDllMC5jcmwwHwYDVR0jBBgwFoAUQ1d28aCRQRKJ6nwwWq3ggQNAXicwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFhZWQ5MC1jZTY4LTRlMjItODcwYi03Yjdk ODZlOTQ5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBirjNqV6b5bxYr7wdeyXxp Gh8aomJVsy+R5FjaabrunpwzWcsxbt2MEmaZVRiEzhMBnUPcdqmBq8kJpUJxWsJO 6mFO00LECqm1SlDpttJtmFw0zSFbqzWRpEWbh9DJvyaCjImNdG7av6ioESWwIsFn G4/Z0TBsyRoyC5ik9Kx7NSsVTHrk1oYw2BfVSoLcJsTFzmy0GrwKPhm0ELxoKx8K ptxYiX6aLR8zNHfbvYWJovrtG5fD+3BxfcMz70LYH2eAE+uTMZFlUW62jhg8N81D k3GsjLp1z3r+ipHTW0bL/J7NRg0AICmcbv1DjYkLiVetSus4pb+MoDQS9eTzE6xf -----END CERTIFICATE-----Generated at Fri Apr 17 16:34:00 2026 by rpki-client