$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft File: 28168b94-cad8-4dae-a00d-057ac35417a3.mft (raw, json) Hash identifier: nmQbK69chpncoj23fyQ7EQyHrKzB3gXce8np1fwqkk0= Subject key identifier: 2D:4B:6C:A8:19:5E:07:1F:97:DC:99:BD:48:27:52:23:5B:E9:78:77 Authority key identifier: 16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89 Certificate issuer: /CN=28168b94-cad8-4dae-a00d-057ac35417a3 Certificate serial: 010D0C9F4328584DB59383BD632AD18BB2CDF600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft Manifest number: 010D0C9F4328584073A84AF6A0544A9F4F7A37A5 Signing time: Sun 03 May 2026 09:00:03 +0000 Manifest this update: Sun 03 May 2026 09:00:03 +0000 Manifest next update: Tue 05 May 2026 09:00:00 +0000 Files and hashes: 1: 28168b94-cad8-4dae-a00d-057ac35417a3.crl (hash: vz41oK3s8LzpJUBd7wXF4CwAbA+HprOLnnmDddH62nw=) 2: 49085c64-f3ef-35b0-8fbf-8ca6b36b4df0.roa (hash: /UGA5p6TYKRSVNuU9qocuWNpF8ZabuBSTL9wfdz4BVM=) 3: 59ba3509-76c2-3b16-9160-b70599626c49.roa (hash: nA9pFQuS+vSeHk09veZmDiZU9TvjZXUeYy2mlXtWzco=) 4: b6b08a1d-c41b-3032-ac31-e83eadb7b68d.roa (hash: veltee2avPavDLi0B+nCNCYaSNTYweLLeB7PsAvsZ2A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b5:93:83:bd:63:2a:d1:8b:b2:cd:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28168b94-cad8-4dae-a00d-057ac35417a3 Validity Not Before: May 3 09:00:03 2026 GMT Not After : May 5 09:00:00 2026 GMT Subject: CN=cb1934d4-bb8b-4313-a0fa-1194b2e28c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:9d:9d:1c:fe:1b:71:ee:97:01:93:e1:91: 4a:40:e6:39:db:3e:ca:8e:73:f9:15:fd:93:91:1d: 37:fd:4f:a3:8d:a5:bb:d7:2e:da:da:36:07:ce:70: 61:b3:ca:83:d9:11:7f:bb:d6:fa:6f:5b:24:00:ac: b3:6b:ab:b2:b2:82:12:db:5d:90:2f:7e:15:d1:76: 4d:9f:d7:9f:fb:e0:79:95:46:cb:5d:c9:4e:6a:56: e8:7a:f5:b2:00:8b:50:cb:41:83:c6:1c:51:1c:1d: 5f:5e:e3:18:dc:8a:1b:f7:c2:03:ac:d4:bf:4c:68: 80:46:f7:4d:78:3d:df:21:69:45:24:3b:03:4c:c2: 03:1c:67:2f:cb:b2:98:3f:b7:c8:30:af:90:38:87: 28:d9:c7:ec:4e:12:0c:7a:d8:3c:be:f0:60:ed:9d: 11:eb:5c:1a:82:b7:fa:18:fe:c9:20:ca:6a:c5:6d: bc:8f:a1:45:74:5d:97:0a:1a:5a:d1:1a:20:67:8b: 8b:0a:bc:fb:35:48:8a:71:96:20:f9:ab:8a:4e:0d: 09:6c:db:45:8e:fc:4f:42:f8:88:79:be:b4:7f:1e: 3f:f0:e1:ba:4c:44:6b:cc:cc:40:f5:df:54:5e:b8: e1:8f:66:ae:3c:89:cd:c9:11:8a:e0:7d:3c:f1:6b: a1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4B:6C:A8:19:5E:07:1F:97:DC:99:BD:48:27:52:23:5B:E9:78:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl X509v3 Authority Key Identifier: keyid:16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:38:50:08:97:5b:eb:7c:f6:3f:7e:fc:05:ef:b2:eb:13:e0: 7d:95:a7:bf:d0:ef:dc:05:c1:cb:a3:0a:c9:52:23:92:83:83: d5:de:f8:ed:a8:b7:e4:47:e1:22:3d:7f:9c:ec:b1:f0:d0:f5: bd:29:c3:ab:7c:2c:9f:89:26:08:84:7f:9c:5b:5c:b7:30:ae: 2c:31:1a:61:68:d8:96:52:d9:30:91:89:47:fe:14:31:6d:4b: dc:f3:1a:93:cf:5e:47:71:01:65:ac:22:d6:4b:5c:35:c8:3a: ac:40:63:37:00:c7:52:ea:30:49:ca:8a:e4:c8:c2:fb:0d:fd: 36:10:5b:85:f4:30:e7:ab:d2:32:c7:8a:3f:6a:90:c2:1a:21: 53:5c:04:e6:b7:ed:17:c6:91:88:c4:28:bc:f6:d0:0f:e1:26: 7a:33:0b:c4:c5:3f:65:f6:ce:d4:23:ab:c1:78:dd:07:d3:8a: bb:4c:9a:14:7b:e9:aa:df:a6:0f:8b:48:0f:60:77:21:41:5b: bd:10:c4:8d:82:6f:fc:f1:bf:d9:c0:53:15:8e:3c:8b:5b:70: c8:f5:8e:48:ad:3b:2e:77:b2:bc:9b:60:2e:ea:22:e3:2e:b6: e9:73:d2:2b:bf:69:65:c5:74:31:f7:f9:51:8f:60:d0:89:46: 8a:8d:02:38 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE21k4O9YyrRi7LN9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxNjhiOTQtY2FkOC00ZGFlLWEwMGQtMDU3YWMzNTQx N2EzMB4XDTI2MDUwMzA5MDAwM1oXDTI2MDUwNTA5MDAwMFowLzEtMCsGA1UEAxMk Y2IxOTM0ZDQtYmI4Yi00MzEzLWEwZmEtMTE5NGIyZTI4YzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrednRz+G3HulwGT4ZFKQOY52z7KjnP5Ff2T kR03/U+jjaW71y7a2jYHznBhs8qD2RF/u9b6b1skAKyza6uysoIS212QL34V0XZN n9ef++B5lUbLXclOalboevWyAItQy0GDxhxRHB1fXuMY3Iob98IDrNS/TGiARvdN eD3fIWlFJDsDTMIDHGcvy7KYP7fIMK+QOIco2cfsThIMetg8vvBg7Z0R61wagrf6 GP7JIMpqxW28j6FFdF2XChpa0RogZ4uLCrz7NUiKcZYg+auKTg0JbNtFjvxPQviI eb60fx4/8OG6TERrzMxA9d9UXrjhj2auPInNyRGK4H088WuhlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC1LbKgZXgcfl9yZvUgnUiNb6Xh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODE2 OGI5NC1jYWQ4LTRkYWUtYTAwZC0wNTdhYzM1NDE3YTMvMjgxNjhiOTQtY2FkOC00 ZGFlLWEwMGQtMDU3YWMzNTQxN2EzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjgxNjhiOTQtY2FkOC00ZGFlLWEw MGQtMDU3YWMzNTQxN2EzLzI4MTY4Yjk0LWNhZDgtNGRhZS1hMDBkLTA1N2FjMzU0 MTdhMy5jcmwwHwYDVR0jBBgwFoAUFh2BYtQZNgHN9Q6vk+u3mHq99YkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODE2OGI5NC1jYWQ4LTRkYWUtYTAwZC0wNTdh YzM1NDE3YTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6OFAIl1vrfPY/fvwF77Lr E+B9lae/0O/cBcHLowrJUiOSg4PV3vjtqLfkR+EiPX+c7LHw0PW9KcOrfCyfiSYI hH+cW1y3MK4sMRphaNiWUtkwkYlH/hQxbUvc8xqTz15HcQFlrCLWS1w1yDqsQGM3 AMdS6jBJyorkyML7Df02EFuF9DDnq9Iyx4o/apDCGiFTXATmt+0XxpGIxCi89tAP 4SZ6MwvExT9l9s7UI6vBeN0H04q7TJoUe+mq36YPi0gPYHchQVu9EMSNgm/88b/Z wFMVjjyLW3DI9Y5IrTsud7K8m2Au6iLjLrbpc9Irv2llxXQx9/lRj2DQiUaKjQI4 -----END CERTIFICATE-----Generated at Sun May 3 22:04:10 2026 by rpki-client