$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft File: 28591b95-39d7-4e54-90f3-1339338b842c.mft (raw, json) Hash identifier: bfCQr8ZYtNyDL+FeZVIbzRx5nvotgjJU2b6CPdl81bg= Subject key identifier: 50:05:38:BE:83:4C:E3:25:35:39:A7:B1:80:A5:95:29:E6:FF:59:22 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584D7DA00EDF9F89477F72249080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft Manifest number: 010D0C9F4328584073A84793D8858966B5716472 Signing time: Mon 13 Apr 2026 08:00:03 +0000 Manifest this update: Mon 13 Apr 2026 08:00:03 +0000 Manifest next update: Wed 15 Apr 2026 08:00:00 +0000 Files and hashes: 1: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (hash: Ywyp/Z3Oo3dOGs20AWLwcvR+SBpOYPIp6X8MF6mlkaU=) 2: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (hash: WoOvVdszUmob6A+O4WIKUpBBCDfkDEi76fAATII1K3g=) 3: 28591b95-39d7-4e54-90f3-1339338b842c.crl (hash: L1z0FYIlSDf5SPGiEfy3YO1XxTsSxQVrT562UAXKgoE=) 4: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (hash: yXIDRAxGl8BjqP1bbni1S3nk7tzs8K4sOBxH5gLU5gI=) 5: a6469a75-3af9-39ef-ae2f-0b913de50d29.roa (hash: NOTJL1uZ/T95ClYcmAnmrqt8lNBqwgmGD1szvDhgn1A=) 6: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (hash: dUBiwJsINuIAqQCurTSo0c9Voflij9d/bbGRMrP9aaQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7d:a0:0e:df:9f:89:47:7f:72:24:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Apr 13 08:00:03 2026 GMT Not After : Apr 15 08:00:00 2026 GMT Subject: CN=be2916dc-393e-48ad-8690-ce83a1b9684a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:61:81:28:33:e6:e4:4a:7d:91:5f:1d:1b:9e: 84:39:89:d0:ab:bb:88:af:0c:5f:9f:7a:eb:fe:15: 5c:45:af:79:0f:8b:eb:78:1c:d2:de:ce:60:e0:e8: 26:a7:37:a0:f7:1a:de:59:4f:61:2f:d9:bc:e9:fa: 56:1c:40:bb:b3:15:dd:60:a9:41:a2:b3:ee:c6:fc: 6f:a7:9b:e1:ee:4d:36:45:42:52:68:80:f9:21:49: 7b:85:2f:29:d2:56:ea:0b:19:f0:48:80:c6:79:5d: 0b:70:34:ce:7c:bb:2e:06:79:74:0b:02:70:a5:7b: 78:16:cc:ea:42:a4:69:1c:fc:35:ac:07:7f:ff:f3: 0d:93:cd:6d:65:90:10:a1:a9:50:01:dd:53:19:18: e8:2c:fe:29:4b:d6:65:b0:c7:06:0c:2c:3c:6c:ad: b7:fe:a8:6d:32:e0:c1:7b:5b:5f:cd:62:dd:8f:5a: b5:6c:5c:e8:a4:25:39:7a:07:5d:cf:eb:1c:b2:66: fb:c3:16:d2:83:28:61:6a:1a:40:a9:bc:56:d6:de: cf:45:59:74:b9:a9:3e:b9:3c:0b:a7:8b:4f:ae:5b: d1:53:4c:f2:2f:33:cf:d8:71:c1:07:a6:e0:36:b9: 4b:81:6a:55:3a:29:97:d4:c4:85:ed:0d:58:ee:05: 64:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:05:38:BE:83:4C:E3:25:35:39:A7:B1:80:A5:95:29:E6:FF:59:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:86:06:4c:e8:63:0f:d5:59:7b:09:64:87:d2:b1:66:ee:86: 1e:25:34:88:51:65:27:67:4c:1f:cc:71:74:0e:30:2b:12:a6: a1:32:06:33:5f:d6:8e:85:7c:77:a9:93:81:7d:f7:f6:75:18: 7f:83:8f:b8:76:a8:be:50:8f:b6:a6:fb:21:3d:30:61:7f:24: 46:52:62:3f:86:2e:52:7e:9d:f0:e3:11:45:c9:e3:4c:da:37: 47:eb:03:c3:dc:2b:cb:c5:36:65:8e:eb:62:fd:bb:96:a6:e7: e0:e4:c5:52:42:75:5e:36:62:fd:8e:16:0b:52:6a:25:d8:76: 1a:f2:96:69:10:86:c8:0f:f5:76:18:f8:66:7a:20:8a:89:c0: 79:42:03:6b:2d:5f:8a:42:d0:44:56:61:cf:ac:9b:fd:20:5c: 5c:8e:96:e6:cf:84:98:7a:36:4f:f4:4d:bf:18:a0:35:f1:d5: a5:cf:8e:17:05:9b:26:0a:d7:e7:4c:a3:b8:47:b8:9b:e0:e8: fc:b8:5b:e3:64:3a:81:e9:1a:06:65:13:47:f9:64:cb:00:60: 66:40:09:66:da:a7:57:24:6e:38:f6:a1:18:3d:2f:14:a5:0b: 4a:d2:46:d6:6f:a2:58:5a:58:63:88:8e:32:66:60:3b:8f:69: 07:af:4e:6c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE19oA7fn4lHf3IkkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI2MDQxMzA4MDAwM1oXDTI2MDQxNTA4MDAwMFowLzEtMCsGA1UEAxMk YmUyOTE2ZGMtMzkzZS00OGFkLTg2OTAtY2U4M2ExYjk2ODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGGBKDPm5Ep9kV8dG56EOYnQq7uIrwxfn3rr /hVcRa95D4vreBzS3s5g4Ogmpzeg9xreWU9hL9m86fpWHEC7sxXdYKlBorPuxvxv p5vh7k02RUJSaID5IUl7hS8p0lbqCxnwSIDGeV0LcDTOfLsuBnl0CwJwpXt4Fszq QqRpHPw1rAd///MNk81tZZAQoalQAd1TGRjoLP4pS9ZlsMcGDCw8bK23/qhtMuDB e1tfzWLdj1q1bFzopCU5egddz+scsmb7wxbSgyhhahpAqbxW1t7PRVl0uak+uTwL p4tPrlvRU0zyLzPP2HHBB6bgNrlLgWpVOimX1MSF7Q1Y7gVkFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFAFOL6DTOMlNTmnsYCllSnm/1kiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvMjg1OTFiOTUtMzlkNy00 ZTU0LTkwZjMtMTMzOTMzOGI4NDJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBehgZM6GMP1Vl7CWSH0rFm 7oYeJTSIUWUnZ0wfzHF0DjArEqahMgYzX9aOhXx3qZOBfff2dRh/g4+4dqi+UI+2 pvshPTBhfyRGUmI/hi5Sfp3w4xFFyeNM2jdH6wPD3CvLxTZljuti/buWpufg5MVS QnVeNmL9jhYLUmol2HYa8pZpEIbID/V2GPhmeiCKicB5QgNrLV+KQtBEVmHPrJv9 IFxcjpbmz4SYejZP9E2/GKA18dWlz44XBZsmCtfnTKO4R7ib4Oj8uFvjZDqB6RoG ZRNH+WTLAGBmQAlm2qdXJG449qEYPS8UpQtK0kbWb6JYWlhjiI4yZmA7j2kHr05s -----END CERTIFICATE-----Generated at Mon Apr 13 16:18:46 2026 by rpki-client