$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft File: 28ab384d-3018-413f-b253-d2f3ef552ffa.mft (raw, json) Hash identifier: z9lIRMiXbXF0spVEAF/y0EgylcvH9BkVpLxPl6JRFsw= Subject key identifier: A0:5E:E6:04:0C:0B:40:41:3B:B6:EF:27:12:74:34:FA:04:DB:5C:09 Authority key identifier: 6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69 Certificate issuer: /CN=28ab384d-3018-413f-b253-d2f3ef552ffa Certificate serial: 010D0C9F4328584BB9D4586E6195BDB049A73540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft Manifest number: 010D0C9F43285845188E40594C1633D6658FF82F Signing time: Sun 02 Nov 2025 12:00:04 +0000 Manifest this update: Sun 02 Nov 2025 12:00:04 +0000 Manifest next update: Wed 05 Nov 2025 12:00:00 +0000 Files and hashes: 1: 28ab384d-3018-413f-b253-d2f3ef552ffa.crl (hash: hA4FVwRkLvOm/LnTGqkGAPzcV2ybpsAZ/BJ6v3mVU20=) 2: f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa (hash: IMpk6alcGqTLNBRQPFfbTeVmDr9+hwvjscUvptC2b3U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b9:d4:58:6e:61:95:bd:b0:49:a7:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ab384d-3018-413f-b253-d2f3ef552ffa Validity Not Before: Nov 2 12:00:04 2025 GMT Not After : Nov 5 12:00:00 2025 GMT Subject: CN=b64923ac-b0c3-4708-a9b3-ded0e36f95a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:72:b4:c7:e9:62:9c:88:d3:16:17:f2:04:9b: d4:6e:4e:73:81:7e:99:17:0f:60:76:53:79:69:cc: b8:38:58:c2:82:e2:d1:0e:5e:75:2e:d9:92:1f:a3: ad:a1:7f:32:59:e4:ae:6e:b8:1f:6e:cf:21:81:00: 15:82:6a:66:31:83:a6:5e:65:05:f6:75:05:f2:3a: d7:79:80:dc:a3:75:65:2c:0e:f0:04:59:17:8c:3b: 52:13:c6:48:a2:7c:39:6a:1d:1b:1f:9d:1c:d9:d6: 33:3e:ad:62:ca:50:3b:7a:a1:5a:8f:78:4d:d7:54: 46:7a:b9:3f:32:a7:3f:a1:43:92:9f:7c:f0:8d:9c: 46:74:e4:e5:68:9b:04:63:b1:85:81:83:78:41:77: ad:90:6e:61:d5:4d:2b:0f:80:37:82:94:72:de:f1: 23:81:0a:b1:ea:e0:c1:1f:43:64:97:18:f7:3c:21: ae:86:37:b7:8f:5c:20:ba:74:0c:6a:ba:ed:e5:24: 4a:30:74:21:f6:df:c2:eb:77:82:4b:04:85:f1:01: cb:57:a6:7c:8d:a6:c7:ee:7f:5f:c6:a1:3f:72:35: da:8e:d5:c7:20:52:67:12:f4:91:8a:dd:7b:b5:31: fc:a5:de:93:a9:38:40:cb:fd:bc:79:ac:fb:0b:25: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5E:E6:04:0C:0B:40:41:3B:B6:EF:27:12:74:34:FA:04:DB:5C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl X509v3 Authority Key Identifier: keyid:6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:97:d5:32:bb:7e:58:7e:e0:30:65:2f:69:f0:d1:ea:29:2e: df:63:52:43:7d:d4:bf:c5:a3:28:32:98:bb:59:bd:0c:7a:78: db:d5:32:08:a1:2c:09:83:ca:de:8f:70:f7:d3:15:0b:45:6e: d1:cd:31:7a:e4:c7:09:21:56:ce:04:35:38:62:91:c9:7c:21: a7:28:f8:66:42:b9:7d:83:20:d2:73:f6:f2:8f:03:d9:4b:47: 74:d8:ec:33:f5:9c:08:12:54:8e:f0:13:bf:1e:62:2d:98:98: 0f:d7:43:ba:46:ab:84:2c:14:13:36:c6:73:d4:3e:4f:98:7f: e5:13:29:ae:76:8b:7c:f9:90:37:66:97:45:da:c1:5e:73:52: e9:52:9f:db:22:80:6d:7e:6f:65:7f:74:df:40:4d:55:79:c7: 19:83:cb:55:77:ad:5f:a4:c5:0a:33:0e:d8:75:cc:5a:cc:61: 16:a1:8d:85:30:e8:f5:f3:75:91:23:93:46:1d:9f:f4:32:28: 36:20:51:d0:41:3d:99:01:3a:4e:3d:27:6e:98:6e:30:ed:4d: 6c:e4:75:e6:35:a7:74:cb:0e:b7:fb:d8:06:9f:0b:7d:43:bd: b9:15:01:d8:a3:bf:fd:d9:1c:6d:de:14:73:1d:b5:70:c4:58: 93:b2:d7:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu51FhuYZW9sEmnNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYjM4NGQtMzAxOC00MTNmLWIyNTMtZDJmM2VmNTUy ZmZhMB4XDTI1MTEwMjEyMDAwNFoXDTI1MTEwNTEyMDAwMFowLzEtMCsGA1UEAxMk YjY0OTIzYWMtYjBjMy00NzA4LWE5YjMtZGVkMGUzNmY5NWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHK0x+linIjTFhfyBJvUbk5zgX6ZFw9gdlN5 acy4OFjCguLRDl51LtmSH6OtoX8yWeSubrgfbs8hgQAVgmpmMYOmXmUF9nUF8jrX eYDco3VlLA7wBFkXjDtSE8ZIonw5ah0bH50c2dYzPq1iylA7eqFaj3hN11RGerk/ Mqc/oUOSn3zwjZxGdOTlaJsEY7GFgYN4QXetkG5h1U0rD4A3gpRy3vEjgQqx6uDB H0Nklxj3PCGuhje3j1wgunQMarrt5SRKMHQh9t/C63eCSwSF8QHLV6Z8jabH7n9f xqE/cjXajtXHIFJnEvSRit17tTH8pd6TqThAy/28eaz7CyUWHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKBe5gQMC0BBO7bvJxJ0NPoE21wJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFi Mzg0ZC0zMDE4LTQxM2YtYjI1My1kMmYzZWY1NTJmZmEvMjhhYjM4NGQtMzAxOC00 MTNmLWIyNTMtZDJmM2VmNTUyZmZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYjM4NGQtMzAxOC00MTNmLWIy NTMtZDJmM2VmNTUyZmZhLzI4YWIzODRkLTMwMTgtNDEzZi1iMjUzLWQyZjNlZjU1 MmZmYS5jcmwwHwYDVR0jBBgwFoAUbrd4ypCvJHlzNL90WIplampfKGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFiMzg0ZC0zMDE4LTQxM2YtYjI1My1kMmYz ZWY1NTJmZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCvl9Uyu35YfuAwZS9p8NHq KS7fY1JDfdS/xaMoMpi7Wb0Menjb1TIIoSwJg8rej3D30xULRW7RzTF65McJIVbO BDU4YpHJfCGnKPhmQrl9gyDSc/byjwPZS0d02Owz9ZwIElSO8BO/HmItmJgP10O6 RquELBQTNsZz1D5PmH/lEymudot8+ZA3ZpdF2sFec1LpUp/bIoBtfm9lf3TfQE1V eccZg8tVd61fpMUKMw7YdcxazGEWoY2FMOj183WRI5NGHZ/0Mig2IFHQQT2ZATpO PSdumG4w7U1s5HXmNad0yw63+9gGnwt9Q725FQHYo7/92Rxt3hRzHbVwxFiTsteS -----END CERTIFICATE-----Generated at Sun Nov 2 19:53:04 2025 by rpki-client