$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft File: 28ab384d-3018-413f-b253-d2f3ef552ffa.mft (raw, json) Hash identifier: rQbbW1inUPQunQqDT0HiWEpWroIkNDgUhzuDqqnQzJo= Subject key identifier: 47:9D:B7:2D:CB:40:7B:6D:F1:0E:F2:7D:FD:0A:C4:20:C3:8E:07:3F Authority key identifier: 6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69 Certificate issuer: /CN=28ab384d-3018-413f-b253-d2f3ef552ffa Certificate serial: 010D0C9F4328584B3968E4BB98DB3B19CF3F2580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft Manifest number: 010D0C9F43285845188E40594C1633D6658FF800 Signing time: Wed 17 Sep 2025 12:00:03 +0000 Manifest this update: Wed 17 Sep 2025 12:00:03 +0000 Manifest next update: Sat 20 Sep 2025 12:00:00 +0000 Files and hashes: 1: 28ab384d-3018-413f-b253-d2f3ef552ffa.crl (hash: 3DE0/NrloeFO7UwbOd/WKbgxEbVCJQUM6gMgVDugN6w=) 2: f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa (hash: IMpk6alcGqTLNBRQPFfbTeVmDr9+hwvjscUvptC2b3U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:68:e4:bb:98:db:3b:19:cf:3f:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ab384d-3018-413f-b253-d2f3ef552ffa Validity Not Before: Sep 17 12:00:03 2025 GMT Not After : Sep 20 12:00:00 2025 GMT Subject: CN=04307fcb-9fd6-4dfa-a95a-8480f56234c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:93:f6:69:fa:34:68:87:50:e6:58:ec:ef:a9: a5:ed:df:9e:b9:e9:79:0c:e0:ec:f4:8b:5b:64:e0: e1:f0:69:a3:91:3c:43:21:df:9c:cb:74:05:d4:b0: 63:82:98:9f:51:8a:b6:bb:3a:cc:07:6d:db:ee:f8: 72:de:49:aa:12:bc:a9:21:8e:8f:4f:3e:4c:f6:d9: 7a:70:4f:6c:0e:ff:43:98:8e:55:ca:f4:52:e9:a9: a0:01:33:02:09:8a:80:3b:14:db:b4:bb:38:25:72: 15:b7:3e:eb:ac:04:f2:8a:02:c0:8c:b7:e6:a5:c7: e2:95:cf:45:21:ca:e0:7d:b2:4a:d4:ae:e3:aa:70: 29:3a:64:99:1f:4d:f2:b0:6b:8c:8e:b3:fe:b4:b9: 6a:a7:d8:04:f1:48:b8:e5:05:bc:56:93:37:3c:be: 3b:b9:e3:95:76:00:e7:7b:55:13:c9:7d:05:75:d3: 08:3c:8d:0c:5d:47:eb:97:35:3d:85:9a:34:fc:f1: 0a:1c:eb:56:ba:f0:66:67:4e:6b:10:58:57:bd:30: 03:3c:e3:1e:ed:33:64:58:91:4e:73:13:42:2c:6c: b7:18:1f:65:59:0f:28:a6:a9:37:8e:c3:48:eb:a7: 73:73:b6:97:5e:0a:85:ee:46:54:7b:41:25:a4:9d: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9D:B7:2D:CB:40:7B:6D:F1:0E:F2:7D:FD:0A:C4:20:C3:8E:07:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl X509v3 Authority Key Identifier: keyid:6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:92:5a:d4:e9:8d:fb:64:9a:39:86:9c:e6:60:de:e8:66:20: 40:62:de:8e:62:28:24:04:c2:0e:41:3d:2d:8d:d8:9e:1c:c3: 04:d2:2b:b0:1a:ae:ea:d1:e9:f9:bd:20:24:62:53:46:e8:68: 17:a7:eb:0c:60:a9:fe:73:68:ae:0d:2c:ee:dd:51:82:1b:3d: 78:b5:13:8d:73:33:7b:94:9b:fc:bf:06:a4:39:f0:dd:68:f3: 5d:40:3f:88:52:9b:0f:0c:fe:78:71:b2:17:97:38:f6:c5:12: 6c:ac:e0:3f:c3:d9:57:03:89:31:6c:a3:8b:39:64:06:57:9f: 16:63:ba:56:56:0c:80:73:2d:11:51:03:e9:85:cd:9c:61:d5: 7d:d4:4c:29:7f:32:2d:18:ab:bd:18:44:43:fb:54:81:59:e9: 06:70:54:23:64:0a:f9:86:e7:b3:73:40:ea:9d:89:f4:84:5b: 59:94:46:21:b2:e3:be:48:21:aa:5d:c9:05:3c:7c:5e:d3:ea: 91:53:23:16:46:23:0c:31:ab:cf:5f:bd:d9:e2:78:f2:1f:c5: 60:05:be:14:d9:1f:44:96:88:20:c8:21:a7:23:e9:a5:f6:98: 2e:dd:a8:1e:17:22:57:8d:c9:be:89:cd:97:86:a0:30:7b:45: c8:f3:c2:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs5aOS7mNs7Gc8/JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYjM4NGQtMzAxOC00MTNmLWIyNTMtZDJmM2VmNTUy ZmZhMB4XDTI1MDkxNzEyMDAwM1oXDTI1MDkyMDEyMDAwMFowLzEtMCsGA1UEAxMk MDQzMDdmY2ItOWZkNi00ZGZhLWE5NWEtODQ4MGY1NjIzNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZP2afo0aIdQ5ljs76ml7d+euel5DODs9Itb ZODh8GmjkTxDId+cy3QF1LBjgpifUYq2uzrMB23b7vhy3kmqErypIY6PTz5M9tl6 cE9sDv9DmI5VyvRS6amgATMCCYqAOxTbtLs4JXIVtz7rrATyigLAjLfmpcfilc9F IcrgfbJK1K7jqnApOmSZH03ysGuMjrP+tLlqp9gE8Ui45QW8VpM3PL47ueOVdgDn e1UTyX0FddMIPI0MXUfrlzU9hZo0/PEKHOtWuvBmZ05rEFhXvTADPOMe7TNkWJFO cxNCLGy3GB9lWQ8opqk3jsNI66dzc7aXXgqF7kZUe0ElpJ0WHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEedty3LQHtt8Q7yff0KxCDDjgc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFi Mzg0ZC0zMDE4LTQxM2YtYjI1My1kMmYzZWY1NTJmZmEvMjhhYjM4NGQtMzAxOC00 MTNmLWIyNTMtZDJmM2VmNTUyZmZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYjM4NGQtMzAxOC00MTNmLWIy NTMtZDJmM2VmNTUyZmZhLzI4YWIzODRkLTMwMTgtNDEzZi1iMjUzLWQyZjNlZjU1 MmZmYS5jcmwwHwYDVR0jBBgwFoAUbrd4ypCvJHlzNL90WIplampfKGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFiMzg0ZC0zMDE4LTQxM2YtYjI1My1kMmYz ZWY1NTJmZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANklrU6Y37ZJo5hpzmYN7o ZiBAYt6OYigkBMIOQT0tjdieHMME0iuwGq7q0en5vSAkYlNG6GgXp+sMYKn+c2iu DSzu3VGCGz14tRONczN7lJv8vwakOfDdaPNdQD+IUpsPDP54cbIXlzj2xRJsrOA/ w9lXA4kxbKOLOWQGV58WY7pWVgyAcy0RUQPphc2cYdV91EwpfzItGKu9GERD+1SB WekGcFQjZAr5huezc0DqnYn0hFtZlEYhsuO+SCGqXckFPHxe0+qRUyMWRiMMMavP X73Z4njyH8VgBb4U2R9EloggyCGnI+ml9pgu3ageFyJXjcm+ic2XhqAwe0XI88KS -----END CERTIFICATE-----Generated at Wed Sep 17 19:16:22 2025 by rpki-client