$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft File: 28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft (raw, json) Hash identifier: KWWhApa3DpcdPNaY+uANQIK5wVxSKFRqI+Bh/sw2LHk= Subject key identifier: 4D:9A:DD:25:4A:7E:87:43:D5:2B:69:02:7E:67:F9:D6:96:50:9C:CB Authority key identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55 Certificate issuer: /CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017 Certificate serial: 010D0C9F4328584D2E2D64500A9C62EE582FCFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft Manifest number: 010D0C9F4328584426A4E2EADBA377D65CF197F1 Signing time: Sun 15 Mar 2026 21:00:09 +0000 Manifest this update: Sun 15 Mar 2026 21:00:09 +0000 Manifest next update: Wed 18 Mar 2026 21:00:00 +0000 Files and hashes: 1: 088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa (hash: H4xu2pmGW6K2GYE0c2zRKfQdAg/htn/DUHpSQEsVwz0=) 2: 28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl (hash: Cf0IgPOap4atJinJpReMEUFgEXgkh28jS41XmWpNQbY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2e:2d:64:50:0a:9c:62:ee:58:2f:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017 Validity Not Before: Mar 15 21:00:09 2026 GMT Not After : Mar 18 21:00:00 2026 GMT Subject: CN=3a8b0886-b4d3-4c7d-bbf6-4e604807bbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6b:f9:68:11:f5:22:37:fd:2e:6c:6b:36:f4: a1:94:8d:65:f9:25:13:38:15:e1:4e:41:03:5c:d9: 71:a6:67:76:df:43:dd:ff:b8:46:5d:4b:07:66:b9: df:5e:67:ca:9d:36:23:77:92:eb:be:e0:bf:b0:6c: 01:6d:2c:f6:14:e4:a9:65:f9:8c:79:22:c2:50:50: d0:57:eb:03:a8:16:c6:f2:72:86:a4:92:76:ed:20: 08:90:e3:98:dc:3b:46:57:cd:47:8b:ad:42:96:53: db:ca:56:bd:2d:af:0e:e9:ff:c7:28:6c:a7:9e:48: 64:ad:44:26:84:63:64:10:d3:dd:79:f3:a4:41:33: 43:cb:fc:11:a4:68:c7:69:b0:7d:bb:bf:07:95:b3: 38:24:4f:da:a3:70:e6:3b:42:2e:2f:92:fa:8f:f2: e3:bc:59:dc:75:ec:6a:00:bc:ea:ce:e9:14:ee:e9: 57:07:39:00:8a:a7:af:03:ca:99:56:57:51:f9:1f: 70:6f:d0:4f:6b:69:af:48:09:72:a1:d3:93:bf:84: 92:86:c4:3b:06:69:ac:66:7e:56:9c:65:90:63:4e: ad:c7:57:c6:13:17:f7:f0:27:19:ef:f8:3e:d6:7a: 72:c0:1b:81:49:a5:84:ca:ec:af:2e:a0:d6:45:43: 99:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9A:DD:25:4A:7E:87:43:D5:2B:69:02:7E:67:F9:D6:96:50:9C:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl X509v3 Authority Key Identifier: keyid:78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b1:75:ca:24:c0:ae:d0:38:2c:0b:d8:0d:3c:f3:09:19:e7: 2e:5f:be:52:17:68:db:9e:5b:20:69:bc:f6:77:42:19:a0:e7: dd:31:66:81:af:19:37:05:64:ce:a0:a0:6e:68:a8:12:15:96: 7f:d7:e8:d8:dc:45:1d:dc:35:e4:2d:79:2a:6a:58:4d:31:ab: ac:c0:31:5e:79:bb:fa:4c:18:99:3c:79:5e:9d:01:5e:b6:97: 0a:fe:4b:b2:1a:70:01:bf:7b:77:49:34:9e:a3:9b:e8:40:3b: 2c:69:82:6e:a2:d8:96:9d:cf:4c:7b:96:42:e0:2f:d5:af:3d: ab:6f:19:83:bd:39:d1:cc:cf:b9:f1:80:3d:52:e6:97:0d:66: 63:89:75:72:3b:98:60:37:56:b3:f2:22:c5:b4:70:4e:e6:0e: 1b:23:c1:f3:fd:20:a8:af:b1:cd:ef:16:09:db:00:6a:28:d0: 13:b6:51:2a:c5:ce:bd:4f:c1:ee:86:4b:59:ca:0d:d2:19:ec: 1e:b8:02:b3:18:c6:cd:12:3d:27:d6:cd:ee:17:b2:69:bf:3e: 16:52:4d:0e:c8:ee:c7:0a:70:01:1d:a5:2f:d8:07:e5:5c:04: d8:f8:a2:45:f3:c9:7d:e5:57:a8:fa:c4:54:a3:b0:8a:35:37: de:3c:33:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0uLWRQCpxi7lgvz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhiMGUyZTQtNWYyYS00ZWNkLWFkNmItOTc0MTY5NTFm MDE3MB4XDTI2MDMxNTIxMDAwOVoXDTI2MDMxODIxMDAwMFowLzEtMCsGA1UEAxMk M2E4YjA4ODYtYjRkMy00YzdkLWJiZjYtNGU2MDQ4MDdiYmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWv5aBH1Ijf9LmxrNvShlI1l+SUTOBXhTkED XNlxpmd230Pd/7hGXUsHZrnfXmfKnTYjd5LrvuC/sGwBbSz2FOSpZfmMeSLCUFDQ V+sDqBbG8nKGpJJ27SAIkOOY3DtGV81Hi61CllPbyla9La8O6f/HKGynnkhkrUQm hGNkENPdefOkQTNDy/wRpGjHabB9u78HlbM4JE/ao3DmO0IuL5L6j/LjvFncdexq ALzqzukU7ulXBzkAiqevA8qZVldR+R9wb9BPa2mvSAlyodOTv4SShsQ7BmmsZn5W nGWQY06tx1fGExf38CcZ7/g+1npywBuBSaWEyuyvLqDWRUOZBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE2a3SVKfodD1StpAn5n+daWUJzLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOGIw ZTJlNC01ZjJhLTRlY2QtYWQ2Yi05NzQxNjk1MWYwMTcvMjhiMGUyZTQtNWYyYS00 ZWNkLWFkNmItOTc0MTY5NTFmMDE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjhiMGUyZTQtNWYyYS00ZWNkLWFk NmItOTc0MTY5NTFmMDE3LzI4YjBlMmU0LTVmMmEtNGVjZC1hZDZiLTk3NDE2OTUx ZjAxNy5jcmwwHwYDVR0jBBgwFoAUeOCFNnhwP8lrznn8nzJY9P8yAlUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOGIwZTJlNC01ZjJhLTRlY2QtYWQ2Yi05NzQx Njk1MWYwMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHsXXKJMCu0DgsC9gNPPMJ GecuX75SF2jbnlsgabz2d0IZoOfdMWaBrxk3BWTOoKBuaKgSFZZ/1+jY3EUd3DXk LXkqalhNMauswDFeebv6TBiZPHlenQFetpcK/kuyGnABv3t3STSeo5voQDssaYJu otiWnc9Me5ZC4C/Vrz2rbxmDvTnRzM+58YA9UuaXDWZjiXVyO5hgN1az8iLFtHBO 5g4bI8Hz/SCor7HN7xYJ2wBqKNATtlEqxc69T8HuhktZyg3SGeweuAKzGMbNEj0n 1s3uF7Jpvz4WUk0OyO7HCnABHaUv2AflXATY+KJF88l95Veo+sRUo7CKNTfePDPA -----END CERTIFICATE-----Generated at Mon Mar 16 16:45:56 2026 by rpki-client