$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28dffcde-d6e7-4a0b-afff-14d8307e816d/28dffcde-d6e7-4a0b-afff-14d8307e816d.mft File: 28dffcde-d6e7-4a0b-afff-14d8307e816d.mft (raw, json) Hash identifier: XxRMaYKPEs0hddWoAp6/TwPSsGB7pBioWYFiHd8r1/A= Subject key identifier: 10:5E:A2:61:A0:3B:5E:90:69:15:1D:04:56:E1:35:4D:59:C0:E6:23 Authority key identifier: 8F:13:6A:1F:43:D5:3C:8E:44:E6:C0:3D:1C:E6:3C:6D:EB:41:15:64 Certificate issuer: /CN=28dffcde-d6e7-4a0b-afff-14d8307e816d Certificate serial: 010D0C9F4328584F4884742F1A226121052F2980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28dffcde-d6e7-4a0b-afff-14d8307e816d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28dffcde-d6e7-4a0b-afff-14d8307e816d/28dffcde-d6e7-4a0b-afff-14d8307e816d.mft Manifest number: 010D0C9F4328584F1EB611AC96F73B4169BB3A43 Signing time: Thu 24 Sep 2026 17:00:23 +0000 Manifest this update: Thu 24 Sep 2026 17:00:23 +0000 Manifest next update: Sat 26 Sep 2026 17:00:00 +0000 Files and hashes: 1: 28dffcde-d6e7-4a0b-afff-14d8307e816d.crl (hash: 315Xmhv4bbR7cmUrSYyRsXrKhbC85hjjrPEinsRIR4I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28dffcde-d6e7-4a0b-afff-14d8307e816d/28dffcde-d6e7-4a0b-afff-14d8307e816d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28dffcde-d6e7-4a0b-afff-14d8307e816d/28dffcde-d6e7-4a0b-afff-14d8307e816d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28dffcde-d6e7-4a0b-afff-14d8307e816d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:84:74:2f:1a:22:61:21:05:2f:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28dffcde-d6e7-4a0b-afff-14d8307e816d Validity Not Before: Sep 24 17:00:23 2026 GMT Not After : Sep 26 17:00:00 2026 GMT Subject: CN=b96ff535-7042-4038-9a36-3938c1372fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:07:07:84:9f:3e:93:2d:31:74:56:cb:14: 38:42:d7:23:ed:c8:74:0a:92:a6:5a:11:eb:71:20: 1a:69:6a:0e:73:e4:60:10:0a:60:9e:ea:8c:39:39: d2:4d:98:18:9c:94:a2:71:6d:44:52:6e:fe:01:91: 9e:29:06:38:99:dc:80:b6:4a:36:d0:06:cc:af:f9: d8:8f:f1:ae:9e:74:56:e2:6b:32:67:0c:0f:c3:5c: 22:e8:57:78:18:e5:78:fd:67:7c:71:6e:f8:26:f9: 11:cc:be:e7:88:40:07:a0:f1:4a:55:9f:e2:ae:b8: b5:97:3c:8a:27:27:5c:af:9d:0b:75:e7:7c:26:b6: 46:3e:0b:b9:da:c9:2a:bd:9e:ff:ce:7c:0a:94:7c: 4f:b9:89:9b:8f:8f:78:40:cf:b1:a0:3c:c9:63:19: a2:9e:fe:13:27:de:d5:c5:f9:1b:47:0d:cb:81:83: e7:9a:f1:87:67:1a:9f:ab:77:ae:40:c5:bd:48:af: 9d:78:8f:c7:5a:88:40:15:16:1c:bc:df:37:a0:8c: ad:f7:1f:bf:75:54:2c:01:84:4e:c9:2a:5d:bd:57: 3a:bf:f9:ef:18:5c:97:0d:cb:ad:28:bd:0c:df:f7: b7:2c:fa:74:db:f2:f9:30:04:26:51:dd:ff:db:4b: 56:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5E:A2:61:A0:3B:5E:90:69:15:1D:04:56:E1:35:4D:59:C0:E6:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28dffcde-d6e7-4a0b-afff-14d8307e816d/28dffcde-d6e7-4a0b-afff-14d8307e816d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28dffcde-d6e7-4a0b-afff-14d8307e816d/28dffcde-d6e7-4a0b-afff-14d8307e816d.crl X509v3 Authority Key Identifier: keyid:8F:13:6A:1F:43:D5:3C:8E:44:E6:C0:3D:1C:E6:3C:6D:EB:41:15:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28dffcde-d6e7-4a0b-afff-14d8307e816d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:bd:64:3b:e9:52:44:2e:bb:30:70:c3:1a:a5:72:f4:07:37: 5f:10:0f:f3:81:9d:02:7a:26:f2:62:96:f5:31:81:b4:1b:1f: ed:5d:e4:6f:58:09:72:dc:4c:83:30:9e:6c:7b:05:b8:97:59: 2c:2d:ef:32:5b:5a:d9:99:21:a1:41:70:a5:15:87:ba:51:c2: 9a:1b:7a:9d:06:24:28:c6:12:2b:1f:70:ea:77:77:9c:51:14: df:ff:f1:88:90:85:bb:7f:1f:6d:bd:9e:ea:e8:4a:5d:e9:f7: d6:7f:73:7f:1a:20:4c:ad:5f:65:a8:4a:17:88:ae:43:0d:03: d9:1c:02:12:89:41:b7:5c:2d:62:fd:a3:33:d2:57:b2:aa:a5: 55:fa:8b:0f:d9:aa:a4:53:63:72:ba:4d:f2:fa:cc:55:68:4d: e5:6b:80:e9:e7:b2:7b:ca:a2:07:f0:8d:9b:c0:23:f0:97:a4: 9e:eb:e6:46:d2:22:bb:08:ab:92:4e:09:f2:ad:cd:54:5f:f0: 73:0f:33:de:40:be:cc:62:7f:11:14:8d:85:ea:ea:6a:4f:5d: 09:1c:7d:de:57:a0:54:82:66:02:e2:d7:e7:cc:e9:2f:12:6e: 27:14:af:30:b2:ce:1c:0f:92:57:37:97:96:23:e2:f8:c9:e4: d2:ff:2f:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9IhHQvGiJhIQUvKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZmZjZGUtZDZlNy00YTBiLWFmZmYtMTRkODMwN2U4 MTZkMB4XDTI2MDkyNDE3MDAyM1oXDTI2MDkyNjE3MDAwMFowLzEtMCsGA1UEAxMk Yjk2ZmY1MzUtNzA0Mi00MDM4LTlhMzYtMzkzOGMxMzcyZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaIHB4SfPpMtMXRWyxQ4Qtcj7ch0CpKmWhHr cSAaaWoOc+RgEApgnuqMOTnSTZgYnJSicW1EUm7+AZGeKQY4mdyAtko20AbMr/nY j/GunnRW4msyZwwPw1wi6Fd4GOV4/Wd8cW74JvkRzL7niEAHoPFKVZ/irri1lzyK Jydcr50Lded8JrZGPgu52skqvZ7/znwKlHxPuYmbj494QM+xoDzJYxminv4TJ97V xfkbRw3LgYPnmvGHZxqfq3euQMW9SK+deI/HWohAFRYcvN83oIyt9x+/dVQsAYRO ySpdvVc6v/nvGFyXDcutKL0M3/e3LPp02/L5MAQmUd3/20tWywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBBeomGgO16QaRUdBFbhNU1ZwOYjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yOGRm ZmNkZS1kNmU3LTRhMGItYWZmZi0xNGQ4MzA3ZTgxNmQvMjhkZmZjZGUtZDZlNy00 YTBiLWFmZmYtMTRkODMwN2U4MTZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjhkZmZjZGUtZDZlNy00YTBiLWFm ZmYtMTRkODMwN2U4MTZkLzI4ZGZmY2RlLWQ2ZTctNGEwYi1hZmZmLTE0ZDgzMDdl ODE2ZC5jcmwwHwYDVR0jBBgwFoAUjxNqH0PVPI5E5sA9HOY8betBFWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yOGRmZmNkZS1kNmU3LTRhMGItYWZmZi0xNGQ4 MzA3ZTgxNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAavWQ76VJELrswcMMapXL0 BzdfEA/zgZ0CeibyYpb1MYG0Gx/tXeRvWAly3EyDMJ5sewW4l1ksLe8yW1rZmSGh QXClFYe6UcKaG3qdBiQoxhIrH3Dqd3ecURTf//GIkIW7fx9tvZ7q6Epd6ffWf3N/ GiBMrV9lqEoXiK5DDQPZHAISiUG3XC1i/aMz0leyqqVV+osP2aqkU2Nyuk3y+sxV aE3la4Dp57J7yqIH8I2bwCPwl6Se6+ZG0iK7CKuSTgnyrc1UX/BzDzPeQL7MYn8R FI2F6upqT10JHH3eV6BUgmYC4tfnzOkvEm4nFK8wss4cD5JXN5eWI+L4yeTS/y/G -----END CERTIFICATE-----Generated at Thu Sep 24 21:00:57 2026 by rpki-client