$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.mft File: 28e10489-29c5-4bd4-84bf-2e43c2f36422.mft (raw, json) Hash identifier: INsAReOlsFO3M06pjRie42coAcVvcnp5m0UdzIFIJ6Y= Subject key identifier: 9A:43:FF:EF:C5:C3:13:F7:B5:88:B9:74:87:54:39:24:45:AB:D7:97 Authority key identifier: 39:DE:0D:18:4D:8F:8E:04:A1:41:54:95:C6:4E:00:92:C9:73:E0:C1 Certificate issuer: /CN=28e10489-29c5-4bd4-84bf-2e43c2f36422 Certificate serial: 010D0C9F4328584EF27060582AC8BED3A8A6F520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.mft Manifest number: 010D0C9F432858499223E406E39E5B9C2A131EED Signing time: Mon 24 Aug 2026 21:00:23 +0000 Manifest this update: Mon 24 Aug 2026 21:00:23 +0000 Manifest next update: Wed 26 Aug 2026 21:00:00 +0000 Files and hashes: 1: 28e10489-29c5-4bd4-84bf-2e43c2f36422.crl (hash: UCLcZJbHJ+6jbI6dnyIkdlWBrrLu2ZlWHKyhi7+Bix8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:70:60:58:2a:c8:be:d3:a8:a6:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28e10489-29c5-4bd4-84bf-2e43c2f36422 Validity Not Before: Aug 24 21:00:23 2026 GMT Not After : Aug 26 21:00:00 2026 GMT Subject: CN=75e68220-2cbe-4d8b-81b3-b8c884e70cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8e:1f:f0:b5:66:a9:9d:82:01:b7:7b:5c:e3: e5:0e:43:b1:ee:3e:59:d8:f0:d4:01:d5:d6:d6:b8: 6a:ae:ec:e9:fe:5d:f6:0b:a7:b6:a0:36:24:d4:70: 3b:3d:c1:89:3b:16:75:bc:90:47:4a:f1:80:fa:12: 39:31:46:73:55:71:c8:f3:4d:8f:d9:10:a8:91:43: 8b:f8:c4:16:ea:14:e6:f7:20:f0:6e:12:b9:5e:24: db:90:c3:22:eb:e7:8f:97:f0:ce:26:7a:5a:b4:cd: 1e:4e:17:55:f1:97:df:a5:f5:c1:93:23:24:2b:9c: 11:61:16:b0:8f:76:0f:56:aa:27:91:2a:ca:f2:75: 7f:30:b5:63:7c:ed:91:cf:4a:9c:96:1a:f6:b0:65: 5c:a9:4a:a8:2a:80:70:13:98:35:1d:3a:50:c7:ab: c2:cd:ca:db:30:e8:1b:f1:3d:88:7b:0b:d9:f4:80: 60:ef:84:ca:17:df:6b:c2:0c:37:dc:7f:65:11:6b: c5:41:4e:7d:49:64:ac:0c:c0:98:b9:2a:5c:e7:6c: 0d:e9:c2:fb:19:59:da:c3:8a:16:6e:5f:b5:e5:2b: 4c:a3:bc:e0:eb:67:1e:85:a3:6f:76:98:16:58:69: c8:c0:5a:2b:ab:25:eb:a7:8c:e7:25:82:2c:74:4b: 04:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:43:FF:EF:C5:C3:13:F7:B5:88:B9:74:87:54:39:24:45:AB:D7:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.crl X509v3 Authority Key Identifier: keyid:39:DE:0D:18:4D:8F:8E:04:A1:41:54:95:C6:4E:00:92:C9:73:E0:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3f:d2:c0:cb:fc:7a:db:12:15:18:d3:ac:62:ef:e9:ad:e6: 20:24:37:fa:6a:f9:98:04:6d:62:0a:df:8f:65:83:11:8b:6d: b6:72:5d:df:ff:cd:db:2e:7d:ff:45:d8:84:94:4b:6c:a9:58: f9:e7:61:ae:c2:1b:d7:f5:9f:a3:76:e8:1a:91:32:6a:0e:cc: 7e:1d:cd:1e:84:f9:3c:94:16:18:35:81:96:83:07:cd:33:f5: 8a:a0:28:5f:80:b0:4c:9c:d2:95:c8:14:77:8c:dc:e9:c6:05: 7f:dc:79:dc:31:a5:c5:33:6a:c2:2a:b1:61:e6:4e:9b:21:6a: 73:9c:bd:97:32:5e:d2:bb:04:76:52:ad:14:87:f1:44:46:8d: ae:f0:47:da:15:88:a8:8b:74:17:f9:e3:05:70:40:33:84:c8: 29:f6:f1:c8:26:d3:7b:fa:ea:55:9f:f2:24:3a:6f:75:13:f2: 8f:1e:a3:be:b2:6f:63:60:c0:a1:98:36:63:63:5a:b5:80:93: 95:36:6b:99:d8:7e:cb:f5:2f:e6:da:6f:75:42:41:5c:87:79: 23:0d:b2:a6:9a:fb:c3:4c:ba:ad:69:1c:74:d4:42:f8:fd:54: 03:c9:26:5c:ff:b4:8d:1c:a2:ec:ca:b6:38:6a:5c:ca:a5:2e: f4:84:7b:59 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7ycGBYKsi+06im9SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhlMTA0ODktMjljNS00YmQ0LTg0YmYtMmU0M2MyZjM2 NDIyMB4XDTI2MDgyNDIxMDAyM1oXDTI2MDgyNjIxMDAwMFowLzEtMCsGA1UEAxMk NzVlNjgyMjAtMmNiZS00ZDhiLTgxYjMtYjhjODg0ZTcwY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y4f8LVmqZ2CAbd7XOPlDkOx7j5Z2PDUAdXW 1rhqruzp/l32C6e2oDYk1HA7PcGJOxZ1vJBHSvGA+hI5MUZzVXHI802P2RCokUOL +MQW6hTm9yDwbhK5XiTbkMMi6+ePl/DOJnpatM0eThdV8ZffpfXBkyMkK5wRYRaw j3YPVqonkSrK8nV/MLVjfO2Rz0qclhr2sGVcqUqoKoBwE5g1HTpQx6vCzcrbMOgb 8T2IewvZ9IBg74TKF99rwgw33H9lEWvFQU59SWSsDMCYuSpc52wN6cL7GVnaw4oW bl+15StMo7zg62cehaNvdpgWWGnIwForqyXrp4znJYIsdEsEPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJpD/+/FwxP3tYi5dIdUOSRFq9eXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yOGUx MDQ4OS0yOWM1LTRiZDQtODRiZi0yZTQzYzJmMzY0MjIvMjhlMTA0ODktMjljNS00 YmQ0LTg0YmYtMmU0M2MyZjM2NDIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjhlMTA0ODktMjljNS00YmQ0LTg0 YmYtMmU0M2MyZjM2NDIyLzI4ZTEwNDg5LTI5YzUtNGJkNC04NGJmLTJlNDNjMmYz NjQyMi5jcmwwHwYDVR0jBBgwFoAUOd4NGE2PjgShQVSVxk4Akslz4MEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yOGUxMDQ4OS0yOWM1LTRiZDQtODRiZi0yZTQz YzJmMzY0MjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVP9LAy/x62xIVGNOsYu/p reYgJDf6avmYBG1iCt+PZYMRi222cl3f/83bLn3/RdiElEtsqVj552GuwhvX9Z+j dugakTJqDsx+Hc0ehPk8lBYYNYGWgwfNM/WKoChfgLBMnNKVyBR3jNzpxgV/3Hnc MaXFM2rCKrFh5k6bIWpznL2XMl7SuwR2Uq0Uh/FERo2u8EfaFYioi3QX+eMFcEAz hMgp9vHIJtN7+upVn/IkOm91E/KPHqO+sm9jYMChmDZjY1q1gJOVNmuZ2H7L9S/m 2m91QkFch3kjDbKmmvvDTLqtaRx01EL4/VQDySZc/7SNHKLsyrY4alzKpS70hHtZ -----END CERTIFICATE-----Generated at Tue Aug 25 22:18:40 2026 by rpki-client