$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft File: 28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft (raw, json) Hash identifier: XMUgcuvQUxCxD7kcm1mvhPtAwTmx6V70TSelw4+/iRs= Subject key identifier: 50:F4:91:6F:96:78:17:BD:80:BD:D8:E4:DF:4C:67:91:30:6B:89:E7 Authority key identifier: 18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F Certificate issuer: /CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce Certificate serial: 010D0C9F4328584BBFA550762507C6C1A8276F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft Manifest number: 010D0C9F4328584765C25479079DAD41A9178598 Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl (hash: 15Yx/sJ//d+6l4U2mUs/br81UiTERg8Pndw3vyA4ZGg=) 2: 680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa (hash: YzB81vCJMGLWvyQfdjVzXM08jBMj0iP7rBOp7fw3AHc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:50:76:25:07:c6:c1:a8:27:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=c8389b6c-4018-4d7d-acc3-388e10d0bcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:65:ac:72:60:bc:92:ec:7a:b1:fa:2f:c3: 34:c6:ce:16:d5:f7:03:8e:f0:3c:b7:a2:30:76:c2: 1d:76:64:2e:ca:1a:7a:71:72:91:0e:88:5f:e3:52: 74:91:88:6c:cc:16:db:7c:fa:83:1c:ba:02:6e:e6: 83:3f:f7:6c:2c:03:a5:30:70:34:0a:a8:20:3b:57: 38:0d:76:57:00:83:90:6f:3a:58:45:61:31:70:b2: 59:ce:93:3a:53:38:0e:a0:a3:3a:01:84:7c:e7:fe: 88:fa:b8:22:29:41:b6:79:56:0e:b0:18:e3:3a:4e: d2:23:e9:70:65:10:d3:af:01:26:ae:58:cb:a8:da: c3:04:41:b4:f6:d4:86:21:12:f9:b9:50:20:18:0c: 5e:e7:bc:b6:38:18:17:86:86:16:60:ef:b0:4a:ce: 65:4a:1c:b7:aa:18:fd:ad:4d:4d:8c:b8:55:05:d9: 94:c2:8b:1e:fb:82:66:2e:cd:c3:82:d8:93:6c:2a: d0:aa:40:04:39:ba:9b:18:e3:23:b4:dd:d8:1b:f7: 5f:fd:31:98:eb:e2:a8:dc:c8:30:d6:49:bc:a2:b1: ca:3a:a5:9b:15:87:8c:e8:ec:5d:75:e8:52:dc:4e: 77:2e:13:7c:96:60:c4:5e:d8:35:d0:c7:d6:04:f5: e8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F4:91:6F:96:78:17:BD:80:BD:D8:E4:DF:4C:67:91:30:6B:89:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl X509v3 Authority Key Identifier: keyid:18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:54:0f:6d:fb:6d:1d:cb:dd:8e:00:61:64:bc:36:8b:37:d4: 41:ca:d5:5e:92:08:17:61:60:e7:21:46:f2:05:89:ba:21:9d: 02:72:99:30:be:16:ae:b6:65:30:7e:09:49:e2:10:ef:fa:a1: 0e:a8:71:73:14:01:54:9b:7d:0f:a5:48:ae:0d:cf:e5:04:71: 63:b4:45:f6:b6:7b:68:9a:c7:b2:f2:1e:34:be:ef:b3:02:ef: 3d:b1:58:61:9c:ce:d5:d6:01:8b:84:1b:9b:b9:59:4f:2f:65: e3:01:60:ac:ab:f2:70:ff:d5:de:1e:a9:95:b2:8e:24:d0:c6: d6:45:03:89:63:a2:73:4e:d5:8a:7d:20:67:ef:af:29:4d:d4: ca:00:a6:fd:2c:71:f7:db:4b:7b:6d:a6:e3:93:68:d7:d0:45: 0e:ca:5b:5f:e1:44:70:83:3b:c2:a9:5b:19:96:50:3e:f6:77: ae:4a:c5:80:c0:19:72:b9:36:0d:02:cb:5b:0c:e5:7e:cc:e6: ab:13:a3:ad:fc:81:6b:3f:2d:56:25:65:41:04:2c:d2:d6:1b: f3:48:a0:9b:16:0e:cc:aa:b0:c5:7c:37:92:d2:e1:94:19:97: ae:9e:49:7a:df:2a:1c:ec:a6:85:a0:38:17:96:89:bc:14:04: 89:96:7c:8a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVB2JQfGwagnb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhMzdiN2QtMDc2NS00ZTE1LTk1NTgtYzViMzgwMGNh N2NlMB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk YzgzODliNmMtNDAxOC00ZDdkLWFjYzMtMzg4ZTEwZDBiY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorllrHJgvJLserH6L8M0xs4W1fcDjvA8t6Iw dsIddmQuyhp6cXKRDohf41J0kYhszBbbfPqDHLoCbuaDP/dsLAOlMHA0CqggO1c4 DXZXAIOQbzpYRWExcLJZzpM6UzgOoKM6AYR85/6I+rgiKUG2eVYOsBjjOk7SI+lw ZRDTrwEmrljLqNrDBEG09tSGIRL5uVAgGAxe57y2OBgXhoYWYO+wSs5lShy3qhj9 rU1NjLhVBdmUwose+4JmLs3DgtiTbCrQqkAEObqbGOMjtN3YG/df/TGY6+Ko3Mgw 1km8orHKOqWbFYeM6OxddehS3E53LhN8lmDEXtg10MfWBPXoqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFD0kW+WeBe9gL3Y5N9MZ5Ewa4nnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yOGEz N2I3ZC0wNzY1LTRlMTUtOTU1OC1jNWIzODAwY2E3Y2UvMjhhMzdiN2QtMDc2NS00 ZTE1LTk1NTgtYzViMzgwMGNhN2NlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjhhMzdiN2QtMDc2NS00ZTE1LTk1 NTgtYzViMzgwMGNhN2NlLzI4YTM3YjdkLTA3NjUtNGUxNS05NTU4LWM1YjM4MDBj YTdjZS5jcmwwHwYDVR0jBBgwFoAUGGLEvhIC8MouVlYY/vkUCpEAX08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yOGEzN2I3ZC0wNzY1LTRlMTUtOTU1OC1jNWIz ODAwY2E3Y2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXVA9t+20dy92OAGFkvDaL N9RBytVekggXYWDnIUbyBYm6IZ0CcpkwvhautmUwfglJ4hDv+qEOqHFzFAFUm30P pUiuDc/lBHFjtEX2tntomsey8h40vu+zAu89sVhhnM7V1gGLhBubuVlPL2XjAWCs q/Jw/9XeHqmVso4k0MbWRQOJY6JzTtWKfSBn768pTdTKAKb9LHH320t7babjk2jX 0EUOyltf4URwgzvCqVsZllA+9neuSsWAwBlyuTYNAstbDOV+zOarE6Ot/IFrPy1W JWVBBCzS1hvzSKCbFg7MqrDFfDeS0uGUGZeunkl63yoc7KaFoDgXlom8FASJlnyK -----END CERTIFICATE-----Generated at Wed Nov 5 08:26:50 2025 by rpki-client