$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft File: 28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft (raw, json) Hash identifier: rjsi31cwyb7tr1B3PnXSt09delWuxAz3gCKs9KFCgbg= Subject key identifier: 20:0F:0E:B1:96:CC:3D:BA:E4:95:9B:02:A7:88:BE:B8:4F:9A:A9:04 Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19 Certificate issuer: /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c Certificate serial: 010D0C9F4328584BC271F19DD869D81E42F6E000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft Manifest number: 010D0C9F4328584073A83DC21DA95954A44641F3 Signing time: Wed 05 Nov 2025 14:04:03 +0000 Manifest this update: Wed 05 Nov 2025 14:04:03 +0000 Manifest next update: Sat 08 Nov 2025 04:00:00 +0000 Files and hashes: 1: 1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa (hash: +YTf/K3UqSBOzr8uRxyggeXRdw/qgXDBKBtgh235OcA=) 2: 28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl (hash: 2Q++18uYFhj8YGHBXtJXDNCFkSCuNi5YToHteDVkVGQ=) 3: 322cbd0c-4d36-306f-ab3d-e081df5fe1fe.roa (hash: rH1pzpIKwmnpmIsKfdBvzovlzluInanqDo2r2ApNdxo=) 4: 95f72258-e028-38f3-9aa4-eb809a802750.roa (hash: PJsbYARVetkrKYLxgHEGpSkPbe1aTJYkf4cnB45Lf4Q=) 5: c1b9bc9c-5ee6-3357-b86c-4d5cb9f88aa9.roa (hash: zHBDGLN1tj7304o5/k0tzwpoICaJVwTMVYcMypFZLV0=) 6: c41a86d5-a591-3154-84bc-09af501607e7.roa (hash: XwNzYiSI7Cj5t5hsTaEQsIvJ8yHN1WbS2jOLYBi8MWo=) 7: f1432e62-acbc-3fcc-8436-8d1fb451f216.roa (hash: UqonR5bLh8DlOXjHEXT5kUeUgxOa4UO/eUCBms0RDp0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:71:f1:9d:d8:69:d8:1e:42:f6:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c Validity Not Before: Nov 5 14:04:03 2025 GMT Not After : Nov 8 04:00:00 2025 GMT Subject: CN=a63441ed-6ce6-4e51-9797-41a2ab5a0a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:f6:00:bf:de:ae:ed:ba:3f:d4:4c:92:b5: aa:55:0b:b5:d8:91:29:b6:f0:61:ab:4c:32:ae:d0: 3b:18:bf:8b:a0:2c:1f:87:9e:27:c3:47:31:f6:70: a2:d6:e0:c4:89:db:25:14:0e:a4:86:94:90:72:37: 58:55:68:27:aa:4e:7a:bc:88:da:e8:ce:02:e3:b2: 46:4e:d4:84:bc:ab:ab:a7:31:91:f6:3f:71:15:fb: 6e:38:92:43:c0:76:9d:3b:3b:ad:80:d9:63:00:f3: 88:39:5f:aa:fd:32:63:77:6a:f7:05:8c:45:c4:98: 4b:02:54:45:92:cc:1a:38:89:0f:1c:1c:1e:d8:d3: 76:df:ff:de:3a:38:5a:48:b7:5a:49:36:07:a3:f0: 52:d7:6e:7e:e9:06:6f:66:f0:99:5c:2f:1d:12:3e: 1c:57:12:08:5a:89:62:77:49:c3:5a:55:d5:a4:56: ce:d0:fc:7e:23:7a:21:39:c2:cf:1c:22:57:75:2a: 01:55:66:e8:1e:72:02:a8:9c:1b:69:6c:87:72:ee: 44:c1:e7:23:33:1f:c6:d2:a0:39:a8:38:85:d3:e0: b5:c1:75:ae:37:cc:fa:b7:d2:fa:fa:e2:9d:42:59: 1a:92:67:2d:24:f2:88:ee:73:54:da:f2:c5:31:91: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0F:0E:B1:96:CC:3D:BA:E4:95:9B:02:A7:88:BE:B8:4F:9A:A9:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl X509v3 Authority Key Identifier: keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ac:95:43:e0:6b:4f:f6:19:f1:23:0d:8b:fa:e1:44:ca:1a: b4:e5:9a:90:59:fc:b9:ac:d0:50:40:ae:5d:3b:bc:f5:b5:8d: 81:0c:52:93:bf:24:9e:20:40:d5:0d:c1:4a:20:4f:a5:61:d6: 83:8c:88:d3:2b:12:1b:85:f4:3c:7d:23:42:b0:04:ba:0e:e9: 05:25:72:9a:dd:b5:53:83:68:1f:29:8f:bf:df:ac:46:67:e3: 25:4e:1f:a9:29:42:18:65:94:26:cf:50:a3:ec:d4:ef:cf:e9: 1b:ce:50:fc:84:ee:46:32:6e:95:1f:65:2d:d2:c9:f4:33:bf: 33:7f:39:68:c3:8c:9f:ad:ff:5c:2b:33:66:20:7b:8b:32:2c: 51:fe:d6:19:92:f9:62:ae:99:f6:a9:f1:45:96:1c:67:64:84: 92:4e:31:9e:bc:3b:3a:eb:03:85:72:5c:02:1f:2a:c9:b9:40: 35:29:02:23:1f:8f:b6:66:2e:04:1a:ee:17:f0:97:b8:41:b7: a7:fe:4d:75:72:a2:83:94:94:d6:7e:96:ea:ce:d3:66:c2:39: 5f:0d:19:e0:11:06:b7:fc:7d:52:be:a1:ca:f3:33:89:2a:62: a5:69:ef:e0:b7:55:61:ff:ea:02:48:67:ee:b1:56:91:f9:af: 65:54:dd:f8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCcfGd2GnYHkL24AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhlMWY5ZWEtMjRiZi00YzIyLWExODItZmM5MjVkNWE4 MTljMB4XDTI1MTEwNTE0MDQwM1oXDTI1MTEwODA0MDAwMFowLzEtMCsGA1UEAxMk YTYzNDQxZWQtNmNlNi00ZTUxLTk3OTctNDFhMmFiNWEwYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4P2AL/eru26P9RMkrWqVQu12JEptvBhq0wy rtA7GL+LoCwfh54nw0cx9nCi1uDEidslFA6khpSQcjdYVWgnqk56vIja6M4C47JG TtSEvKurpzGR9j9xFftuOJJDwHadOzutgNljAPOIOV+q/TJjd2r3BYxFxJhLAlRF kswaOIkPHBwe2NN23//eOjhaSLdaSTYHo/BS125+6QZvZvCZXC8dEj4cVxIIWoli d0nDWlXVpFbO0Px+I3ohOcLPHCJXdSoBVWboHnICqJwbaWyHcu5EwecjMx/G0qA5 qDiF0+C1wXWuN8z6t9L6+uKdQlkakmctJPKI7nNU2vLFMZFv9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCAPDrGWzD265JWbAqeIvrhPmqkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUx ZjllYS0yNGJmLTRjMjItYTE4Mi1mYzkyNWQ1YTgxOWMvMjhlMWY5ZWEtMjRiZi00 YzIyLWExODItZmM5MjVkNWE4MTljLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjhlMWY5ZWEtMjRiZi00YzIyLWEx ODItZmM5MjVkNWE4MTljLzI4ZTFmOWVhLTI0YmYtNGMyMi1hMTgyLWZjOTI1ZDVh ODE5Yy5jcmwwHwYDVR0jBBgwFoAURJcM9+Kw97NRT515flzDl/luGxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUxZjllYS0yNGJmLTRjMjItYTE4Mi1mYzky NWQ1YTgxOWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8rJVD4GtP9hnxIw2L+uFE yhq05ZqQWfy5rNBQQK5dO7z1tY2BDFKTvySeIEDVDcFKIE+lYdaDjIjTKxIbhfQ8 fSNCsAS6DukFJXKa3bVTg2gfKY+/36xGZ+MlTh+pKUIYZZQmz1Cj7NTvz+kbzlD8 hO5GMm6VH2Ut0sn0M78zfzlow4yfrf9cKzNmIHuLMixR/tYZkvlirpn2qfFFlhxn ZISSTjGevDs66wOFclwCHyrJuUA1KQIjH4+2Zi4EGu4X8Je4Qben/k11cqKDlJTW fpbqztNmwjlfDRngEQa3/H1SvqHK8zOJKmKlae/gt1Vh/+oCSGfusVaR+a9lVN34 -----END CERTIFICATE-----Generated at Wed Nov 5 16:36:15 2025 by rpki-client