$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft File: 28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft (raw, json) Hash identifier: cGujBjU5fb43WeVbgJTlZWY3CrXhaDM1EsjU+V2GwM4= Subject key identifier: 55:9B:23:11:7C:9A:CB:B0:46:66:66:96:32:E7:0B:62:67:C6:82:87 Authority key identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55 Certificate issuer: /CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017 Certificate serial: 010D0C9F4328584D0717C0FE387D6F439B334740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft Manifest number: 010D0C9F4328584426A4E2EADBA377D65CF197E3 Signing time: Sun 01 Mar 2026 21:00:04 +0000 Manifest this update: Sun 01 Mar 2026 21:00:04 +0000 Manifest next update: Wed 04 Mar 2026 21:00:00 +0000 Files and hashes: 1: 088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa (hash: H4xu2pmGW6K2GYE0c2zRKfQdAg/htn/DUHpSQEsVwz0=) 2: 28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl (hash: OFPZZ6Ykj+w/CJi6pwNztPVWZJcmBsDUQ5avaF6yPDQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:17:c0:fe:38:7d:6f:43:9b:33:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017 Validity Not Before: Mar 1 21:00:04 2026 GMT Not After : Mar 4 21:00:00 2026 GMT Subject: CN=cc98590a-add6-4534-80bb-c831606de3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:04:6f:b1:c4:57:ab:7e:cb:48:1a:6b:2d: 02:28:51:36:da:07:af:d9:82:9c:03:4c:0f:7a:09: f7:67:a6:b7:3e:75:03:d1:dc:b4:59:d6:97:ed:7d: 83:ee:b4:13:4d:64:b5:13:02:72:b8:7e:ba:76:06: 6e:b8:18:69:59:66:4d:84:4c:3e:64:28:86:91:9b: 3c:e6:fb:3c:a9:2a:77:a8:f2:e5:d7:74:b7:9f:82: 30:08:e3:02:42:f7:d1:dd:96:b7:48:ec:c7:72:da: e3:87:bc:c8:40:95:0b:ec:e3:a6:c7:9d:6c:51:58: 14:31:38:40:5d:33:11:e1:8a:d0:2b:39:22:7f:d3: d4:db:d0:aa:d7:dd:ab:66:56:71:36:cf:f2:c6:c0: 78:f4:09:ac:b7:1e:34:85:a6:65:ac:fc:de:cf:0c: c6:59:94:9d:98:0d:c0:e0:ff:5b:3d:d4:75:0e:5e: 8a:27:bf:11:9b:e6:73:e5:7d:b6:0d:9c:41:2c:6d: e3:3f:79:ff:b4:0e:00:de:cf:ec:4f:f4:d5:5b:6f: f3:c7:e8:99:0c:99:ad:84:65:7d:fa:34:e8:77:af: 66:f8:7a:37:5d:5f:5e:88:fa:15:cd:9b:50:04:70: e2:38:50:d0:2a:b0:f1:fe:68:57:33:63:77:39:c7: 37:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9B:23:11:7C:9A:CB:B0:46:66:66:96:32:E7:0B:62:67:C6:82:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl X509v3 Authority Key Identifier: keyid:78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:40:31:28:e3:c9:0e:bc:9f:5f:04:e8:af:21:b9:43:82:ef: 49:d0:4c:22:8c:47:ba:d2:67:59:50:51:21:cb:ac:43:88:eb: 86:16:f9:b1:24:ba:c0:7d:55:07:5e:b7:b1:39:b6:b7:d0:55: e1:4b:e6:7f:db:aa:4d:03:0c:60:b5:24:5a:1e:02:33:a2:ce: 0c:dd:32:0e:1c:a0:8c:61:75:b0:7a:aa:d0:67:ae:67:64:1c: b4:41:fb:b9:af:6d:b3:9b:cf:e8:d8:8a:df:e3:ad:4f:5f:73: a9:17:4e:1f:09:d1:96:16:77:12:8b:4f:57:2f:70:2f:c4:9c: dd:61:cc:f8:45:82:3b:76:fd:26:28:ec:58:d9:15:72:dd:76: b1:a8:f9:f0:63:ed:c3:66:69:b0:51:b2:06:0c:01:41:b3:a8: 97:25:98:94:b7:73:39:b1:16:1a:ad:d7:04:c4:0a:80:88:65: 12:e2:d6:30:09:41:93:8d:9f:b9:ae:47:99:ad:33:25:c0:90: ff:37:7b:69:c5:ed:03:6c:97:7b:b7:3b:ee:c4:bb:d7:de:e8: 91:db:5e:ac:ca:0a:d5:84:39:c7:f0:6c:a3:62:35:b9:9f:d6: d8:eb:b8:57:2d:d6:81:18:21:57:38:79:29:3d:50:27:f2:0d: 16:3d:27:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0HF8D+OH1vQ5szR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhiMGUyZTQtNWYyYS00ZWNkLWFkNmItOTc0MTY5NTFm MDE3MB4XDTI2MDMwMTIxMDAwNFoXDTI2MDMwNDIxMDAwMFowLzEtMCsGA1UEAxMk Y2M5ODU5MGEtYWRkNi00NTM0LTgwYmItYzgzMTYwNmRlM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXAEb7HEV6t+y0gaay0CKFE22gev2YKcA0wP egn3Z6a3PnUD0dy0WdaX7X2D7rQTTWS1EwJyuH66dgZuuBhpWWZNhEw+ZCiGkZs8 5vs8qSp3qPLl13S3n4IwCOMCQvfR3Za3SOzHctrjh7zIQJUL7OOmx51sUVgUMThA XTMR4YrQKzkif9PU29Cq192rZlZxNs/yxsB49Amstx40haZlrPzezwzGWZSdmA3A 4P9bPdR1Dl6KJ78Rm+Zz5X22DZxBLG3jP3n/tA4A3s/sT/TVW2/zx+iZDJmthGV9 +jTod69m+Ho3XV9eiPoVzZtQBHDiOFDQKrDx/mhXM2N3Occ3iQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFWbIxF8msuwRmZmljLnC2JnxoKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOGIw ZTJlNC01ZjJhLTRlY2QtYWQ2Yi05NzQxNjk1MWYwMTcvMjhiMGUyZTQtNWYyYS00 ZWNkLWFkNmItOTc0MTY5NTFmMDE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjhiMGUyZTQtNWYyYS00ZWNkLWFk NmItOTc0MTY5NTFmMDE3LzI4YjBlMmU0LTVmMmEtNGVjZC1hZDZiLTk3NDE2OTUx ZjAxNy5jcmwwHwYDVR0jBBgwFoAUeOCFNnhwP8lrznn8nzJY9P8yAlUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOGIwZTJlNC01ZjJhLTRlY2QtYWQ2Yi05NzQx Njk1MWYwMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1QDEo48kOvJ9fBOivIblD gu9J0EwijEe60mdZUFEhy6xDiOuGFvmxJLrAfVUHXrexOba30FXhS+Z/26pNAwxg tSRaHgIzos4M3TIOHKCMYXWweqrQZ65nZBy0Qfu5r22zm8/o2Irf461PX3OpF04f CdGWFncSi09XL3AvxJzdYcz4RYI7dv0mKOxY2RVy3XaxqPnwY+3DZmmwUbIGDAFB s6iXJZiUt3M5sRYardcExAqAiGUS4tYwCUGTjZ+5rkeZrTMlwJD/N3tpxe0DbJd7 tzvuxLvX3uiR216sygrVhDnH8GyjYjW5n9bY67hXLdaBGCFXOHkpPVAn8g0WPScg -----END CERTIFICATE-----Generated at Mon Mar 2 08:17:37 2026 by rpki-client