$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.mft File: 28e10489-29c5-4bd4-84bf-2e43c2f36422.mft (raw, json) Hash identifier: IULChhbOmeArZwQyAB45MKNAwWtqVvIGlbGEu5uQvv0= Subject key identifier: 0A:91:04:E8:14:FE:A0:65:BC:7C:E7:07:51:AA:87:47:96:3D:CA:3C Authority key identifier: 39:DE:0D:18:4D:8F:8E:04:A1:41:54:95:C6:4E:00:92:C9:73:E0:C1 Certificate issuer: /CN=28e10489-29c5-4bd4-84bf-2e43c2f36422 Certificate serial: 010D0C9F4328584D87833B5486B16FF04C458F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.mft Manifest number: 010D0C9F432858499223E406E39E5B9C2A131E6B Signing time: Thu 16 Apr 2026 21:00:03 +0000 Manifest this update: Thu 16 Apr 2026 21:00:03 +0000 Manifest next update: Sat 18 Apr 2026 21:00:00 +0000 Files and hashes: 1: 28e10489-29c5-4bd4-84bf-2e43c2f36422.crl (hash: ZTKsaAVTW7V2nAR173wpOWpCS7CvLWbxaYNgdOxXmL8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:83:3b:54:86:b1:6f:f0:4c:45:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28e10489-29c5-4bd4-84bf-2e43c2f36422 Validity Not Before: Apr 16 21:00:03 2026 GMT Not After : Apr 18 21:00:00 2026 GMT Subject: CN=ef3930a8-166c-4dbc-be3b-c7e903ceb8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bf:af:03:6b:32:71:14:50:d3:56:50:09:8b: e1:7e:c2:48:7c:62:c8:b0:c9:a5:a0:6e:6e:cc:b9: aa:71:93:76:09:e9:ed:16:be:48:88:ca:de:16:52: 61:71:0a:79:70:06:f6:81:83:74:68:f6:0f:78:2f: 1e:e6:7e:46:74:55:2f:f7:a2:24:a0:93:73:dd:7e: a1:c6:9c:e4:1c:fc:aa:dd:ce:f6:f1:28:95:b5:96: dd:1c:58:04:a9:7e:a9:47:f5:f3:f8:b0:10:c9:cf: d9:17:80:32:69:1f:65:bd:6f:63:a0:f0:23:2c:4d: c7:23:50:19:ad:c9:41:d5:94:f7:d4:6e:54:6f:11: 4f:a9:f9:cb:f1:5a:c7:c1:86:62:76:23:9d:b0:b1: d8:de:11:2e:b3:63:c6:9d:69:b0:89:fe:6a:37:44: 6e:7d:66:b5:b1:df:98:a4:e9:00:6f:67:0a:ee:aa: 28:f8:4c:77:95:35:48:50:10:05:51:49:87:2d:a6: 90:f2:c0:fa:2f:e7:20:49:25:99:4c:f3:60:d3:b4: 85:fd:0c:9e:31:e0:6b:90:c1:9d:86:21:94:c8:b7: e9:e2:67:97:7e:44:73:a8:3d:1c:31:cd:19:31:82: 1e:6e:b2:a2:76:9d:5b:3c:70:8c:ef:ac:3a:78:25: bf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:91:04:E8:14:FE:A0:65:BC:7C:E7:07:51:AA:87:47:96:3D:CA:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.crl X509v3 Authority Key Identifier: keyid:39:DE:0D:18:4D:8F:8E:04:A1:41:54:95:C6:4E:00:92:C9:73:E0:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0c:f1:7d:bc:92:5d:16:9d:19:00:ee:fb:cb:23:fe:cd:9c: c5:9f:25:51:57:43:61:33:ea:57:91:93:27:46:c8:04:41:87: 9f:da:56:da:a4:0b:22:12:f2:c0:35:c9:fd:22:58:7b:30:06: 81:50:a7:7d:53:c6:98:33:b9:a7:3f:35:32:4a:2a:85:a3:90: b0:7f:14:38:0d:34:0a:31:41:d1:50:2f:e3:8b:73:a2:af:56: bf:c5:e9:7c:21:1e:4e:03:2a:37:44:df:6a:c0:29:44:13:df: b4:0d:b5:21:6c:4c:d8:05:7a:e3:c3:62:bd:c9:56:89:05:a3: a0:8f:bc:c0:b6:e2:7e:65:eb:07:ba:f7:27:84:de:06:89:2f: 55:a5:68:c5:36:8b:84:2c:ac:76:dc:9a:69:43:ba:a1:5f:10: 63:ec:20:b9:65:14:02:39:7c:e4:6b:7f:58:97:8b:41:1c:ef: bf:2d:25:7d:0e:4f:77:dc:5e:94:44:e1:3e:fa:81:4a:72:86: a0:f2:c9:41:db:ac:cd:3e:1f:e1:54:51:f7:79:4d:37:2f:00: 35:a7:c9:2a:3a:da:80:49:2e:c4:dc:94:c7:89:5c:eb:6e:c3: f9:54:55:c3:e8:6c:f6:df:14:f3:ee:a4:1c:5b:2d:0d:be:4b: 7a:ca:12:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HgztUhrFv8ExFjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhlMTA0ODktMjljNS00YmQ0LTg0YmYtMmU0M2MyZjM2 NDIyMB4XDTI2MDQxNjIxMDAwM1oXDTI2MDQxODIxMDAwMFowLzEtMCsGA1UEAxMk ZWYzOTMwYTgtMTY2Yy00ZGJjLWJlM2ItYzdlOTAzY2ViOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL+vA2sycRRQ01ZQCYvhfsJIfGLIsMmloG5u zLmqcZN2CentFr5IiMreFlJhcQp5cAb2gYN0aPYPeC8e5n5GdFUv96IkoJNz3X6h xpzkHPyq3c728SiVtZbdHFgEqX6pR/Xz+LAQyc/ZF4AyaR9lvW9joPAjLE3HI1AZ rclB1ZT31G5UbxFPqfnL8VrHwYZidiOdsLHY3hEus2PGnWmwif5qN0RufWa1sd+Y pOkAb2cK7qoo+Ex3lTVIUBAFUUmHLaaQ8sD6L+cgSSWZTPNg07SF/QyeMeBrkMGd hiGUyLfp4meXfkRzqD0cMc0ZMYIebrKidp1bPHCM76w6eCW/xQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAqRBOgU/qBlvHznB1Gqh0eWPco8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yOGUx MDQ4OS0yOWM1LTRiZDQtODRiZi0yZTQzYzJmMzY0MjIvMjhlMTA0ODktMjljNS00 YmQ0LTg0YmYtMmU0M2MyZjM2NDIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjhlMTA0ODktMjljNS00YmQ0LTg0 YmYtMmU0M2MyZjM2NDIyLzI4ZTEwNDg5LTI5YzUtNGJkNC04NGJmLTJlNDNjMmYz NjQyMi5jcmwwHwYDVR0jBBgwFoAUOd4NGE2PjgShQVSVxk4Akslz4MEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yOGUxMDQ4OS0yOWM1LTRiZDQtODRiZi0yZTQz YzJmMzY0MjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBADPF9vJJdFp0ZAO77yyP+ zZzFnyVRV0NhM+pXkZMnRsgEQYef2lbapAsiEvLANcn9Ilh7MAaBUKd9U8aYM7mn PzUySiqFo5CwfxQ4DTQKMUHRUC/ji3Oir1a/xel8IR5OAyo3RN9qwClEE9+0DbUh bEzYBXrjw2K9yVaJBaOgj7zAtuJ+ZesHuvcnhN4GiS9VpWjFNouELKx23JppQ7qh XxBj7CC5ZRQCOXzka39Yl4tBHO+/LSV9Dk933F6UROE++oFKcoag8slB26zNPh/h VFH3eU03LwA1p8kqOtqASS7E3JTHiVzrbsP5VFXD6Gz23xTz7qQcWy0Nvkt6yhKD -----END CERTIFICATE-----Generated at Fri Apr 17 18:38:58 2026 by rpki-client