$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft File: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft (raw, json) Hash identifier: IEHbARUDjVL+cvUEkMmBmDNRXxAX03fxPO92OeUSDy0= Subject key identifier: 5F:63:E3:6C:70:19:F9:CB:61:A8:59:4A:B8:50:81:49:60:DE:99:A2 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584D88CAC9115355554A8FB02600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft Manifest number: 010D0C9F4328584AA232CF9F40DC9EEE22B43F55 Signing time: Fri 17 Apr 2026 08:00:03 +0000 Manifest this update: Fri 17 Apr 2026 08:00:03 +0000 Manifest next update: Mon 20 Apr 2026 08:00:00 +0000 Files and hashes: 1: 18f5c96f-14eb-3372-9eca-1733fe1ed835.roa (hash: xGmNUzUfYzVdQWxQUf2xYRW2viqGS8jg3+HFMn6uNMQ=) 2: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl (hash: RaPsFY7UVl0RdfvYrz62/Ve3WnJN9XNO6+YaTS4+PDc=) 3: 4c649115-742b-32bc-aa17-aa4f55ec3133.roa (hash: qWTPIWG+Xl6f+b6vPRhYVp6TrheyBOrVDxwHcPQ/sV8=) 4: 4f714fc6-281c-3084-8018-09ef764e7e1c.roa (hash: 63HGk+Ogng1SIj8b24Pkkb7OJUEatbw4Z1owlh4QpQI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:ca:c9:11:53:55:55:4a:8f:b0:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Apr 17 08:00:03 2026 GMT Not After : Apr 20 08:00:00 2026 GMT Subject: CN=83918d8f-c81b-4361-95bc-1940e34130de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:de:fd:d0:4b:32:41:a8:92:5c:41:3b:f3:13: de:ea:b6:07:08:41:18:84:22:72:a5:61:f5:7e:98: 8a:b0:e5:83:1b:49:f7:ed:a9:f5:64:cc:d8:c3:0d: 0a:64:23:e2:e1:5e:bd:43:60:b3:64:0e:b9:96:24: 67:14:7f:ae:e7:17:12:6a:22:4d:1b:5a:7e:1c:b8: 3e:3f:0b:72:10:24:fa:8b:0f:0b:e7:c6:f1:ee:13: 4e:1c:98:79:ef:9a:ab:ef:97:94:10:a2:c2:3f:b9: 56:25:9b:ff:d1:4c:8c:af:1c:21:e1:df:c0:8f:25: a6:df:c4:3d:2a:8b:d9:dd:39:47:7d:50:7e:18:f2: cf:9b:f7:d9:dd:e7:15:05:c7:04:cd:3a:d2:57:a0: 3d:9c:d1:d8:c6:99:43:5b:6e:93:de:88:04:6b:75: 6c:9d:27:93:a4:7a:f3:7f:99:04:b2:34:bd:36:6a: 4c:77:c5:54:b3:27:e3:db:4c:7d:48:37:7d:7c:d8: 5e:ba:e7:3b:ba:aa:29:a8:76:e2:c3:b9:bf:48:f6: 9a:a0:4c:33:5b:10:e7:bb:1c:6f:2c:81:a6:26:d2: 15:12:01:7f:22:f6:ce:dc:e3:94:f5:52:79:f9:42: 6e:e8:35:b6:3f:d4:7d:0e:d7:9b:90:c7:67:27:b6: ca:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:63:E3:6C:70:19:F9:CB:61:A8:59:4A:B8:50:81:49:60:DE:99:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ed:12:7b:08:f7:4e:17:83:c1:f8:31:4b:23:50:40:3c:11: 24:89:4c:1c:c0:ad:d7:c8:2f:50:1b:7d:f2:d1:c6:d1:0f:02: e0:1c:f5:f7:cc:07:2d:3b:56:92:d1:cf:b3:72:82:e9:25:bb: c1:31:c3:ae:c2:35:a7:2a:30:33:59:40:a3:84:38:4b:99:f9: 74:06:36:af:ef:5a:d7:2b:01:28:21:f0:48:67:02:cb:c7:89: 88:f8:38:8b:f9:87:27:7e:5b:1a:c7:12:d1:5e:3c:11:d9:42: c8:46:3a:7d:7e:6a:e9:09:fc:bf:7f:ae:9d:69:2a:aa:f2:55: 91:a7:43:88:fa:25:78:e6:2a:c8:9e:7f:4c:c3:96:51:52:ae: ea:a2:e8:6f:ae:1f:9a:fe:47:56:fd:f2:a0:89:bb:7c:28:d3: 10:84:cb:13:19:bd:52:4b:f4:10:60:59:ba:61:e8:cd:f9:f6: 95:72:f4:a0:78:fe:6c:81:f3:f2:b8:74:ae:f3:8b:82:f5:a8: f9:73:6e:4e:75:3b:98:8b:cb:d5:97:49:88:d0:a0:c6:56:bd: a5:83:e3:a4:0a:7f:da:f6:f4:f7:75:a0:7f:19:36:dc:55:0c: 66:f2:3f:93:ba:8d:5a:a0:bc:7e:8e:a0:1b:ac:fd:9b:86:38: 11:5d:30:7e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IyskRU1VVSo+wJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MDQxNzA4MDAwM1oXDTI2MDQyMDA4MDAwMFowLzEtMCsGA1UEAxMk ODM5MThkOGYtYzgxYi00MzYxLTk1YmMtMTk0MGUzNDEzMGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN790EsyQaiSXEE78xPe6rYHCEEYhCJypWH1 fpiKsOWDG0n37an1ZMzYww0KZCPi4V69Q2CzZA65liRnFH+u5xcSaiJNG1p+HLg+ PwtyECT6iw8L58bx7hNOHJh575qr75eUEKLCP7lWJZv/0UyMrxwh4d/AjyWm38Q9 KovZ3TlHfVB+GPLPm/fZ3ecVBccEzTrSV6A9nNHYxplDW26T3ogEa3VsnSeTpHrz f5kEsjS9NmpMd8VUsyfj20x9SDd9fNheuuc7uqopqHbiw7m/SPaaoEwzWxDnuxxv LIGmJtIVEgF/IvbO3OOU9VJ5+UJu6DW2P9R9DtebkMdnJ7bKzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF9j42xwGfnLYahZSrhQgUlg3pmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMjgwMzVlYTItYzFkNS00 YjI5LWE4YzQtMWIzMTM3OWM4YWZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBo7RJ7CPdOF4PB+DFLI1BA PBEkiUwcwK3XyC9QG33y0cbRDwLgHPX3zActO1aS0c+zcoLpJbvBMcOuwjWnKjAz WUCjhDhLmfl0Bjav71rXKwEoIfBIZwLLx4mI+DiL+YcnflsaxxLRXjwR2ULIRjp9 fmrpCfy/f66daSqq8lWRp0OI+iV45irInn9Mw5ZRUq7qouhvrh+a/kdW/fKgibt8 KNMQhMsTGb1SS/QQYFm6YejN+faVcvSgeP5sgfPyuHSu84uC9aj5c25OdTuYi8vV l0mI0KDGVr2lg+OkCn/a9vT3daB/GTbcVQxm8j+Tuo1aoLx+jqAbrP2bhjgRXTB+ -----END CERTIFICATE-----Generated at Fri Apr 17 20:13:45 2026 by rpki-client