$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft File: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft (raw, json) Hash identifier: K5CmF6JuYpXhMSwY6e6u+APhSPKBM+OIBScyGXjz3PQ= Subject key identifier: 4E:67:6F:4D:E6:18:64:BF:18:C6:DC:DE:C5:59:90:A3:BA:0F:BF:38 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584D0594A0CBB8A95C4BADB97C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft Manifest number: 010D0C9F4328584AA232CF9F40DC9EEE22B43F24 Signing time: Sun 01 Mar 2026 08:00:04 +0000 Manifest this update: Sun 01 Mar 2026 08:00:04 +0000 Manifest next update: Tue 03 Mar 2026 08:00:00 +0000 Files and hashes: 1: 18f5c96f-14eb-3372-9eca-1733fe1ed835.roa (hash: GIYKCPAKpsp8kYxTV+SQtzf4ivUkzG6QuzftcIeJ0nc=) 2: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl (hash: 3qRtb0On+XWoWwoyqrxWavqHIqoMnTXItjyKrZd7aOk=) 3: 4c649115-742b-32bc-aa17-aa4f55ec3133.roa (hash: 3vfkHO9o79wXgoEJJp9sJIio8ajL2s3q/gANT51+dag=) 4: 4f714fc6-281c-3084-8018-09ef764e7e1c.roa (hash: UJXDOHu5VfILyXU7nFmTgRFV1/J5p8FtONukk5uP5VU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:94:a0:cb:b8:a9:5c:4b:ad:b9:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Mar 1 08:00:04 2026 GMT Not After : Mar 3 08:00:00 2026 GMT Subject: CN=5c3a9163-6f26-40ab-a780-f33695703df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:92:13:dd:c9:28:f4:4b:ff:d7:c5:c6:b9:8c: be:9f:ad:dc:be:ca:69:4c:01:52:62:d4:6b:3f:94: 24:6c:ab:c6:87:3a:e0:09:b2:81:0b:47:71:87:1a: e4:4a:e8:95:2b:2b:9c:42:91:cb:22:fe:06:bf:ed: cf:ec:3e:0b:8b:41:e5:dc:f8:76:95:e6:a5:47:e1: 94:04:98:92:d2:a5:43:5d:bd:27:4a:13:d4:ce:43: 37:24:12:95:90:da:dd:c5:3e:e1:f7:fd:d7:4d:ab: 58:8f:6b:5e:52:ad:ad:d8:d4:46:bc:84:fc:25:97: 53:81:34:51:17:2c:b6:d1:3a:e5:85:14:8b:cb:dd: 1a:ab:35:c0:6b:e0:76:29:1e:d4:e6:bd:e4:ca:70: 5c:45:bc:97:4a:c0:b2:df:96:96:95:34:e7:a5:e5: c9:f8:bb:11:a7:2f:60:1b:f1:e0:ef:99:19:32:5d: 68:da:b9:6c:97:0c:2c:ce:9f:77:34:82:6a:43:c7: b5:26:68:6b:68:99:80:2f:93:8f:6f:0d:42:80:0e: bf:43:b0:b0:d5:9e:d3:28:32:18:e4:8e:86:9f:4e: dc:54:9b:f5:b3:58:cd:51:0f:3a:74:72:4f:80:11: 89:90:fe:ff:20:bf:9d:1f:45:34:08:ba:7d:eb:0c: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:67:6F:4D:E6:18:64:BF:18:C6:DC:DE:C5:59:90:A3:BA:0F:BF:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:95:e4:b4:c6:5a:e7:11:a5:d3:d6:15:c6:c8:df:b1:23:76: 22:fd:38:d8:4d:5c:ca:5b:2d:51:55:33:c4:a2:ad:b6:d8:f6: 62:ff:55:1a:e9:21:59:bd:61:a4:6d:98:09:29:41:7d:e1:0e: 3c:f4:85:61:93:e5:b6:ab:46:ed:65:51:40:2e:3a:68:3d:88: 45:e9:75:a5:c5:73:55:52:81:55:be:a9:eb:48:0b:a9:83:64: cb:e5:b4:0b:f5:25:98:79:00:59:1c:07:4d:1c:07:a0:d0:f8: d3:ce:a5:70:e1:2d:41:80:d8:8a:d0:6d:c7:83:1d:35:c4:95: 70:d5:49:bc:f5:15:80:2d:a7:98:9e:db:5d:6f:b5:f2:6a:26: de:b3:2d:28:76:c8:39:3a:f8:10:22:af:15:7f:ed:3e:f9:35: 27:c3:23:b6:5c:79:b0:d7:b1:2e:5a:90:db:67:e7:91:d6:4b: 66:07:26:06:92:d2:17:36:9b:2a:46:1e:32:85:59:24:27:92: ae:57:d8:d0:50:a9:0c:6b:fa:b4:a7:31:48:b0:b9:71:70:10: 39:28:42:5b:60:a9:b2:e7:94:9f:16:be:c3:dc:2f:63:97:db: 70:2d:ca:79:a2:c6:ab:50:3c:d6:45:3f:39:1a:51:6d:03:8d: df:fc:5e:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0FlKDLuKlcS625fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MDMwMTA4MDAwNFoXDTI2MDMwMzA4MDAwMFowLzEtMCsGA1UEAxMk NWMzYTkxNjMtNmYyNi00MGFiLWE3ODAtZjMzNjk1NzAzZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppIT3cko9Ev/18XGuYy+n63cvsppTAFSYtRr P5QkbKvGhzrgCbKBC0dxhxrkSuiVKyucQpHLIv4Gv+3P7D4Li0Hl3Ph2lealR+GU BJiS0qVDXb0nShPUzkM3JBKVkNrdxT7h9/3XTatYj2teUq2t2NRGvIT8JZdTgTRR Fyy20TrlhRSLy90aqzXAa+B2KR7U5r3kynBcRbyXSsCy35aWlTTnpeXJ+LsRpy9g G/Hg75kZMl1o2rlslwwszp93NIJqQ8e1JmhraJmAL5OPbw1CgA6/Q7Cw1Z7TKDIY 5I6Gn07cVJv1s1jNUQ86dHJPgBGJkP7/IL+dH0U0CLp96wx4qwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE5nb03mGGS/GMbc3sVZkKO6D784MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMjgwMzVlYTItYzFkNS00 YjI5LWE4YzQtMWIzMTM3OWM4YWZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoleS0xlrnEaXT1hXGyN+x I3Yi/TjYTVzKWy1RVTPEoq222PZi/1Ua6SFZvWGkbZgJKUF94Q489IVhk+W2q0bt ZVFALjpoPYhF6XWlxXNVUoFVvqnrSAupg2TL5bQL9SWYeQBZHAdNHAeg0PjTzqVw 4S1BgNiK0G3Hgx01xJVw1Um89RWALaeYnttdb7Xyaibesy0odsg5OvgQIq8Vf+0+ +TUnwyO2XHmw17EuWpDbZ+eR1ktmByYGktIXNpsqRh4yhVkkJ5KuV9jQUKkMa/q0 pzFIsLlxcBA5KEJbYKmy55SfFr7D3C9jl9twLcp5osarUDzWRT85GlFtA43f/F58 -----END CERTIFICATE-----Generated at Mon Mar 2 05:50:02 2026 by rpki-client