$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft File: 28168b94-cad8-4dae-a00d-057ac35417a3.mft (raw, json) Hash identifier: xzX2NmbKMVkDSAY+0GobFSlVwrFWiT76/yVxe3n7OPY= Subject key identifier: 48:BD:E6:F1:0E:48:DF:A5:68:1B:C6:73:73:42:F7:11:AE:B7:23:72 Authority key identifier: 16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89 Certificate issuer: /CN=28168b94-cad8-4dae-a00d-057ac35417a3 Certificate serial: 010D0C9F4328584D4B7D83742887CF47E867F700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft Manifest number: 010D0C9F4328584073A84AF6A0544A9F4F7A377F Signing time: Thu 26 Mar 2026 09:00:04 +0000 Manifest this update: Thu 26 Mar 2026 09:00:04 +0000 Manifest next update: Sat 28 Mar 2026 09:00:00 +0000 Files and hashes: 1: 28168b94-cad8-4dae-a00d-057ac35417a3.crl (hash: Hv+TWv/WcZfzOxow8enOZww3Ye5B+Jrw8RsLKf2inRg=) 2: 49085c64-f3ef-35b0-8fbf-8ca6b36b4df0.roa (hash: /UGA5p6TYKRSVNuU9qocuWNpF8ZabuBSTL9wfdz4BVM=) 3: 59ba3509-76c2-3b16-9160-b70599626c49.roa (hash: nA9pFQuS+vSeHk09veZmDiZU9TvjZXUeYy2mlXtWzco=) 4: b6b08a1d-c41b-3032-ac31-e83eadb7b68d.roa (hash: veltee2avPavDLi0B+nCNCYaSNTYweLLeB7PsAvsZ2A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:7d:83:74:28:87:cf:47:e8:67:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28168b94-cad8-4dae-a00d-057ac35417a3 Validity Not Before: Mar 26 09:00:04 2026 GMT Not After : Mar 28 09:00:00 2026 GMT Subject: CN=14aa87c3-c7a3-42c8-bff3-768dd307a1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:40:17:81:35:36:23:40:ca:1b:e7:71:eb:b8: c6:26:af:30:74:c5:3d:fd:30:2e:c8:02:39:9b:52: b9:46:7c:b7:8c:ce:aa:5a:74:69:ab:8f:3f:17:cf: 16:04:70:6e:d4:3b:4a:8a:7c:76:09:2b:23:ad:30: f6:7d:01:a2:46:d9:61:2f:3b:2b:f7:e0:11:a8:58: 20:b9:b8:ce:64:62:ca:7e:d7:2b:48:91:1b:f2:ec: 03:2c:96:d5:ae:df:d4:2c:f0:a9:e3:38:9b:10:29: fe:43:3f:40:5a:a1:c8:77:f6:0c:9c:5c:e2:13:31: 2d:58:a4:a3:87:46:cd:e4:f1:5f:fd:b7:07:e7:c9: 45:ab:dd:98:d0:9f:df:38:a3:12:8a:27:65:ae:b6: f3:ab:dd:af:59:3a:77:ee:ff:28:50:2f:f3:2d:a0: d1:1e:7d:aa:ff:c0:29:dc:df:2b:e5:c8:f1:c9:d1: 56:7b:55:6e:5e:f7:8e:33:ba:54:fb:fc:cb:b0:63: 20:58:4f:64:2d:15:d5:63:85:31:c4:b1:a6:dc:3b: ac:c0:f7:03:43:a9:45:50:aa:9b:07:69:13:b6:1a: 0d:a7:f8:93:96:9f:a8:8a:a1:ff:9a:77:6e:48:7e: 9c:0a:e1:b0:84:b6:f6:89:dc:8f:1f:17:7f:c6:63: 65:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BD:E6:F1:0E:48:DF:A5:68:1B:C6:73:73:42:F7:11:AE:B7:23:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl X509v3 Authority Key Identifier: keyid:16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:75:c3:48:fd:cf:48:19:e7:99:a1:c9:5c:e2:4f:18:b3:e9: df:50:43:76:50:2b:8d:69:65:da:fb:d3:33:f8:6a:b9:d4:48: 5f:f6:07:8a:7f:16:75:93:b1:c7:55:57:20:0c:cf:46:8f:f1: 19:7e:81:2c:e8:5f:e2:21:6a:67:36:f9:25:b9:6a:12:9b:94: 33:1e:f0:86:c0:8d:75:7a:67:d7:55:5d:8b:36:cf:12:68:3b: 78:71:af:c5:68:48:71:59:01:54:b3:36:3a:e0:a1:06:af:5c: 4d:c1:67:af:f4:9e:2a:2c:11:5f:85:59:dd:cc:3e:b6:3d:7a: 7e:db:ff:c1:c9:d5:60:2c:dd:7f:ce:29:0f:61:3e:97:33:eb: ee:63:78:24:e1:eb:12:d9:df:c7:a7:a3:f3:d1:ed:0f:97:0d: c1:78:1c:0f:87:f4:c7:ea:65:4d:ba:72:2a:31:ff:5f:d3:78: fd:0b:12:b5:fd:7e:e2:b3:75:2b:c8:c9:92:b0:ef:ce:63:bc: 9d:9a:6d:7d:71:6e:b5:a4:bf:a5:7c:90:db:c7:1b:4d:0a:06: dd:45:e1:64:74:d7:eb:5a:f7:50:ee:df:35:d1:d2:0a:db:91: b6:88:8e:22:ab:f1:6d:7e:80:c1:21:0f:e7:39:bd:ce:7a:32: 17:36:8f:eb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LfYN0KIfPR+hn9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxNjhiOTQtY2FkOC00ZGFlLWEwMGQtMDU3YWMzNTQx N2EzMB4XDTI2MDMyNjA5MDAwNFoXDTI2MDMyODA5MDAwMFowLzEtMCsGA1UEAxMk MTRhYTg3YzMtYzdhMy00MmM4LWJmZjMtNzY4ZGQzMDdhMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEAXgTU2I0DKG+dx67jGJq8wdMU9/TAuyAI5 m1K5Rny3jM6qWnRpq48/F88WBHBu1DtKinx2CSsjrTD2fQGiRtlhLzsr9+ARqFgg ubjOZGLKftcrSJEb8uwDLJbVrt/ULPCp4zibECn+Qz9AWqHId/YMnFziEzEtWKSj h0bN5PFf/bcH58lFq92Y0J/fOKMSiidlrrbzq92vWTp37v8oUC/zLaDRHn2q/8Ap 3N8r5cjxydFWe1VuXveOM7pU+/zLsGMgWE9kLRXVY4UxxLGm3DuswPcDQ6lFUKqb B2kTthoNp/iTlp+oiqH/mnduSH6cCuGwhLb2idyPHxd/xmNlgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEi95vEOSN+laBvGc3NC9xGutyNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODE2 OGI5NC1jYWQ4LTRkYWUtYTAwZC0wNTdhYzM1NDE3YTMvMjgxNjhiOTQtY2FkOC00 ZGFlLWEwMGQtMDU3YWMzNTQxN2EzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjgxNjhiOTQtY2FkOC00ZGFlLWEw MGQtMDU3YWMzNTQxN2EzLzI4MTY4Yjk0LWNhZDgtNGRhZS1hMDBkLTA1N2FjMzU0 MTdhMy5jcmwwHwYDVR0jBBgwFoAUFh2BYtQZNgHN9Q6vk+u3mHq99YkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODE2OGI5NC1jYWQ4LTRkYWUtYTAwZC0wNTdh YzM1NDE3YTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCvdcNI/c9IGeeZoclc4k8Y s+nfUEN2UCuNaWXa+9Mz+Gq51Ehf9geKfxZ1k7HHVVcgDM9Gj/EZfoEs6F/iIWpn NvkluWoSm5QzHvCGwI11emfXVV2LNs8SaDt4ca/FaEhxWQFUszY64KEGr1xNwWev 9J4qLBFfhVndzD62PXp+2//BydVgLN1/zikPYT6XM+vuY3gk4esS2d/Hp6Pz0e0P lw3BeBwPh/TH6mVNunIqMf9f03j9CxK1/X7is3UryMmSsO/OY7ydmm19cW61pL+l fJDbxxtNCgbdReFkdNfrWvdQ7t810dIK25G2iI4iq/FtfoDBIQ/nOb3OejIXNo/r -----END CERTIFICATE-----Generated at Thu Mar 26 19:59:16 2026 by rpki-client