$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft File: 28591b95-39d7-4e54-90f3-1339338b842c.mft (raw, json) Hash identifier: LDgWx9siPN87eArCSrlSlCsUZyzPCbgZrbeuPj5gjUk= Subject key identifier: 60:F4:00:90:03:B3:3C:58:23:37:98:D0:12:74:0E:09:C8:C9:14:2F Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584F52A328B7C1D157DF39DF8B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft Manifest number: 010D0C9F4328584073A84793D8858966B5716529 Signing time: Mon 28 Sep 2026 08:00:23 +0000 Manifest this update: Mon 28 Sep 2026 08:00:23 +0000 Manifest next update: Wed 30 Sep 2026 08:00:00 +0000 Files and hashes: 1: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (hash: JaamAzqphHZzToRfQ+Myb0iwpJB9VMQHsT6kUjj8kXA=) 2: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (hash: Z943qcbkc+4fwXnRwFMd5AYhZWxObs4SWi+KZDGRqqs=) 3: 28591b95-39d7-4e54-90f3-1339338b842c.crl (hash: TjBGFI+BpSG8Rj7khmgba9g2efeLSevMqvagSlr+bDM=) 4: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (hash: BMmzkAV2GTGMv0iEGi5V2Lsiuhc7DINkFhoQoPflg44=) 5: a6469a75-3af9-39ef-ae2f-0b913de50d29.roa (hash: PoZf7pL3tkNqybXUeHX8T3qYbh58l76Ao1/nFdo0Pio=) 6: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (hash: 0fpnby9M+sflS8XvT6E4WMsD7uY/d0rIfV0mB+zLwcc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:52:a3:28:b7:c1:d1:57:df:39:df:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Sep 28 08:00:23 2026 GMT Not After : Sep 30 08:00:00 2026 GMT Subject: CN=753f516c-3a06-4924-aa4e-0c948d835cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:63:ce:99:6d:89:05:e6:a3:ff:73:b4:a1:37: b2:c1:47:f5:73:e8:2e:8c:d0:fa:bd:eb:9f:15:f4: 61:d5:94:de:ff:1a:70:bb:2c:a7:3f:7d:ab:bc:44: ee:99:b5:04:fb:09:45:ef:3a:0d:d0:c9:a6:3d:cb: 50:ac:3c:41:d8:38:6b:fe:23:2a:d5:b4:bd:5f:6b: b6:01:0d:34:d7:e3:c5:59:6b:f0:cc:1e:35:85:0a: 85:2d:31:b9:f8:6a:85:f7:3d:3e:b2:7e:c0:42:61: 73:4d:54:c3:da:2c:f6:c9:fb:b1:99:84:48:14:ec: 12:f0:c3:61:f4:92:ef:ea:8d:93:47:df:95:e5:10: b8:fa:d1:a7:f6:85:ad:0e:6f:b8:70:a8:3b:74:3f: cc:b4:5e:dc:88:1f:7b:f7:d6:7d:e5:0e:38:b4:f7: 54:3d:8c:a5:51:64:7d:54:2b:38:bc:ac:09:47:3b: ba:78:0a:33:8a:a5:8f:5c:fe:47:89:b1:bf:59:e7: 35:b3:0d:bd:73:2a:59:9a:2c:c4:90:c0:57:14:83: 43:ce:c9:46:17:37:53:03:81:db:41:8f:38:29:d6: 46:e8:49:8a:37:2f:dd:2a:9e:37:73:54:ef:7a:1a: 82:30:49:12:57:24:7a:de:40:4d:f2:4d:b6:27:98: 60:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F4:00:90:03:B3:3C:58:23:37:98:D0:12:74:0E:09:C8:C9:14:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1a:47:d2:62:1a:e5:74:03:93:25:cc:7f:13:30:c9:bf:f5: dd:6c:38:e6:f4:46:df:7d:3b:ce:59:08:4e:b4:c4:4f:69:75: 08:12:48:14:ee:7b:f2:f5:3f:5c:72:4c:af:be:7b:51:e1:d2: 29:e5:ba:ec:c6:4e:1b:5b:22:3b:9a:96:25:d7:63:6f:60:a7: 3e:61:58:b0:90:fd:b6:c9:ba:ff:3f:a3:ee:50:89:b4:c4:6a: b3:87:24:c1:a6:7e:de:7a:0d:95:51:4c:e3:e8:3f:33:99:93: ba:ad:30:30:4b:5f:7c:e3:80:57:80:78:6f:69:5d:dc:83:9c: e7:5c:ae:40:5b:a1:83:8a:95:e1:43:cd:4d:e0:4f:c8:a2:a0: 1e:e1:82:fd:93:fc:dc:5b:bd:fa:c8:4c:ad:7d:ba:b7:15:f4: cc:5c:57:4a:ec:39:08:57:68:81:35:03:f2:24:db:7c:59:ea: a5:99:ef:3c:89:0e:3a:23:eb:a7:85:1e:19:4a:72:49:c5:3d: 62:9a:78:bd:82:d4:2f:06:aa:a6:e7:0e:d1:bc:f9:c7:97:35: 6f:0a:10:fa:73:a8:26:02:8b:42:ee:2b:f1:8b:a3:9d:f9:5f: b8:b8:b6:ed:7c:f8:38:7d:09:f0:64:13:b5:35:89:e5:41:15: 4a:13:a4:f9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9Soyi3wdFX3znfiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI2MDkyODA4MDAyM1oXDTI2MDkzMDA4MDAwMFowLzEtMCsGA1UEAxMk NzUzZjUxNmMtM2EwNi00OTI0LWFhNGUtMGM5NDhkODM1Y2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2POmW2JBeaj/3O0oTeywUf1c+gujND6veuf FfRh1ZTe/xpwuyynP32rvETumbUE+wlF7zoN0MmmPctQrDxB2Dhr/iMq1bS9X2u2 AQ001+PFWWvwzB41hQqFLTG5+GqF9z0+sn7AQmFzTVTD2iz2yfuxmYRIFOwS8MNh 9JLv6o2TR9+V5RC4+tGn9oWtDm+4cKg7dD/MtF7ciB9799Z95Q44tPdUPYylUWR9 VCs4vKwJRzu6eAoziqWPXP5HibG/Wec1sw29cypZmizEkMBXFINDzslGFzdTA4Hb QY84KdZG6EmKNy/dKp43c1TvehqCMEkSVyR63kBN8k22J5hgQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGD0AJADszxYIzeY0BJ0DgnIyRQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvMjg1OTFiOTUtMzlkNy00 ZTU0LTkwZjMtMTMzOTMzOGI4NDJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGGkfSYhrldAOTJcx/EzDJ v/XdbDjm9EbffTvOWQhOtMRPaXUIEkgU7nvy9T9cckyvvntR4dIp5brsxk4bWyI7 mpYl12NvYKc+YViwkP22ybr/P6PuUIm0xGqzhyTBpn7eeg2VUUzj6D8zmZO6rTAw S19844BXgHhvaV3cg5znXK5AW6GDipXhQ81N4E/IoqAe4YL9k/zcW736yEytfbq3 FfTMXFdK7DkIV2iBNQPyJNt8Weqlme88iQ46I+unhR4ZSnJJxT1imni9gtQvBqqm 5w7RvPnHlzVvChD6c6gmAotC7ivxi6Od+V+4uLbtfPg4fQnwZBO1NYnlQRVKE6T5 -----END CERTIFICATE-----Generated at Mon Sep 28 10:34:22 2026 by rpki-client