$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft File: 28591b95-39d7-4e54-90f3-1339338b842c.mft (raw, json) Hash identifier: dYvYqPnSCsQmdIDD6b6hVmh8L1D5eyNVvZf7ItiWvDo= Subject key identifier: 27:81:E7:73:8F:B2:E5:12:45:EF:91:EE:5A:85:EE:DC:B9:1A:BC:27 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584E9A62096CDE267524932091C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft Manifest number: 010D0C9F4328584073A84793D8858966B57164DE Signing time: Fri 24 Jul 2026 08:00:22 +0000 Manifest this update: Fri 24 Jul 2026 08:00:22 +0000 Manifest next update: Sun 26 Jul 2026 08:00:00 +0000 Files and hashes: 1: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (hash: WCrF+FR5X2lvrUSEY6OLnzsenB4HFUV7uS3SD3THGbQ=) 2: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (hash: cPa/qNumAIr8J03MI2/4nVGFro70odSpTok/Mx+vILE=) 3: 28591b95-39d7-4e54-90f3-1339338b842c.crl (hash: IEPdbrPTyzzIVMbso9IiZwezHIfdZ2/axTiLTH8fK7U=) 4: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (hash: qUdRvTN2iEkt+aQgJEr5vqrxy+SQYREcCjeMD/ADHh4=) 5: a6469a75-3af9-39ef-ae2f-0b913de50d29.roa (hash: 7ABKNAzePk/OTPOe+lfg+HKWv6aYYPz7eHIEyHmBE0E=) 6: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (hash: YJiCoss6jIknD4aSY9FbCTjCjsVVxEFOg0+DGuTQtK0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:62:09:6c:de:26:75:24:93:20:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Jul 24 08:00:22 2026 GMT Not After : Jul 26 08:00:00 2026 GMT Subject: CN=67ac4c86-ebec-4c7a-b77a-e35cdfaa767b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d8:11:0d:0a:be:a3:4e:33:81:51:86:50:02: c6:57:6b:00:66:0d:7d:f8:dd:dc:87:cc:5a:38:65: 22:48:30:be:13:c8:a7:2c:8b:c1:40:5a:a3:86:ec: 92:ad:41:6c:d0:ae:fa:75:ca:21:d8:bf:40:ac:e9: e2:c6:41:88:27:e2:13:2c:1e:ce:54:c6:25:25:50: 60:2e:6a:7c:55:cd:81:a3:0a:53:9d:f5:c4:a8:f4: e0:e0:9a:42:6a:d5:9e:6d:21:f4:01:51:cd:5a:a9: f7:a8:61:3a:15:33:0b:fc:27:cd:e5:47:15:d2:b2: 88:65:ea:79:fc:66:3a:fa:36:88:a8:00:40:a9:55: c6:7e:f9:1c:d8:2d:ed:e5:07:9c:c3:29:47:f4:6d: ca:33:b7:0d:57:f2:6b:79:93:a1:f5:c8:5e:2f:5c: c9:8e:01:ce:c2:e8:be:1a:dd:77:a9:58:3a:b1:63: dd:2f:01:1f:ce:4e:a6:cf:54:52:25:ec:58:2b:e7: 4e:bd:7d:a1:f0:b7:b7:42:e6:51:b5:8d:41:15:4b: 99:93:74:bb:f0:7c:c1:74:1d:7e:b5:32:4c:ea:20: 4d:07:17:7c:dc:9c:54:82:25:7c:78:cd:bb:09:64: 24:66:82:af:40:83:00:fd:82:06:11:2e:62:26:31: 61:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:81:E7:73:8F:B2:E5:12:45:EF:91:EE:5A:85:EE:DC:B9:1A:BC:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:cc:ce:21:57:5a:e3:d0:26:4f:9a:03:b2:85:57:8f:59:f6: f7:4e:93:64:5c:1b:ff:e0:c3:9b:40:e5:0b:84:d6:a9:fe:d4: ea:df:7b:36:ba:46:c5:4b:bc:96:e7:5d:d8:20:cf:67:af:6c: e7:36:47:b9:90:8c:49:80:ed:5e:3c:ad:e7:1b:3a:b0:c0:51: 58:df:88:fe:45:a6:ca:57:12:00:47:f3:9c:71:62:22:b0:ec: 8a:03:81:ba:cc:c8:6b:aa:b8:0f:72:af:b7:6e:95:2d:fe:19: 75:e3:a8:b5:d6:13:68:33:c4:7b:b1:3f:40:3a:ae:4e:c8:4d: 81:09:1a:16:5f:a9:f0:37:f6:f3:c8:bf:5a:d6:db:a3:be:a9: 28:ca:c3:ef:37:57:78:fd:90:df:d7:e8:a3:84:e1:4f:0b:73: 8b:8c:1f:ec:28:65:79:33:7b:90:84:81:c4:40:54:1e:6e:b0: 17:80:6b:81:fc:c8:5d:71:cf:70:d1:40:55:93:66:52:b3:1d: a4:37:ca:0e:81:e2:b9:b9:df:1c:af:e1:b5:04:83:83:f9:11: ca:a1:b8:a6:10:ad:b5:34:aa:3e:7d:47:02:41:f4:77:be:f0: 1d:f2:c2:71:35:7e:49:44:ed:41:e2:4d:d9:23:da:1d:c9:f5: 96:4c:2e:95 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6aYgls3iZ1JJMgkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI2MDcyNDA4MDAyMloXDTI2MDcyNjA4MDAwMFowLzEtMCsGA1UEAxMk NjdhYzRjODYtZWJlYy00YzdhLWI3N2EtZTM1Y2RmYWE3NjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdgRDQq+o04zgVGGUALGV2sAZg19+N3ch8xa OGUiSDC+E8inLIvBQFqjhuySrUFs0K76dcoh2L9ArOnixkGIJ+ITLB7OVMYlJVBg Lmp8Vc2BowpTnfXEqPTg4JpCatWebSH0AVHNWqn3qGE6FTML/CfN5UcV0rKIZep5 /GY6+jaIqABAqVXGfvkc2C3t5QecwylH9G3KM7cNV/JreZOh9cheL1zJjgHOwui+ Gt13qVg6sWPdLwEfzk6mz1RSJexYK+dOvX2h8Le3QuZRtY1BFUuZk3S78HzBdB1+ tTJM6iBNBxd83JxUgiV8eM27CWQkZoKvQIMA/YIGES5iJjFhnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCeB53OPsuUSRe+R7lqF7ty5GrwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvMjg1OTFiOTUtMzlkNy00 ZTU0LTkwZjMtMTMzOTMzOGI4NDJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDJzM4hV1rj0CZPmgOyhVeP Wfb3TpNkXBv/4MObQOULhNap/tTq33s2ukbFS7yW513YIM9nr2znNke5kIxJgO1e PK3nGzqwwFFY34j+RabKVxIAR/OccWIisOyKA4G6zMhrqrgPcq+3bpUt/hl146i1 1hNoM8R7sT9AOq5OyE2BCRoWX6nwN/bzyL9a1tujvqkoysPvN1d4/ZDf1+ijhOFP C3OLjB/sKGV5M3uQhIHEQFQebrAXgGuB/Mhdcc9w0UBVk2ZSsx2kN8oOgeK5ud8c r+G1BIOD+RHKobimEK21NKo+fUcCQfR3vvAd8sJxNX5JRO1B4k3ZI9odyfWWTC6V -----END CERTIFICATE-----Generated at Fri Jul 24 18:50:57 2026 by rpki-client