$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.mft File: 28301e07-2824-4e0b-9659-f5da81f88222.mft (raw, json) Hash identifier: Tkc+KelQD81GQzAQRqXubeHhajGZEBWtH2PKCtimUEo= Subject key identifier: E2:92:CB:CC:C4:55:9C:D3:07:8A:35:81:B0:1F:C8:52:F9:FB:37:8B Authority key identifier: FB:4A:8C:E3:F3:81:05:93:B1:D8:16:09:43:C2:8C:A5:26:A1:49:66 Certificate issuer: /CN=28301e07-2824-4e0b-9659-f5da81f88222 Certificate serial: 010D0C9F4328584D4BB9124E18D44ED8FA49B3E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.mft Manifest number: 010D0C9F432858424DB17E22A8AD4557709433F0 Signing time: Thu 26 Mar 2026 11:00:04 +0000 Manifest this update: Thu 26 Mar 2026 11:00:04 +0000 Manifest next update: Sun 29 Mar 2026 11:00:00 +0000 Files and hashes: 1: 28301e07-2824-4e0b-9659-f5da81f88222.crl (hash: YmHddBbcjYM9rnUwQ4Z5+OMYlju+wZ/5nBSMIXjV0kw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:b9:12:4e:18:d4:4e:d8:fa:49:b3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28301e07-2824-4e0b-9659-f5da81f88222 Validity Not Before: Mar 26 11:00:04 2026 GMT Not After : Mar 29 11:00:00 2026 GMT Subject: CN=eaad82f4-d716-49a2-baae-fb9b193c9881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7c:37:f2:1b:95:84:d9:b4:92:d2:f6:0d:69: 62:6d:fe:54:ed:0f:98:ab:40:b8:d7:0d:25:25:fb: dd:c1:a2:06:8c:1e:e2:0e:97:91:ad:d1:0b:0f:eb: 5c:be:41:0c:ab:57:47:d5:24:f2:10:9a:bf:d1:2d: c5:9a:64:e1:34:60:20:e3:00:27:87:32:a9:27:9a: f5:45:d6:6d:51:e6:95:44:ac:66:20:57:4b:76:7c: be:08:b4:a1:fa:99:fb:ea:ee:4b:86:e7:fa:4d:bf: 06:b3:d7:cb:5a:30:b9:04:ae:fb:1e:9f:b6:5b:35: f4:2a:9f:50:86:6a:50:82:f6:74:44:13:f2:a6:c2: 9a:9a:eb:24:22:24:0f:30:0b:77:5d:27:9c:68:c9: 52:b9:f4:0e:b9:bc:92:d5:a9:0e:b1:78:7c:bc:16: ff:ee:f9:4d:51:71:36:ce:81:da:08:bc:0f:0d:59: 3c:72:da:a6:ae:54:7c:87:5a:b9:eb:0d:2b:4a:84: 08:2c:d3:54:a2:3e:16:a3:e1:17:23:15:59:78:64: 4c:c3:de:6b:f6:20:ad:b3:99:56:19:cd:08:aa:18: 4a:d1:39:c6:2a:65:74:5b:74:c7:67:c9:df:4d:4c: 68:e2:83:e3:7f:35:ff:da:c4:40:1c:2d:89:38:29: cc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:92:CB:CC:C4:55:9C:D3:07:8A:35:81:B0:1F:C8:52:F9:FB:37:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.crl X509v3 Authority Key Identifier: keyid:FB:4A:8C:E3:F3:81:05:93:B1:D8:16:09:43:C2:8C:A5:26:A1:49:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:92:4f:13:ea:a3:79:9d:51:c1:b1:0c:f1:d9:e5:86:f8:3e: bc:f4:22:ea:90:18:02:34:86:56:ef:11:ef:21:2b:1e:0f:c7: 09:e0:f8:3b:ac:fc:cb:09:f2:19:ac:2e:22:57:c4:b3:d1:8c: 05:42:9f:79:a4:74:3d:0d:e1:fc:17:82:9b:1b:be:bf:bd:f3: f8:48:31:e3:cd:c7:e7:97:5e:17:a6:b8:83:68:33:ca:b7:b2: cb:9a:03:c8:a6:4a:0a:80:5f:88:bb:df:70:7f:32:28:6b:95: a4:cc:a9:4b:db:6d:9c:f4:59:c3:f9:8a:bd:0e:fd:d1:23:dd: 09:08:62:08:8b:b9:15:99:88:29:3a:f3:aa:aa:f3:7d:ff:eb: 3f:47:b9:59:6c:2c:23:94:b7:2e:bb:10:f8:4f:3b:e4:eb:35: a1:32:21:ec:57:c7:c4:c2:59:15:24:00:17:83:b6:37:8c:a4: 84:3c:4d:c3:56:65:53:ca:3c:1e:81:3d:5a:ea:c1:94:8e:8d: f7:4b:63:6a:e7:aa:fa:c6:43:44:de:5b:c6:93:a1:2d:0f:34: 58:7b:c8:ef:d0:1c:be:58:7b:8a:2d:58:5d:74:31:b0:82:f6: 00:b6:7e:93:1e:5e:da:58:cc:cf:60:6f:0c:16:51:b4:08:bf: a6:82:a3:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LuRJOGNRO2PpJs+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgzMDFlMDctMjgyNC00ZTBiLTk2NTktZjVkYTgxZjg4 MjIyMB4XDTI2MDMyNjExMDAwNFoXDTI2MDMyOTExMDAwMFowLzEtMCsGA1UEAxMk ZWFhZDgyZjQtZDcxNi00OWEyLWJhYWUtZmI5YjE5M2M5ODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnw38huVhNm0ktL2DWlibf5U7Q+Yq0C41w0l JfvdwaIGjB7iDpeRrdELD+tcvkEMq1dH1STyEJq/0S3FmmThNGAg4wAnhzKpJ5r1 RdZtUeaVRKxmIFdLdny+CLSh+pn76u5Lhuf6Tb8Gs9fLWjC5BK77Hp+2WzX0Kp9Q hmpQgvZ0RBPypsKamuskIiQPMAt3XSecaMlSufQOubyS1akOsXh8vBb/7vlNUXE2 zoHaCLwPDVk8ctqmrlR8h1q56w0rSoQILNNUoj4Wo+EXIxVZeGRMw95r9iCts5lW Gc0IqhhK0TnGKmV0W3THZ8nfTUxo4oPjfzX/2sRAHC2JOCnM+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOKSy8zEVZzTB4o1gbAfyFL5+zeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yODMw MWUwNy0yODI0LTRlMGItOTY1OS1mNWRhODFmODgyMjIvMjgzMDFlMDctMjgyNC00 ZTBiLTk2NTktZjVkYTgxZjg4MjIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjgzMDFlMDctMjgyNC00ZTBiLTk2 NTktZjVkYTgxZjg4MjIyLzI4MzAxZTA3LTI4MjQtNGUwYi05NjU5LWY1ZGE4MWY4 ODIyMi5jcmwwHwYDVR0jBBgwFoAU+0qM4/OBBZOx2BYJQ8KMpSahSWYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yODMwMWUwNy0yODI0LTRlMGItOTY1OS1mNWRh ODFmODgyMjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnkk8T6qN5nVHBsQzx2eWG +D689CLqkBgCNIZW7xHvISseD8cJ4Pg7rPzLCfIZrC4iV8Sz0YwFQp95pHQ9DeH8 F4KbG76/vfP4SDHjzcfnl14XpriDaDPKt7LLmgPIpkoKgF+Iu99wfzIoa5WkzKlL 222c9FnD+Yq9Dv3RI90JCGIIi7kVmYgpOvOqqvN9/+s/R7lZbCwjlLcuuxD4Tzvk 6zWhMiHsV8fEwlkVJAAXg7Y3jKSEPE3DVmVTyjwegT1a6sGUjo33S2Nq56r6xkNE 3lvGk6EtDzRYe8jv0By+WHuKLVhddDGwgvYAtn6THl7aWMzPYG8MFlG0CL+mgqMr -----END CERTIFICATE-----Generated at Thu Mar 26 16:59:26 2026 by rpki-client