$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft File: 28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft (raw, json) Hash identifier: NGZ1TsNlPSZejXgjRaQJ23pvcplXR+PaOWkLzvIIhVY= Subject key identifier: D8:51:D3:A2:20:69:7F:76:BA:59:D4:B1:75:E5:6A:57:6C:C9:81:0F Authority key identifier: 18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F Certificate issuer: /CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce Certificate serial: 010D0C9F4328584AF3D9624AB523B435E82DDA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft Manifest number: 010D0C9F4328584765C25479079DAD41A917854E Signing time: Sat 23 Aug 2025 14:00:08 +0000 Manifest this update: Sat 23 Aug 2025 14:00:08 +0000 Manifest next update: Tue 26 Aug 2025 14:00:00 +0000 Files and hashes: 1: 28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl (hash: 6RfKQItnOUAnw3D+nnRhmBbC5nzkKIDG7efNcXro/lM=) 2: 680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa (hash: YzB81vCJMGLWvyQfdjVzXM08jBMj0iP7rBOp7fw3AHc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:d9:62:4a:b5:23:b4:35:e8:2d:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce Validity Not Before: Aug 23 14:00:08 2025 GMT Not After : Aug 26 14:00:00 2025 GMT Subject: CN=dd1cf83b-f29e-413e-9a44-166f7c962311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b3:96:e9:2a:a9:04:64:6e:ff:52:3b:7e:44: 08:26:6e:35:2b:d8:61:85:e7:9a:81:28:7e:45:b1: 89:72:6b:6a:cb:3f:9c:bd:13:f3:5c:62:bd:8d:8b: e9:5e:ce:6c:f7:8d:2d:69:1a:79:6f:7d:be:f1:f1: 08:7b:67:14:52:7b:77:30:3c:3a:d2:c0:27:02:b5: 71:40:62:e2:9e:b7:b5:62:65:75:67:a2:a4:8b:31: 3c:6a:46:9e:44:d4:8d:ba:d9:f5:a0:18:16:5c:44: 96:d2:6f:1e:7a:c4:82:1e:53:28:3f:94:b2:c9:a4: db:ab:c2:39:34:39:78:34:a8:aa:87:da:24:32:3b: 30:97:fb:99:ca:0c:92:2e:f1:77:ed:61:b3:4e:91: 1e:3f:2c:99:d3:b2:cb:03:96:cb:6b:9d:64:07:97: bd:13:98:8e:e0:ef:f9:44:f9:4e:e8:60:47:42:ec: ad:12:c9:1b:b4:93:ae:7b:40:3f:85:b3:90:5e:77: 82:3f:82:4e:b0:0d:de:1c:c2:b3:2c:66:3c:06:f4: 39:b4:8c:6a:8e:6a:8c:4a:e0:21:e2:08:7c:6a:e0: de:50:bb:84:51:ac:5b:1f:f7:96:63:99:79:32:98: 60:00:e9:20:dc:d4:51:b6:04:98:45:43:e5:9d:12: 90:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:51:D3:A2:20:69:7F:76:BA:59:D4:B1:75:E5:6A:57:6C:C9:81:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl X509v3 Authority Key Identifier: keyid:18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b6:7f:ec:f4:ec:76:14:05:c4:9b:b0:85:3b:2d:3d:5a:36: 8e:b0:ba:73:22:91:64:20:28:56:2c:c5:6f:0c:0d:ba:f3:ef: fd:1d:57:85:e1:05:07:d8:4b:47:d9:34:6c:61:40:c3:34:d2: e7:ac:a5:1d:34:ba:f5:04:0e:c3:18:7c:98:d0:6f:ae:f4:78: 13:14:f5:8f:27:74:08:ca:1b:82:c6:d4:31:e1:ff:ea:76:fb: 63:f5:11:f4:ca:78:12:79:bd:2d:61:c2:9c:9c:c9:fe:9a:4e: 8c:cb:ab:30:93:21:1c:76:36:5d:26:ce:1c:19:e9:de:1f:18: 7b:96:ac:8b:42:90:b1:ad:85:84:2c:55:45:54:07:0a:3e:fc: 97:c1:d0:5b:8f:ca:96:2b:24:6e:a9:98:23:e9:51:af:83:8f: 0a:16:30:33:44:c5:49:37:b8:08:1e:9d:71:42:15:51:0d:ee: 3f:3d:d5:98:3f:9f:a9:92:48:f0:18:9f:ef:aa:ad:a6:c9:b7: cf:51:5f:86:3a:95:f3:05:76:6d:5b:3e:9c:1e:f5:87:28:3d: e7:83:61:cb:cc:09:96:bf:4d:df:7b:34:3a:49:9e:c8:29:97: 9e:a2:bc:e4:b5:ab:78:45:53:fe:5d:2a:91:81:72:01:ff:6a: 0e:e5:07:3c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErz2WJKtSO0Negt2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhMzdiN2QtMDc2NS00ZTE1LTk1NTgtYzViMzgwMGNh N2NlMB4XDTI1MDgyMzE0MDAwOFoXDTI1MDgyNjE0MDAwMFowLzEtMCsGA1UEAxMk ZGQxY2Y4M2ItZjI5ZS00MTNlLTlhNDQtMTY2ZjdjOTYyMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7OW6SqpBGRu/1I7fkQIJm41K9hhheeagSh+ RbGJcmtqyz+cvRPzXGK9jYvpXs5s940taRp5b32+8fEIe2cUUnt3MDw60sAnArVx QGLinre1YmV1Z6KkizE8akaeRNSNutn1oBgWXESW0m8eesSCHlMoP5SyyaTbq8I5 NDl4NKiqh9okMjswl/uZygySLvF37WGzTpEePyyZ07LLA5bLa51kB5e9E5iO4O/5 RPlO6GBHQuytEskbtJOue0A/hbOQXneCP4JOsA3eHMKzLGY8BvQ5tIxqjmqMSuAh 4gh8auDeULuEUaxbH/eWY5l5MphgAOkg3NRRtgSYRUPlnRKQawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNhR06IgaX92ulnUsXXlaldsyYEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yOGEz N2I3ZC0wNzY1LTRlMTUtOTU1OC1jNWIzODAwY2E3Y2UvMjhhMzdiN2QtMDc2NS00 ZTE1LTk1NTgtYzViMzgwMGNhN2NlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjhhMzdiN2QtMDc2NS00ZTE1LTk1 NTgtYzViMzgwMGNhN2NlLzI4YTM3YjdkLTA3NjUtNGUxNS05NTU4LWM1YjM4MDBj YTdjZS5jcmwwHwYDVR0jBBgwFoAUGGLEvhIC8MouVlYY/vkUCpEAX08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yOGEzN2I3ZC0wNzY1LTRlMTUtOTU1OC1jNWIz ODAwY2E3Y2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBtn/s9Ox2FAXEm7CFOy09 WjaOsLpzIpFkIChWLMVvDA268+/9HVeF4QUH2EtH2TRsYUDDNNLnrKUdNLr1BA7D GHyY0G+u9HgTFPWPJ3QIyhuCxtQx4f/qdvtj9RH0yngSeb0tYcKcnMn+mk6My6sw kyEcdjZdJs4cGeneHxh7lqyLQpCxrYWELFVFVAcKPvyXwdBbj8qWKyRuqZgj6VGv g48KFjAzRMVJN7gIHp1xQhVRDe4/PdWYP5+pkkjwGJ/vqq2mybfPUV+GOpXzBXZt Wz6cHvWHKD3ng2HLzAmWv03fezQ6SZ7IKZeeorzktat4RVP+XSqRgXIB/2oO5Qc8 -----END CERTIFICATE-----Generated at Sat Aug 23 22:10:36 2025 by rpki-client