$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.mft File: 28e10489-29c5-4bd4-84bf-2e43c2f36422.mft (raw, json) Hash identifier: 3Eo2YyKm81pMKJ+XGwYfx99KTTezmhz2zt5UHYdDqVw= Subject key identifier: E7:51:03:9F:3F:89:92:9D:14:E0:7B:1A:53:F8:48:E4:86:B1:78:A0 Authority key identifier: 39:DE:0D:18:4D:8F:8E:04:A1:41:54:95:C6:4E:00:92:C9:73:E0:C1 Certificate issuer: /CN=28e10489-29c5-4bd4-84bf-2e43c2f36422 Certificate serial: 010D0C9F4328584F621BC04B0A5AAB01CDFFA380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.mft Manifest number: 010D0C9F432858499223E406E39E5B9C2A131F15 Signing time: Sat 03 Oct 2026 21:00:24 +0000 Manifest this update: Sat 03 Oct 2026 21:00:24 +0000 Manifest next update: Mon 05 Oct 2026 21:00:00 +0000 Files and hashes: 1: 28e10489-29c5-4bd4-84bf-2e43c2f36422.crl (hash: 9nbIVCFKNL/Lc7xQkTMpcvu17QfVEpUkN/hHnqNiy3g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:1b:c0:4b:0a:5a:ab:01:cd:ff:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28e10489-29c5-4bd4-84bf-2e43c2f36422 Validity Not Before: Oct 3 21:00:24 2026 GMT Not After : Oct 5 21:00:00 2026 GMT Subject: CN=2ae1c35b-db00-4ea5-9d93-034de09c9d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:84:db:30:ca:fb:ba:69:c4:1f:ae:bc:1f:ee: ac:cc:38:db:49:f3:4b:82:35:25:0e:21:c0:ac:d8: 48:27:52:4d:31:96:3e:61:f9:77:20:51:4d:98:3a: cc:72:82:46:8e:27:18:7e:b2:2d:37:68:66:b5:61: 55:5d:f1:72:6f:80:1c:fb:e8:b4:d9:9f:dc:1f:fc: bc:a4:21:66:45:4a:84:d5:cd:a4:5c:73:da:42:22: 2a:46:ca:6e:16:6f:2b:9c:91:e6:a4:1c:85:e8:17: 53:ea:d2:1a:bb:5d:b9:5e:1b:47:8c:5b:74:89:76: 87:42:00:21:eb:00:ae:03:41:b5:69:6b:2d:b0:16: 4b:6e:52:09:07:ac:1e:d5:34:0f:d9:96:ff:ce:73: 05:a6:4b:ce:6c:0f:e1:89:f3:3b:3d:5e:d1:6d:fd: 41:63:dc:5c:b5:1d:7f:dd:8a:c4:d0:87:44:b2:53: 8e:44:2f:ff:82:38:5d:c7:4e:3e:80:34:be:b3:9b: d1:d3:6e:ac:aa:f2:0a:da:19:a2:bc:81:37:cf:66: 37:1f:32:30:42:6e:6b:ec:0c:88:d8:3c:00:c9:98: d4:7e:02:8d:9d:bd:22:02:6a:e8:52:dd:62:e9:c4: 9c:84:4d:43:c3:f6:67:47:49:c3:62:9f:9e:63:2e: fc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:51:03:9F:3F:89:92:9D:14:E0:7B:1A:53:F8:48:E4:86:B1:78:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422/28e10489-29c5-4bd4-84bf-2e43c2f36422.crl X509v3 Authority Key Identifier: keyid:39:DE:0D:18:4D:8F:8E:04:A1:41:54:95:C6:4E:00:92:C9:73:E0:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28e10489-29c5-4bd4-84bf-2e43c2f36422.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:21:84:68:d6:87:25:de:54:14:28:ec:ed:41:9f:24:0d:12: 81:11:3e:d7:4c:53:2d:15:62:56:13:83:e2:66:b9:3c:e1:79: 81:ba:66:3e:c4:84:81:f2:4f:f3:b4:de:2e:e3:24:1f:b0:b6: ce:af:fe:9f:90:15:da:7d:41:5f:a2:8e:a8:03:a9:20:b2:2d: cc:f3:ef:ac:c9:5e:60:e3:a8:94:13:86:25:ae:5a:38:e8:e3: 2b:8f:c0:80:69:ee:6c:ef:e6:1f:91:94:51:10:11:7c:02:bb: 1c:47:2c:7e:f3:f5:14:5a:42:d2:09:4c:89:73:15:5c:b5:fb: 08:50:c8:72:36:f4:3a:51:56:57:07:cd:45:1d:5a:8e:78:ce: d0:c1:e7:7a:b7:7d:72:59:ff:16:ad:19:a8:29:cc:93:7b:a0: 48:1a:bd:f2:a1:f6:88:f4:67:2c:c9:be:2d:27:ea:b6:94:3b: e6:fa:7b:58:f7:b0:a0:72:40:70:00:fe:6d:cb:48:84:a8:5c: dd:83:e7:34:6c:b2:2e:d4:4f:02:02:b3:47:99:e2:77:ce:e0: da:f7:39:82:84:74:d2:5e:35:d3:6d:7d:27:ca:d0:38:fb:1d: 85:81:59:35:ac:93:a7:6d:1c:3f:93:2b:fa:20:a5:05:69:a1: a9:1e:51:e6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9iG8BLClqrAc3/o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhlMTA0ODktMjljNS00YmQ0LTg0YmYtMmU0M2MyZjM2 NDIyMB4XDTI2MTAwMzIxMDAyNFoXDTI2MTAwNTIxMDAwMFowLzEtMCsGA1UEAxMk MmFlMWMzNWItZGIwMC00ZWE1LTlkOTMtMDM0ZGUwOWM5ZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYTbMMr7umnEH668H+6szDjbSfNLgjUlDiHA rNhIJ1JNMZY+Yfl3IFFNmDrMcoJGjicYfrItN2hmtWFVXfFyb4Ac++i02Z/cH/y8 pCFmRUqE1c2kXHPaQiIqRspuFm8rnJHmpByF6BdT6tIau125XhtHjFt0iXaHQgAh 6wCuA0G1aWstsBZLblIJB6we1TQP2Zb/znMFpkvObA/hifM7PV7Rbf1BY9xctR1/ 3YrE0IdEslOORC//gjhdx04+gDS+s5vR026sqvIK2hmivIE3z2Y3HzIwQm5r7AyI 2DwAyZjUfgKNnb0iAmroUt1i6cSchE1Dw/ZnR0nDYp+eYy78rwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOdRA58/iZKdFOB7GlP4SOSGsXigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yOGUx MDQ4OS0yOWM1LTRiZDQtODRiZi0yZTQzYzJmMzY0MjIvMjhlMTA0ODktMjljNS00 YmQ0LTg0YmYtMmU0M2MyZjM2NDIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjhlMTA0ODktMjljNS00YmQ0LTg0 YmYtMmU0M2MyZjM2NDIyLzI4ZTEwNDg5LTI5YzUtNGJkNC04NGJmLTJlNDNjMmYz NjQyMi5jcmwwHwYDVR0jBBgwFoAUOd4NGE2PjgShQVSVxk4Akslz4MEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yOGUxMDQ4OS0yOWM1LTRiZDQtODRiZi0yZTQz YzJmMzY0MjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjIYRo1ocl3lQUKOztQZ8k DRKBET7XTFMtFWJWE4PiZrk84XmBumY+xISB8k/ztN4u4yQfsLbOr/6fkBXafUFf oo6oA6kgsi3M8++syV5g46iUE4Ylrlo46OMrj8CAae5s7+YfkZRREBF8ArscRyx+ 8/UUWkLSCUyJcxVctfsIUMhyNvQ6UVZXB81FHVqOeM7Qwed6t31yWf8WrRmoKcyT e6BIGr3yofaI9Gcsyb4tJ+q2lDvm+ntY97CgckBwAP5ty0iEqFzdg+c0bLIu1E8C ArNHmeJ3zuDa9zmChHTSXjXTbX0nytA4+x2FgVk1rJOnbRw/kyv6IKUFaaGpHlHm -----END CERTIFICATE-----Generated at Sun Oct 4 10:26:15 2026 by rpki-client