$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft File: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft (raw, json) Hash identifier: fJgRwzpzjZmJf/NDZRYsufMmShWw1mQKbCGUmBavahs= Subject key identifier: A4:B5:CB:B9:77:49:4D:52:BF:5B:BB:54:53:F7:92:32:2B:FD:82:5A Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584D50F52835B06F60125479EC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft Manifest number: 010D0C9F4328584AA232CF9F40DC9EEE22B43F40 Signing time: Sat 28 Mar 2026 08:00:09 +0000 Manifest this update: Sat 28 Mar 2026 08:00:09 +0000 Manifest next update: Tue 31 Mar 2026 08:00:00 +0000 Files and hashes: 1: 18f5c96f-14eb-3372-9eca-1733fe1ed835.roa (hash: xGmNUzUfYzVdQWxQUf2xYRW2viqGS8jg3+HFMn6uNMQ=) 2: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl (hash: fUubsCzkfe9j66avG5dtpRwcXHafvjXfq+eKN51qDdk=) 3: 4c649115-742b-32bc-aa17-aa4f55ec3133.roa (hash: qWTPIWG+Xl6f+b6vPRhYVp6TrheyBOrVDxwHcPQ/sV8=) 4: 4f714fc6-281c-3084-8018-09ef764e7e1c.roa (hash: 63HGk+Ogng1SIj8b24Pkkb7OJUEatbw4Z1owlh4QpQI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:f5:28:35:b0:6f:60:12:54:79:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Mar 28 08:00:09 2026 GMT Not After : Mar 31 08:00:00 2026 GMT Subject: CN=46d8d98b-8cbf-45da-bd1b-f353d2f3bf9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:26:d0:fd:b7:a1:95:28:a7:07:a9:7c:ec:14: 6f:0d:18:e6:b8:3f:a9:58:26:a6:9f:99:23:14:89: ef:9b:31:ff:60:68:b7:21:bf:1e:5f:14:6b:1f:cf: 15:89:10:ec:ba:8f:ca:aa:01:5b:95:08:5b:4f:01: b1:4c:e7:e5:d9:b4:b9:f5:0f:ef:ed:c5:3d:db:5b: a0:73:f1:fc:c6:e6:1c:ce:50:37:30:82:f9:1a:6b: 83:69:6d:ba:9f:1d:e0:a5:59:be:4a:4c:69:d6:74: 72:5e:38:ee:da:e4:dc:6d:b5:5a:b5:e7:a5:59:57: 5b:c3:a3:39:d5:1f:8e:5c:af:ee:f7:58:f2:5b:b7: bc:72:96:fe:74:3a:9e:b1:1d:d0:ad:ca:60:cd:5e: 2b:c9:00:75:a8:95:ee:71:45:9c:21:f7:e6:71:4b: 67:33:e1:83:9a:08:32:5d:24:35:31:02:15:8a:f6: 2d:0a:09:c7:b2:a2:20:4d:21:84:16:9a:08:53:40: 67:c6:9e:3f:e3:df:4a:3d:4c:d3:97:82:7c:05:26: 9e:e2:c9:ab:19:8d:9e:7c:78:60:a0:cc:47:ba:62: 6a:2d:f1:38:e5:d7:f0:e9:a8:f9:2b:d3:61:29:2c: 83:58:62:57:ac:b9:9a:c4:5b:1c:73:6c:28:11:60: 46:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B5:CB:B9:77:49:4D:52:BF:5B:BB:54:53:F7:92:32:2B:FD:82:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:50:9c:f4:63:73:0a:97:d1:b8:a6:bd:36:96:7f:e6:fa:8b: 6e:ce:c3:91:65:93:59:bb:c6:71:8e:30:0f:f7:bb:e0:55:15: a9:7d:92:de:03:7a:74:8f:ca:e7:35:f1:00:72:5a:40:4a:dd: c2:ff:7d:a7:81:60:86:7d:c0:24:fb:40:80:07:36:7e:51:bf: c3:37:7b:88:94:b1:7d:d4:02:9e:21:f0:ec:86:2f:38:1e:8c: ed:52:e6:42:e0:ed:36:a1:58:9f:4a:eb:23:21:51:2e:76:e7: 40:fd:33:be:19:dd:01:50:2b:30:83:9b:51:9c:f8:ce:57:df: e2:37:b4:54:52:ba:e5:1b:f8:0e:ef:9a:f0:ee:8d:08:46:0d: 47:2d:48:59:66:cb:aa:80:1f:e9:b3:fe:b5:2e:56:7c:e7:52: 84:e9:f2:09:fa:51:92:f4:f3:18:dd:e1:fc:a0:f4:9f:16:7e: d0:d9:0d:53:e3:2d:ab:b2:9a:1a:2f:d6:36:d6:da:f9:58:cf: ea:6d:57:64:6f:c9:65:67:67:10:ef:7b:35:b3:28:ca:f2:7a: eb:29:ae:81:88:5a:7d:9b:53:97:3f:ad:bd:58:39:54:dd:82: b2:e0:eb:f8:ce:04:72:75:f4:eb:d5:c0:12:6e:e9:e3:41:9d: 4e:33:d8:fe -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Q9Sg1sG9gElR57IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MDMyODA4MDAwOVoXDTI2MDMzMTA4MDAwMFowLzEtMCsGA1UEAxMk NDZkOGQ5OGItOGNiZi00NWRhLWJkMWItZjM1M2QyZjNiZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCbQ/behlSinB6l87BRvDRjmuD+pWCamn5kj FInvmzH/YGi3Ib8eXxRrH88ViRDsuo/KqgFblQhbTwGxTOfl2bS59Q/v7cU921ug c/H8xuYczlA3MIL5GmuDaW26nx3gpVm+Skxp1nRyXjju2uTcbbVateelWVdbw6M5 1R+OXK/u91jyW7e8cpb+dDqesR3QrcpgzV4ryQB1qJXucUWcIffmcUtnM+GDmggy XSQ1MQIVivYtCgnHsqIgTSGEFpoIU0Bnxp4/499KPUzTl4J8BSae4smrGY2efHhg oMxHumJqLfE45dfw6aj5K9NhKSyDWGJXrLmaxFscc2woEWBGvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKS1y7l3SU1Sv1u7VFP3kjIr/YJaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMjgwMzVlYTItYzFkNS00 YjI5LWE4YzQtMWIzMTM3OWM4YWZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArUJz0Y3MKl9G4pr02ln/m +otuzsORZZNZu8ZxjjAP97vgVRWpfZLeA3p0j8rnNfEAclpASt3C/32ngWCGfcAk +0CABzZ+Ub/DN3uIlLF91AKeIfDshi84HoztUuZC4O02oVifSusjIVEududA/TO+ Gd0BUCswg5tRnPjOV9/iN7RUUrrlG/gO75rw7o0IRg1HLUhZZsuqgB/ps/61LlZ8 51KE6fIJ+lGS9PMY3eH8oPSfFn7Q2Q1T4y2rspoaL9Y21tr5WM/qbVdkb8llZ2cQ 73s1syjK8nrrKa6BiFp9m1OXP629WDlU3YKy4Ov4zgRydfTr1cASbunjQZ1OM9j+ -----END CERTIFICATE-----Generated at Sat Mar 28 12:20:22 2026 by rpki-client