$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft File: dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft (raw, json) Hash identifier: 2Jl3mMlr1gnbhyZLRwhVbMoLNw4godEL7Jw+uKfzO18= Subject key identifier: 73:55:D2:85:CA:3E:67:15:C4:96:D0:F3:9C:38:93:2D:11:2A:BE:D5 Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC Certificate issuer: /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Certificate serial: 010D0C9F4328584B904D7C3ED9A7704C6994A500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft Manifest number: 010D0C9F43285842D168A689DC7162ABC892173C Signing time: Sat 18 Oct 2025 15:00:08 +0000 Manifest this update: Sat 18 Oct 2025 15:00:08 +0000 Manifest next update: Tue 21 Oct 2025 15:00:00 +0000 Files and hashes: 1: 10315c07-19e5-332a-9619-ac334b5ed2bc.roa (hash: ShgCYrd9d6yewScB1g+x+CgFY4Iy5KQ+ZdWXKHXwWdw=) 2: 33cbc354-d185-3748-a67e-8b940dc311d1.roa (hash: kA7n3AUOuaclaNzKD7DJlzlrwD/mmZqyCfFsF17Ckhs=) 3: b32af959-6588-30ef-ac6a-e1c8ea97071b.roa (hash: cTuc89Wly5aDuCmiSspX099spjte5etxuN0qUTmUYxA=) 4: dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl (hash: 5asoqMAHlvDsv3guTUtYdgSxElJ9Yj369k2qUxbr8Mw=) 5: e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa (hash: 9NU4ce7C359h5GlApa9CXhMJVDcnSDl43imzwPoYVVI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:90:4d:7c:3e:d9:a7:70:4c:69:94:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Validity Not Before: Oct 18 15:00:08 2025 GMT Not After : Oct 21 15:00:00 2025 GMT Subject: CN=7a43ef9e-4ce7-4b0d-b3e3-d3be7905ce4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c8:8a:ec:f3:64:8d:ef:44:43:c7:11:bc:00: 96:5a:9e:6b:13:96:a3:7e:07:1d:d0:e8:3a:85:34: 0f:3f:0a:c2:a0:76:70:34:c2:24:22:b4:59:41:36: a0:fa:24:cd:e6:0c:87:9c:e3:1b:c5:07:e5:8e:45: b4:94:cc:66:00:35:5b:4f:ee:b2:da:5e:cd:69:ca: 33:bd:a3:41:6d:d3:68:cb:aa:66:0a:b3:de:de:85: 7d:9b:24:81:93:19:7d:4a:f3:43:f8:f0:22:a9:84: 3b:f5:12:3d:4e:5e:e8:97:85:f5:a8:10:d1:37:ec: 4f:9c:8b:c6:a8:a4:ed:82:9b:00:64:ac:a1:1a:f4: 2c:8a:4d:f2:47:a2:03:1f:df:09:4a:e8:1f:7b:dc: 1b:1d:cd:0f:6c:83:09:b8:0a:9e:41:b1:6a:e9:fc: 67:57:2b:b5:38:8f:f0:1a:22:86:28:3e:4f:02:52: d4:7c:14:df:a7:3d:db:cc:a2:8d:52:ee:b7:76:54: ba:ac:5e:ed:34:a6:38:75:10:24:dc:c2:1f:97:b7: 9e:90:ad:64:39:be:12:2a:d8:38:25:56:84:37:1d: 82:76:6d:1c:7f:ef:70:a0:72:fa:08:5c:ac:56:f6: aa:a6:3f:20:2d:df:e7:ab:f1:68:03:29:6a:0c:17: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:55:D2:85:CA:3E:67:15:C4:96:D0:F3:9C:38:93:2D:11:2A:BE:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl X509v3 Authority Key Identifier: keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:05:e2:9d:b4:6b:38:86:43:df:62:54:1c:25:5f:da:36:a1: d1:b3:11:6a:2a:eb:76:c5:1e:f2:c4:62:f5:97:a3:5e:12:7a: 0a:f5:1a:45:9f:3a:17:89:45:33:39:4e:a1:68:42:ea:50:bb: 03:9b:c5:9e:36:67:46:8a:ad:bf:90:f0:3f:93:44:e2:44:f5: bc:fe:96:0f:59:75:af:3b:d7:88:4c:69:e6:6d:30:01:38:91: 1c:16:8c:73:f4:85:ea:9e:a0:0c:7c:d6:3c:00:91:5b:67:d4: 41:fc:06:e0:f1:8d:78:d9:c5:a1:87:9f:29:be:ed:58:42:a6: 76:d9:18:20:69:3b:12:f6:b2:e1:7a:82:b3:b5:9a:fa:49:dc: f7:b8:96:b3:c8:5b:f7:92:7a:2c:3b:6b:bb:7c:1e:96:e0:a6: 5f:59:58:d7:8c:af:1c:6f:bc:f9:cd:38:ab:ea:6c:2a:ee:46: a6:17:50:23:b6:1f:d5:7a:0a:f8:42:60:97:47:9a:52:39:c9: 15:f0:cc:61:6b:26:76:46:1b:bf:72:be:42:1a:7f:d5:c7:35: 3d:fa:4c:a2:f5:e9:c3:f3:20:90:e7:19:c4:07:cb:1f:48:20: 2b:6c:9d:ec:bb:c5:82:0b:b5:24:8e:62:d7:b5:4b:59:e5:6e: 4a:7b:ab:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuQTXw+2adwTGmUpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj N2JlMB4XDTI1MTAxODE1MDAwOFoXDTI1MTAyMTE1MDAwMFowLzEtMCsGA1UEAxMk N2E0M2VmOWUtNGNlNy00YjBkLWIzZTMtZDNiZTc5MDVjZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8iK7PNkje9EQ8cRvACWWp5rE5ajfgcd0Og6 hTQPPwrCoHZwNMIkIrRZQTag+iTN5gyHnOMbxQfljkW0lMxmADVbT+6y2l7Nacoz vaNBbdNoy6pmCrPe3oV9mySBkxl9SvND+PAiqYQ79RI9Tl7ol4X1qBDRN+xPnIvG qKTtgpsAZKyhGvQsik3yR6IDH98JSugfe9wbHc0PbIMJuAqeQbFq6fxnVyu1OI/w GiKGKD5PAlLUfBTfpz3bzKKNUu63dlS6rF7tNKY4dRAk3MIfl7eekK1kOb4SKtg4 JVaENx2Cdm0cf+9woHL6CFysVvaqpj8gLd/nq/FoAylqDBfaMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHNV0oXKPmcVxJbQ85w4ky0RKr7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4 Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvZGQ2OGNiOGItMGQ5MS00 YTBlLTlmMDQtYTNjNzhlNTVjN2JlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1 YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3 OGU1NWM3YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOBeKdtGs4hkPfYlQcJV/a NqHRsxFqKut2xR7yxGL1l6NeEnoK9RpFnzoXiUUzOU6haELqULsDm8WeNmdGiq2/ kPA/k0TiRPW8/pYPWXWvO9eITGnmbTABOJEcFoxz9IXqnqAMfNY8AJFbZ9RB/Abg 8Y142cWhh58pvu1YQqZ22RggaTsS9rLheoKztZr6Sdz3uJazyFv3knosO2u7fB6W 4KZfWVjXjK8cb7z5zTir6mwq7kamF1Ajth/Vegr4QmCXR5pSOckV8MxhayZ2Rhu/ cr5CGn/VxzU9+kyi9enD8yCQ5xnEB8sfSCArbJ3su8WCC7UkjmLXtUtZ5W5Ke6v7 -----END CERTIFICATE-----Generated at Sun Oct 19 14:43:32 2025 by rpki-client