$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft File: 68e8d38b-0b87-495a-96cc-346ddf0d5802.mft (raw, json) Hash identifier: uKY82hZHqzSQVNFaPHa3C6y7QKSWKTNl+0nOGllGIX4= Subject key identifier: EF:BC:47:AC:29:F6:B6:BD:E0:93:51:3C:77:CC:9B:73:A1:99:92:CB Authority key identifier: BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 Certificate issuer: /CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Certificate serial: 010D0C9F4328584D4BF4AD92F9AC8A35431D2E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft Manifest number: 010D0C9F4328584B3C6532A29CB784D5E4CF44E2 Signing time: Thu 26 Mar 2026 13:00:09 +0000 Manifest this update: Thu 26 Mar 2026 13:00:09 +0000 Manifest next update: Sat 28 Mar 2026 13:00:00 +0000 Files and hashes: 1: 68e8d38b-0b87-495a-96cc-346ddf0d5802.crl (hash: Ku6Wxq9P19hVzlI4DsiXoQ5wlhfP5OmUwFLLLEZOYc8=) 2: dfdbfc18-aa98-3225-abfe-7e62127b7000.roa (hash: IWgE2I4pabBNOnHSMp/sWgZf3CFH0kofDUfhPtj/+H4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:f4:ad:92:f9:ac:8a:35:43:1d:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Validity Not Before: Mar 26 13:00:09 2026 GMT Not After : Mar 28 13:00:00 2026 GMT Subject: CN=0018aa3b-97dc-495b-8e22-717df819748c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:35:de:18:05:3f:64:d0:e2:39:2b:35:25: 06:cc:91:85:6d:68:ef:95:4d:d4:d2:4b:37:42:b9: a3:73:c7:45:02:bc:34:4c:91:b4:e9:66:5f:04:a2: e5:c3:d3:aa:0f:aa:66:4c:3b:d0:62:56:1f:25:44: 39:5b:5d:3c:27:b0:61:be:45:c4:17:f2:56:0e:1e: 1d:41:f3:a5:c8:a6:60:15:d3:a5:2c:db:4e:7e:bd: 98:6b:db:fd:59:ac:73:23:fd:14:a1:cf:1e:98:2c: 2f:5b:1f:a7:45:41:3f:f9:e4:3d:da:40:e8:df:56: 18:28:31:d4:76:d5:6e:ce:be:22:73:a4:31:a6:09: 12:33:2a:42:a2:dd:b5:26:7b:92:c9:56:30:80:24: 6e:85:85:77:1a:57:92:43:50:85:61:a7:ff:55:97: 43:0a:86:9a:d9:d3:ab:1c:87:e4:bc:63:cb:4f:f1: 32:b2:c0:4e:87:2b:52:7e:bd:27:4a:8b:64:bc:91: 70:72:ed:42:b6:c5:23:ae:da:55:0d:72:11:6a:cc: 69:f1:22:ee:08:6b:48:65:83:1c:1f:90:2b:c8:72: eb:26:9b:25:aa:d3:c5:e5:34:e1:2c:07:0c:3f:bc: 06:30:19:e3:1f:a6:e9:73:50:67:b2:f9:67:25:2f: ee:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BC:47:AC:29:F6:B6:BD:E0:93:51:3C:77:CC:9B:73:A1:99:92:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl X509v3 Authority Key Identifier: keyid:BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ad:2b:81:fb:c7:62:09:2e:ea:c8:79:cc:f2:bb:24:71:0f: 55:07:d9:23:68:ca:77:f0:48:6e:b3:19:b5:d7:53:2b:d5:39: 90:3a:d7:e0:68:3b:86:f6:97:30:97:f2:bd:38:98:26:29:c1: 51:25:f1:bd:8a:b4:0c:3c:e9:f4:ec:01:d7:60:ca:41:2a:c6: c5:5c:b3:ad:ac:bb:93:c3:cf:48:e7:57:01:4e:ca:ff:85:75: 4a:8b:a1:30:76:b7:ea:2f:32:c6:88:8f:ce:4b:be:03:87:fa: 8f:28:0f:f4:33:7d:e0:68:32:ba:2d:f6:86:22:f8:55:d4:c3: 3e:e4:9c:a1:cd:33:60:9d:8b:e1:61:e3:53:0e:69:a4:40:62: af:af:1a:3c:a9:8e:ca:83:21:3d:76:c8:29:a2:db:cb:91:c5: f5:7b:20:15:e4:c2:fe:de:21:c5:23:c4:8b:a5:6c:34:b4:2d: 39:3f:f7:40:84:7c:58:af:c1:95:7c:de:64:ed:6c:1c:12:fc: ba:7e:27:d0:77:b8:ad:6a:d0:b8:75:ad:18:0f:a0:f0:a3:83: 20:0f:e0:5f:bd:d3:1f:84:26:cc:a7:71:fd:d7:8f:30:50:90: 98:59:e8:df:de:3e:c2:53:97:03:90:77:65:85:34:6a:08:26: dd:3f:44:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1L9K2S+ayKNUMdLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhlOGQzOGItMGI4Ny00OTVhLTk2Y2MtMzQ2ZGRmMGQ1 ODAyMB4XDTI2MDMyNjEzMDAwOVoXDTI2MDMyODEzMDAwMFowLzEtMCsGA1UEAxMk MDAxOGFhM2ItOTdkYy00OTViLThlMjItNzE3ZGY4MTk3NDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB813hgFP2TQ4jkrNSUGzJGFbWjvlU3U0ks3 Qrmjc8dFArw0TJG06WZfBKLlw9OqD6pmTDvQYlYfJUQ5W108J7BhvkXEF/JWDh4d QfOlyKZgFdOlLNtOfr2Ya9v9WaxzI/0Uoc8emCwvWx+nRUE/+eQ92kDo31YYKDHU dtVuzr4ic6QxpgkSMypCot21JnuSyVYwgCRuhYV3GleSQ1CFYaf/VZdDCoaa2dOr HIfkvGPLT/EyssBOhytSfr0nSotkvJFwcu1CtsUjrtpVDXIRasxp8SLuCGtIZYMc H5AryHLrJpslqtPF5TThLAcMP7wGMBnjH6bpc1BnsvlnJS/u4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO+8R6wp9ra94JNRPHfMm3OhmZLLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82OGU4 ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZkZGYwZDU4MDIvNjhlOGQzOGItMGI4Ny00 OTVhLTk2Y2MtMzQ2ZGRmMGQ1ODAyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjhlOGQzOGItMGI4Ny00OTVhLTk2 Y2MtMzQ2ZGRmMGQ1ODAyLzY4ZThkMzhiLTBiODctNDk1YS05NmNjLTM0NmRkZjBk NTgwMi5jcmwwHwYDVR0jBBgwFoAUvYEso06SVZbNE7XZXK6S4E0ZZwQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82OGU4ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZk ZGYwZDU4MDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKrSuB+8diCS7qyHnM8rsk cQ9VB9kjaMp38Ehusxm111Mr1TmQOtfgaDuG9pcwl/K9OJgmKcFRJfG9irQMPOn0 7AHXYMpBKsbFXLOtrLuTw89I51cBTsr/hXVKi6EwdrfqLzLGiI/OS74Dh/qPKA/0 M33gaDK6LfaGIvhV1MM+5JyhzTNgnYvhYeNTDmmkQGKvrxo8qY7KgyE9dsgpotvL kcX1eyAV5ML+3iHFI8SLpWw0tC05P/dAhHxYr8GVfN5k7WwcEvy6fifQd7itatC4 da0YD6Dwo4MgD+BfvdMfhCbMp3H9148wUJCYWejf3j7CU5cDkHdlhTRqCCbdP0RH -----END CERTIFICATE-----Generated at Thu Mar 26 18:49:38 2026 by rpki-client