$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft File: 68e8d38b-0b87-495a-96cc-346ddf0d5802.mft (raw, json) Hash identifier: vWsYAGwAAiT+PyaCz8jECLGc1cSpiQgGpJ9WsD8ctFA= Subject key identifier: 5B:19:44:E4:31:AB:2C:98:82:12:82:02:F9:DF:13:7D:AA:60:75:D6 Authority key identifier: BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 Certificate issuer: /CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Certificate serial: 010D0C9F4328584B92DC8B9309CED31CC0949A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft Manifest number: 010D0C9F4328584B3C6532A29CB784D5E4CF4440 Signing time: Sun 19 Oct 2025 13:00:03 +0000 Manifest this update: Sun 19 Oct 2025 13:00:03 +0000 Manifest next update: Tue 21 Oct 2025 13:00:00 +0000 Files and hashes: 1: 68e8d38b-0b87-495a-96cc-346ddf0d5802.crl (hash: 4uWDev4WHFXY7sWX1d/m7YjHwvbE+kHI1sctpO1qqiI=) 2: dfdbfc18-aa98-3225-abfe-7e62127b7000.roa (hash: cj8PXnFaGFQfok50rfjgPQ+W1ZOgLNaCqiuxI8q8RxI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:8b:93:09:ce:d3:1c:c0:94:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Validity Not Before: Oct 19 13:00:03 2025 GMT Not After : Oct 21 13:00:00 2025 GMT Subject: CN=834d05c4-8b97-487e-863a-e18c80a92edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:dd:72:09:41:51:94:3a:d2:5f:94:05:36:b9: eb:5e:bb:45:25:b8:b4:84:cf:e1:39:f9:d1:52:e8: e2:8b:9a:43:94:fe:13:dc:a0:78:5c:83:8e:72:ba: 5f:50:6a:91:75:ba:a7:fe:97:f5:4e:82:fe:c1:f4: 3a:0b:20:8d:cd:d7:c6:64:68:dc:bf:d9:f4:a2:6a: 3d:75:0d:09:02:b2:25:4d:c3:2d:6c:5a:dd:1e:d2: aa:53:ea:f9:26:37:2c:f3:32:d1:63:9f:b3:35:60: 3e:5c:ed:92:b2:0a:1c:e0:21:97:80:bc:3e:e7:fc: 64:fe:0e:cb:98:24:ff:05:77:c5:82:f1:83:34:df: e0:b4:90:55:95:9c:4e:cd:2c:5e:41:e0:e8:b9:01: 43:77:1f:11:13:8a:32:78:e1:ee:f0:3c:0a:67:e0: 32:38:51:82:1c:6d:0b:7f:48:f2:fe:9e:01:db:a3: c8:96:0a:32:af:cb:f4:ba:4f:40:3d:96:d1:1e:8d: 13:b9:b6:24:c6:c8:9a:43:99:44:a6:e9:91:8a:8d: 98:af:f6:39:90:8e:9e:8b:7f:38:5e:98:03:d7:30: 91:bb:52:6e:a0:3f:86:26:5f:cf:f6:e7:1b:f3:5c: 85:ef:5a:e7:1f:65:a7:31:c1:a0:bf:47:03:5c:ab: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:19:44:E4:31:AB:2C:98:82:12:82:02:F9:DF:13:7D:AA:60:75:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl X509v3 Authority Key Identifier: keyid:BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:29:c0:a7:5e:d5:2f:e0:9c:6b:fc:0b:bc:a1:90:4f:78:aa: 4a:f6:c8:9b:4e:8f:88:6b:82:5e:79:37:45:ef:47:d9:7a:ab: 67:c9:3d:f7:62:0d:04:b8:ad:e6:21:4f:b3:0e:73:58:4b:e6: 2e:53:39:40:e1:c4:cb:71:9a:b7:d9:fa:5d:83:b7:19:b7:fc: c0:45:7a:b0:01:70:52:e8:78:aa:53:8b:06:23:6f:f9:4d:6e: f4:0f:26:a5:1c:cf:63:cb:bf:8a:53:15:50:0d:88:2b:2f:1b: e8:d0:5f:47:5d:32:9e:8e:9e:f8:f2:f2:dd:71:8e:17:6c:46: e4:43:25:56:08:5a:a0:49:8d:42:bc:0d:52:ca:03:3b:85:fb: 97:c5:c7:34:4f:ce:b5:b3:c0:f7:ba:18:a2:89:58:a2:5e:3f: 52:62:46:87:fe:4b:c0:75:cc:d5:b5:2e:f6:92:f2:9f:52:f1: 53:9f:a2:21:b8:e3:76:41:e7:7b:74:d9:72:2d:d8:90:36:68: 69:d5:33:55:61:f4:04:1f:94:2e:af:81:62:51:c8:04:11:bc: 2b:08:b2:21:87:00:d2:86:3f:55:b5:ec:de:5c:be:15:fa:d7: 5a:95:df:4c:54:d7:93:11:56:75:33:13:68:14:be:24:f3:19: a8:e3:87:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuS3IuTCc7THMCUmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhlOGQzOGItMGI4Ny00OTVhLTk2Y2MtMzQ2ZGRmMGQ1 ODAyMB4XDTI1MTAxOTEzMDAwM1oXDTI1MTAyMTEzMDAwMFowLzEtMCsGA1UEAxMk ODM0ZDA1YzQtOGI5Ny00ODdlLTg2M2EtZTE4YzgwYTkyZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht1yCUFRlDrSX5QFNrnrXrtFJbi0hM/hOfnR Uujii5pDlP4T3KB4XIOOcrpfUGqRdbqn/pf1ToL+wfQ6CyCNzdfGZGjcv9n0omo9 dQ0JArIlTcMtbFrdHtKqU+r5Jjcs8zLRY5+zNWA+XO2Ssgoc4CGXgLw+5/xk/g7L mCT/BXfFgvGDNN/gtJBVlZxOzSxeQeDouQFDdx8RE4oyeOHu8DwKZ+AyOFGCHG0L f0jy/p4B26PIlgoyr8v0uk9APZbRHo0TubYkxsiaQ5lEpumRio2Yr/Y5kI6ei384 XpgD1zCRu1JuoD+GJl/P9ucb81yF71rnH2WnMcGgv0cDXKvFCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFsZROQxqyyYghKCAvnfE32qYHXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82OGU4 ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZkZGYwZDU4MDIvNjhlOGQzOGItMGI4Ny00 OTVhLTk2Y2MtMzQ2ZGRmMGQ1ODAyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjhlOGQzOGItMGI4Ny00OTVhLTk2 Y2MtMzQ2ZGRmMGQ1ODAyLzY4ZThkMzhiLTBiODctNDk1YS05NmNjLTM0NmRkZjBk NTgwMi5jcmwwHwYDVR0jBBgwFoAUvYEso06SVZbNE7XZXK6S4E0ZZwQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82OGU4ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZk ZGYwZDU4MDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABKcCnXtUv4Jxr/Au8oZBP eKpK9sibTo+Ia4JeeTdF70fZeqtnyT33Yg0EuK3mIU+zDnNYS+YuUzlA4cTLcZq3 2fpdg7cZt/zARXqwAXBS6HiqU4sGI2/5TW70DyalHM9jy7+KUxVQDYgrLxvo0F9H XTKejp748vLdcY4XbEbkQyVWCFqgSY1CvA1SygM7hfuXxcc0T861s8D3uhiiiVii Xj9SYkaH/kvAdczVtS72kvKfUvFTn6IhuON2Qed7dNlyLdiQNmhp1TNVYfQEH5Qu r4FiUcgEEbwrCLIhhwDShj9VtezeXL4V+tdald9MVNeTEVZ1MxNoFL4k8xmo44e2 -----END CERTIFICATE-----Generated at Mon Oct 20 14:50:08 2025 by rpki-client