$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft File: 968bda65-4161-4dee-a348-29486c17acb2.mft (raw, json) Hash identifier: zz2/Q0R54lNlObIU2QfbNNee4lElbzMUAi6kgsyWW00= Subject key identifier: DD:09:6E:B6:1E:87:D3:82:D3:D4:C0:B4:AE:4D:4B:44:97:E3:E6:58 Authority key identifier: C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 Certificate issuer: /CN=968bda65-4161-4dee-a348-29486c17acb2 Certificate serial: 010D0C9F4328584B920C1AC6EE97A3AE42526CE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft Manifest number: 010D0C9F4328584AA202387BD97139280BBB79D8 Signing time: Sun 19 Oct 2025 06:00:03 +0000 Manifest this update: Sun 19 Oct 2025 06:00:03 +0000 Manifest next update: Wed 22 Oct 2025 06:00:00 +0000 Files and hashes: 1: 968bda65-4161-4dee-a348-29486c17acb2.crl (hash: rhv+PcKXPJDIkhE+c+KwYGcClIfEGxnnMnXWtE6jCZ0=) 2: c1539d45-e25a-3367-9754-f7eba01827f3.roa (hash: J+9bppIZqjRaxOSxkPxrOxVu7yKkgVG7/ufxVncXTa0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:0c:1a:c6:ee:97:a3:ae:42:52:6c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968bda65-4161-4dee-a348-29486c17acb2 Validity Not Before: Oct 19 06:00:03 2025 GMT Not After : Oct 22 06:00:00 2025 GMT Subject: CN=df8ca996-4d82-4edf-be57-22b1f76d3993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:41:37:90:23:24:88:a2:f8:0a:12:c4:d9:18: 2d:8e:81:be:74:99:4c:a6:65:35:1e:86:98:c2:62: 7a:b9:70:64:43:75:f7:1a:15:78:0b:d4:4b:a1:41: 6f:0f:f5:8a:58:09:be:93:3b:74:71:7a:22:7e:18: 34:e9:b3:f6:a3:c0:c9:8c:25:55:ed:ed:3f:8f:b0: fa:d8:9c:48:ae:45:59:c8:2a:5c:63:b5:48:20:5c: 53:b0:d9:9f:82:72:b4:d5:0e:23:46:76:5b:e4:04: 70:f0:5c:3b:01:d6:07:ab:de:31:c8:9f:2a:04:82: bd:26:40:b3:15:69:11:1a:25:ff:2b:13:69:89:6f: a2:46:47:b6:ab:2b:57:35:4c:4a:f4:f8:ad:b6:e5: 31:d8:5b:01:3f:36:01:8d:95:b9:40:87:54:43:90: 00:b8:57:8d:87:e7:47:17:67:81:5a:31:c1:df:ba: 1b:f8:44:be:4b:23:bb:28:f5:6c:d1:09:23:ad:9e: f8:73:e2:cd:aa:9a:48:ac:3c:54:bd:c4:33:78:ee: 2f:73:f0:b6:ab:8e:7d:eb:da:be:67:94:ef:5b:bd: 3e:6e:3d:55:b4:38:6d:3d:59:da:0a:10:8a:e8:ad: b7:8b:51:4b:37:e1:ba:c1:a9:21:f2:83:3b:15:33: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:09:6E:B6:1E:87:D3:82:D3:D4:C0:B4:AE:4D:4B:44:97:E3:E6:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl X509v3 Authority Key Identifier: keyid:C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:fe:6c:82:d6:b8:6b:ed:1b:6e:64:79:2e:17:08:8f:fa:cb: ae:f6:c5:87:66:25:7d:af:c2:e7:6a:50:ad:83:77:75:db:8f: 8f:ee:d0:56:32:77:42:2f:e4:4a:93:3e:52:be:6e:dc:80:13: 49:89:7e:b3:9b:e9:b7:d1:18:41:24:83:5e:8d:a5:b4:3b:77: e1:6e:cf:1b:df:99:93:81:79:87:10:bb:54:5e:da:34:df:2b: 54:2b:da:16:d0:cc:03:46:b1:0b:80:b3:db:1d:85:74:b0:cf: c5:82:cd:04:fc:c0:a3:ef:d5:64:88:8b:2a:64:e7:34:99:fc: 15:4e:e0:73:dd:18:9b:9e:3e:c6:54:c3:11:86:c6:9c:35:61: 3a:06:2b:27:d7:f3:ff:1f:83:08:aa:ec:ac:90:c4:51:17:a0: b2:7c:98:eb:17:de:b1:25:61:bb:43:dd:11:c2:95:ac:c4:0a: 9f:70:3d:1c:fd:0b:c9:ed:2e:be:33:69:3d:a1:3d:cf:70:8a: b2:c3:a4:bd:a8:9d:b9:ba:2a:41:2d:ea:84:b3:d9:bf:ac:83: 20:0a:55:e2:20:3d:2e:bd:db:39:e4:95:95:e8:5e:91:d1:5c: 19:1a:04:16:c5:51:79:41:40:2b:e0:e4:15:cf:9d:a5:1a:04: 10:0b:45:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSDBrG7pejrkJSbOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY4YmRhNjUtNDE2MS00ZGVlLWEzNDgtMjk0ODZjMTdh Y2IyMB4XDTI1MTAxOTA2MDAwM1oXDTI1MTAyMjA2MDAwMFowLzEtMCsGA1UEAxMk ZGY4Y2E5OTYtNGQ4Mi00ZWRmLWJlNTctMjJiMWY3NmQzOTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0E3kCMkiKL4ChLE2RgtjoG+dJlMpmU1HoaY wmJ6uXBkQ3X3GhV4C9RLoUFvD/WKWAm+kzt0cXoifhg06bP2o8DJjCVV7e0/j7D6 2JxIrkVZyCpcY7VIIFxTsNmfgnK01Q4jRnZb5ARw8Fw7AdYHq94xyJ8qBIK9JkCz FWkRGiX/KxNpiW+iRke2qytXNUxK9PittuUx2FsBPzYBjZW5QIdUQ5AAuFeNh+dH F2eBWjHB37ob+ES+SyO7KPVs0QkjrZ74c+LNqppIrDxUvcQzeO4vc/C2q45969q+ Z5TvW70+bj1VtDhtPVnaChCK6K23i1FLN+G6wakh8oM7FTNjYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN0JbrYeh9OC09TAtK5NS0SX4+ZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Njhi ZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4NmMxN2FjYjIvOTY4YmRhNjUtNDE2MS00 ZGVlLWEzNDgtMjk0ODZjMTdhY2IyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTY4YmRhNjUtNDE2MS00ZGVlLWEz NDgtMjk0ODZjMTdhY2IyLzk2OGJkYTY1LTQxNjEtNGRlZS1hMzQ4LTI5NDg2YzE3 YWNiMi5jcmwwHwYDVR0jBBgwFoAUwSdUl9rMCYxMeGAB0fNOAbHxOkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NjhiZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4 NmMxN2FjYjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBm/myC1rhr7RtuZHkuFwiP +suu9sWHZiV9r8LnalCtg3d124+P7tBWMndCL+RKkz5Svm7cgBNJiX6zm+m30RhB JINejaW0O3fhbs8b35mTgXmHELtUXto03ytUK9oW0MwDRrELgLPbHYV0sM/Fgs0E /MCj79VkiIsqZOc0mfwVTuBz3Ribnj7GVMMRhsacNWE6Bisn1/P/H4MIquyskMRR F6CyfJjrF96xJWG7Q90RwpWsxAqfcD0c/QvJ7S6+M2k9oT3PcIqyw6S9qJ25uipB LeqEs9m/rIMgClXiID0uvds55JWV6F6R0VwZGgQWxVF5QUAr4OQVz52lGgQQC0X7 -----END CERTIFICATE-----Generated at Mon Oct 20 04:47:54 2025 by rpki-client