$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft File: dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft (raw, json) Hash identifier: wXmOFdLAKuoE/SKo1YPWvUs16fhrsEYJXzk3JNdvBj4= Subject key identifier: 79:25:6B:C2:89:17:45:45:53:F8:95:C7:2D:38:3C:14:07:BB:02:D7 Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC Certificate issuer: /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Certificate serial: 010D0C9F4328584B79F7F62AADA07B3635EF5000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft Manifest number: 010D0C9F43285842D168A689DC7162ABC8921734 Signing time: Fri 10 Oct 2025 15:00:04 +0000 Manifest this update: Fri 10 Oct 2025 15:00:04 +0000 Manifest next update: Mon 13 Oct 2025 15:00:00 +0000 Files and hashes: 1: 10315c07-19e5-332a-9619-ac334b5ed2bc.roa (hash: ShgCYrd9d6yewScB1g+x+CgFY4Iy5KQ+ZdWXKHXwWdw=) 2: 33cbc354-d185-3748-a67e-8b940dc311d1.roa (hash: kA7n3AUOuaclaNzKD7DJlzlrwD/mmZqyCfFsF17Ckhs=) 3: b32af959-6588-30ef-ac6a-e1c8ea97071b.roa (hash: cTuc89Wly5aDuCmiSspX099spjte5etxuN0qUTmUYxA=) 4: dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl (hash: YnPb8Y7FWGiBXy3WHG8tsr0myvaoIOPZk8WJg0PJKCQ=) 5: e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa (hash: 9NU4ce7C359h5GlApa9CXhMJVDcnSDl43imzwPoYVVI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:f7:f6:2a:ad:a0:7b:36:35:ef:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Validity Not Before: Oct 10 15:00:04 2025 GMT Not After : Oct 13 15:00:00 2025 GMT Subject: CN=b347e374-f2c5-4864-ba2e-74b6a77fd853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:02:3d:cc:8f:b0:e3:13:f9:18:6e:77:13:ef: 66:40:90:7a:f9:bc:85:1d:d9:9c:57:ad:f8:fb:ec: 15:ad:8f:35:15:18:6e:6e:4f:f5:b3:62:ca:7d:a7: b8:60:aa:f0:fd:7e:13:91:cc:4d:df:d6:2f:8b:15: b2:31:cd:4a:1c:d1:0c:c6:f4:d9:04:31:c3:b1:ba: 7b:ac:32:c1:86:3b:44:aa:4d:86:3d:ca:10:56:e7: ef:a9:96:76:10:fe:cc:c1:b0:b7:56:20:e3:c7:76: fe:c2:69:be:c3:40:f5:e4:19:93:eb:8b:20:75:4d: 80:03:ea:15:01:48:e3:5c:35:b4:7c:32:0a:18:d3: 86:87:14:13:e9:b2:b5:36:e5:4d:4a:99:b3:d9:d1: 9b:ad:50:20:7a:17:77:aa:d6:91:b9:5b:23:eb:ab: 21:07:d3:6c:65:2d:dd:e1:e8:7e:1b:0f:71:f1:c2: 8d:56:52:0f:0c:23:c5:2e:8d:50:b2:df:08:ab:bd: a5:90:db:4f:e0:8d:d3:46:06:56:5c:28:49:48:82: 38:f6:a7:8a:ac:6d:6c:88:72:ee:ca:fe:60:e8:b0: 84:03:cf:08:ab:ed:fc:86:3f:9f:87:a1:1e:e3:d5: 8e:35:57:7b:7b:92:94:69:5f:f2:9f:e3:42:f3:71: 72:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:25:6B:C2:89:17:45:45:53:F8:95:C7:2D:38:3C:14:07:BB:02:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl X509v3 Authority Key Identifier: keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:3e:d3:82:c7:b6:ec:e3:bc:4b:99:cb:2a:0c:b3:2d:53:da: 19:8c:5d:ae:86:e0:04:15:60:f5:90:75:ae:f8:3c:9f:26:ec: e0:90:42:c1:78:2f:64:1a:06:e4:5d:dc:5e:54:14:ed:a7:cb: f4:25:63:c8:5b:bc:05:fb:66:92:a2:3c:c0:7d:fb:65:24:6e: 3e:1a:e8:ea:c4:69:8d:c1:89:e4:90:f6:19:5a:0f:09:da:ac: 9f:05:78:bf:09:0a:3b:4a:c1:8b:2a:bf:64:26:1e:8b:9a:00: ce:f9:6c:2a:2e:58:2e:8f:11:df:64:3f:bf:f6:78:d1:24:e0: a4:ab:4c:38:da:8d:79:77:5e:31:99:c4:df:84:02:0d:87:c4: 95:cb:54:77:77:06:c1:66:04:7d:17:67:59:c9:fe:10:c4:12: 1a:9d:80:be:d1:8a:65:47:21:c2:21:82:7a:b9:a8:72:87:2a: 12:97:8a:54:7b:06:47:5c:13:0b:54:a8:92:d0:18:7d:a4:77: cc:b7:c5:4a:58:d1:6f:e5:9c:8c:8d:2d:26:1b:f4:3f:a8:bf: 3a:0c:34:5a:20:73:a7:ee:4b:c2:d7:ad:fe:97:65:38:5f:c4: be:d0:6e:97:64:34:44:d8:ea:f0:18:f4:75:46:b5:9a:61:60: 35:e2:c8:2f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt59/YqraB7NjXvUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj N2JlMB4XDTI1MTAxMDE1MDAwNFoXDTI1MTAxMzE1MDAwMFowLzEtMCsGA1UEAxMk YjM0N2UzNzQtZjJjNS00ODY0LWJhMmUtNzRiNmE3N2ZkODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwI9zI+w4xP5GG53E+9mQJB6+byFHdmcV634 ++wVrY81FRhubk/1s2LKfae4YKrw/X4TkcxN39YvixWyMc1KHNEMxvTZBDHDsbp7 rDLBhjtEqk2GPcoQVufvqZZ2EP7MwbC3ViDjx3b+wmm+w0D15BmT64sgdU2AA+oV AUjjXDW0fDIKGNOGhxQT6bK1NuVNSpmz2dGbrVAgehd3qtaRuVsj66shB9NsZS3d 4eh+Gw9x8cKNVlIPDCPFLo1Qst8Iq72lkNtP4I3TRgZWXChJSII49qeKrG1siHLu yv5g6LCEA88Iq+38hj+fh6Ee49WONVd7e5KUaV/yn+NC83FyUQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHkla8KJF0VFU/iVxy04PBQHuwLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4 Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvZGQ2OGNiOGItMGQ5MS00 YTBlLTlmMDQtYTNjNzhlNTVjN2JlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1 YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3 OGU1NWM3YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/PtOCx7bs47xLmcsqDLMt U9oZjF2uhuAEFWD1kHWu+DyfJuzgkELBeC9kGgbkXdxeVBTtp8v0JWPIW7wF+2aS ojzAfftlJG4+GujqxGmNwYnkkPYZWg8J2qyfBXi/CQo7SsGLKr9kJh6LmgDO+Wwq LlgujxHfZD+/9njRJOCkq0w42o15d14xmcTfhAINh8SVy1R3dwbBZgR9F2dZyf4Q xBIanYC+0YplRyHCIYJ6uahyhyoSl4pUewZHXBMLVKiS0Bh9pHfMt8VKWNFv5ZyM jS0mG/Q/qL86DDRaIHOn7kvC163+l2U4X8S+0G6XZDRE2OrwGPR1RrWaYWA14sgv -----END CERTIFICATE-----Generated at Fri Oct 10 17:58:48 2025 by rpki-client