$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft File: 968bda65-4161-4dee-a348-29486c17acb2.mft (raw, json) Hash identifier: /dUtM/4tYSxoxH0EsdW4Rmha1GBBJ/RJg0mEDEC6cfM= Subject key identifier: 6D:97:4A:B4:35:98:9F:0F:FE:F3:B8:6C:C9:E3:CD:4D:6F:7A:98:24 Authority key identifier: C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 Certificate issuer: /CN=968bda65-4161-4dee-a348-29486c17acb2 Certificate serial: 010D0C9F4328584B73569248127C9734BD9A7A20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft Manifest number: 010D0C9F4328584AA202387BD97139280BBB79CC Signing time: Wed 08 Oct 2025 06:00:03 +0000 Manifest this update: Wed 08 Oct 2025 06:00:03 +0000 Manifest next update: Fri 10 Oct 2025 06:00:00 +0000 Files and hashes: 1: 968bda65-4161-4dee-a348-29486c17acb2.crl (hash: ugY4bAfo/2BYMrKnusVXab53Ofs7nksHfxuq0wnKO+4=) 2: c1539d45-e25a-3367-9754-f7eba01827f3.roa (hash: lEIiEO54rkkCdbHqb+jgVf4IphjLIGtt5q0ng1MUFdY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:73:56:92:48:12:7c:97:34:bd:9a:7a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968bda65-4161-4dee-a348-29486c17acb2 Validity Not Before: Oct 8 06:00:03 2025 GMT Not After : Oct 10 06:00:00 2025 GMT Subject: CN=8da00fec-8f65-4437-aff7-f23313dc838a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:34:96:63:2d:c5:07:ac:8b:34:be:ea:c5: 0f:d0:d0:35:94:15:1c:9c:a6:4f:b5:74:3a:9e:04: a5:4a:11:da:97:5e:17:d9:1e:57:61:32:05:e0:b3: e4:97:6d:3b:01:45:cb:e7:b9:0e:59:9f:72:6d:49: 2b:2b:cf:a9:bf:5d:84:95:1c:93:ee:e2:22:df:70: 51:9a:df:27:86:7d:38:b3:59:96:14:35:08:d4:a0: cc:c7:ce:ce:30:6d:b5:7a:79:8d:8d:99:d4:d5:67: b0:d8:84:91:f3:a6:79:8a:e0:15:fe:39:3c:b3:74: 2c:a4:9a:7b:9a:5a:dc:c8:7c:c3:15:83:2b:14:4f: 88:52:5d:95:d2:5e:b1:e3:bd:f1:fb:4f:a3:f8:15: ea:ce:bd:2b:f8:cc:2c:fa:29:7d:33:d6:d9:de:69: df:ea:79:6f:9a:ab:e2:4d:56:3f:ff:98:ec:a6:d0: c6:b2:18:dd:d3:a1:08:d4:86:7b:c2:7f:61:cf:2e: af:a0:d1:f1:a7:c0:99:aa:17:4a:88:b1:1b:ef:2b: ee:cc:88:be:c5:b9:a6:a4:35:6c:d0:2c:73:92:3a: b6:c9:d0:55:28:71:11:d9:89:ee:f2:48:8c:82:3b: 3f:0f:1e:02:45:39:97:94:43:ab:b9:f6:19:3f:82: 8c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:97:4A:B4:35:98:9F:0F:FE:F3:B8:6C:C9:E3:CD:4D:6F:7A:98:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl X509v3 Authority Key Identifier: keyid:C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:4d:7c:5a:a7:24:6e:ba:cc:d4:86:db:8e:2f:37:a0:32:21: 69:23:97:ed:c6:79:77:ac:63:c6:2a:96:d1:fe:d6:0d:ca:29: 63:27:33:d5:96:59:82:f7:2b:e8:26:dd:16:da:27:80:01:f7: ce:41:5a:b4:ec:71:3b:d3:16:01:29:b3:90:ab:a4:78:9f:26: a0:fd:b0:e8:b5:a5:8f:06:ec:f9:a6:38:45:35:81:b1:f0:3b: 3f:a9:e0:0c:3d:d1:77:29:d6:42:0f:04:d0:08:0f:7d:5a:99: 27:c2:0a:3d:1b:b0:75:10:d9:2b:58:72:29:75:54:0c:12:89: 12:98:ec:c8:99:7d:52:54:a2:f6:d8:fc:0c:ff:98:93:08:90: b3:ba:9f:6a:33:52:8a:05:06:c6:db:24:4e:68:df:07:9a:95: 60:a0:ad:b7:2b:7e:41:c9:09:98:05:13:47:a9:b8:a8:6d:6e: 0d:0e:e2:ec:2a:fc:b5:a1:e5:f3:c7:82:87:e2:1a:9f:68:84: 63:b5:8b:95:d5:95:43:d8:35:4b:0e:25:91:39:92:51:aa:69: df:72:2d:67:44:ac:5c:ae:74:5d:c5:24:dc:78:8b:9d:82:a6: 75:33:f1:82:b0:d9:c8:be:36:eb:8b:e4:9c:3a:00:40:01:25: 07:49:71:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtzVpJIEnyXNL2aeiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY4YmRhNjUtNDE2MS00ZGVlLWEzNDgtMjk0ODZjMTdh Y2IyMB4XDTI1MTAwODA2MDAwM1oXDTI1MTAxMDA2MDAwMFowLzEtMCsGA1UEAxMk OGRhMDBmZWMtOGY2NS00NDM3LWFmZjctZjIzMzEzZGM4MzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvko0lmMtxQesizS+6sUP0NA1lBUcnKZPtXQ6 ngSlShHal14X2R5XYTIF4LPkl207AUXL57kOWZ9ybUkrK8+pv12ElRyT7uIi33BR mt8nhn04s1mWFDUI1KDMx87OMG21enmNjZnU1Wew2ISR86Z5iuAV/jk8s3QspJp7 mlrcyHzDFYMrFE+IUl2V0l6x473x+0+j+BXqzr0r+Mws+il9M9bZ3mnf6nlvmqvi TVY//5jsptDGshjd06EI1IZ7wn9hzy6voNHxp8CZqhdKiLEb7yvuzIi+xbmmpDVs 0Cxzkjq2ydBVKHER2Ynu8kiMgjs/Dx4CRTmXlEOrufYZP4KMLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG2XSrQ1mJ8P/vO4bMnjzU1vepgkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Njhi ZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4NmMxN2FjYjIvOTY4YmRhNjUtNDE2MS00 ZGVlLWEzNDgtMjk0ODZjMTdhY2IyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTY4YmRhNjUtNDE2MS00ZGVlLWEz NDgtMjk0ODZjMTdhY2IyLzk2OGJkYTY1LTQxNjEtNGRlZS1hMzQ4LTI5NDg2YzE3 YWNiMi5jcmwwHwYDVR0jBBgwFoAUwSdUl9rMCYxMeGAB0fNOAbHxOkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NjhiZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4 NmMxN2FjYjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6TXxapyRuuszUhtuOLzeg MiFpI5ftxnl3rGPGKpbR/tYNyiljJzPVllmC9yvoJt0W2ieAAffOQVq07HE70xYB KbOQq6R4nyag/bDotaWPBuz5pjhFNYGx8Ds/qeAMPdF3KdZCDwTQCA99Wpknwgo9 G7B1ENkrWHIpdVQMEokSmOzImX1SVKL22PwM/5iTCJCzup9qM1KKBQbG2yROaN8H mpVgoK23K35ByQmYBRNHqbiobW4NDuLsKvy1oeXzx4KH4hqfaIRjtYuV1ZVD2DVL DiWROZJRqmnfci1nRKxcrnRdxSTceIudgqZ1M/GCsNnIvjbri+ScOgBAASUHSXGI -----END CERTIFICATE-----Generated at Wed Oct 8 17:30:43 2025 by rpki-client