$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft File: 68f1635e-5871-4108-b726-e99a09258e31.mft (raw, json) Hash identifier: OKqZAZij+GEX8PGgxvM3Ighj9XV0RMuTC+6uld/SpD8= Subject key identifier: F4:1E:54:9C:38:09:2C:03:8E:F6:B0:FD:F9:B5:E5:79:40:AF:F8:8B Authority key identifier: CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC Certificate issuer: /CN=68f1635e-5871-4108-b726-e99a09258e31 Certificate serial: 010D0C9F4328584B3A3963E6E4A8DC4557A79130 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft Manifest number: 010D0C9F43285849B37171ECF2EE65DF5B9F728F Signing time: Wed 17 Sep 2025 19:00:08 +0000 Manifest this update: Wed 17 Sep 2025 19:00:08 +0000 Manifest next update: Sat 20 Sep 2025 19:00:00 +0000 Files and hashes: 1: 1dc07208-ca23-362a-a20c-22d013df9b70.roa (hash: hCA7WIYN28w8/GQrcBCN9BgPqOyb+FRsVN9YQ7zu5hE=) 2: 68f1635e-5871-4108-b726-e99a09258e31.crl (hash: fIJgC5eFXIYFvxeAG3guPeGiTZw996Twy0Htu5/ph1s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:39:63:e6:e4:a8:dc:45:57:a7:91:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68f1635e-5871-4108-b726-e99a09258e31 Validity Not Before: Sep 17 19:00:08 2025 GMT Not After : Sep 20 19:00:00 2025 GMT Subject: CN=5c5a4ba0-a41b-450c-b983-bdbad2251781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:63:9d:ee:b2:41:d0:1d:01:15:26:89:ae:d6: 4d:33:3c:97:40:6f:b8:fd:8c:8a:f9:07:7b:46:f9: 39:66:5c:b0:7f:57:f7:95:ef:5c:cf:bb:da:30:1d: 62:57:3f:16:64:f1:38:c0:17:65:ca:46:69:61:39: be:71:d0:c3:50:a0:0d:0c:36:2e:22:8d:d1:f0:d4: af:32:1c:f7:4e:9c:07:04:c2:78:13:38:14:65:8b: f4:76:bf:45:e5:41:30:3d:0b:10:f9:0b:25:cb:75: 92:49:3f:64:63:ef:63:da:d9:59:c0:bc:07:60:22: bf:10:84:a3:33:61:bd:8b:20:f6:f2:60:54:a6:aa: 2a:62:a7:6f:90:df:df:54:40:b8:60:0a:73:81:77: 0d:cc:0e:59:37:0c:8b:4f:e8:16:dc:28:72:28:b2: 2b:85:2b:ae:ae:05:16:3a:8d:0c:1d:b5:fb:9c:33: 8b:ea:7b:3c:cd:13:86:4d:64:5f:2f:82:71:6a:fc: 4b:d2:ca:37:81:05:a6:7d:21:43:cf:04:09:e7:33: 93:85:fb:f8:5b:d7:4c:01:a1:09:db:9a:53:f5:a1: 23:77:38:e2:c1:5c:88:93:d1:a1:ef:c4:46:bc:10: 51:70:e7:47:bc:a9:56:de:75:a5:19:c0:cd:65:7e: e6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1E:54:9C:38:09:2C:03:8E:F6:B0:FD:F9:B5:E5:79:40:AF:F8:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl X509v3 Authority Key Identifier: keyid:CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c8:44:fd:38:eb:2e:35:db:cd:ea:bd:09:12:ea:10:a6:06: 89:d2:b1:df:b0:a6:62:ac:d1:12:e0:d5:3b:6b:89:99:bd:29: 69:84:a6:45:d8:63:18:5f:f0:a8:34:47:cb:b3:2d:d7:b3:d5: b3:ef:9f:7c:16:ff:62:0c:95:ad:95:90:bc:e9:6e:93:2b:ce: ac:8b:ca:d9:e8:6a:f2:11:f5:ab:60:ac:ab:6a:90:c2:89:da: 3d:ad:e2:19:84:47:11:fd:cb:d8:ee:6d:52:c9:2b:9c:0b:af: 3b:c7:01:b1:05:99:2b:77:41:9a:47:dc:ea:25:fe:fc:d4:1e: 50:ae:63:05:8b:61:f9:34:85:b9:02:66:7b:bc:42:80:3c:f2: fd:1f:39:a2:93:01:b4:79:06:2a:ba:7d:1b:31:db:2d:e5:d1: 67:3f:98:fe:d9:a5:d3:ea:2b:28:f6:80:58:17:ec:4f:8f:cd: 1d:32:41:0c:a5:7d:66:db:70:3a:0d:6f:bd:17:83:58:dd:4f: ac:df:a3:8b:5d:f4:be:24:08:9c:5b:57:ca:de:de:ea:b2:d7: 14:1b:ca:5d:74:8f:b7:7d:a9:ff:9a:ed:ab:c7:f2:c7:e9:67: cf:a5:fe:76:d2:e1:d9:4e:e3:15:b5:57:3e:d3:bb:c6:0e:74: 59:d1:77:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs6OWPm5KjcRVenkTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhmMTYzNWUtNTg3MS00MTA4LWI3MjYtZTk5YTA5MjU4 ZTMxMB4XDTI1MDkxNzE5MDAwOFoXDTI1MDkyMDE5MDAwMFowLzEtMCsGA1UEAxMk NWM1YTRiYTAtYTQxYi00NTBjLWI5ODMtYmRiYWQyMjUxNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmOd7rJB0B0BFSaJrtZNMzyXQG+4/YyK+Qd7 Rvk5Zlywf1f3le9cz7vaMB1iVz8WZPE4wBdlykZpYTm+cdDDUKANDDYuIo3R8NSv Mhz3TpwHBMJ4EzgUZYv0dr9F5UEwPQsQ+Qsly3WSST9kY+9j2tlZwLwHYCK/EISj M2G9iyD28mBUpqoqYqdvkN/fVEC4YApzgXcNzA5ZNwyLT+gW3ChyKLIrhSuurgUW Oo0MHbX7nDOL6ns8zROGTWRfL4JxavxL0so3gQWmfSFDzwQJ5zOThfv4W9dMAaEJ 25pT9aEjdzjiwVyIk9Gh78RGvBBRcOdHvKlW3nWlGcDNZX7mfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPQeVJw4CSwDjvaw/fm15XlAr/iLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82OGYx NjM1ZS01ODcxLTQxMDgtYjcyNi1lOTlhMDkyNThlMzEvNjhmMTYzNWUtNTg3MS00 MTA4LWI3MjYtZTk5YTA5MjU4ZTMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjhmMTYzNWUtNTg3MS00MTA4LWI3 MjYtZTk5YTA5MjU4ZTMxLzY4ZjE2MzVlLTU4NzEtNDEwOC1iNzI2LWU5OWEwOTI1 OGUzMS5jcmwwHwYDVR0jBBgwFoAUzcWfLdgpN6pPgo7UEHtu//TKCMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82OGYxNjM1ZS01ODcxLTQxMDgtYjcyNi1lOTlh MDkyNThlMzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKyET9OOsuNdvN6r0JEuoQ pgaJ0rHfsKZirNES4NU7a4mZvSlphKZF2GMYX/CoNEfLsy3Xs9Wz7598Fv9iDJWt lZC86W6TK86si8rZ6GryEfWrYKyrapDCido9reIZhEcR/cvY7m1SySucC687xwGx BZkrd0GaR9zqJf781B5QrmMFi2H5NIW5AmZ7vEKAPPL9HzmikwG0eQYqun0bMdst 5dFnP5j+2aXT6iso9oBYF+xPj80dMkEMpX1m23A6DW+9F4NY3U+s36OLXfS+JAic W1fK3t7qstcUG8pddI+3fan/mu2rx/LH6WfPpf520uHZTuMVtVc+07vGDnRZ0XeL -----END CERTIFICATE-----Generated at Wed Sep 17 23:52:32 2025 by rpki-client