$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft File: 68e8d38b-0b87-495a-96cc-346ddf0d5802.mft (raw, json) Hash identifier: VRA/G+uD0fSvJhDTlUCvNGR0X5YnT/q9+2qc70kv7Yo= Subject key identifier: A1:96:12:EA:91:99:E5:B9:98:E9:75:84:C6:0F:63:79:0D:E5:C4:4A Authority key identifier: BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 Certificate issuer: /CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Certificate serial: 010D0C9F4328584D7B6A44DCABA23879A8365220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft Manifest number: 010D0C9F4328584B3C6532A29CB784D5E4CF44F3 Signing time: Sun 12 Apr 2026 13:00:03 +0000 Manifest this update: Sun 12 Apr 2026 13:00:03 +0000 Manifest next update: Wed 15 Apr 2026 13:00:00 +0000 Files and hashes: 1: 68e8d38b-0b87-495a-96cc-346ddf0d5802.crl (hash: 0rt6cuk77rg+LYLQyQpqNl51hFQMEQcgwUTNAMyhjsg=) 2: dfdbfc18-aa98-3225-abfe-7e62127b7000.roa (hash: IWgE2I4pabBNOnHSMp/sWgZf3CFH0kofDUfhPtj/+H4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:44:dc:ab:a2:38:79:a8:36:52:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Validity Not Before: Apr 12 13:00:03 2026 GMT Not After : Apr 15 13:00:00 2026 GMT Subject: CN=9cb1924e-689b-4db2-82aa-bf9409656338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:3d:37:ff:cf:f0:dc:25:f1:f7:46:a8:e3: 72:7a:91:3b:14:b2:ad:2a:de:06:28:59:7c:71:b5: be:f4:2d:01:28:43:b4:67:7d:9c:89:1d:1d:11:ac: 08:7c:57:01:5c:fa:ff:fd:85:41:d1:10:3b:06:69: ea:f7:e1:52:b2:99:56:c1:96:f3:d3:f6:a3:05:4c: c6:e5:2e:a0:c3:85:d4:8f:e1:2d:d8:f5:67:00:eb: 31:67:a9:8b:0c:83:43:1f:30:bf:d4:34:b4:c3:ea: 17:78:c0:ba:35:f8:4f:8f:d6:f2:ea:2d:78:2e:aa: 7b:21:2a:75:ff:ec:39:37:fd:5e:c7:c4:8e:dd:9d: 86:4e:ed:96:d8:33:c7:f6:84:d0:58:57:2e:59:2a: f2:44:8b:ee:1c:d4:8c:f6:34:f2:8f:42:32:43:19: 97:f6:2a:1a:b3:dc:9a:d0:2f:da:5d:18:96:7c:16: bb:94:08:ff:5b:50:6c:9f:f5:08:f7:55:5e:69:53: 49:c2:7b:d5:98:42:12:9f:88:54:b9:32:b9:22:53: 6b:a9:54:c7:f1:72:5a:c3:dd:d5:0e:68:fa:90:92: 1e:38:54:e7:88:ab:6b:47:c1:88:5a:32:97:34:25: c6:22:76:c5:92:cf:fc:6e:44:97:92:bd:c6:8a:14: 5f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:96:12:EA:91:99:E5:B9:98:E9:75:84:C6:0F:63:79:0D:E5:C4:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl X509v3 Authority Key Identifier: keyid:BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:15:f2:d0:db:0d:9a:f8:08:4d:7b:e4:a1:b4:85:2d:07:95: d0:cd:09:76:3f:5e:c9:6f:87:bc:93:c5:68:6a:03:93:47:80: 0d:28:91:18:e9:15:2d:84:35:60:b2:00:aa:a6:16:2b:64:ff: d1:f7:e8:b5:d6:c1:92:72:46:b6:66:7a:91:7c:d0:68:02:33: 32:24:c9:80:14:d6:e9:4d:fc:73:bb:1c:c6:d6:cc:5a:56:c1: dd:ad:bd:67:af:f4:65:8e:e0:8d:d8:b4:72:db:af:32:2a:bb: c5:ac:c1:71:f3:ba:e2:b2:a1:d5:79:d8:91:2e:81:6e:3a:b1: 65:35:fc:b3:58:a2:4f:81:7d:1a:3d:68:49:e8:5f:82:01:4a: 3b:d9:5e:75:62:ce:79:6f:18:a2:90:db:01:04:7b:cd:e7:6c: 36:ac:73:f5:7d:ab:83:c2:75:e1:bd:ab:df:86:4f:b5:71:50: 4e:10:ae:9f:ff:ca:a0:9f:30:73:0a:fa:97:66:0c:66:c2:c8: 15:63:bc:3e:b5:3f:34:ac:e0:35:dd:4d:55:6c:d3:a0:03:fd: 9f:6b:b9:c7:dc:5d:f9:a2:39:70:72:f9:4a:17:58:78:bd:92: 97:15:b6:b6:8c:f0:36:bc:2a:0e:c9:7e:8a:65:06:ef:b6:69: 9c:ff:81:e6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE17akTcq6I4eag2UiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhlOGQzOGItMGI4Ny00OTVhLTk2Y2MtMzQ2ZGRmMGQ1 ODAyMB4XDTI2MDQxMjEzMDAwM1oXDTI2MDQxNTEzMDAwMFowLzEtMCsGA1UEAxMk OWNiMTkyNGUtNjg5Yi00ZGIyLTgyYWEtYmY5NDA5NjU2MzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS89N//P8Nwl8fdGqONyepE7FLKtKt4GKFl8 cbW+9C0BKEO0Z32ciR0dEawIfFcBXPr//YVB0RA7Bmnq9+FSsplWwZbz0/ajBUzG 5S6gw4XUj+Et2PVnAOsxZ6mLDINDHzC/1DS0w+oXeMC6NfhPj9by6i14Lqp7ISp1 /+w5N/1ex8SO3Z2GTu2W2DPH9oTQWFcuWSryRIvuHNSM9jTyj0IyQxmX9ioas9ya 0C/aXRiWfBa7lAj/W1Bsn/UI91VeaVNJwnvVmEISn4hUuTK5IlNrqVTH8XJaw93V Dmj6kJIeOFTniKtrR8GIWjKXNCXGInbFks/8bkSXkr3GihRf3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKGWEuqRmeW5mOl1hMYPY3kN5cRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82OGU4 ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZkZGYwZDU4MDIvNjhlOGQzOGItMGI4Ny00 OTVhLTk2Y2MtMzQ2ZGRmMGQ1ODAyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjhlOGQzOGItMGI4Ny00OTVhLTk2 Y2MtMzQ2ZGRmMGQ1ODAyLzY4ZThkMzhiLTBiODctNDk1YS05NmNjLTM0NmRkZjBk NTgwMi5jcmwwHwYDVR0jBBgwFoAUvYEso06SVZbNE7XZXK6S4E0ZZwQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82OGU4ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZk ZGYwZDU4MDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMFfLQ2w2a+AhNe+ShtIUt B5XQzQl2P17Jb4e8k8VoagOTR4ANKJEY6RUthDVgsgCqphYrZP/R9+i11sGScka2 ZnqRfNBoAjMyJMmAFNbpTfxzuxzG1sxaVsHdrb1nr/RljuCN2LRy268yKrvFrMFx 87risqHVediRLoFuOrFlNfyzWKJPgX0aPWhJ6F+CAUo72V51Ys55bxiikNsBBHvN 52w2rHP1fauDwnXhvavfhk+1cVBOEK6f/8qgnzBzCvqXZgxmwsgVY7w+tT80rOA1 3U1VbNOgA/2fa7nH3F35ojlwcvlKF1h4vZKXFba2jPA2vCoOyX6KZQbvtmmc/4Hm -----END CERTIFICATE-----Generated at Mon Apr 13 13:57:25 2026 by rpki-client