$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft File: dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft (raw, json) Hash identifier: kdFK8sWjJTlZWofvc6ZE7h90jIktTjv1GeGoH68gMTY= Subject key identifier: C6:62:A9:65:BB:B3:5F:38:BD:FD:55:53:32:0B:8C:AB:68:AE:74:B4 Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC Certificate issuer: /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Certificate serial: 010D0C9F4328584BBFC312305411A4134CCA6272 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft Manifest number: 010D0C9F43285842D168A689DC7162ABC892174D Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 10315c07-19e5-332a-9619-ac334b5ed2bc.roa (hash: ShgCYrd9d6yewScB1g+x+CgFY4Iy5KQ+ZdWXKHXwWdw=) 2: 33cbc354-d185-3748-a67e-8b940dc311d1.roa (hash: kA7n3AUOuaclaNzKD7DJlzlrwD/mmZqyCfFsF17Ckhs=) 3: b32af959-6588-30ef-ac6a-e1c8ea97071b.roa (hash: cTuc89Wly5aDuCmiSspX099spjte5etxuN0qUTmUYxA=) 4: dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl (hash: YrOOhHKEy3a1tdTOHSqRKxEg+BmP4h8lljRiGTXN2So=) 5: e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa (hash: 9NU4ce7C359h5GlApa9CXhMJVDcnSDl43imzwPoYVVI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:12:30:54:11:a4:13:4c:ca:62:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=9a0a467d-64c2-4248-87b6-e91320850a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b2:b8:87:48:f6:11:99:bc:f5:31:6a:65:33: 2f:55:4d:1c:09:60:a0:3d:4e:71:45:04:65:81:e9: b4:e7:45:20:16:28:af:2a:6f:bc:63:5b:8a:fc:10: 70:7d:7c:ff:91:c6:59:c8:1a:99:ea:8a:e3:b7:6f: c5:09:c5:f9:56:9f:fd:64:c2:dc:ba:9c:c6:d8:42: c6:40:7a:aa:ad:bf:fe:8e:54:a9:4b:49:98:7f:6e: 40:95:a2:bd:2f:3d:ea:38:31:24:e8:0b:46:7e:69: b1:cb:54:eb:8d:79:98:e4:85:5f:62:bb:67:45:41: ab:46:be:5b:bb:e3:92:96:47:b3:b7:26:f3:af:ea: 24:ea:9d:cb:0f:d8:38:ac:25:01:48:82:88:e7:f0: ac:38:3c:82:de:1d:f5:72:9a:b2:e5:1a:e2:a0:c8: 94:4e:cf:11:5f:73:7c:54:f6:17:ea:40:22:e7:a3: 7f:7f:3a:e3:c5:b8:e6:60:c8:6d:b5:71:3c:fe:1a: 93:c8:5a:9c:6d:96:39:d1:86:a1:4e:0c:0e:6f:b0: 79:3f:e4:8d:f5:a9:c9:6d:78:72:ad:fa:19:5d:06: 14:4c:b2:0e:f9:f2:78:a9:d2:99:d1:b8:fa:e5:4d: fc:11:27:02:fa:81:9e:c1:ec:aa:32:7c:a7:69:8c: df:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:62:A9:65:BB:B3:5F:38:BD:FD:55:53:32:0B:8C:AB:68:AE:74:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl X509v3 Authority Key Identifier: keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e1:99:a2:4d:c7:7c:9b:13:18:27:12:8b:36:27:0f:c5:10: 31:7c:5e:72:7a:18:2d:14:0a:8a:ba:4b:83:1a:29:e5:03:23: 0a:a9:34:2f:3e:4b:a2:88:f2:9a:5d:15:6c:96:f4:31:dc:10: 70:eb:b8:f7:a5:a8:20:5b:fb:be:02:0f:cf:1c:6a:8b:71:3d: 41:4d:68:dd:af:c3:5d:5a:ee:67:68:12:90:5f:fb:77:6b:e4: a7:f4:70:ff:ea:e5:d5:45:27:bb:22:3c:13:1c:f2:3f:52:11: f9:57:56:92:df:5e:ff:7f:d2:cd:74:79:8b:5f:13:dc:40:6b: 25:61:79:b0:1c:e3:be:a8:a1:82:40:1d:9a:82:2c:c8:16:08: b8:61:af:31:a3:04:b4:e7:08:14:ce:ea:85:d2:6e:56:be:d1: 7a:b3:4d:04:c0:9f:3b:47:b7:a7:fe:a7:2e:9e:4b:57:3d:68: 90:05:a7:79:b5:9f:0b:09:6e:03:77:62:e6:dc:c1:1c:bb:a6: e9:94:47:39:8a:82:d9:a4:e2:08:a3:91:c1:c4:fd:56:46:1c: 58:95:e7:0d:61:f0:5f:1e:7a:a4:0d:6e:c7:07:3c:c4:61:cb: 8d:b3:bd:17:39:c6:9e:08:8b:68:97:d2:2c:5b:a3:b8:07:19: 63:29:7f:fe -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxIwVBGkE0zKYnIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj N2JlMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk OWEwYTQ2N2QtNjRjMi00MjQ4LTg3YjYtZTkxMzIwODUwYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbK4h0j2EZm89TFqZTMvVU0cCWCgPU5xRQRl gem050UgFiivKm+8Y1uK/BBwfXz/kcZZyBqZ6orjt2/FCcX5Vp/9ZMLcupzG2ELG QHqqrb/+jlSpS0mYf25AlaK9Lz3qODEk6AtGfmmxy1TrjXmY5IVfYrtnRUGrRr5b u+OSlkeztybzr+ok6p3LD9g4rCUBSIKI5/CsODyC3h31cpqy5RrioMiUTs8RX3N8 VPYX6kAi56N/fzrjxbjmYMhttXE8/hqTyFqcbZY50YahTgwOb7B5P+SN9anJbXhy rfoZXQYUTLIO+fJ4qdKZ0bj65U38EScC+oGeweyqMnynaYzfXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMZiqWW7s184vf1VUzILjKtornS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4 Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvZGQ2OGNiOGItMGQ5MS00 YTBlLTlmMDQtYTNjNzhlNTVjN2JlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1 YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3 OGU1NWM3YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJ4ZmiTcd8mxMYJxKLNicP xRAxfF5yehgtFAqKukuDGinlAyMKqTQvPkuiiPKaXRVslvQx3BBw67j3paggW/u+ Ag/PHGqLcT1BTWjdr8NdWu5naBKQX/t3a+Sn9HD/6uXVRSe7IjwTHPI/UhH5V1aS 317/f9LNdHmLXxPcQGslYXmwHOO+qKGCQB2agizIFgi4Ya8xowS05wgUzuqF0m5W vtF6s00EwJ87R7en/qcunktXPWiQBad5tZ8LCW4Dd2Lm3MEcu6bplEc5ioLZpOII o5HBxP1WRhxYlecNYfBfHnqkDW7HBzzEYcuNs70XOcaeCItol9IsW6O4BxljKX/+ -----END CERTIFICATE-----Generated at Wed Nov 5 10:44:11 2025 by rpki-client