$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft File: 68f1635e-5871-4108-b726-e99a09258e31.mft (raw, json) Hash identifier: RMzNcUfASrbDa9CQPt7s7YJL0i9FVThFm7BlqSOj0ko= Subject key identifier: D1:57:B9:8A:F7:49:9C:6F:09:30:51:6D:62:A0:57:D9:A0:1D:67:F5 Authority key identifier: CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC Certificate issuer: /CN=68f1635e-5871-4108-b726-e99a09258e31 Certificate serial: 010D0C9F4328584BC03A2DF1044745738F92C900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft Manifest number: 010D0C9F43285849B37171ECF2EE65DF5B9F72C1 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 1dc07208-ca23-362a-a20c-22d013df9b70.roa (hash: bDhNkhAYhHyE4/KxRG41bw0r7aNaPCzJT6XcBY2Bofo=) 2: 68f1635e-5871-4108-b726-e99a09258e31.crl (hash: 3wLbzDh79qkwMQnDQbBpo/DNm1pEGKpQ1DntfSn67V0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2d:f1:04:47:45:73:8f:92:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68f1635e-5871-4108-b726-e99a09258e31 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=940e44d8-e6e9-4e2a-b240-6f3533a969f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5e:4a:bb:2c:79:ed:fa:03:e9:85:c3:6f:e9: 8f:cc:9f:f8:d4:4b:cc:1c:ed:10:29:e2:e1:50:ad: 3e:d3:4b:7e:38:b8:13:b5:22:d5:b4:ac:aa:e5:ba: 07:9d:87:7b:84:c8:6f:dd:d1:e2:4e:00:82:94:10: 62:6b:5f:13:e3:7c:9b:87:85:0b:7c:cf:34:f5:7e: d8:5e:8d:64:b4:76:6f:71:88:08:f5:2a:7e:61:71: b6:5e:76:7e:31:59:c5:95:56:7a:69:7d:e7:c3:03: 4b:4d:6d:55:97:29:e7:10:c4:79:2a:a9:d9:29:f8: c8:74:b2:59:5b:90:6f:8e:c1:b4:48:04:46:83:7b: 3c:b1:16:40:57:ed:87:33:63:93:cf:51:77:25:ec: fb:46:6d:73:be:9f:4d:ec:1f:d5:af:ac:d7:16:75: d5:7c:c6:f1:2a:83:3f:81:70:4b:2c:e7:df:da:c4: ff:03:74:28:25:8f:57:3b:08:85:5b:fd:c0:58:dc: 29:22:85:56:a4:b7:63:d0:98:a4:24:3c:51:ae:f2: 9e:91:c9:08:11:33:18:e3:69:23:86:46:90:46:ff: 35:b0:d3:d9:18:0c:95:a6:69:d6:30:81:71:d2:17: 57:74:55:43:eb:18:55:21:83:2d:13:e4:9a:96:20: 5e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:57:B9:8A:F7:49:9C:6F:09:30:51:6D:62:A0:57:D9:A0:1D:67:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl X509v3 Authority Key Identifier: keyid:CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2d:a6:f3:69:af:01:21:4a:00:eb:58:45:ae:f3:ac:61:af: 63:38:c5:3a:79:2d:e9:85:72:3e:f4:48:f5:c7:7a:f0:2c:cb: 4e:7b:66:d5:74:9d:27:0b:39:16:8a:aa:1e:b8:00:f6:ce:62: e7:ec:7a:b4:6f:0a:a6:7a:fc:d2:e1:1b:d6:96:14:b4:a8:21: a8:c3:40:14:61:04:21:37:aa:88:e1:2a:60:38:91:8d:f7:3a: e4:37:aa:dc:d6:2a:02:01:09:8a:fc:51:6d:23:ff:20:90:22: d7:fc:22:87:1a:b2:08:6a:2b:f1:c6:bc:c1:65:01:4d:84:7c: dd:ae:74:98:61:8f:a7:f1:63:08:4a:94:b6:98:bf:09:bf:84: a8:20:3d:d1:73:5a:cf:1c:fa:f8:91:aa:00:f5:a4:24:4f:57: 18:3d:f5:3d:d2:b6:3a:5c:98:1a:33:6c:34:83:b7:21:1f:82: f4:6c:2a:36:50:4b:e4:0c:9f:65:3a:c5:65:59:8d:7a:6a:a9: e6:41:58:6a:92:4c:63:2b:11:48:59:a3:de:0c:5c:e9:d8:c2: 1e:0c:a2:fd:87:4f:8c:8e:07:b7:06:2c:bc:34:f0:a8:41:d4: 37:25:64:cc:7b:6d:71:66:b7:77:5b:bd:0c:bf:91:e2:28:d5: 08:0f:a5:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi3xBEdFc4+SyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhmMTYzNWUtNTg3MS00MTA4LWI3MjYtZTk5YTA5MjU4 ZTMxMB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk OTQwZTQ0ZDgtZTZlOS00ZTJhLWIyNDAtNmYzNTMzYTk2OWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F5Kuyx57foD6YXDb+mPzJ/41EvMHO0QKeLh UK0+00t+OLgTtSLVtKyq5boHnYd7hMhv3dHiTgCClBBia18T43ybh4ULfM809X7Y Xo1ktHZvcYgI9Sp+YXG2XnZ+MVnFlVZ6aX3nwwNLTW1VlynnEMR5KqnZKfjIdLJZ W5BvjsG0SARGg3s8sRZAV+2HM2OTz1F3Jez7Rm1zvp9N7B/Vr6zXFnXVfMbxKoM/ gXBLLOff2sT/A3QoJY9XOwiFW/3AWNwpIoVWpLdj0JikJDxRrvKekckIETMY42kj hkaQRv81sNPZGAyVpmnWMIFx0hdXdFVD6xhVIYMtE+SaliBeiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNFXuYr3SZxvCTBRbWKgV9mgHWf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82OGYx NjM1ZS01ODcxLTQxMDgtYjcyNi1lOTlhMDkyNThlMzEvNjhmMTYzNWUtNTg3MS00 MTA4LWI3MjYtZTk5YTA5MjU4ZTMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjhmMTYzNWUtNTg3MS00MTA4LWI3 MjYtZTk5YTA5MjU4ZTMxLzY4ZjE2MzVlLTU4NzEtNDEwOC1iNzI2LWU5OWEwOTI1 OGUzMS5jcmwwHwYDVR0jBBgwFoAUzcWfLdgpN6pPgo7UEHtu//TKCMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82OGYxNjM1ZS01ODcxLTQxMDgtYjcyNi1lOTlh MDkyNThlMzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJLabzaa8BIUoA61hFrvOs Ya9jOMU6eS3phXI+9Ej1x3rwLMtOe2bVdJ0nCzkWiqoeuAD2zmLn7Hq0bwqmevzS 4RvWlhS0qCGow0AUYQQhN6qI4SpgOJGN9zrkN6rc1ioCAQmK/FFtI/8gkCLX/CKH GrIIaivxxrzBZQFNhHzdrnSYYY+n8WMISpS2mL8Jv4SoID3Rc1rPHPr4kaoA9aQk T1cYPfU90rY6XJgaM2w0g7chH4L0bCo2UEvkDJ9lOsVlWY16aqnmQVhqkkxjKxFI WaPeDFzp2MIeDKL9h0+Mjge3Biy8NPCoQdQ3JWTMe21xZrd3W70Mv5HiKNUID6WY -----END CERTIFICATE-----Generated at Wed Nov 5 13:01:02 2025 by rpki-client