$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft File: 68e8d38b-0b87-495a-96cc-346ddf0d5802.mft (raw, json) Hash identifier: TnTXcCFOzMn/9EnuHO5o8QQQ5HjyW7xhRd+LIiannR0= Subject key identifier: 5C:15:2E:40:EA:93:DA:76:F6:93:54:19:AF:95:7A:AF:50:C5:4C:59 Authority key identifier: BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 Certificate issuer: /CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Certificate serial: 010D0C9F4328584D8695014A5810101FB7F25D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft Manifest number: 010D0C9F4328584B3C6532A29CB784D5E4CF44F7 Signing time: Thu 16 Apr 2026 13:00:03 +0000 Manifest this update: Thu 16 Apr 2026 13:00:03 +0000 Manifest next update: Sun 19 Apr 2026 13:00:00 +0000 Files and hashes: 1: 68e8d38b-0b87-495a-96cc-346ddf0d5802.crl (hash: X5MTFjCyVVtSdZiy4x9i/erQTKvQM+UJVvlxZFkiIaQ=) 2: dfdbfc18-aa98-3225-abfe-7e62127b7000.roa (hash: IWgE2I4pabBNOnHSMp/sWgZf3CFH0kofDUfhPtj/+H4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:01:4a:58:10:10:1f:b7:f2:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Validity Not Before: Apr 16 13:00:03 2026 GMT Not After : Apr 19 13:00:00 2026 GMT Subject: CN=c9ccd3ed-e8f8-4431-80f2-dcdd2a839c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4d:30:8f:bf:3c:4a:30:d8:17:af:16:ea:2b: 81:ba:4b:63:b2:3b:21:92:4d:a4:75:bd:ed:97:84: 82:2b:dc:b4:e2:c1:e8:6d:56:85:63:67:af:15:1a: 62:e3:4b:36:29:3c:ab:3c:18:01:2f:79:df:d8:dd: 03:02:10:49:12:ae:da:ad:6a:11:69:50:26:49:23: bc:d7:b9:0d:d6:10:d0:bd:3d:93:f2:e2:16:cd:cf: e5:a7:96:78:29:10:5f:de:7b:b4:16:b7:97:41:7e: 98:f1:82:b8:d9:9a:80:65:f8:53:f9:e6:5c:11:58: 2a:a6:5c:4b:90:d5:0b:8e:2f:f1:9e:4a:bf:d7:c6: f7:32:81:17:95:ce:19:4a:57:0d:c6:1c:90:be:43: 22:58:08:47:e6:1a:5f:67:0f:0e:e6:1e:e6:b9:e1: 9f:9b:95:a6:50:73:60:2b:88:c8:ed:9d:1d:17:bb: c7:3a:4d:af:76:32:9e:55:b5:20:20:79:66:58:d5: 76:27:52:e4:0a:22:e0:98:50:25:21:98:83:5e:48: bf:ec:65:c1:10:df:73:a4:d9:d8:2d:4f:b3:63:33: 16:46:d6:64:fb:c9:2e:fe:ac:fe:d9:66:d4:ff:09: 11:d5:b6:23:15:0f:21:e6:8d:d5:5a:87:1e:60:2b: 2b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:15:2E:40:EA:93:DA:76:F6:93:54:19:AF:95:7A:AF:50:C5:4C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl X509v3 Authority Key Identifier: keyid:BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:31:57:58:ca:88:bd:e2:11:92:5a:89:16:09:b5:3f:e1:1c: 2d:84:42:73:89:64:e1:a0:e0:4b:e9:b3:f4:1f:bd:88:ae:15: 52:05:03:a6:4c:94:0c:bb:6a:47:e6:95:f8:e9:82:7c:f2:f6: 8b:e4:2c:b7:b0:8b:fe:b4:4a:0c:39:52:e0:b4:d0:86:7d:c5: 4f:e5:50:16:e1:23:4c:fd:89:33:31:eb:ab:a5:17:73:2d:2a: 19:de:18:1d:dd:95:1f:ea:c8:a9:d8:f3:85:57:c3:53:04:0b: fe:fb:b1:e4:a6:dd:11:f4:d5:fc:93:3a:ee:a8:3a:18:a6:a4: 23:24:67:c3:9d:d3:65:82:ff:4a:1c:53:d0:30:ee:23:8a:4a: 76:f8:4d:17:ba:be:45:b9:51:2e:25:df:7e:f3:89:71:cd:f5: 7d:8d:f7:24:fa:ca:01:de:f2:fe:99:64:52:c5:68:f1:c9:75: ee:eb:90:4d:4a:6b:46:f1:00:91:61:f2:fb:c9:14:06:4c:99: a5:ac:03:62:02:da:ba:84:b6:81:e1:b2:84:ee:b6:0d:f5:69: 29:d2:34:ce:a5:01:84:7c:73:a0:97:1d:1b:58:81:bc:88:cf: 61:31:bc:5b:4e:f7:d7:05:de:70:7f:f6:4a:be:e6:83:3e:d7: 89:6e:70:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2GlQFKWBAQH7fyXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhlOGQzOGItMGI4Ny00OTVhLTk2Y2MtMzQ2ZGRmMGQ1 ODAyMB4XDTI2MDQxNjEzMDAwM1oXDTI2MDQxOTEzMDAwMFowLzEtMCsGA1UEAxMk YzljY2QzZWQtZThmOC00NDMxLTgwZjItZGNkZDJhODM5YzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU0wj788SjDYF68W6iuBuktjsjshkk2kdb3t l4SCK9y04sHobVaFY2evFRpi40s2KTyrPBgBL3nf2N0DAhBJEq7arWoRaVAmSSO8 17kN1hDQvT2T8uIWzc/lp5Z4KRBf3nu0FreXQX6Y8YK42ZqAZfhT+eZcEVgqplxL kNULji/xnkq/18b3MoEXlc4ZSlcNxhyQvkMiWAhH5hpfZw8O5h7mueGfm5WmUHNg K4jI7Z0dF7vHOk2vdjKeVbUgIHlmWNV2J1LkCiLgmFAlIZiDXki/7GXBEN9zpNnY LU+zYzMWRtZk+8ku/qz+2WbU/wkR1bYjFQ8h5o3VWoceYCsr5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFwVLkDqk9p29pNUGa+Veq9QxUxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82OGU4 ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZkZGYwZDU4MDIvNjhlOGQzOGItMGI4Ny00 OTVhLTk2Y2MtMzQ2ZGRmMGQ1ODAyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjhlOGQzOGItMGI4Ny00OTVhLTk2 Y2MtMzQ2ZGRmMGQ1ODAyLzY4ZThkMzhiLTBiODctNDk1YS05NmNjLTM0NmRkZjBk NTgwMi5jcmwwHwYDVR0jBBgwFoAUvYEso06SVZbNE7XZXK6S4E0ZZwQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82OGU4ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZk ZGYwZDU4MDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdMVdYyoi94hGSWokWCbU/ 4RwthEJziWThoOBL6bP0H72IrhVSBQOmTJQMu2pH5pX46YJ88vaL5Cy3sIv+tEoM OVLgtNCGfcVP5VAW4SNM/YkzMeurpRdzLSoZ3hgd3ZUf6sip2POFV8NTBAv++7Hk pt0R9NX8kzruqDoYpqQjJGfDndNlgv9KHFPQMO4jikp2+E0Xur5FuVEuJd9+84lx zfV9jfck+soB3vL+mWRSxWjxyXXu65BNSmtG8QCRYfL7yRQGTJmlrANiAtq6hLaB 4bKE7rYN9Wkp0jTOpQGEfHOglx0bWIG8iM9hMbxbTvfXBd5wf/ZKvuaDPteJbnDi -----END CERTIFICATE-----Generated at Fri Apr 17 10:45:24 2026 by rpki-client