$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft File: 643bc0d8-6c26-445a-992d-f31e0934b5f0.mft (raw, json) Hash identifier: mmBRMXCEHGE9w3u0v8CQCDC6WLDzY0V0P1WweAqNv3g= Subject key identifier: A7:74:B5:47:72:32:31:65:C6:85:21:2D:40:0E:F4:D8:B3:62:FA:86 Authority key identifier: 59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 Certificate issuer: /CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Certificate serial: 010D0C9F4328584B96EECE351B62EB9350469800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft Manifest number: 010D0C9F43285849CD228DC17836374947BED9E8 Signing time: Tue 21 Oct 2025 00:00:03 +0000 Manifest this update: Tue 21 Oct 2025 00:00:03 +0000 Manifest next update: Fri 24 Oct 2025 00:00:00 +0000 Files and hashes: 1: 54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa (hash: W5tSBqDnCoLoAehwbAErZSn2oT987j+oV/YmasCXyOs=) 2: 643bc0d8-6c26-445a-992d-f31e0934b5f0.crl (hash: Ig2JkBlH2wbja5ENBJRee4eC4LzN1SypU1BkXcAaoE8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:ee:ce:35:1b:62:eb:93:50:46:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Validity Not Before: Oct 21 00:00:03 2025 GMT Not After : Oct 24 00:00:00 2025 GMT Subject: CN=e566d929-a423-41c1-ad0b-1e99078b1824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5d:a5:43:ee:5e:a7:ff:62:cd:f4:a6:1b:70: 7c:ec:be:15:01:99:96:ac:de:20:08:45:cc:1a:50: b3:aa:7c:0d:83:b3:2b:ad:17:c1:4f:cb:f8:8f:ef: ba:6f:38:69:56:de:de:f2:f3:ac:f7:0b:94:52:75: 67:a5:d2:8e:cf:7f:24:de:71:98:0e:ad:02:cc:fc: 4f:5b:e1:8a:9a:d6:4a:e3:94:88:1b:f7:d3:b0:33: bf:61:c9:59:aa:03:5c:30:77:b3:d1:7e:4e:12:2d: 8e:de:29:36:6f:58:c0:b1:41:c5:dc:64:f8:23:46: 8e:52:b9:67:89:ab:8e:9c:49:af:05:a1:d0:ff:e1: 0f:a2:8e:aa:d0:52:bb:3d:ed:b7:45:0a:f4:17:94: 0b:df:c1:b4:e0:3d:db:96:2e:99:e5:b6:aa:9e:c9: 30:07:c7:0b:32:4f:f2:5b:0b:fa:ff:75:8d:00:43: bc:f7:5f:f3:3a:05:b3:7a:ee:6c:69:c7:57:5a:c2: 49:17:df:79:63:f3:1b:ae:5e:2b:c8:b7:4a:8e:39: 17:fe:82:94:4c:15:99:15:bb:a1:cc:a8:00:9d:71: 07:87:52:9f:3f:f4:b9:45:1f:e0:07:59:dd:cc:7d: 3a:3e:2b:7d:9c:24:d9:2d:41:68:78:37:98:be:b7: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:74:B5:47:72:32:31:65:C6:85:21:2D:40:0E:F4:D8:B3:62:FA:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl X509v3 Authority Key Identifier: keyid:59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f3:5c:36:f0:c4:7c:8f:ee:06:b1:86:7d:70:33:fd:b0:19: 0e:12:e4:fa:12:06:47:44:2b:cd:96:1b:eb:36:e6:43:82:70: 46:e3:c3:93:fa:be:a5:67:a3:2d:fc:a1:9d:8e:68:c9:fd:97: 3f:e7:f7:23:51:ee:a9:c3:bf:b3:28:54:29:5b:95:a0:b7:d0: ba:bd:ac:ca:60:30:ac:d8:94:d0:80:23:43:c2:3a:79:e5:09: e5:ed:ad:39:a5:a9:dc:70:4f:2b:5f:96:b3:4e:64:23:57:2f: f4:e6:01:b1:1c:a3:fe:d0:1b:de:2b:8f:9f:c5:29:83:83:7a: a1:51:ab:1f:28:8a:a5:0e:6d:a1:d2:d3:51:53:a7:a0:9d:17: 5c:09:c7:f6:f8:ea:70:fb:eb:ca:eb:e0:d8:2d:b4:8a:cb:06: 24:3f:ef:8e:ea:56:05:39:d8:1b:32:aa:84:bd:47:6a:96:c8: af:bd:8d:64:cf:84:b5:04:71:f1:bd:54:8d:d9:ce:a9:28:c7: c6:d1:aa:d8:c6:00:8f:27:c1:5d:d1:75:8c:ed:04:b4:5e:78: 01:14:9f:80:bc:8f:48:84:60:6d:9d:34:03:de:4c:2c:5b:43: 00:d0:cd:51:f7:87:39:e2:04:85:6e:32:97:6b:cf:86:82:53: ca:7d:1e:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuW7s41G2Lrk1BGmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzYmMwZDgtNmMyNi00NDVhLTk5MmQtZjMxZTA5MzRi NWYwMB4XDTI1MTAyMTAwMDAwM1oXDTI1MTAyNDAwMDAwMFowLzEtMCsGA1UEAxMk ZTU2NmQ5MjktYTQyMy00MWMxLWFkMGItMWU5OTA3OGIxODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F2lQ+5ep/9izfSmG3B87L4VAZmWrN4gCEXM GlCzqnwNg7MrrRfBT8v4j++6bzhpVt7e8vOs9wuUUnVnpdKOz38k3nGYDq0CzPxP W+GKmtZK45SIG/fTsDO/YclZqgNcMHez0X5OEi2O3ik2b1jAsUHF3GT4I0aOUrln iauOnEmvBaHQ/+EPoo6q0FK7Pe23RQr0F5QL38G04D3bli6Z5baqnskwB8cLMk/y Wwv6/3WNAEO891/zOgWzeu5sacdXWsJJF995Y/Mbrl4ryLdKjjkX/oKUTBWZFbuh zKgAnXEHh1KfP/S5RR/gB1ndzH06Pit9nCTZLUFoeDeYvrce1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKd0tUdyMjFlxoUhLUAO9NizYvqGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NDNi YzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFlMDkzNGI1ZjAvNjQzYmMwZDgtNmMyNi00 NDVhLTk5MmQtZjMxZTA5MzRiNWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjQzYmMwZDgtNmMyNi00NDVhLTk5 MmQtZjMxZTA5MzRiNWYwLzY0M2JjMGQ4LTZjMjYtNDQ1YS05OTJkLWYzMWUwOTM0 YjVmMC5jcmwwHwYDVR0jBBgwFoAUWWMA3LDUuBKv4cAzHYEA7sI/UpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NDNiYzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFl MDkzNGI1ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA981w28MR8j+4GsYZ9cDP9 sBkOEuT6EgZHRCvNlhvrNuZDgnBG48OT+r6lZ6Mt/KGdjmjJ/Zc/5/cjUe6pw7+z KFQpW5Wgt9C6vazKYDCs2JTQgCNDwjp55Qnl7a05panccE8rX5azTmQjVy/05gGx HKP+0BveK4+fxSmDg3qhUasfKIqlDm2h0tNRU6egnRdcCcf2+Opw++vK6+DYLbSK ywYkP++O6lYFOdgbMqqEvUdqlsivvY1kz4S1BHHxvVSN2c6pKMfG0arYxgCPJ8Fd 0XWM7QS0XngBFJ+AvI9IhGBtnTQD3kwsW0MA0M1R94c54gSFbjKXa8+GglPKfR7A -----END CERTIFICATE-----Generated at Tue Oct 21 03:57:19 2025 by rpki-client