$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft File: 643bc0d8-6c26-445a-992d-f31e0934b5f0.mft (raw, json) Hash identifier: dvRJ4QWzGEmpGCyc0N9kKpuNWjOMJsii8FfP5bO7j9c= Subject key identifier: E2:50:41:C6:FD:3E:69:91:F3:F7:8A:5F:D8:F0:5D:27:1E:3C:E3:C1 Authority key identifier: 59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 Certificate issuer: /CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Certificate serial: 010D0C9F4328584ABD2D70CC32478CD21F6EAF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft Manifest number: 010D0C9F43285849CD228DC17836374947BED998 Signing time: Mon 04 Aug 2025 00:00:04 +0000 Manifest this update: Mon 04 Aug 2025 00:00:04 +0000 Manifest next update: Thu 07 Aug 2025 00:00:00 +0000 Files and hashes: 1: 54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa (hash: YMQ7zGjfs3xzXntk761iGYm2Jsa4vQ29FVnyvxyyOzw=) 2: 643bc0d8-6c26-445a-992d-f31e0934b5f0.crl (hash: bu+09GiH2PnKGWeq13rav2VlUO873gBj8T0wqxKatGc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:2d:70:cc:32:47:8c:d2:1f:6e:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Validity Not Before: Aug 4 00:00:04 2025 GMT Not After : Aug 7 00:00:00 2025 GMT Subject: CN=b22f664d-ebb9-479e-89ba-dbcf5b11424b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7d:39:ca:13:43:b4:f4:5a:43:94:64:f3:7b: 9f:d2:0f:2b:67:66:b8:e2:c9:84:19:47:6b:0e:72: 32:32:62:a1:68:30:c5:21:13:2c:83:da:b9:71:8c: 5e:df:50:cf:40:e4:14:b9:b1:00:dc:ee:07:a0:e6: e7:c0:9b:72:d6:f3:39:3f:96:41:bd:d4:3a:65:f7: 26:a7:d9:44:6a:ee:9c:86:7f:38:61:3b:2f:97:60: 00:8f:39:4a:42:8f:91:f3:da:3d:7d:b8:23:5d:05: 4c:96:45:4b:71:45:f7:3d:90:8d:7d:fd:2f:c5:97: 9a:a7:6c:3f:24:e0:c8:52:db:72:54:ce:3e:92:6d: e9:35:c3:93:c2:72:dc:57:2c:55:3e:42:d8:35:c8: 46:88:ac:ee:96:a6:fc:81:dd:b4:3a:d1:5f:cc:bb: e7:f4:db:65:87:0a:34:c1:31:d8:0b:cb:20:e8:a3: 92:c9:11:fb:e4:f5:8f:69:43:41:6d:2d:ed:df:c4: 81:c5:e7:b7:61:5a:9c:1e:87:73:8a:ea:65:11:22: 00:76:99:0e:c6:f9:1e:d7:a3:16:cb:ad:2e:dc:1c: b6:b9:da:8e:e4:4b:02:5e:40:69:74:13:be:a0:8d: 44:47:85:c2:4c:74:fb:4f:49:3b:a8:03:2f:44:0a: ff:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:50:41:C6:FD:3E:69:91:F3:F7:8A:5F:D8:F0:5D:27:1E:3C:E3:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl X509v3 Authority Key Identifier: keyid:59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:37:5c:76:2d:c4:38:94:c2:27:3a:68:56:75:94:31:37:10: 3a:91:a5:62:4c:fa:9d:87:90:7e:e1:52:6a:c2:e5:91:bd:92: 8c:54:53:12:41:d2:74:60:6e:58:6e:12:3c:03:4d:9b:d7:e2: 70:90:01:15:ba:4f:e0:bd:2f:3d:3c:e2:e8:dc:14:28:53:6e: b7:e8:bc:2a:68:15:d8:f6:59:c7:f3:63:bc:50:22:03:34:b1: a3:76:d4:62:a3:e7:8a:d9:0b:73:7c:32:a8:04:89:ae:c5:76: 86:1e:da:b6:2a:bb:60:b3:d6:21:8e:86:c0:fb:bb:a5:d8:43: 2f:9c:1a:25:e6:f4:60:e8:5b:75:fa:84:08:d8:f1:fa:2f:d1: 31:76:b5:35:b9:40:bf:06:4c:2d:c9:1c:69:6b:63:34:9c:3c: 3f:8b:b6:18:9a:33:8c:1d:58:87:cb:41:b8:09:8d:5e:e5:93: bb:4c:da:f4:f3:b8:93:e9:32:78:53:a9:b4:80:bd:b5:94:d4: 26:7e:2b:e5:2c:e0:d7:d9:aa:05:19:e1:49:33:d9:b6:71:3d: 29:3c:94:13:60:aa:38:c9:51:60:96:50:f4:f6:63:a9:ef:6b: fb:d2:8e:90:31:34:ab:b3:61:b3:fd:9d:1d:d8:dc:63:12:ac: 2c:bb:1d:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq9LXDMMkeM0h9urwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzYmMwZDgtNmMyNi00NDVhLTk5MmQtZjMxZTA5MzRi NWYwMB4XDTI1MDgwNDAwMDAwNFoXDTI1MDgwNzAwMDAwMFowLzEtMCsGA1UEAxMk YjIyZjY2NGQtZWJiOS00NzllLTg5YmEtZGJjZjViMTE0MjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH05yhNDtPRaQ5Rk83uf0g8rZ2a44smEGUdr DnIyMmKhaDDFIRMsg9q5cYxe31DPQOQUubEA3O4HoObnwJty1vM5P5ZBvdQ6Zfcm p9lEau6chn84YTsvl2AAjzlKQo+R89o9fbgjXQVMlkVLcUX3PZCNff0vxZeap2w/ JODIUttyVM4+km3pNcOTwnLcVyxVPkLYNchGiKzulqb8gd20OtFfzLvn9Ntlhwo0 wTHYC8sg6KOSyRH75PWPaUNBbS3t38SBxee3YVqcHodziuplESIAdpkOxvke16MW y60u3By2udqO5EsCXkBpdBO+oI1ER4XCTHT7T0k7qAMvRAr/cQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOJQQcb9PmmR8/eKX9jwXScePOPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NDNi YzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFlMDkzNGI1ZjAvNjQzYmMwZDgtNmMyNi00 NDVhLTk5MmQtZjMxZTA5MzRiNWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjQzYmMwZDgtNmMyNi00NDVhLTk5 MmQtZjMxZTA5MzRiNWYwLzY0M2JjMGQ4LTZjMjYtNDQ1YS05OTJkLWYzMWUwOTM0 YjVmMC5jcmwwHwYDVR0jBBgwFoAUWWMA3LDUuBKv4cAzHYEA7sI/UpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NDNiYzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFl MDkzNGI1ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAN1x2LcQ4lMInOmhWdZQx NxA6kaViTPqdh5B+4VJqwuWRvZKMVFMSQdJ0YG5YbhI8A02b1+JwkAEVuk/gvS89 POLo3BQoU2636LwqaBXY9lnH82O8UCIDNLGjdtRio+eK2QtzfDKoBImuxXaGHtq2 Krtgs9YhjobA+7ul2EMvnBol5vRg6Ft1+oQI2PH6L9ExdrU1uUC/BkwtyRxpa2M0 nDw/i7YYmjOMHViHy0G4CY1e5ZO7TNr087iT6TJ4U6m0gL21lNQmfivlLODX2aoF GeFJM9m2cT0pPJQTYKo4yVFgllD09mOp72v70o6QMTSrs2Gz/Z0d2NxjEqwsux1t -----END CERTIFICATE-----Generated at Mon Aug 4 16:08:41 2025 by rpki-client