$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft File: 643bc0d8-6c26-445a-992d-f31e0934b5f0.mft (raw, json) Hash identifier: 59ebpizp6O+eHOSNq8zK2R5FcYhtR7vEAyuV8kGj3to= Subject key identifier: 7D:FF:68:E7:71:D7:AB:31:07:D5:EA:56:06:A9:AB:9A:EE:E8:C3:AA Authority key identifier: 59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 Certificate issuer: /CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Certificate serial: 010D0C9F4328584BC0CF1B7CBC793E79F7AE4B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft Manifest number: 010D0C9F43285849CD228DC17836374947BED9F8 Signing time: Wed 05 Nov 2025 00:00:08 +0000 Manifest this update: Wed 05 Nov 2025 00:00:08 +0000 Manifest next update: Fri 07 Nov 2025 00:00:00 +0000 Files and hashes: 1: 54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa (hash: W5tSBqDnCoLoAehwbAErZSn2oT987j+oV/YmasCXyOs=) 2: 643bc0d8-6c26-445a-992d-f31e0934b5f0.crl (hash: WpOKYabmPT+IgHQqpTARhRzdLca9oKStZQ5LAjIqf9Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:cf:1b:7c:bc:79:3e:79:f7:ae:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Validity Not Before: Nov 5 00:00:08 2025 GMT Not After : Nov 7 00:00:00 2025 GMT Subject: CN=d2cf460a-5d57-4004-bd7d-13a781bf816f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:af:9e:82:40:47:3d:19:00:a5:3e:73:c8:2a: b8:c9:3d:4c:00:cb:7e:6b:3f:47:ba:50:43:52:06: e2:2b:f5:80:3f:62:d4:67:ab:15:4e:80:72:35:af: 75:7c:f3:22:3d:51:d2:af:94:32:6a:97:32:72:01: fb:b0:f7:7a:53:87:9e:80:5f:cc:53:89:20:53:72: 93:4c:8d:b8:cf:fc:5d:25:bf:ef:ba:3e:d0:4c:08: ed:89:84:47:ea:37:8a:10:dd:73:4b:e7:0e:7a:a5: 58:dc:6f:76:03:2e:4c:d4:c7:16:94:1b:83:52:7c: 15:23:fd:d7:ce:6b:d5:05:b7:a9:a0:08:25:85:3b: db:e5:de:c2:f3:46:48:b8:43:89:37:59:4c:79:bb: 65:6f:f5:8b:1b:b8:5c:8b:2b:fd:a1:b3:4a:ad:0e: 01:5b:bb:51:73:25:ff:b8:48:1f:4c:b7:dc:f0:8a: 1a:b4:41:0f:79:e9:4b:14:11:5b:cd:87:bd:a8:07: e6:99:55:7c:9d:0b:90:8e:d3:8a:c2:63:99:41:59: c7:ce:19:26:2c:dd:96:40:bf:da:32:43:19:a6:0d: 04:67:e3:b1:83:44:91:8f:41:1f:96:cc:9d:8f:54: 36:9b:51:67:90:ad:25:4c:7d:58:b5:20:0a:4b:56: a5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FF:68:E7:71:D7:AB:31:07:D5:EA:56:06:A9:AB:9A:EE:E8:C3:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl X509v3 Authority Key Identifier: keyid:59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:4d:62:19:3c:76:48:48:5d:3b:e2:f6:74:3a:64:09:02:4d: 37:e6:41:fc:6a:2c:7a:f0:8e:39:30:a0:67:b6:3c:d7:70:57: 98:17:1c:eb:d7:76:da:14:e7:ba:90:49:05:51:68:dd:24:d6: 7e:f3:80:6b:1b:99:24:2b:f9:d7:d9:90:4f:bf:b4:38:d7:18: bb:c5:7a:01:7b:fd:2f:6b:03:0d:89:4f:a1:9a:55:58:15:ae: 27:a7:8f:d4:dd:c2:fe:a3:c5:19:1e:30:c6:a8:f3:70:e2:7e: d9:1c:08:c6:a2:c6:1b:35:65:da:e5:35:bb:c7:71:bd:c2:ff: 4d:9b:d0:91:49:ab:f5:13:12:f8:16:b9:1f:97:e4:34:12:22: 7f:da:c3:75:56:af:fe:48:61:29:63:77:e7:04:50:af:2a:3d: e7:01:31:ff:3d:ad:a9:c9:c7:61:a4:f9:a5:2c:02:29:c6:ac: e7:e5:b4:6f:af:39:8c:06:93:56:28:ed:b8:93:ac:9f:68:80: 57:54:97:a6:f8:78:52:64:92:7c:af:41:74:39:2c:d3:4e:87: 16:a8:f0:70:52:15:e7:8c:30:b8:63:25:81:39:26:c1:48:17: 87:8d:b3:4a:63:6f:8f:3c:6c:97:b0:73:66:93:f8:59:78:6a: 65:38:2a:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAzxt8vHk+efeuSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzYmMwZDgtNmMyNi00NDVhLTk5MmQtZjMxZTA5MzRi NWYwMB4XDTI1MTEwNTAwMDAwOFoXDTI1MTEwNzAwMDAwMFowLzEtMCsGA1UEAxMk ZDJjZjQ2MGEtNWQ1Ny00MDA0LWJkN2QtMTNhNzgxYmY4MTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq+egkBHPRkApT5zyCq4yT1MAMt+az9HulBD UgbiK/WAP2LUZ6sVToByNa91fPMiPVHSr5QyapcycgH7sPd6U4eegF/MU4kgU3KT TI24z/xdJb/vuj7QTAjtiYRH6jeKEN1zS+cOeqVY3G92Ay5M1McWlBuDUnwVI/3X zmvVBbepoAglhTvb5d7C80ZIuEOJN1lMebtlb/WLG7hciyv9obNKrQ4BW7tRcyX/ uEgfTLfc8IoatEEPeelLFBFbzYe9qAfmmVV8nQuQjtOKwmOZQVnHzhkmLN2WQL/a MkMZpg0EZ+Oxg0SRj0Eflsydj1Q2m1FnkK0lTH1YtSAKS1alzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH3/aOdx16sxB9XqVgapq5ru6MOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NDNi YzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFlMDkzNGI1ZjAvNjQzYmMwZDgtNmMyNi00 NDVhLTk5MmQtZjMxZTA5MzRiNWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjQzYmMwZDgtNmMyNi00NDVhLTk5 MmQtZjMxZTA5MzRiNWYwLzY0M2JjMGQ4LTZjMjYtNDQ1YS05OTJkLWYzMWUwOTM0 YjVmMC5jcmwwHwYDVR0jBBgwFoAUWWMA3LDUuBKv4cAzHYEA7sI/UpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NDNiYzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFl MDkzNGI1ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/TWIZPHZISF074vZ0OmQJ Ak035kH8aix68I45MKBntjzXcFeYFxzr13baFOe6kEkFUWjdJNZ+84BrG5kkK/nX 2ZBPv7Q41xi7xXoBe/0vawMNiU+hmlVYFa4np4/U3cL+o8UZHjDGqPNw4n7ZHAjG osYbNWXa5TW7x3G9wv9Nm9CRSav1ExL4Frkfl+Q0EiJ/2sN1Vq/+SGEpY3fnBFCv Kj3nATH/Pa2pycdhpPmlLAIpxqzn5bRvrzmMBpNWKO24k6yfaIBXVJem+HhSZJJ8 r0F0OSzTTocWqPBwUhXnjDC4YyWBOSbBSBeHjbNKY2+PPGyXsHNmk/hZeGplOCor -----END CERTIFICATE-----Generated at Wed Nov 5 17:32:54 2025 by rpki-client