$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft File: 643914aa-5306-4352-8a01-3ac381827191.mft (raw, json) Hash identifier: ub/xqYR8qh+cawEHj/KzMPO11Gpf/jXNoKjESufy+wQ= Subject key identifier: 73:51:A5:AC:A2:B2:3F:27:11:79:B5:6E:AD:98:BB:4D:49:82:F2:0C Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 Certificate issuer: /CN=643914aa-5306-4352-8a01-3ac381827191 Certificate serial: 010D0C9F4328584F9BEBAE58B465A92D5DA77740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft Manifest number: 010D0C9F4328584134209A8DD551C015B0DF899B Signing time: Sat 24 Oct 2026 14:00:23 +0000 Manifest this update: Sat 24 Oct 2026 14:00:23 +0000 Manifest next update: Mon 26 Oct 2026 14:00:00 +0000 Files and hashes: 1: 30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa (hash: 4KwLDZ38I5DBdpOzXTyqpCbgfa+dMJySgjwbD8bSNNE=) 2: 643914aa-5306-4352-8a01-3ac381827191.crl (hash: mOG5Khj6uexm8VjQ9GILRxr45dGRdHJw++kOvooVeks=) 3: 83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa (hash: 7W0QZRO2CX1Jd7ZyAQHYQZqUbf6BdfBmXwI0cTOLRaw=) 4: 897adddb-a309-3fc0-b793-ccbf5388c1bb.roa (hash: DA3Qr09Dnu9MzYi4pmijOaVcfxUKV/4oC6tuvKZQR5Q=) 5: 9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa (hash: Kygw8vJFVN+VUn4g0y5IFPJZj8tY2XpfnRpyveSVj2s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:eb:ae:58:b4:65:a9:2d:5d:a7:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643914aa-5306-4352-8a01-3ac381827191 Validity Not Before: Oct 24 14:00:23 2026 GMT Not After : Oct 26 14:00:00 2026 GMT Subject: CN=6333b21b-9a85-4944-a432-e2abadf7e8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a2:1a:3f:9c:24:48:b5:13:88:0c:f3:0c:d7: 6c:52:d1:59:85:2f:b4:02:46:c7:28:14:8f:4c:4f: 1b:48:21:50:5a:8a:b9:f4:b4:8b:9e:a2:e3:04:d4: 2d:f8:38:75:e0:3e:ec:e8:75:2f:65:52:11:f0:14: ce:0a:81:82:04:75:64:35:56:5e:9a:0d:29:07:c8: b2:ee:c9:77:e0:dc:9f:bc:79:ff:78:1a:5b:c6:65: ab:cc:df:33:0b:db:e4:65:98:47:6f:a7:5e:9d:35: d7:fe:61:bc:71:36:8b:c5:72:bf:57:af:5c:39:f5: 6a:2a:df:a7:15:12:42:7e:99:ef:f5:20:79:18:ab: 86:01:2b:c1:cc:2a:65:3d:60:54:76:38:ff:84:0a: 1f:6d:c2:83:da:7a:4e:51:b9:ee:f5:a3:4f:f5:06: f1:ed:39:ff:33:fe:13:f2:94:fc:61:8b:8c:5e:e8: bd:aa:1b:3b:d9:a7:02:c1:52:d5:e0:81:77:7b:1e: f4:67:bb:dc:bc:e3:00:35:ba:8d:c0:73:97:1d:22: 95:8d:82:a1:33:ea:4f:b0:c5:62:e0:41:f9:5b:fd: d6:bb:de:ee:52:46:c6:bd:60:a3:bb:54:eb:51:33: 26:d8:a2:57:e3:f6:a6:62:07:27:db:4d:85:45:29: 8d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:51:A5:AC:A2:B2:3F:27:11:79:B5:6E:AD:98:BB:4D:49:82:F2:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl X509v3 Authority Key Identifier: keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0f:41:5c:c7:11:a3:c3:7a:d3:62:2a:83:6f:0b:0b:b4:5b: 3b:ea:c0:dd:e4:b6:05:81:10:5c:89:6b:29:a5:d2:f2:b6:ae: f6:33:55:8b:26:67:3a:bf:32:f0:d8:be:f9:ca:9d:57:9d:17: 42:5e:f3:1a:81:42:15:03:47:2f:04:40:8c:39:35:d8:93:8d: b6:97:57:a2:00:bb:eb:50:e1:d9:9a:1b:a5:1f:11:16:02:a2: 10:f8:11:02:34:b1:30:20:cb:96:1b:08:f3:15:7f:33:a2:51: 37:3d:2f:8e:55:c1:ae:21:4c:66:79:ce:05:ab:a8:04:db:fa: e3:6e:4b:05:25:a9:2f:9f:42:7e:74:34:03:fa:49:00:7f:4b: ec:20:5a:52:45:d4:7b:18:29:a6:8f:ae:64:09:1d:dd:6d:67: 4b:28:ca:66:6c:c8:75:1e:09:24:7b:1a:d7:3c:d6:2a:26:43: ec:a1:4c:ff:3e:2f:9f:f6:6c:5b:ea:dd:3c:ec:db:e6:1d:55: 94:3d:25:e2:07:6b:e9:d4:18:e4:e6:fd:93:fd:aa:d6:8a:24: 88:95:8e:4d:5c:e8:46:d5:f7:04:d9:4d:71:b0:99:cc:f2:cf: a4:55:09:86:da:42:3b:87:8b:dd:66:7d:3f:8a:88:fb:07:ba: 40:80:db:af -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+b665YtGWpLV2nd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzOTE0YWEtNTMwNi00MzUyLThhMDEtM2FjMzgxODI3 MTkxMB4XDTI2MTAyNDE0MDAyM1oXDTI2MTAyNjE0MDAwMFowLzEtMCsGA1UEAxMk NjMzM2IyMWItOWE4NS00OTQ0LWE0MzItZTJhYmFkZjdlOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqIaP5wkSLUTiAzzDNdsUtFZhS+0AkbHKBSP TE8bSCFQWoq59LSLnqLjBNQt+Dh14D7s6HUvZVIR8BTOCoGCBHVkNVZemg0pB8iy 7sl34NyfvHn/eBpbxmWrzN8zC9vkZZhHb6denTXX/mG8cTaLxXK/V69cOfVqKt+n FRJCfpnv9SB5GKuGASvBzCplPWBUdjj/hAofbcKD2npOUbnu9aNP9Qbx7Tn/M/4T 8pT8YYuMXui9qhs72acCwVLV4IF3ex70Z7vcvOMANbqNwHOXHSKVjYKhM+pPsMVi 4EH5W/3Wu97uUkbGvWCju1TrUTMm2KJX4/amYgcn202FRSmNYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHNRpayisj8nEXm1bq2Yu01JgvIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NDM5 MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4MjcxOTEvNjQzOTE0YWEtNTMwNi00 MzUyLThhMDEtM2FjMzgxODI3MTkxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjQzOTE0YWEtNTMwNi00MzUyLThh MDEtM2FjMzgxODI3MTkxLzY0MzkxNGFhLTUzMDYtNDM1Mi04YTAxLTNhYzM4MTgy NzE5MS5jcmwwHwYDVR0jBBgwFoAU6ypHSeXO8IXeGteSyakttOVzF3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMz ODE4MjcxOTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuD0FcxxGjw3rTYiqDbwsL tFs76sDd5LYFgRBciWsppdLytq72M1WLJmc6vzLw2L75yp1XnRdCXvMagUIVA0cv BECMOTXYk422l1eiALvrUOHZmhulHxEWAqIQ+BECNLEwIMuWGwjzFX8zolE3PS+O VcGuIUxmec4Fq6gE2/rjbksFJakvn0J+dDQD+kkAf0vsIFpSRdR7GCmmj65kCR3d bWdLKMpmbMh1HgkkexrXPNYqJkPsoUz/Pi+f9mxb6t087NvmHVWUPSXiB2vp1Bjk 5v2T/arWiiSIlY5NXOhG1fcE2U1xsJnM8s+kVQmG2kI7h4vdZn0/ioj7B7pAgNuv -----END CERTIFICATE-----Generated at Sun Oct 25 05:56:57 2026 by rpki-client