$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft File: 643bc0d8-6c26-445a-992d-f31e0934b5f0.mft (raw, json) Hash identifier: 8XNXvz8JGmdeF9D3B9p2V01wda46pLQaLcLzMLX6YYc= Subject key identifier: EC:FF:24:52:49:B1:3E:DE:04:2D:E7:C4:63:DA:6A:BC:FE:CB:4A:F9 Authority key identifier: 59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 Certificate issuer: /CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Certificate serial: 010D0C9F4328584D82472FD3B1CA4FD16472D02A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft Manifest number: 010D0C9F43285849CD228DC17836374947BEDA9D Signing time: Wed 15 Apr 2026 00:00:03 +0000 Manifest this update: Wed 15 Apr 2026 00:00:03 +0000 Manifest next update: Sat 18 Apr 2026 00:00:00 +0000 Files and hashes: 1: 54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa (hash: shqD/92weO4BrOUTiNwooyW6j6PBtDOjVLEo9vSaQbo=) 2: 643bc0d8-6c26-445a-992d-f31e0934b5f0.crl (hash: 6ybb4C1NRrcskKnH670P54aBOiUl+wEhiZlVwqqiSIY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:82:47:2f:d3:b1:ca:4f:d1:64:72:d0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Validity Not Before: Apr 15 00:00:03 2026 GMT Not After : Apr 18 00:00:00 2026 GMT Subject: CN=5c08da7c-5707-4e5e-b826-b8adb90662f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3e:3d:14:1c:6f:a4:7a:a9:6a:16:a6:38:8c: 70:7d:f7:2c:61:cc:7c:8c:93:4b:1c:65:32:eb:00: d8:f3:ee:b5:19:88:e5:28:b2:79:e2:4a:4b:9d:43: e3:ca:48:b2:d1:8a:72:bd:0d:a3:49:66:a2:57:85: 24:a5:25:11:79:3d:01:c3:b6:8f:50:8c:0a:2a:71: c7:49:dc:b2:e6:a9:95:40:cc:0c:38:65:cd:39:bc: a1:92:82:44:35:66:54:0d:33:cd:26:e7:71:7d:8d: 52:4b:b8:7b:c6:70:fd:f0:f3:27:b1:9c:ed:a4:f4: ca:54:d7:28:58:a9:ca:93:64:44:0f:07:5e:0d:8d: 9e:4d:90:91:96:e9:90:8c:45:49:1f:15:71:3c:78: 1a:ea:c8:9e:28:73:65:13:09:3a:93:e7:37:9f:71: b9:9a:c1:83:e8:19:7d:85:6f:5b:48:8c:4b:ea:e6: ac:2c:26:0f:44:da:a4:79:13:ec:62:49:1f:e0:28: a1:d5:4b:d5:74:e9:22:b9:7b:5e:7f:ed:81:d0:bd: da:42:ca:b7:f5:41:6c:3d:93:48:57:ea:c2:10:37: cd:e2:98:b9:d5:2a:8c:03:80:c0:f6:de:12:f2:d5: 37:d4:0d:8f:ef:13:0f:20:d3:0f:94:b9:5f:f0:ac: df:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FF:24:52:49:B1:3E:DE:04:2D:E7:C4:63:DA:6A:BC:FE:CB:4A:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl X509v3 Authority Key Identifier: keyid:59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:0e:eb:aa:e5:7b:18:0c:95:d3:e1:a2:03:4d:1a:27:a6:16: 07:5f:69:14:c8:55:c1:e1:ca:4f:23:94:70:23:4b:e5:ad:4f: d2:f5:de:e8:71:6b:c8:1e:d7:d0:23:b8:53:62:22:63:5c:27: 53:16:05:c3:5e:da:14:b7:aa:bf:c5:d5:5c:2b:88:4b:68:f4: 8e:25:48:52:0d:7f:6d:c7:63:a6:66:ea:66:39:c3:2f:fd:d3: ba:67:8b:9d:17:e4:b8:4f:39:ea:5c:fc:f6:eb:97:ed:2b:22: 29:b4:8e:8d:c0:a3:4f:60:60:71:3b:5f:ef:10:c4:06:7c:0b: fc:45:db:bf:68:b3:32:9f:ed:ca:93:5e:c8:a3:fd:cb:4f:dd: 81:19:31:c9:85:c5:a4:e2:31:bc:71:a2:40:ce:84:81:7b:4b: 11:89:40:66:46:c0:0c:72:f4:c1:cf:fd:70:f7:87:7c:a3:54: 44:d8:d4:c3:1c:ec:39:bd:8e:9c:2b:9a:96:79:14:b4:a4:b1: 52:24:a6:8d:7d:88:0c:cb:e8:ce:e9:61:a8:8d:60:85:5f:9f: c6:fa:76:c1:32:38:f5:06:b9:28:05:8c:72:ed:e2:75:bb:7a: e9:da:b4:68:51:d2:b6:09:77:23:47:aa:8c:20:08:0e:96:11: 13:82:5d:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2CRy/TscpP0WRy0CowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzYmMwZDgtNmMyNi00NDVhLTk5MmQtZjMxZTA5MzRi NWYwMB4XDTI2MDQxNTAwMDAwM1oXDTI2MDQxODAwMDAwMFowLzEtMCsGA1UEAxMk NWMwOGRhN2MtNTcwNy00ZTVlLWI4MjYtYjhhZGI5MDY2MmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6T49FBxvpHqpahamOIxwffcsYcx8jJNLHGUy 6wDY8+61GYjlKLJ54kpLnUPjykiy0YpyvQ2jSWaiV4UkpSUReT0Bw7aPUIwKKnHH Sdyy5qmVQMwMOGXNObyhkoJENWZUDTPNJudxfY1SS7h7xnD98PMnsZztpPTKVNco WKnKk2REDwdeDY2eTZCRlumQjEVJHxVxPHga6sieKHNlEwk6k+c3n3G5msGD6Bl9 hW9bSIxL6uasLCYPRNqkeRPsYkkf4Cih1UvVdOkiuXtef+2B0L3aQsq39UFsPZNI V+rCEDfN4pi51SqMA4DA9t4S8tU31A2P7xMPINMPlLlf8KzfJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOz/JFJJsT7eBC3nxGPaarz+y0r5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NDNi YzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFlMDkzNGI1ZjAvNjQzYmMwZDgtNmMyNi00 NDVhLTk5MmQtZjMxZTA5MzRiNWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjQzYmMwZDgtNmMyNi00NDVhLTk5 MmQtZjMxZTA5MzRiNWYwLzY0M2JjMGQ4LTZjMjYtNDQ1YS05OTJkLWYzMWUwOTM0 YjVmMC5jcmwwHwYDVR0jBBgwFoAUWWMA3LDUuBKv4cAzHYEA7sI/UpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NDNiYzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFl MDkzNGI1ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQDuuq5XsYDJXT4aIDTRon phYHX2kUyFXB4cpPI5RwI0vlrU/S9d7ocWvIHtfQI7hTYiJjXCdTFgXDXtoUt6q/ xdVcK4hLaPSOJUhSDX9tx2OmZupmOcMv/dO6Z4udF+S4TznqXPz265ftKyIptI6N wKNPYGBxO1/vEMQGfAv8Rdu/aLMyn+3Kk17Io/3LT92BGTHJhcWk4jG8caJAzoSB e0sRiUBmRsAMcvTBz/1w94d8o1RE2NTDHOw5vY6cK5qWeRS0pLFSJKaNfYgMy+jO 6WGojWCFX5/G+nbBMjj1BrkoBYxy7eJ1u3rp2rRoUdK2CXcjR6qMIAgOlhETgl3U -----END CERTIFICATE-----Generated at Wed Apr 15 14:38:11 2026 by rpki-client