$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft File: 643bc0d8-6c26-445a-992d-f31e0934b5f0.mft (raw, json) Hash identifier: YHI/JvKrvcPJPHa185AS6gcUmfwLR8QHn3+bN0IZnm0= Subject key identifier: D3:65:CF:2B:44:4E:C0:0E:A5:4E:69:49:5C:29:C3:F1:C2:51:20:5E Authority key identifier: 59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 Certificate issuer: /CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Certificate serial: 010D0C9F4328584F19DF437BEC0E29D6E04551C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft Manifest number: 010D0C9F43285849CD228DC17836374947BEDB32 Signing time: Tue 08 Sep 2026 00:00:22 +0000 Manifest this update: Tue 08 Sep 2026 00:00:22 +0000 Manifest next update: Fri 11 Sep 2026 00:00:00 +0000 Files and hashes: 1: 54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa (hash: g2GQfHuvSMq7Yd3YkUJzp8ZtVrGF6KFUGNUWP50k2CM=) 2: 643bc0d8-6c26-445a-992d-f31e0934b5f0.crl (hash: XhAdOfItS47WaL1/PT0SvRmEtDP+s3yajQ6La+lcBig=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:df:43:7b:ec:0e:29:d6:e0:45:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Validity Not Before: Sep 8 00:00:22 2026 GMT Not After : Sep 11 00:00:00 2026 GMT Subject: CN=ff8b9daa-7fdc-47c1-aad3-24691b52d884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:4b:31:e3:44:bd:68:21:01:cf:a9:e8:d0: e3:66:7e:f4:29:86:26:09:fd:cf:26:a7:54:21:d6: 34:ae:13:6c:a4:99:27:61:8e:7c:1a:21:c4:75:00: 24:92:ff:e3:80:e5:1f:cf:6b:62:23:b0:4c:04:49: 6f:f6:dc:3c:da:7f:e9:a6:2d:ed:6a:0c:03:60:90: 4f:c8:38:73:3a:57:0e:bc:e1:83:4b:82:59:8c:95: 29:44:96:27:71:31:45:5d:5a:c3:57:f6:ad:3f:11: 5e:d1:53:c0:22:68:8a:0a:ae:26:68:92:41:2f:bc: d8:9a:f8:fa:8e:c9:01:2c:f7:3a:47:1d:0e:03:8b: 1d:31:0b:2c:39:2d:05:18:fa:f8:91:7f:1b:fd:50: 3d:64:48:68:3f:45:77:75:a2:54:55:4b:11:a3:d5: d8:1c:f4:dd:f2:a4:4e:fe:7a:9b:4c:c9:2b:5d:d4: 7d:60:08:20:6e:1b:b8:2e:e7:c5:f4:a4:c0:b6:76: e3:0b:82:95:b7:93:95:51:39:3e:7a:de:2f:42:e0: d1:71:53:3e:e4:5e:33:f1:d6:a2:d3:de:32:bf:3b: 11:2d:d7:cb:de:04:b9:63:c4:59:f0:41:68:33:5a: ef:77:43:cf:d5:2a:92:07:b8:d3:b5:c8:28:8c:96: ab:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:65:CF:2B:44:4E:C0:0E:A5:4E:69:49:5C:29:C3:F1:C2:51:20:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl X509v3 Authority Key Identifier: keyid:59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a9:98:e9:8c:24:15:5b:5e:a3:28:3d:24:f8:aa:fb:35:8e: b9:39:e0:04:50:ce:ca:18:13:ea:e7:cd:c0:b5:26:0b:9e:00: 93:95:49:e0:9c:75:6b:6b:1c:f0:3f:96:22:5c:71:2a:68:d0: 89:0b:78:f8:49:c5:5e:23:06:b0:65:fd:8a:ce:0c:85:eb:26: 36:9a:7c:10:6b:1f:44:22:50:46:85:c5:18:80:42:11:a8:d7: dd:cf:92:9d:c2:d4:3d:23:9c:a2:2a:bb:98:c1:72:37:49:aa: 69:f0:3d:8c:b0:6f:8d:95:a5:c9:0c:d6:ef:2c:d7:85:00:a6: f6:58:3c:08:bd:bc:4b:42:10:3c:5b:a4:48:ae:a3:e0:48:f7: 03:f6:e6:85:bb:4c:64:c0:76:83:9b:c7:ff:73:0f:b5:6a:46: ea:cf:23:cb:b0:84:24:4d:05:55:38:62:a2:ee:dd:3b:68:c3: 19:68:d0:b5:d9:48:d3:71:89:5a:79:07:9c:31:4c:6c:d2:b4: 75:a9:27:c6:6a:d9:44:cb:3a:ed:d5:62:6b:9e:10:bf:b9:31: d4:5d:23:2b:e4:c3:da:97:06:ce:6c:f9:7f:bb:44:7d:05:b9: 66:bf:a0:d7:7a:d1:54:f0:a0:78:95:42:8b:02:79:ae:33:56: 46:aa:0d:18 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8Z30N77A4p1uBFUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzYmMwZDgtNmMyNi00NDVhLTk5MmQtZjMxZTA5MzRi NWYwMB4XDTI2MDkwODAwMDAyMloXDTI2MDkxMTAwMDAwMFowLzEtMCsGA1UEAxMk ZmY4YjlkYWEtN2ZkYy00N2MxLWFhZDMtMjQ2OTFiNTJkODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox1LMeNEvWghAc+p6NDjZn70KYYmCf3PJqdU IdY0rhNspJknYY58GiHEdQAkkv/jgOUfz2tiI7BMBElv9tw82n/ppi3tagwDYJBP yDhzOlcOvOGDS4JZjJUpRJYncTFFXVrDV/atPxFe0VPAImiKCq4maJJBL7zYmvj6 jskBLPc6Rx0OA4sdMQssOS0FGPr4kX8b/VA9ZEhoP0V3daJUVUsRo9XYHPTd8qRO /nqbTMkrXdR9YAggbhu4LufF9KTAtnbjC4KVt5OVUTk+et4vQuDRcVM+5F4z8dai 094yvzsRLdfL3gS5Y8RZ8EFoM1rvd0PP1SqSB7jTtcgojJarGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNNlzytETsAOpU5pSVwpw/HCUSBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NDNi YzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFlMDkzNGI1ZjAvNjQzYmMwZDgtNmMyNi00 NDVhLTk5MmQtZjMxZTA5MzRiNWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjQzYmMwZDgtNmMyNi00NDVhLTk5 MmQtZjMxZTA5MzRiNWYwLzY0M2JjMGQ4LTZjMjYtNDQ1YS05OTJkLWYzMWUwOTM0 YjVmMC5jcmwwHwYDVR0jBBgwFoAUWWMA3LDUuBKv4cAzHYEA7sI/UpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NDNiYzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFl MDkzNGI1ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6qZjpjCQVW16jKD0k+Kr7 NY65OeAEUM7KGBPq583AtSYLngCTlUngnHVraxzwP5YiXHEqaNCJC3j4ScVeIwaw Zf2KzgyF6yY2mnwQax9EIlBGhcUYgEIRqNfdz5KdwtQ9I5yiKruYwXI3Sapp8D2M sG+NlaXJDNbvLNeFAKb2WDwIvbxLQhA8W6RIrqPgSPcD9uaFu0xkwHaDm8f/cw+1 akbqzyPLsIQkTQVVOGKi7t07aMMZaNC12UjTcYlaeQecMUxs0rR1qSfGatlEyzrt 1WJrnhC/uTHUXSMr5MPalwbObPl/u0R9Bblmv6DXetFU8KB4lUKLAnmuM1ZGqg0Y -----END CERTIFICATE-----Generated at Wed Sep 9 00:00:55 2026 by rpki-client