$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft File: 643bc0d8-6c26-445a-992d-f31e0934b5f0.mft (raw, json) Hash identifier: EYP1KY2QA69xJnLr8cOKTQM5GYkr6+rtPJoZ4c0T5L0= Subject key identifier: 94:92:E1:73:5C:4C:97:0B:12:59:B4:0A:75:28:DA:E4:BD:3B:B4:5B Authority key identifier: 59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 Certificate issuer: /CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Certificate serial: 010D0C9F4328584FA57580B42B7C43483BF6D360 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft Manifest number: 010D0C9F43285849CD228DC17836374947BEDB66 Signing time: Wed 28 Oct 2026 00:00:23 +0000 Manifest this update: Wed 28 Oct 2026 00:00:23 +0000 Manifest next update: Sat 31 Oct 2026 00:00:00 +0000 Files and hashes: 1: 54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa (hash: ah8+dJapNjqQlislfpZMbJwvTRh+gWkEMz+Q8fnDQck=) 2: 643bc0d8-6c26-445a-992d-f31e0934b5f0.crl (hash: I5H95RufRVkU0xSBbqxOgrd1r2173yk7RizqGbeusHk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:75:80:b4:2b:7c:43:48:3b:f6:d3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Validity Not Before: Oct 28 00:00:23 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=59c9979f-c973-447e-a4b2-b923c951ddad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:24:d5:10:26:e3:52:f1:2b:b8:9b:35:ab:1e: 4f:f8:0d:09:57:33:1e:af:0b:a1:20:52:ef:d7:13: 9b:13:ba:39:ae:91:a4:a4:51:0e:ff:5c:af:86:16: 7d:f8:51:d7:6a:b1:ca:20:fa:86:dd:4c:f9:07:6b: 2f:96:d8:0a:8e:87:39:de:03:6a:e0:dd:ed:42:95: 41:f6:17:71:bb:e3:ba:77:94:35:df:78:3d:7f:be: ed:11:76:b1:09:56:a5:fd:15:46:08:78:ad:1e:c3: dc:90:52:03:39:03:75:fb:ea:23:f7:eb:8c:5d:41: 70:f3:a7:d7:8a:d4:f5:4a:b6:4d:8f:2a:5c:4b:fc: 9b:76:8d:7d:a9:f0:83:72:99:35:e5:0b:96:0b:89: 59:ae:61:a0:a0:d6:9a:76:f7:e1:0e:ef:e1:de:80: 08:0d:f5:d0:6f:3d:fe:04:15:62:e9:f3:17:a2:55: e8:14:34:a8:f4:1f:f0:ef:fe:04:83:12:c1:63:d1: 49:94:52:1b:1a:6a:f1:83:21:90:5c:81:ad:66:c0: d3:3c:a2:1b:7c:36:78:37:49:52:89:6b:70:b9:6a: 37:56:7e:ed:27:0e:e2:6d:9c:1c:01:95:78:a8:58: b6:75:04:25:76:bf:2b:06:60:c3:0f:f6:a3:3f:5e: 69:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:92:E1:73:5C:4C:97:0B:12:59:B4:0A:75:28:DA:E4:BD:3B:B4:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl X509v3 Authority Key Identifier: keyid:59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:42:3d:28:28:25:9c:6b:31:c8:62:55:61:76:80:e7:87:1e: ab:19:8f:d0:71:56:22:36:21:d9:fd:ea:52:27:c0:a9:9b:d3: 33:5a:32:90:21:96:89:ca:45:5d:f6:b0:0b:96:ad:92:20:e9: 05:54:d5:55:03:18:07:8c:20:fc:d6:bc:d8:58:5d:69:0c:09: 1c:02:6c:39:06:91:b2:50:5a:08:ca:86:52:ff:45:b0:78:84: ca:66:13:8a:2a:9b:fd:de:f7:43:af:63:a6:d1:b1:e0:0a:ae: 15:86:37:aa:d7:4b:d8:85:f0:36:7b:90:ac:d2:04:ed:eb:58: 68:e6:00:94:b7:65:15:34:d2:b3:8c:03:97:10:74:7e:42:08: f2:c6:1c:0f:88:17:35:97:3b:71:83:7f:f4:c1:ac:93:e1:9a: 33:f6:5f:b8:e9:c6:7f:2e:ab:2e:fa:9f:ba:74:cf:9c:ac:68: 9f:45:a4:9e:25:7b:0e:e9:34:d6:88:87:a9:7d:ba:c3:fc:e7: fa:f8:b9:69:8c:79:ce:e4:15:27:1c:dc:04:58:8a:43:64:c2: fc:a3:a6:74:ae:4f:e1:e4:87:36:6a:f3:ed:d6:99:db:e4:5a: 51:1e:04:d1:29:2b:08:91:38:cd:35:29:40:35:be:17:7b:74: 81:a3:bd:b2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+ldYC0K3xDSDv202AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzYmMwZDgtNmMyNi00NDVhLTk5MmQtZjMxZTA5MzRi NWYwMB4XDTI2MTAyODAwMDAyM1oXDTI2MTAzMTAwMDAwMFowLzEtMCsGA1UEAxMk NTljOTk3OWYtYzk3My00NDdlLWE0YjItYjkyM2M5NTFkZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiTVECbjUvEruJs1qx5P+A0JVzMerwuhIFLv 1xObE7o5rpGkpFEO/1yvhhZ9+FHXarHKIPqG3Uz5B2svltgKjoc53gNq4N3tQpVB 9hdxu+O6d5Q133g9f77tEXaxCVal/RVGCHitHsPckFIDOQN1++oj9+uMXUFw86fX itT1SrZNjypcS/ybdo19qfCDcpk15QuWC4lZrmGgoNaadvfhDu/h3oAIDfXQbz3+ BBVi6fMXolXoFDSo9B/w7/4EgxLBY9FJlFIbGmrxgyGQXIGtZsDTPKIbfDZ4N0lS iWtwuWo3Vn7tJw7ibZwcAZV4qFi2dQQldr8rBmDDD/ajP15pGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJSS4XNcTJcLElm0CnUo2uS9O7RbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NDNi YzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFlMDkzNGI1ZjAvNjQzYmMwZDgtNmMyNi00 NDVhLTk5MmQtZjMxZTA5MzRiNWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjQzYmMwZDgtNmMyNi00NDVhLTk5 MmQtZjMxZTA5MzRiNWYwLzY0M2JjMGQ4LTZjMjYtNDQ1YS05OTJkLWYzMWUwOTM0 YjVmMC5jcmwwHwYDVR0jBBgwFoAUWWMA3LDUuBKv4cAzHYEA7sI/UpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NDNiYzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFl MDkzNGI1ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPQj0oKCWcazHIYlVhdoDn hx6rGY/QcVYiNiHZ/epSJ8Cpm9MzWjKQIZaJykVd9rALlq2SIOkFVNVVAxgHjCD8 1rzYWF1pDAkcAmw5BpGyUFoIyoZS/0WweITKZhOKKpv93vdDr2Om0bHgCq4Vhjeq 10vYhfA2e5Cs0gTt61ho5gCUt2UVNNKzjAOXEHR+QgjyxhwPiBc1lztxg3/0wayT 4Zoz9l+46cZ/Lqsu+p+6dM+crGifRaSeJXsO6TTWiIepfbrD/Of6+LlpjHnO5BUn HNwEWIpDZML8o6Z0rk/h5Ic2avPt1pnb5FpRHgTRKSsIkTjNNSlANb4Xe3SBo72y -----END CERTIFICATE-----Generated at Wed Oct 28 14:25:26 2026 by rpki-client