$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft File: ba9fc663-6e78-4435-a4e3-45ff8082831b.mft (raw, json) Hash identifier: 4JYrR/MQLbJWttRvG4MXUNJCNFUGb8G0AzEBCeTdgwY= Subject key identifier: DE:35:61:7F:9C:58:0D:D3:FF:CF:F6:90:D8:BA:0D:9B:B0:04:74:DB Authority key identifier: 45:60:60:A9:6F:7D:C0:21:A6:EB:ED:89:D4:20:65:00:5E:2D:EF:7B Certificate issuer: /CN=ba9fc663-6e78-4435-a4e3-45ff8082831b Certificate serial: 010D0C9F4328584E97D2E1E733D7EDBE8F311900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft Manifest number: 010D0C9F4328584E5224941727BFA755AC76BD39 Signing time: Thu 23 Jul 2026 10:00:23 +0000 Manifest this update: Thu 23 Jul 2026 10:00:23 +0000 Manifest next update: Sat 25 Jul 2026 10:00:00 +0000 Files and hashes: 1: 3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa (hash: A9mxcJT5hvAYaqxQGfNRn7gGbEa7p4/iCfu4PO9xHt0=) 2: ba9fc663-6e78-4435-a4e3-45ff8082831b.crl (hash: xhT24F2WOdgmq8BrvaucQTScwDlIWUL0A1lYxm5ePk4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:d2:e1:e7:33:d7:ed:be:8f:31:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9fc663-6e78-4435-a4e3-45ff8082831b Validity Not Before: Jul 23 10:00:23 2026 GMT Not After : Jul 25 10:00:00 2026 GMT Subject: CN=1cec5656-978b-4790-b19f-a1580929db50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:c7:a8:ab:7a:77:11:75:a8:ce:07:d6:0c: 53:86:95:de:9e:a4:8a:88:bd:42:6e:52:41:71:db: 5a:e8:1d:c7:1c:7d:6c:ff:74:0b:76:0d:3b:ea:0c: 64:4d:b2:1d:82:f3:ae:98:3e:d9:5d:90:d3:63:d0: d4:54:68:45:1d:0d:90:85:82:c8:43:e7:cd:9e:59: d8:25:7c:e7:7c:47:d0:23:4f:e0:fa:33:72:2e:57: fb:82:09:1b:18:1f:76:35:30:48:a7:b2:63:48:a8: 18:4c:f7:cb:f7:06:eb:94:c9:97:ff:4c:ee:c9:b6: 44:9f:5f:fb:c5:90:5e:b6:27:1d:f3:b9:d4:d6:68: d6:71:99:db:6d:af:0c:61:ea:7f:d6:eb:81:d8:76: 88:ad:61:c9:0e:14:3f:23:c8:3c:ed:9e:5e:95:b2: a1:86:0b:87:60:d4:de:d9:96:17:54:21:ee:6c:48: f7:c7:8e:a8:7b:61:16:64:7c:19:4b:09:73:a3:2a: 17:40:15:32:94:17:bd:01:72:eb:f7:f5:9d:83:94: da:fb:b3:aa:07:30:d3:be:e7:13:4b:2b:bb:eb:da: d6:76:da:ff:5f:8f:d3:08:8b:a1:b5:fe:cd:db:12: df:d5:8d:a2:db:94:cd:02:c4:c4:f6:35:47:9e:ef: a6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:35:61:7F:9C:58:0D:D3:FF:CF:F6:90:D8:BA:0D:9B:B0:04:74:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.crl X509v3 Authority Key Identifier: keyid:45:60:60:A9:6F:7D:C0:21:A6:EB:ED:89:D4:20:65:00:5E:2D:EF:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c8:a5:e9:aa:d8:bf:e4:6c:2e:8c:61:b0:ef:11:e8:74:49: 7c:ef:15:27:1c:15:1c:07:ca:78:42:63:98:7a:6a:75:b1:02: af:c9:2b:54:7d:e6:92:df:ad:f6:65:63:86:73:16:98:e5:e7: 46:69:3b:ee:a9:5d:cd:4d:12:1d:ca:3d:d9:a9:cd:db:3a:05: 83:3a:ce:81:13:56:e9:9b:09:15:f6:66:09:7b:56:07:7e:db: 33:41:e2:a3:a5:20:1b:10:89:f8:e0:fb:a8:b6:18:af:26:82: f7:72:0d:68:98:7b:60:33:84:3a:5a:37:f7:05:b6:8a:ce:9d: 32:23:fa:1e:fe:4e:b1:fb:54:2a:c9:79:97:0e:54:56:2c:87: be:c8:1b:a6:e3:ab:8c:fb:78:30:1f:76:72:81:83:61:e0:24: 02:c7:48:94:2b:44:8b:27:4b:3a:f5:21:6a:b7:21:ac:0e:8f: a9:2e:75:80:6a:e0:28:bf:c3:24:7e:d0:d8:52:76:e4:96:46: c9:fb:8b:11:7e:9b:d7:ff:ab:83:cd:81:cd:28:b6:af:1a:e1: ea:23:af:d2:2c:35:16:67:12:52:f0:49:e6:dd:24:ee:f2:82: ed:c4:91:ff:3b:e4:3c:f8:0c:2a:1b:08:7c:19:30:01:4f:85: c3:fc:6e:25 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6X0uHnM9ftvo8xGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE5ZmM2NjMtNmU3OC00NDM1LWE0ZTMtNDVmZjgwODI4 MzFiMB4XDTI2MDcyMzEwMDAyM1oXDTI2MDcyNTEwMDAwMFowLzEtMCsGA1UEAxMk MWNlYzU2NTYtOTc4Yi00NzkwLWIxOWYtYTE1ODA5MjlkYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnULHqKt6dxF1qM4H1gxThpXenqSKiL1CblJB cdta6B3HHH1s/3QLdg076gxkTbIdgvOumD7ZXZDTY9DUVGhFHQ2QhYLIQ+fNnlnY JXznfEfQI0/g+jNyLlf7ggkbGB92NTBIp7JjSKgYTPfL9wbrlMmX/0zuybZEn1/7 xZBeticd87nU1mjWcZnbba8MYep/1uuB2HaIrWHJDhQ/I8g87Z5elbKhhguHYNTe 2ZYXVCHubEj3x46oe2EWZHwZSwlzoyoXQBUylBe9AXLr9/Wdg5Ta+7OqBzDTvucT Syu769rWdtr/X4/TCIuhtf7N2xLf1Y2i25TNAsTE9jVHnu+mfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN41YX+cWA3T/8/2kNi6DZuwBHTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iYTlm YzY2My02ZTc4LTQ0MzUtYTRlMy00NWZmODA4MjgzMWIvYmE5ZmM2NjMtNmU3OC00 NDM1LWE0ZTMtNDVmZjgwODI4MzFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYmE5ZmM2NjMtNmU3OC00NDM1LWE0 ZTMtNDVmZjgwODI4MzFiL2JhOWZjNjYzLTZlNzgtNDQzNS1hNGUzLTQ1ZmY4MDgy ODMxYi5jcmwwHwYDVR0jBBgwFoAURWBgqW99wCGm6+2J1CBlAF4t73swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iYTlmYzY2My02ZTc4LTQ0MzUtYTRlMy00NWZm ODA4MjgzMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjyKXpqti/5GwujGGw7xHo dEl87xUnHBUcB8p4QmOYemp1sQKvyStUfeaS3632ZWOGcxaY5edGaTvuqV3NTRId yj3Zqc3bOgWDOs6BE1bpmwkV9mYJe1YHftszQeKjpSAbEIn44PuothivJoL3cg1o mHtgM4Q6Wjf3BbaKzp0yI/oe/k6x+1QqyXmXDlRWLIe+yBum46uM+3gwH3ZygYNh 4CQCx0iUK0SLJ0s69SFqtyGsDo+pLnWAauAov8MkftDYUnbklkbJ+4sRfpvX/6uD zYHNKLavGuHqI6/SLDUWZxJS8Enm3STu8oLtxJH/O+Q8+AwqGwh8GTABT4XD/G4l -----END CERTIFICATE-----Generated at Fri Jul 24 04:22:16 2026 by rpki-client