$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.mft File: ba9a53df-0615-445c-b629-c0a289cd77e0.mft (raw, json) Hash identifier: vCZDkx6R8ogXJT+lGf83wZHfwRzeMtsCzGDS6mIpT2g= Subject key identifier: B2:A8:72:73:C7:3A:E2:AD:F8:F0:CF:66:9A:14:93:E5:69:9F:AD:0B Authority key identifier: 1A:8B:16:1A:27:66:54:B1:A4:AF:EB:72:01:FC:17:8E:FD:62:AE:DC Certificate issuer: /CN=ba9a53df-0615-445c-b629-c0a289cd77e0 Certificate serial: 010D0C9F4328584B96009192D98BD091CF534B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.mft Manifest number: 010D0C9F4328584877ADBF7865070EEB53F96D1E Signing time: Mon 20 Oct 2025 16:00:03 +0000 Manifest this update: Mon 20 Oct 2025 16:00:03 +0000 Manifest next update: Thu 23 Oct 2025 16:00:00 +0000 Files and hashes: 1: ba9a53df-0615-445c-b629-c0a289cd77e0.crl (hash: ebltWdC3n8OXJh5X3uvIc8VLPP0eKvUX50VEJvDiY/M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:00:91:92:d9:8b:d0:91:cf:53:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9a53df-0615-445c-b629-c0a289cd77e0 Validity Not Before: Oct 20 16:00:03 2025 GMT Not After : Oct 23 16:00:00 2025 GMT Subject: CN=da6f8e7c-3c73-4a97-9e08-a8a9daf69283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:78:50:a8:7d:9f:e4:9b:87:23:b6:5b:56:aa: 89:51:bc:b8:67:d4:c4:72:c3:fe:bd:a8:1a:cd:03: af:63:cc:08:d4:08:23:87:d6:1c:9c:2b:33:e9:f9: 1d:71:9a:0c:2b:fd:75:cd:02:49:9c:e5:c7:c5:93: 5b:91:2f:c0:29:7e:8c:49:c0:2a:1d:92:f3:88:26: 22:87:5c:6f:f4:c3:6a:b9:71:0a:fd:21:ed:98:a2: 0c:62:ef:43:43:3e:b7:dd:94:55:31:4f:af:40:7f: a3:b3:02:49:14:44:ad:a7:9b:09:e6:29:07:50:50: de:46:1b:be:6e:ec:40:e8:3a:78:cc:fe:32:eb:c4: aa:04:c4:bc:0f:28:ef:ef:ee:91:16:61:41:89:44: cc:e6:6c:a8:ba:83:ad:7e:cb:77:30:6a:66:47:e4: 9b:e7:12:4e:af:e5:61:58:c2:82:c3:fe:fa:19:93: 5c:99:4f:4d:20:33:c6:65:a4:46:f1:70:87:5c:ab: 88:10:25:f7:f5:a4:4a:75:fd:ca:1b:ab:4e:44:47: 31:b0:60:e5:e7:de:7f:ae:43:f0:5a:fd:c3:8a:59: 33:60:3e:81:a7:53:ca:5e:b0:47:ee:5a:9f:d7:bc: 0e:70:86:1e:da:34:23:c0:53:c5:c9:9f:27:a0:9c: d0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A8:72:73:C7:3A:E2:AD:F8:F0:CF:66:9A:14:93:E5:69:9F:AD:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.crl X509v3 Authority Key Identifier: keyid:1A:8B:16:1A:27:66:54:B1:A4:AF:EB:72:01:FC:17:8E:FD:62:AE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:25:c0:08:d5:97:33:d0:35:8b:e9:f2:5a:53:b7:f6:e4:d9: e3:8d:15:5c:2d:b5:62:28:03:a3:a0:16:e0:f3:4e:d2:2e:81: 00:83:c9:6b:0d:31:05:37:4b:9c:82:6c:7c:43:fd:a8:62:a8: 2a:5e:87:48:7d:a5:84:70:0b:f1:1a:32:89:42:ef:e6:73:6e: 99:89:b2:cc:ba:00:e5:5c:2f:36:b6:8e:e0:97:7a:8b:4c:94: a3:4f:32:38:a2:c2:d5:71:bd:d3:90:98:10:95:21:da:eb:95: 9f:75:71:77:3b:9b:b2:5c:87:bf:b6:d5:70:30:a0:5b:75:43: 46:19:a5:52:41:83:8e:d5:39:df:4c:f4:4e:c6:40:77:86:89: 55:6d:ef:f9:c3:14:ed:0a:fc:bf:ff:da:16:7d:e2:74:57:1f: ce:c3:7e:49:38:89:71:e2:88:ab:87:52:38:41:80:0e:46:d0: 0f:1a:3a:3f:70:1d:c8:58:89:60:01:2e:ff:91:b8:81:10:7b: fb:c2:66:8a:cc:c3:aa:96:60:8f:a6:f0:6e:dc:7a:89:47:e3: 5f:51:2f:ae:88:0d:b5:f9:15:0c:10:c6:0e:97:46:7d:f6:27: 7e:02:f8:20:74:e9:80:8f:54:27:1e:77:ad:29:0d:f5:f5:33: f9:9a:84:ed -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWAJGS2YvQkc9TS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE5YTUzZGYtMDYxNS00NDVjLWI2MjktYzBhMjg5Y2Q3 N2UwMB4XDTI1MTAyMDE2MDAwM1oXDTI1MTAyMzE2MDAwMFowLzEtMCsGA1UEAxMk ZGE2ZjhlN2MtM2M3My00YTk3LTllMDgtYThhOWRhZjY5MjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23hQqH2f5JuHI7ZbVqqJUby4Z9TEcsP+vaga zQOvY8wI1Agjh9YcnCsz6fkdcZoMK/11zQJJnOXHxZNbkS/AKX6MScAqHZLziCYi h1xv9MNquXEK/SHtmKIMYu9DQz633ZRVMU+vQH+jswJJFEStp5sJ5ikHUFDeRhu+ buxA6Dp4zP4y68SqBMS8Dyjv7+6RFmFBiUTM5myouoOtfst3MGpmR+Sb5xJOr+Vh WMKCw/76GZNcmU9NIDPGZaRG8XCHXKuIECX39aRKdf3KG6tOREcxsGDl595/rkPw Wv3DilkzYD6Bp1PKXrBH7lqf17wOcIYe2jQjwFPFyZ8noJzQzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLKocnPHOuKt+PDPZpoUk+Vpn60LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTlh NTNkZi0wNjE1LTQ0NWMtYjYyOS1jMGEyODljZDc3ZTAvYmE5YTUzZGYtMDYxNS00 NDVjLWI2MjktYzBhMjg5Y2Q3N2UwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE5YTUzZGYtMDYxNS00NDVjLWI2 MjktYzBhMjg5Y2Q3N2UwL2JhOWE1M2RmLTA2MTUtNDQ1Yy1iNjI5LWMwYTI4OWNk NzdlMC5jcmwwHwYDVR0jBBgwFoAUGosWGidmVLGkr+tyAfwXjv1irtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTlhNTNkZi0wNjE1LTQ0NWMtYjYyOS1jMGEy ODljZDc3ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLJcAI1Zcz0DWL6fJaU7f2 5NnjjRVcLbViKAOjoBbg807SLoEAg8lrDTEFN0ucgmx8Q/2oYqgqXodIfaWEcAvx GjKJQu/mc26ZibLMugDlXC82to7gl3qLTJSjTzI4osLVcb3TkJgQlSHa65WfdXF3 O5uyXIe/ttVwMKBbdUNGGaVSQYOO1TnfTPROxkB3holVbe/5wxTtCvy//9oWfeJ0 Vx/Ow35JOIlx4oirh1I4QYAORtAPGjo/cB3IWIlgAS7/kbiBEHv7wmaKzMOqlmCP pvBu3HqJR+NfUS+uiA21+RUMEMYOl0Z99id+AvggdOmAj1QnHnetKQ319TP5moTt -----END CERTIFICATE-----Generated at Tue Oct 21 15:27:15 2025 by rpki-client