$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft File: ba691a44-20cf-450c-8abe-c548dd6bd5be.mft (raw, json) Hash identifier: 0XJ2w5+In6sYXbfvassORINyKI9qBAdbg58eSE1+RDw= Subject key identifier: AD:EE:23:2D:B8:F8:CD:B5:F0:A4:7C:88:34:DF:DF:0D:C3:ED:8C:6A Authority key identifier: 91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F Certificate issuer: /CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Certificate serial: 010D0C9F4328584E988592F9F0B2A1A0C72E3580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft Manifest number: 010D0C9F4328584D1F9E1AFDC135FF3750F3CE2A Signing time: Thu 23 Jul 2026 16:00:23 +0000 Manifest this update: Thu 23 Jul 2026 16:00:23 +0000 Manifest next update: Sat 25 Jul 2026 16:00:00 +0000 Files and hashes: 1: ba691a44-20cf-450c-8abe-c548dd6bd5be.crl (hash: KVcrjx6AbRndTjOLn9qyaZ85uiFaGPSjOPWesuRUEZo=) 2: f338295c-6e6c-3b3c-98dd-1e80c1957650.roa (hash: CEOGjSOoZ29NCjbDNiSYlCoQUmxkpq36kwh8GTaMUmc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:98:85:92:f9:f0:b2:a1:a0:c7:2e:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Validity Not Before: Jul 23 16:00:23 2026 GMT Not After : Jul 25 16:00:00 2026 GMT Subject: CN=91d02e9e-8d29-45a5-8fb9-b9d05f052f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:79:e1:f5:95:13:20:03:cb:40:79:16:94:de: 2e:3b:d8:0e:c2:90:25:b6:e7:e1:3c:9f:29:8e:5d: b0:8d:1a:d2:86:0c:48:4b:03:e4:57:ec:f3:f7:bb: fd:06:1b:a4:e3:6e:86:63:56:2f:85:8b:c9:44:32: b4:01:48:f4:2f:40:0d:42:d7:06:ac:56:e7:41:f4: 17:2f:c3:74:c1:21:91:5e:e0:0f:aa:b2:32:fb:dd: 40:c4:46:2a:c3:42:3a:44:f7:6a:9e:e3:92:42:9c: 61:3f:1d:d9:ef:82:a3:c0:48:37:68:51:3f:71:94: b9:65:3a:0f:6c:a5:88:94:2f:15:3b:cc:d9:3f:ae: 1a:2d:ce:2d:47:af:48:37:59:ac:e9:49:1f:a5:bc: 32:51:df:bb:93:9d:a7:2b:6d:2a:a2:c8:65:75:ab: 71:87:f9:b6:6d:64:f1:af:b1:0e:57:e9:eb:c3:a9: 96:18:6f:c8:b7:0d:d2:bd:cc:4c:35:41:2b:91:99: cc:41:8a:92:f0:04:6a:ad:e1:a4:07:4a:9f:be:ca: ab:6d:06:57:27:0b:c2:25:ca:90:b0:60:f2:8a:35: 9b:eb:8d:34:83:b1:24:ee:d8:c0:27:19:f8:77:ca: 26:54:87:3f:bf:5a:1d:79:4e:f8:3e:9c:8f:d2:17: 4a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EE:23:2D:B8:F8:CD:B5:F0:A4:7C:88:34:DF:DF:0D:C3:ED:8C:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl X509v3 Authority Key Identifier: keyid:91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:48:20:a4:68:91:9e:1c:38:1b:d4:c6:09:0c:88:e1:82:26: 4d:3e:bf:b7:7b:08:a8:36:7f:83:c1:00:49:0e:7a:a0:cd:b1: d8:ee:ba:69:0c:ec:ed:c9:1a:37:75:7e:23:ad:91:62:3e:0f: e8:bb:9a:e0:1e:eb:65:ee:34:d7:38:bb:e1:1b:67:9e:8b:27: 35:a5:8d:dc:c3:e4:e4:a1:e5:d7:19:c7:fa:e9:15:c8:71:18: a3:dc:ca:30:aa:bf:4f:fd:f1:57:c5:5f:26:8d:ae:05:4e:f1: cf:79:fa:37:a6:55:b1:67:37:b3:fa:f1:58:18:38:d5:1d:99: fc:79:5f:0c:53:ee:34:ac:a1:82:63:4c:da:46:7f:a4:97:35: c9:b0:40:84:ab:54:28:a9:a8:46:1b:b5:be:e8:d5:f1:4d:86: 0f:89:a8:f1:9d:b4:b2:50:6c:66:b0:07:ae:79:d0:68:7e:bc: 11:7e:3d:35:5d:9c:df:c6:ee:c3:e9:9e:8f:82:4d:a9:0c:27: bf:43:f6:4e:b3:3a:12:b4:dd:36:08:2a:35:4a:10:59:67:5b: 54:7e:05:0d:ee:fc:e9:82:c3:f3:d9:2d:04:b3:8f:16:b3:35: 44:de:fa:be:06:fe:62:7e:1c:09:9f:ee:cf:15:57:67:36:0d: 2c:4d:2f:95 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6YhZL58LKhoMcuNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2OTFhNDQtMjBjZi00NTBjLThhYmUtYzU0OGRkNmJk NWJlMB4XDTI2MDcyMzE2MDAyM1oXDTI2MDcyNTE2MDAwMFowLzEtMCsGA1UEAxMk OTFkMDJlOWUtOGQyOS00NWE1LThmYjktYjlkMDVmMDUyZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHnh9ZUTIAPLQHkWlN4uO9gOwpAltufhPJ8p jl2wjRrShgxISwPkV+zz97v9Bhuk426GY1YvhYvJRDK0AUj0L0ANQtcGrFbnQfQX L8N0wSGRXuAPqrIy+91AxEYqw0I6RPdqnuOSQpxhPx3Z74KjwEg3aFE/cZS5ZToP bKWIlC8VO8zZP64aLc4tR69IN1ms6UkfpbwyUd+7k52nK20qoshldatxh/m2bWTx r7EOV+nrw6mWGG/Itw3SvcxMNUErkZnMQYqS8ARqreGkB0qfvsqrbQZXJwvCJcqQ sGDyijWb6400g7Ek7tjAJxn4d8omVIc/v1odeU74PpyP0hdKAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK3uIy24+M218KR8iDTf3w3D7YxqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5 MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4ZGQ2YmQ1YmUvYmE2OTFhNDQtMjBjZi00 NTBjLThhYmUtYzU0OGRkNmJkNWJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmE2OTFhNDQtMjBjZi00NTBjLThh YmUtYzU0OGRkNmJkNWJlL2JhNjkxYTQ0LTIwY2YtNDUwYy04YWJlLWM1NDhkZDZi ZDViZS5jcmwwHwYDVR0jBBgwFoAUkTurmw4XCTV7QqotqsMGwPraJh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4 ZGQ2YmQ1YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCsSCCkaJGeHDgb1MYJDIjh giZNPr+3ewioNn+DwQBJDnqgzbHY7rppDOztyRo3dX4jrZFiPg/ou5rgHutl7jTX OLvhG2eeiyc1pY3cw+TkoeXXGcf66RXIcRij3Mowqr9P/fFXxV8mja4FTvHPefo3 plWxZzez+vFYGDjVHZn8eV8MU+40rKGCY0zaRn+klzXJsECEq1QoqahGG7W+6NXx TYYPiajxnbSyUGxmsAeuedBofrwRfj01XZzfxu7D6Z6Pgk2pDCe/Q/ZOszoStN02 CCo1ShBZZ1tUfgUN7vzpgsPz2S0Es48WszVE3vq+Bv5ifhwJn+7PFVdnNg0sTS+V -----END CERTIFICATE-----Generated at Fri Jul 24 13:59:58 2026 by rpki-client