$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft File: ba691a44-20cf-450c-8abe-c548dd6bd5be.mft (raw, json) Hash identifier: ZqjvbfzXOPgCYRGnjL1yO8PKXEG1u6Odj53nO7plALM= Subject key identifier: 03:3E:1C:67:16:6C:B0:28:29:2B:11:6B:C3:79:7F:A7:18:83:B7:39 Authority key identifier: 91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F Certificate issuer: /CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Certificate serial: 010D0C9F4328584F565C21A923ACC1920386BD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft Manifest number: 010D0C9F4328584D1F9E1AFDC135FF3750F3CE71 Signing time: Tue 29 Sep 2026 16:00:24 +0000 Manifest this update: Tue 29 Sep 2026 16:00:24 +0000 Manifest next update: Thu 01 Oct 2026 16:00:00 +0000 Files and hashes: 1: ba691a44-20cf-450c-8abe-c548dd6bd5be.crl (hash: KPLEjNdKbA3ooMM7uxhKx/a63e2YNDaT8g04jhgCQ5g=) 2: f338295c-6e6c-3b3c-98dd-1e80c1957650.roa (hash: J6kSQC5r4n45iLIqJRVkej0HD0+4fxSjumj34Qnga9U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:5c:21:a9:23:ac:c1:92:03:86:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Validity Not Before: Sep 29 16:00:24 2026 GMT Not After : Oct 1 16:00:00 2026 GMT Subject: CN=9e14aed9-3b2d-419b-a4ad-8f52d70f77c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c6:1a:80:db:c1:ec:bc:7a:e7:1c:97:da:63: 13:02:4f:75:18:57:7d:bb:7b:30:8d:92:8e:1e:a4: 33:d0:68:de:65:ee:eb:01:62:36:62:30:e8:5b:a7: f2:1b:73:ff:e9:c4:65:71:4e:d6:5d:86:13:91:13: dd:e2:8e:22:c2:5c:b5:37:3c:ac:6d:a1:ac:47:8b: 7e:18:5b:b6:ab:bb:23:6a:f4:0c:2c:97:fc:ba:58: 3f:2a:7f:d8:32:c0:b4:1d:21:c1:6e:30:53:3f:45: ed:c2:8d:d9:5f:91:91:33:89:2d:fd:48:8a:d6:e9: 28:64:21:66:41:b9:5d:75:f8:76:ef:9e:3a:02:46: 69:49:79:62:14:91:8a:e2:d9:f4:57:93:18:30:b8: 19:e9:59:e6:5f:b0:4a:1b:e4:10:a5:62:a7:b7:78: 74:66:21:bc:0b:45:44:55:bb:d5:75:d6:d3:f7:1e: 86:65:da:74:3c:d6:2d:8d:91:bf:c1:e3:30:bb:b6: f6:df:2f:d8:5b:4c:3a:3c:59:40:58:23:94:6f:43: b1:f9:ee:3b:91:09:b1:ec:85:bd:e8:ae:73:7c:be: 99:33:8c:3a:ae:16:7e:6a:7b:62:42:5d:57:30:12: a9:22:69:13:2d:92:50:51:5e:ad:1d:17:9a:a0:82: 2d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3E:1C:67:16:6C:B0:28:29:2B:11:6B:C3:79:7F:A7:18:83:B7:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl X509v3 Authority Key Identifier: keyid:91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:8a:5f:bb:96:b9:c0:75:61:b9:0e:77:97:8e:a9:07:3a:88: 79:72:a1:70:65:7e:df:48:52:c8:59:ac:be:8f:0d:7a:42:9b: b9:fc:65:a1:72:09:0e:53:58:57:e8:5e:24:37:b4:55:53:2a: 89:2f:22:b8:7e:b5:ee:05:82:1e:23:ba:93:20:3b:1e:76:0a: f2:72:22:82:e8:ae:a0:4d:73:da:23:d7:51:7a:36:59:8a:76: 3a:f4:28:78:a9:bd:be:ed:f5:77:0b:8a:bf:31:f1:f0:cd:a4: b0:1f:55:cf:46:89:6b:56:f4:7a:2a:a0:57:bf:04:72:d9:cd: 92:60:e5:84:15:cd:2d:af:b5:75:cb:ad:7e:23:bc:cd:93:73: c7:b9:ec:a9:0a:0b:d1:8e:99:4a:86:3f:49:97:c9:b9:93:40: 8d:c7:9f:7f:ff:a9:32:c7:3d:3b:14:6a:af:fa:84:d6:bf:ab: 99:29:64:20:dd:4e:c7:97:b2:92:40:00:b2:55:be:86:91:6c: 6f:7d:7b:55:0d:23:6d:b9:d0:56:14:40:51:9c:59:7b:20:a1: 43:93:99:98:50:82:ed:f1:6e:df:b5:84:0b:6f:48:e0:86:66: 3d:c3:cb:ad:3e:48:1e:a0:6a:e3:5a:fd:47:41:60:8d:96:fb: 06:e5:82:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9WXCGpI6zBkgOGvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2OTFhNDQtMjBjZi00NTBjLThhYmUtYzU0OGRkNmJk NWJlMB4XDTI2MDkyOTE2MDAyNFoXDTI2MTAwMTE2MDAwMFowLzEtMCsGA1UEAxMk OWUxNGFlZDktM2IyZC00MTliLWE0YWQtOGY1MmQ3MGY3N2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18YagNvB7Lx65xyX2mMTAk91GFd9u3swjZKO HqQz0GjeZe7rAWI2YjDoW6fyG3P/6cRlcU7WXYYTkRPd4o4iwly1NzysbaGsR4t+ GFu2q7sjavQMLJf8ulg/Kn/YMsC0HSHBbjBTP0Xtwo3ZX5GRM4kt/UiK1ukoZCFm Qblddfh27546AkZpSXliFJGK4tn0V5MYMLgZ6VnmX7BKG+QQpWKnt3h0ZiG8C0VE VbvVddbT9x6GZdp0PNYtjZG/weMwu7b23y/YW0w6PFlAWCOUb0Ox+e47kQmx7IW9 6K5zfL6ZM4w6rhZ+antiQl1XMBKpImkTLZJQUV6tHReaoIItmQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAM+HGcWbLAoKSsRa8N5f6cYg7c5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5 MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4ZGQ2YmQ1YmUvYmE2OTFhNDQtMjBjZi00 NTBjLThhYmUtYzU0OGRkNmJkNWJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmE2OTFhNDQtMjBjZi00NTBjLThh YmUtYzU0OGRkNmJkNWJlL2JhNjkxYTQ0LTIwY2YtNDUwYy04YWJlLWM1NDhkZDZi ZDViZS5jcmwwHwYDVR0jBBgwFoAUkTurmw4XCTV7QqotqsMGwPraJh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4 ZGQ2YmQ1YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC/il+7lrnAdWG5DneXjqkH Ooh5cqFwZX7fSFLIWay+jw16Qpu5/GWhcgkOU1hX6F4kN7RVUyqJLyK4frXuBYIe I7qTIDsedgryciKC6K6gTXPaI9dRejZZinY69Ch4qb2+7fV3C4q/MfHwzaSwH1XP RolrVvR6KqBXvwRy2c2SYOWEFc0tr7V1y61+I7zNk3PHueypCgvRjplKhj9Jl8m5 k0CNx59//6kyxz07FGqv+oTWv6uZKWQg3U7Hl7KSQACyVb6GkWxvfXtVDSNtudBW FEBRnFl7IKFDk5mYUILt8W7ftYQLb0jghmY9w8utPkgeoGrjWv1HQWCNlvsG5YLi -----END CERTIFICATE-----Generated at Wed Sep 30 15:21:24 2026 by rpki-client