$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft File: ba691a44-20cf-450c-8abe-c548dd6bd5be.mft (raw, json) Hash identifier: lrMnwtlJdpK9Uxh5L63D7mMTC8U+dWjzqevY+5UnuMg= Subject key identifier: BE:6D:21:9A:F0:41:EB:9D:1E:E9:60:D4:53:A1:48:BB:32:8E:99:ED Authority key identifier: 91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F Certificate issuer: /CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Certificate serial: 010D0C9F4328584D4965824CA99364ED25BF6980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft Manifest number: 010D0C9F4328584D1F9E1AFDC135FF3750F3CDB0 Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Fri 27 Mar 2026 15:00:00 +0000 Files and hashes: 1: ba691a44-20cf-450c-8abe-c548dd6bd5be.crl (hash: IXva3/7nWBh9UeIIJaiE0FcTk/rMAy6xg9HY1NHn4Uo=) 2: f338295c-6e6c-3b3c-98dd-1e80c1957650.roa (hash: 4N3xdms+PPXOpr8hdZiJ59w8aUPMU5GRZfaJkpOKJek=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:82:4c:a9:93:64:ed:25:bf:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 27 15:00:00 2026 GMT Subject: CN=78752033-6de7-4972-90d4-b1dd353db281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:71:cf:52:2d:44:17:9e:17:d2:c1:c3:3a: c4:fb:a5:49:b5:3b:e3:a0:9a:84:79:f0:8f:cb:de: ee:53:3b:47:7c:73:82:ee:ef:b4:ae:c6:73:6f:7c: c3:75:e1:72:3f:5d:33:38:5f:35:3c:46:03:c0:6b: 1d:92:00:0b:92:8f:f0:72:26:77:de:fb:ca:92:68: 55:e3:47:17:6c:a0:4c:0c:a9:10:ff:27:b3:d0:d6: c5:59:6c:17:62:56:68:0d:c9:e9:37:d9:8d:c0:70: 29:d1:64:a7:35:7a:b8:40:26:99:bc:1a:24:96:6e: d8:a7:0c:99:d5:dd:80:4b:a1:10:84:02:90:68:55: cd:0f:d6:03:61:bf:13:65:83:6d:1a:6c:3e:b4:cf: d3:ba:41:ae:48:45:de:ac:60:06:ef:79:07:e5:22: 06:76:ff:e7:05:ba:11:c1:78:c5:2f:82:c4:71:7c: 0c:6c:35:92:44:7c:7a:d9:b2:87:fe:5d:bf:46:e5: 5c:c4:73:28:fa:d2:5b:d9:0f:1b:24:8b:54:5e:c5: f3:ea:94:03:38:bd:ce:11:a6:51:46:a2:7c:5d:92: 1b:1f:b8:1b:1b:f6:52:76:2e:2c:e0:c6:c3:aa:13: 9c:17:b8:6f:f8:bc:af:30:63:1f:c9:41:d3:55:63: e4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6D:21:9A:F0:41:EB:9D:1E:E9:60:D4:53:A1:48:BB:32:8E:99:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl X509v3 Authority Key Identifier: keyid:91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7e:69:2a:95:eb:62:79:90:8f:db:ad:fc:11:05:b7:2f:f8: 48:f0:78:79:fc:fc:fe:fe:ae:a1:92:c9:0b:2d:9e:29:69:d4: 2c:76:2f:99:d6:39:6c:19:8d:61:40:21:68:00:32:16:34:88: 84:e8:7d:3c:df:81:2e:90:da:07:ce:08:af:91:fe:f1:4f:a2: 32:54:c4:fb:c7:ce:1a:0a:44:e4:80:b6:2c:ab:3b:99:4f:77: d8:a5:11:96:b0:cb:78:d0:02:a6:08:47:ba:fe:a7:fb:13:35: 8c:4a:bc:41:1f:ca:d4:dd:ab:8a:83:87:14:73:a7:fd:f8:41: 0b:5f:e9:ca:97:32:91:17:8b:bb:c3:79:1d:61:fe:7b:13:d2: 60:65:ce:22:a0:e1:cd:54:15:22:09:8a:be:bb:23:62:ff:b8: 93:c5:72:b5:01:55:a4:fd:f9:4b:1f:6d:5b:83:2a:e9:f3:aa: 69:a8:90:7a:7a:23:a0:a0:7d:f6:4e:de:4c:61:29:b3:6d:f7: a7:75:cd:1e:85:9f:f8:90:b1:66:9d:2b:f0:15:9f:42:96:5b: 45:e5:5a:36:27:df:66:de:2e:25:b7:82:49:5d:e6:1c:90:ee: 01:a4:85:8d:d1:6a:ea:7f:8e:8e:4c:d6:e4:33:16:02:9c:72: 3f:35:66:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZYJMqZNk7SW/aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2OTFhNDQtMjBjZi00NTBjLThhYmUtYzU0OGRkNmJk NWJlMB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyNzE1MDAwMFowLzEtMCsGA1UEAxMk Nzg3NTIwMzMtNmRlNy00OTcyLTkwZDQtYjFkZDM1M2RiMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsANxz1ItRBeeF9LBwzrE+6VJtTvjoJqEefCP y97uUztHfHOC7u+0rsZzb3zDdeFyP10zOF81PEYDwGsdkgALko/wciZ33vvKkmhV 40cXbKBMDKkQ/yez0NbFWWwXYlZoDcnpN9mNwHAp0WSnNXq4QCaZvBoklm7YpwyZ 1d2AS6EQhAKQaFXND9YDYb8TZYNtGmw+tM/TukGuSEXerGAG73kH5SIGdv/nBboR wXjFL4LEcXwMbDWSRHx62bKH/l2/RuVcxHMo+tJb2Q8bJItUXsXz6pQDOL3OEaZR RqJ8XZIbH7gbG/ZSdi4s4MbDqhOcF7hv+LyvMGMfyUHTVWPkrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL5tIZrwQeudHulg1FOhSLsyjpntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5 MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4ZGQ2YmQ1YmUvYmE2OTFhNDQtMjBjZi00 NTBjLThhYmUtYzU0OGRkNmJkNWJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmE2OTFhNDQtMjBjZi00NTBjLThh YmUtYzU0OGRkNmJkNWJlL2JhNjkxYTQ0LTIwY2YtNDUwYy04YWJlLWM1NDhkZDZi ZDViZS5jcmwwHwYDVR0jBBgwFoAUkTurmw4XCTV7QqotqsMGwPraJh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4 ZGQ2YmQ1YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUfmkqletieZCP2638EQW3 L/hI8Hh5/Pz+/q6hkskLLZ4padQsdi+Z1jlsGY1hQCFoADIWNIiE6H0834EukNoH zgivkf7xT6IyVMT7x84aCkTkgLYsqzuZT3fYpRGWsMt40AKmCEe6/qf7EzWMSrxB H8rU3auKg4cUc6f9+EELX+nKlzKRF4u7w3kdYf57E9JgZc4ioOHNVBUiCYq+uyNi /7iTxXK1AVWk/flLH21bgyrp86ppqJB6eiOgoH32Tt5MYSmzbfendc0ehZ/4kLFm nSvwFZ9ClltF5Vo2J99m3i4lt4JJXeYckO4BpIWN0Wrqf46OTNbkMxYCnHI/NWa8 -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:47 2026 by rpki-client