$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.mft File: bad79acc-a971-4c08-8e88-3594dae2715a.mft (raw, json) Hash identifier: UlPZpBkP3wbZl/WPm5HKT3+D58BDi1dYI4/syrH9Xhc= Subject key identifier: 27:B1:ED:43:16:D9:55:38:BF:08:44:F2:31:DF:F3:4A:9D:39:64:9B Authority key identifier: 3D:58:09:D6:0C:EB:72:3D:A4:60:C6:A7:3B:FB:E6:F6:81:08:D5:D7 Certificate issuer: /CN=bad79acc-a971-4c08-8e88-3594dae2715a Certificate serial: 010D0C9F4328584D4C30312F6D0A2B971FF00700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.mft Manifest number: 010D0C9F432858435CFDDDFE44FECCD4FCCBFA26 Signing time: Thu 26 Mar 2026 15:00:03 +0000 Manifest this update: Thu 26 Mar 2026 15:00:03 +0000 Manifest next update: Sat 28 Mar 2026 15:00:00 +0000 Files and hashes: 1: 9e56f5a3-e24b-359e-be4b-ae75c0ce7cbd.roa (hash: DYB+3HwM54px3mfkqdYSsEq7REziwAW2bpxnkMsUifY=) 2: bad79acc-a971-4c08-8e88-3594dae2715a.crl (hash: haemHt8ly/HEXLshPVB57MDJszqw6VJN3nOi9RhIOjc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:30:31:2f:6d:0a:2b:97:1f:f0:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad79acc-a971-4c08-8e88-3594dae2715a Validity Not Before: Mar 26 15:00:03 2026 GMT Not After : Mar 28 15:00:00 2026 GMT Subject: CN=82fceea8-9d23-4019-b93d-390559b64cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:dc:73:1a:d0:25:83:e5:f2:0b:79:3f:58: ec:66:c9:e2:a3:49:f0:8d:d3:00:3e:bd:3c:b5:73: 7f:ab:fa:07:15:29:25:a9:f1:d2:96:3f:5c:99:42: a7:91:b7:77:ca:1b:83:d3:95:f5:db:23:5a:64:d3: cf:b7:32:d4:7f:50:32:0c:7b:0f:41:69:5a:4d:63: 9e:b6:40:28:c2:3f:31:80:d5:a8:db:70:d1:4e:96: 8e:ee:ba:3c:92:e4:b5:47:53:ae:7e:41:2d:d6:86: 7d:2e:1a:b3:f1:0f:fa:e3:e8:a2:22:7c:74:e5:17: 10:43:aa:f2:fe:5f:19:14:d8:7e:9f:3b:8f:8a:4e: 3f:8c:6d:49:e6:8c:87:2d:18:0e:74:11:4d:4c:dc: 4e:c2:f9:71:86:66:d3:41:d7:ed:73:e9:4a:88:85: bc:52:f6:e5:7d:c4:c4:6e:bf:8f:af:f7:76:e0:4e: 97:f3:25:1e:c6:6c:97:eb:b6:86:70:5b:ae:0f:41: 05:ed:d4:17:51:0b:7a:60:9b:ab:54:77:15:db:02: 3e:32:4b:c6:4e:b8:21:bb:7c:0c:31:ca:91:64:33: 91:2e:e2:8a:9b:81:93:fd:19:1f:3b:3a:45:76:e3: c8:f1:4a:11:81:42:29:5a:ab:c7:6f:ee:4e:d9:33: 29:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B1:ED:43:16:D9:55:38:BF:08:44:F2:31:DF:F3:4A:9D:39:64:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.crl X509v3 Authority Key Identifier: keyid:3D:58:09:D6:0C:EB:72:3D:A4:60:C6:A7:3B:FB:E6:F6:81:08:D5:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a4:46:3e:10:f8:63:38:c8:c6:58:94:7f:c2:ea:0c:25:c5: ed:b1:11:94:f1:39:1c:73:f0:a2:43:14:7f:95:61:68:e2:9f: 20:dd:61:cb:e4:87:d0:54:17:2c:66:ed:d5:35:14:17:34:a4: db:e3:39:32:a4:0f:0a:d4:2f:5f:11:7c:8f:bf:cb:b1:71:eb: b1:d2:8c:34:bf:03:01:da:67:a0:18:b5:ff:d5:e4:ee:a2:64: 0b:5c:17:78:70:5e:12:8b:18:e3:8e:b3:63:2e:23:af:53:e2: 98:40:90:ad:58:ed:f6:4f:3f:bf:70:1b:ff:d4:43:96:88:17: 5b:c2:c5:9f:ad:1f:0a:b4:0e:61:58:cc:6a:50:cc:e3:71:bf: 92:bf:13:bd:1f:13:c7:46:27:17:0f:3d:ce:4d:fd:c4:63:f7: 0f:d6:6a:58:08:8b:86:23:08:20:dc:f4:71:c6:65:3e:59:6d: 62:84:c0:00:6c:6b:d3:49:28:f0:0a:24:4d:10:51:ad:f6:82: 25:ff:1b:a0:3b:4e:d5:85:0d:e1:9e:e3:bc:d3:c6:51:b5:a1: 1b:27:a9:9f:73:d4:a9:cf:3a:98:f9:0c:e1:26:2f:eb:05:b9: 7e:9f:e1:0e:52:28:d0:f7:2e:c0:19:c4:a6:fd:96:7b:ce:6b: d1:45:1a:57 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MMDEvbQorlx/wBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNzlhY2MtYTk3MS00YzA4LThlODgtMzU5NGRhZTI3 MTVhMB4XDTI2MDMyNjE1MDAwM1oXDTI2MDMyODE1MDAwMFowLzEtMCsGA1UEAxMk ODJmY2VlYTgtOWQyMy00MDE5LWI5M2QtMzkwNTU5YjY0Y2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7vccxrQJYPl8gt5P1jsZsnio0nwjdMAPr08 tXN/q/oHFSklqfHSlj9cmUKnkbd3yhuD05X12yNaZNPPtzLUf1AyDHsPQWlaTWOe tkAowj8xgNWo23DRTpaO7ro8kuS1R1OufkEt1oZ9Lhqz8Q/64+iiInx05RcQQ6ry /l8ZFNh+nzuPik4/jG1J5oyHLRgOdBFNTNxOwvlxhmbTQdftc+lKiIW8UvblfcTE br+Pr/d24E6X8yUexmyX67aGcFuuD0EF7dQXUQt6YJurVHcV2wI+MkvGTrghu3wM McqRZDORLuKKm4GT/RkfOzpFduPI8UoRgUIpWqvHb+5O2TMpAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCex7UMW2VU4vwhE8jHf80qdOWSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYWQ3 OWFjYy1hOTcxLTRjMDgtOGU4OC0zNTk0ZGFlMjcxNWEvYmFkNzlhY2MtYTk3MS00 YzA4LThlODgtMzU5NGRhZTI3MTVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmFkNzlhY2MtYTk3MS00YzA4LThl ODgtMzU5NGRhZTI3MTVhL2JhZDc5YWNjLWE5NzEtNGMwOC04ZTg4LTM1OTRkYWUy NzE1YS5jcmwwHwYDVR0jBBgwFoAUPVgJ1gzrcj2kYManO/vm9oEI1dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYWQ3OWFjYy1hOTcxLTRjMDgtOGU4OC0zNTk0 ZGFlMjcxNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDpEY+EPhjOMjGWJR/wuoM JcXtsRGU8Tkcc/CiQxR/lWFo4p8g3WHL5IfQVBcsZu3VNRQXNKTb4zkypA8K1C9f EXyPv8uxceux0ow0vwMB2megGLX/1eTuomQLXBd4cF4SixjjjrNjLiOvU+KYQJCt WO32Tz+/cBv/1EOWiBdbwsWfrR8KtA5hWMxqUMzjcb+SvxO9HxPHRicXDz3OTf3E Y/cP1mpYCIuGIwgg3PRxxmU+WW1ihMAAbGvTSSjwCiRNEFGt9oIl/xugO07VhQ3h nuO808ZRtaEbJ6mfc9SpzzqY+QzhJi/rBbl+n+EOUijQ9y7AGcSm/ZZ7zmvRRRpX -----END CERTIFICATE-----Generated at Thu Mar 26 19:15:59 2026 by rpki-client