$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft File: bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft (raw, json) Hash identifier: iCahBN+IWQoHh2hFi8yN8grqOzK5EL73ovMhyU7l5jc= Subject key identifier: F0:A2:D5:5F:81:24:02:FA:C7:4A:0B:4A:81:CB:38:FB:A1:BB:A5:C5 Authority key identifier: 1B:EF:E1:BF:7B:3A:50:D4:34:6C:3F:06:AE:1E:9F:4E:AF:3A:11:16 Certificate issuer: /CN=bad642f9-6daf-4edd-bf5a-bce7a69cd2e6 Certificate serial: 010D0C9F4328584F4BA877FF78DAE8823F391780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft Manifest number: 010D0C9F43285840D5E20FCF08444F93A82EE03E Signing time: Fri 25 Sep 2026 20:00:23 +0000 Manifest this update: Fri 25 Sep 2026 20:00:23 +0000 Manifest next update: Mon 28 Sep 2026 20:00:00 +0000 Files and hashes: 1: bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.crl (hash: MIYkPefYZXWd/Fw9N1vX5JZUOrcx+hbVkkvT/UUvmQo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:a8:77:ff:78:da:e8:82:3f:39:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad642f9-6daf-4edd-bf5a-bce7a69cd2e6 Validity Not Before: Sep 25 20:00:23 2026 GMT Not After : Sep 28 20:00:00 2026 GMT Subject: CN=b0d8d175-4bc5-45f2-b6e0-26a0bd8412c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:63:d2:a9:0e:ea:d5:0c:99:63:10:dc:e7: e1:cd:bd:04:c6:e7:0c:c3:53:40:20:a4:ca:ca:e5: a4:63:50:2f:67:88:67:39:6d:fa:32:71:2f:e1:df: ea:be:9e:75:20:55:0e:b4:d3:01:a0:b0:f5:09:18: 7f:35:3c:ca:8c:f0:c9:26:e9:b2:ad:b5:03:5c:2e: f4:0a:1f:2a:d3:cf:52:2e:3b:a7:89:04:70:f4:58: 50:a1:4e:06:7b:ae:26:b5:3a:fe:70:ee:e7:90:be: a1:98:35:60:9b:17:44:72:1a:73:49:fe:55:a1:6c: 67:aa:5a:19:6b:1f:b8:0c:28:05:b9:e4:10:0b:91: e2:25:7c:9c:ac:dc:60:c7:74:79:ec:b4:7b:35:6b: ce:f6:41:2b:4e:2a:f1:33:2b:53:81:72:e9:75:8b: 0c:2d:6e:8e:24:14:e8:af:c5:2b:5d:78:bb:02:97: 1e:cf:b6:17:0e:87:49:63:e9:c8:af:e3:5b:f2:74: b9:48:3c:ec:84:66:6a:5f:06:99:69:bc:cd:28:d3: 9b:d5:f6:32:5c:95:cd:8f:67:e8:b4:35:f5:d1:53: c6:8b:54:9a:7e:9d:7f:e5:e3:99:70:f8:00:bd:31: 85:33:4a:a4:6a:67:05:1d:81:46:14:c2:66:27:1f: 56:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A2:D5:5F:81:24:02:FA:C7:4A:0B:4A:81:CB:38:FB:A1:BB:A5:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.crl X509v3 Authority Key Identifier: keyid:1B:EF:E1:BF:7B:3A:50:D4:34:6C:3F:06:AE:1E:9F:4E:AF:3A:11:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ae:f7:ef:f7:a2:33:d4:dc:ac:ab:e5:d9:09:67:5e:44:76: cc:a7:22:01:8f:37:f2:b5:b1:7c:3a:d1:95:83:ae:a4:65:19: 95:49:cb:47:6e:c5:fb:78:d4:ae:30:eb:38:f1:75:28:40:4e: 9e:9e:30:e8:16:bc:d5:1e:c2:fa:74:76:2b:27:c5:be:d6:4d: 52:79:5e:0b:a9:da:2b:90:8b:7b:65:b2:4e:19:3c:c0:6e:ea: c9:ca:1a:30:5d:af:75:99:55:d5:46:68:a6:f1:9f:41:a1:77: b8:23:34:68:2a:a7:c6:1f:c7:cd:88:68:a7:5f:50:ae:24:78: a7:f5:a0:44:40:62:2b:08:ce:0c:b3:63:28:dd:9f:20:52:e3: fc:02:95:e8:be:3a:ee:ce:83:07:41:0b:e9:f8:53:9f:42:ca: 73:b2:c6:67:6a:b8:35:fa:78:4e:d7:f8:85:15:5b:9c:fa:99: 27:7a:32:5c:23:fc:94:bf:5e:35:1b:e3:02:65:d6:86:be:d1: f7:de:4f:a1:55:15:83:9c:2a:db:cd:73:34:8a:dd:98:fc:24: d2:1c:20:55:5c:e7:f8:88:05:57:b6:2d:f6:90:4c:95:a4:d9: b2:76:a1:da:80:13:e9:7b:54:30:de:04:d1:92:e0:dd:59:48: 99:5e:3a:10 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9LqHf/eNrogj85F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNjQyZjktNmRhZi00ZWRkLWJmNWEtYmNlN2E2OWNk MmU2MB4XDTI2MDkyNTIwMDAyM1oXDTI2MDkyODIwMDAwMFowLzEtMCsGA1UEAxMk YjBkOGQxNzUtNGJjNS00NWYyLWI2ZTAtMjZhMGJkODQxMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKFj0qkO6tUMmWMQ3Ofhzb0ExucMw1NAIKTK yuWkY1AvZ4hnOW36MnEv4d/qvp51IFUOtNMBoLD1CRh/NTzKjPDJJumyrbUDXC70 Ch8q089SLjuniQRw9FhQoU4Ge64mtTr+cO7nkL6hmDVgmxdEchpzSf5VoWxnqloZ ax+4DCgFueQQC5HiJXycrNxgx3R57LR7NWvO9kErTirxMytTgXLpdYsMLW6OJBTo r8UrXXi7Apcez7YXDodJY+nIr+Nb8nS5SDzshGZqXwaZabzNKNOb1fYyXJXNj2fo tDX10VPGi1Safp1/5eOZcPgAvTGFM0qkamcFHYFGFMJmJx9WyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPCi1V+BJAL6x0oLSoHLOPuhu6XFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYWQ2 NDJmOS02ZGFmLTRlZGQtYmY1YS1iY2U3YTY5Y2QyZTYvYmFkNjQyZjktNmRhZi00 ZWRkLWJmNWEtYmNlN2E2OWNkMmU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmFkNjQyZjktNmRhZi00ZWRkLWJm NWEtYmNlN2E2OWNkMmU2L2JhZDY0MmY5LTZkYWYtNGVkZC1iZjVhLWJjZTdhNjlj ZDJlNi5jcmwwHwYDVR0jBBgwFoAUG+/hv3s6UNQ0bD8Grh6fTq86ERYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYWQ2NDJmOS02ZGFmLTRlZGQtYmY1YS1iY2U3 YTY5Y2QyZTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJrvfv96Iz1Nysq+XZCWde RHbMpyIBjzfytbF8OtGVg66kZRmVSctHbsX7eNSuMOs48XUoQE6enjDoFrzVHsL6 dHYrJ8W+1k1SeV4LqdorkIt7ZbJOGTzAburJyhowXa91mVXVRmim8Z9BoXe4IzRo KqfGH8fNiGinX1CuJHin9aBEQGIrCM4Ms2Mo3Z8gUuP8ApXovjruzoMHQQvp+FOf QspzssZnarg1+nhO1/iFFVuc+pknejJcI/yUv141G+MCZdaGvtH33k+hVRWDnCrb zXM0it2Y/CTSHCBVXOf4iAVXti32kEyVpNmydqHagBPpe1Qw3gTRkuDdWUiZXjoQ -----END CERTIFICATE-----Generated at Sat Sep 26 07:54:18 2026 by rpki-client