$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.mft File: ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.mft (raw, json) Hash identifier: 7mzcPYpTXRQ2yoaO7xY+qvIQJ2X3a5njGue8PFj1vtg= Subject key identifier: 07:04:34:AB:7E:B0:08:71:75:DC:9F:B4:86:1A:7E:E0:6A:5E:3C:45 Authority key identifier: C7:79:C1:DD:35:BC:68:51:32:59:6B:CF:57:81:3B:7D:C4:E3:24:CD Certificate issuer: /CN=ba2d5b86-cca0-4f2a-87a4-874f5e96eed8 Certificate serial: 010D0C9F4328584D4EBF60457B9B71557E6647C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.mft Manifest number: 010D0C9F4328584902E2AE05CC9C241EE1EA1112 Signing time: Fri 27 Mar 2026 13:00:09 +0000 Manifest this update: Fri 27 Mar 2026 13:00:09 +0000 Manifest next update: Mon 30 Mar 2026 13:00:00 +0000 Files and hashes: 1: 5094b170-7783-383b-add6-8db0ea7f91ad.roa (hash: HkJEgGXHV4tAVTP8gOAntAr+IQZs9gLBJ52uGhAmz84=) 2: ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl (hash: JHu0Ns9MnyZMTb5GXNT5hRqgGbyqiGC73XHR1SKZ8ng=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:60:45:7b:9b:71:55:7e:66:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2d5b86-cca0-4f2a-87a4-874f5e96eed8 Validity Not Before: Mar 27 13:00:09 2026 GMT Not After : Mar 30 13:00:00 2026 GMT Subject: CN=7c3573ba-d643-481d-855f-b5186b39d29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6f:bf:84:9a:91:fc:86:5f:ce:14:2d:69:ce: df:13:43:2d:ba:a8:9d:df:83:95:e8:6d:1c:e8:ec: 60:ce:30:4e:00:a5:0b:23:a4:b0:d4:a0:1c:e2:ec: ae:18:53:0a:47:86:a4:02:6f:de:f9:ef:46:68:03: 40:e8:1f:2a:75:fc:c9:1a:78:33:a6:89:d0:87:1a: 11:3c:c4:e6:1c:f9:9e:76:2d:a6:ba:44:6a:a4:66: c8:6b:ea:15:0c:f6:ba:4a:34:bb:b1:da:4e:70:a6: 37:64:d5:94:38:e3:af:b3:70:46:09:9e:de:dd:7d: 55:ab:a3:32:8e:c6:7d:e4:15:7d:b5:64:11:a5:a3: eb:e6:6e:09:66:37:7f:e4:6b:5b:4f:f6:ae:2a:42: 64:77:c4:a4:3e:f0:d9:6a:0a:25:72:32:bc:6f:03: 0f:33:c3:b2:61:d6:64:99:78:31:b9:8b:52:aa:49: 79:75:c6:d9:e4:3c:43:8c:5b:ad:14:ba:87:54:1b: f2:d2:ab:0c:3b:80:5c:c4:0f:d4:7d:5b:da:27:5b: fc:51:f4:e1:92:13:2a:fe:d5:47:74:d0:dc:e2:37: 7d:05:25:dc:bb:57:59:4e:db:29:9f:9f:62:14:e6: 3c:de:16:b3:9a:6f:37:5e:7f:9d:03:76:22:7b:3a: 69:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:04:34:AB:7E:B0:08:71:75:DC:9F:B4:86:1A:7E:E0:6A:5E:3C:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl X509v3 Authority Key Identifier: keyid:C7:79:C1:DD:35:BC:68:51:32:59:6B:CF:57:81:3B:7D:C4:E3:24:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:81:fc:e2:a3:b6:8e:05:68:96:d2:c6:c6:ef:49:11:93:bf: ed:c5:9c:23:46:b7:41:0a:ca:08:32:6e:b7:f2:77:ea:d2:e0: 74:82:6c:8d:9d:78:5c:8c:c6:6c:0f:4d:94:15:80:9a:8b:3a: 10:f4:fc:f4:f8:25:d9:9c:df:f7:5f:f1:86:27:3e:50:78:6e: 44:0d:94:de:b7:9a:71:9d:b5:71:19:e5:5a:51:ab:6c:31:34: 43:25:6e:51:34:60:7d:37:67:8a:30:64:77:75:44:de:b2:d0: 6b:c5:61:ea:0f:33:78:5e:6d:15:f8:e9:35:a1:5e:d1:60:04: 3d:2b:53:85:2b:61:3e:ac:62:0b:7a:78:93:f2:78:6b:15:cc: f0:39:0a:aa:57:da:c3:35:55:f6:af:e6:47:3d:26:ba:1b:65: cb:47:e5:b6:93:ed:8c:e3:3f:a7:b8:d9:88:0a:11:f7:c4:48: 4b:58:69:59:85:3b:0e:04:8b:9a:d9:f8:b4:dc:bd:ce:80:fd: a5:ba:14:f3:50:38:94:f8:8d:83:36:86:f7:cc:a2:4f:ba:f9: 7c:e7:40:e5:5c:4e:ca:67:10:32:55:fb:3c:bd:6f:ba:22:ea: 1c:d0:f5:87:82:c4:af:30:1b:25:5d:b6:21:2b:a9:39:85:1d: 9f:dc:bf:7d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Ov2BFe5txVX5mR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyZDViODYtY2NhMC00ZjJhLTg3YTQtODc0ZjVlOTZl ZWQ4MB4XDTI2MDMyNzEzMDAwOVoXDTI2MDMzMDEzMDAwMFowLzEtMCsGA1UEAxMk N2MzNTczYmEtZDY0My00ODFkLTg1NWYtYjUxODZiMzlkMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG+/hJqR/IZfzhQtac7fE0Mtuqid34OV6G0c 6OxgzjBOAKULI6Sw1KAc4uyuGFMKR4akAm/e+e9GaANA6B8qdfzJGngzponQhxoR PMTmHPmedi2mukRqpGbIa+oVDPa6SjS7sdpOcKY3ZNWUOOOvs3BGCZ7e3X1Vq6My jsZ95BV9tWQRpaPr5m4JZjd/5GtbT/auKkJkd8SkPvDZagolcjK8bwMPM8OyYdZk mXgxuYtSqkl5dcbZ5DxDjFutFLqHVBvy0qsMO4BcxA/UfVvaJ1v8UfThkhMq/tVH dNDc4jd9BSXcu1dZTtspn59iFOY83hazmm83Xn+dA3Yiezpp3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAcENKt+sAhxddyftIYafuBqXjxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTJk NWI4Ni1jY2EwLTRmMmEtODdhNC04NzRmNWU5NmVlZDgvYmEyZDViODYtY2NhMC00 ZjJhLTg3YTQtODc0ZjVlOTZlZWQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmEyZDViODYtY2NhMC00ZjJhLTg3 YTQtODc0ZjVlOTZlZWQ4L2JhMmQ1Yjg2LWNjYTAtNGYyYS04N2E0LTg3NGY1ZTk2 ZWVkOC5jcmwwHwYDVR0jBBgwFoAUx3nB3TW8aFEyWWvPV4E7fcTjJM0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTJkNWI4Ni1jY2EwLTRmMmEtODdhNC04NzRm NWU5NmVlZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7gfzio7aOBWiW0sbG70kR k7/txZwjRrdBCsoIMm638nfq0uB0gmyNnXhcjMZsD02UFYCaizoQ9Pz0+CXZnN/3 X/GGJz5QeG5EDZTet5pxnbVxGeVaUatsMTRDJW5RNGB9N2eKMGR3dUTestBrxWHq DzN4Xm0V+Ok1oV7RYAQ9K1OFK2E+rGILeniT8nhrFczwOQqqV9rDNVX2r+ZHPSa6 G2XLR+W2k+2M4z+nuNmIChH3xEhLWGlZhTsOBIua2fi03L3OgP2luhTzUDiU+I2D Nob3zKJPuvl850DlXE7KZxAyVfs8vW+6Iuoc0PWHgsSvMBslXbYhK6k5hR2f3L99 -----END CERTIFICATE-----Generated at Sat Mar 28 10:41:07 2026 by rpki-client