$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.mft File: ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.mft (raw, json) Hash identifier: innc2C6MgfRVpg7JNrGJsFa43BMuphRRpFPErRvR3Fs= Subject key identifier: 50:5D:60:37:64:00:AF:70:7C:07:5F:FD:7E:B0:A7:74:31:CA:CD:F1 Authority key identifier: C7:79:C1:DD:35:BC:68:51:32:59:6B:CF:57:81:3B:7D:C4:E3:24:CD Certificate issuer: /CN=ba2d5b86-cca0-4f2a-87a4-874f5e96eed8 Certificate serial: 010D0C9F4328584B92DC8D3D180A6F711A8E60B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.mft Manifest number: 010D0C9F4328584902E2AE05CC9C241EE1EA106F Signing time: Sun 19 Oct 2025 13:00:03 +0000 Manifest this update: Sun 19 Oct 2025 13:00:03 +0000 Manifest next update: Tue 21 Oct 2025 13:00:00 +0000 Files and hashes: 1: 5094b170-7783-383b-add6-8db0ea7f91ad.roa (hash: 7XbC4F3KRIfnufEzRoOlGL2SxzsdlwGAbOEswGVAE9s=) 2: ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl (hash: mMMBu6bOgFgwNOUTsHHGAvpdeobkDdgUKGM4ZsGsx3A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:8d:3d:18:0a:6f:71:1a:8e:60:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2d5b86-cca0-4f2a-87a4-874f5e96eed8 Validity Not Before: Oct 19 13:00:03 2025 GMT Not After : Oct 21 13:00:00 2025 GMT Subject: CN=7824d6ca-712e-4cd3-bce5-60da6b63cd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:b4:11:bd:cf:f3:19:21:62:75:92:ce:f3: 61:63:ed:6c:fc:26:a6:29:39:86:c9:61:33:1e:78: 64:85:3d:d9:cf:9d:7d:ee:a3:32:05:af:f1:b7:ca: b0:28:4b:d5:57:e5:b9:d4:2d:d2:96:67:79:b8:27: cf:a5:f9:80:cd:d8:ba:86:b5:da:2e:4a:6d:8d:a8: 4d:d2:53:27:66:80:61:1c:50:19:30:13:50:f0:cc: c9:45:39:02:f3:b4:2a:7f:38:f3:aa:72:92:35:83: 4d:b8:3a:1e:8b:d4:8c:2a:b2:4d:3b:96:9c:49:67: 29:6c:b9:b7:ce:9b:e0:87:dc:83:a3:61:86:f1:b7: cf:48:ba:38:a4:2f:3a:d5:bd:1a:6d:90:6b:51:a6: 9f:f7:30:b0:b6:69:fa:1d:61:7b:0c:b9:41:92:be: 1d:b3:e5:cc:dc:56:1c:a6:01:78:30:1b:02:f7:b6: 3b:f8:40:6d:22:d4:da:a9:2e:8d:72:ce:93:79:7d: 42:2d:3e:ac:d3:cf:b1:b7:aa:f5:68:a8:db:e8:c4: 8b:6a:6a:8b:50:5e:25:41:c5:f9:db:4e:8c:1f:2d: 17:f8:9b:8f:f6:3e:8a:4f:52:97:e3:3d:9e:dc:fc: 88:64:b2:9c:a4:40:b7:ca:83:b8:c1:a5:f9:31:05: 8e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5D:60:37:64:00:AF:70:7C:07:5F:FD:7E:B0:A7:74:31:CA:CD:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl X509v3 Authority Key Identifier: keyid:C7:79:C1:DD:35:BC:68:51:32:59:6B:CF:57:81:3B:7D:C4:E3:24:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ec:28:9b:8e:9e:38:e8:63:cf:fd:9e:17:fb:56:23:4b:cc: 9c:f9:d9:1d:68:cc:5d:2a:38:84:71:10:05:ca:a6:3c:a0:32: f4:80:3f:d5:d4:92:ec:ec:c3:d2:40:ff:7d:c5:46:32:cb:e6: 13:61:f6:e2:fb:c2:38:96:93:b3:c3:fe:92:ec:2e:7f:cd:ec: 5a:16:1c:d4:a2:f9:b9:cf:08:c1:74:07:e4:67:2d:fb:30:ca: 7f:71:d3:56:b5:b8:4b:82:be:f1:8e:c4:97:c0:f5:71:b5:a4: 9b:9c:b5:21:46:74:36:41:77:f6:bb:8f:7d:2e:a2:2c:d1:1e: 15:e9:d5:0c:17:e5:9a:4e:e5:40:7c:68:b3:2e:ef:17:cb:00: df:2a:b5:62:4b:c5:67:0e:a9:17:93:22:f1:66:6b:c9:00:ae: 7b:cc:79:d4:a7:9c:29:43:2f:bf:4b:4c:d7:00:72:b4:ef:a5: ef:e0:49:12:61:5f:a8:ee:99:9f:70:9f:2c:1c:34:d9:4e:e7: 21:74:01:5b:83:b7:b3:cd:2a:f0:a2:53:05:dd:fd:1c:6b:92: e9:b9:ac:7c:79:03:53:9a:c4:c4:f3:34:82:14:a5:8d:26:b1: 76:2f:d1:a5:36:81:37:df:c2:7d:71:95:cc:d7:e7:d4:a8:8c: 6c:32:67:aa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuS3I09GApvcRqOYLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyZDViODYtY2NhMC00ZjJhLTg3YTQtODc0ZjVlOTZl ZWQ4MB4XDTI1MTAxOTEzMDAwM1oXDTI1MTAyMTEzMDAwMFowLzEtMCsGA1UEAxMk NzgyNGQ2Y2EtNzEyZS00Y2QzLWJjZTUtNjBkYTZiNjNjZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+C0Eb3P8xkhYnWSzvNhY+1s/CamKTmGyWEz HnhkhT3Zz5197qMyBa/xt8qwKEvVV+W51C3Slmd5uCfPpfmAzdi6hrXaLkptjahN 0lMnZoBhHFAZMBNQ8MzJRTkC87QqfzjzqnKSNYNNuDoei9SMKrJNO5acSWcpbLm3 zpvgh9yDo2GG8bfPSLo4pC861b0abZBrUaaf9zCwtmn6HWF7DLlBkr4ds+XM3FYc pgF4MBsC97Y7+EBtItTaqS6Ncs6TeX1CLT6s08+xt6r1aKjb6MSLamqLUF4lQcX5 206MHy0X+JuP9j6KT1KX4z2e3PyIZLKcpEC3yoO4waX5MQWOdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFBdYDdkAK9wfAdf/X6wp3Qxys3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTJk NWI4Ni1jY2EwLTRmMmEtODdhNC04NzRmNWU5NmVlZDgvYmEyZDViODYtY2NhMC00 ZjJhLTg3YTQtODc0ZjVlOTZlZWQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmEyZDViODYtY2NhMC00ZjJhLTg3 YTQtODc0ZjVlOTZlZWQ4L2JhMmQ1Yjg2LWNjYTAtNGYyYS04N2E0LTg3NGY1ZTk2 ZWVkOC5jcmwwHwYDVR0jBBgwFoAUx3nB3TW8aFEyWWvPV4E7fcTjJM0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTJkNWI4Ni1jY2EwLTRmMmEtODdhNC04NzRm NWU5NmVlZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAm7Cibjp446GPP/Z4X+1Yj S8yc+dkdaMxdKjiEcRAFyqY8oDL0gD/V1JLs7MPSQP99xUYyy+YTYfbi+8I4lpOz w/6S7C5/zexaFhzUovm5zwjBdAfkZy37MMp/cdNWtbhLgr7xjsSXwPVxtaSbnLUh RnQ2QXf2u499LqIs0R4V6dUMF+WaTuVAfGizLu8XywDfKrViS8VnDqkXkyLxZmvJ AK57zHnUp5wpQy+/S0zXAHK076Xv4EkSYV+o7pmfcJ8sHDTZTuchdAFbg7ezzSrw olMF3f0ca5Lpuax8eQNTmsTE8zSCFKWNJrF2L9GlNoE338J9cZXM1+fUqIxsMmeq -----END CERTIFICATE-----Generated at Mon Oct 20 10:29:35 2025 by rpki-client