$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft File: ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft (raw, json) Hash identifier: DIbC5iLjYxnXKYm4+d8h/KiukXt2umSCTrpHQOYYtr0= Subject key identifier: B3:1E:72:5A:C7:2B:AD:BE:F2:CF:3B:0D:4C:14:8E:A4:24:28:FA:2A Authority key identifier: 3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B Certificate issuer: /CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa Certificate serial: 010D0C9F4328584D49BED6C1F3D4DFF61C0A0A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft Manifest number: 010D0C9F4328584D179559AAF1C4B8CA92FCBB93 Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Sat 28 Mar 2026 18:00:00 +0000 Files and hashes: 1: ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl (hash: 1Hc/vQmX89DiTMPy73VMBwXEKg+yGEp93af15bHsV7s=) 2: d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa (hash: 8gpgCNzRMisxjQOCjflXcyCYs4tZ5gvgNz641Fd69YM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d6:c1:f3:d4:df:f6:1c:0a:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 28 18:00:00 2026 GMT Subject: CN=dc65e463-8f4d-4e2b-983c-31007be6fff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:5a:9d:c4:82:5f:80:af:05:ce:ed:ca:b1: 6c:0d:5b:ec:3f:11:fb:15:74:10:2e:26:43:89:06: 9b:a2:eb:33:e6:b4:9e:d4:52:42:cb:aa:1d:79:fa: a8:25:94:d2:c8:6d:85:7a:5d:a5:d4:37:48:d0:8e: c2:72:86:11:d8:09:4e:2a:a5:d5:c3:62:54:af:d2: dc:eb:ac:0c:cf:eb:36:ec:87:8f:cf:a3:ff:28:cc: 07:49:2f:7f:bb:e5:fd:fd:e2:18:4b:46:a4:d9:14: 5d:1e:1c:6a:7f:b9:66:5e:11:0a:89:aa:a7:dc:4a: 3a:e0:ae:bc:15:c4:0a:af:eb:fc:39:e7:5f:96:ef: d4:85:12:20:55:8c:0e:f2:cf:80:02:24:6e:d8:12: b2:90:6b:b2:96:bf:e7:45:e8:6d:00:0b:97:27:99: 00:0d:49:ee:a6:3a:70:ae:cb:7b:80:76:ad:a1:0d: 3a:05:29:59:30:a6:31:6a:50:5e:08:49:31:6a:81: 9f:03:bb:87:f4:af:a0:cf:27:25:13:b2:24:f6:24: ae:6a:cf:ff:2e:ab:b4:44:67:29:39:6d:42:a0:a2: c9:bb:e1:6a:9e:3d:3a:83:da:57:da:17:4e:de:06: 14:73:79:e0:a6:d5:a2:a6:82:0c:94:9d:d7:94:eb: d2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1E:72:5A:C7:2B:AD:BE:F2:CF:3B:0D:4C:14:8E:A4:24:28:FA:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl X509v3 Authority Key Identifier: keyid:3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:db:2f:36:08:66:72:f1:85:ff:15:eb:68:db:a1:e1:c3:e9: 87:44:11:cd:12:75:52:9e:75:ce:db:93:8a:30:60:3a:3c:f5: 0e:2b:dd:cb:e3:89:f4:7c:77:3e:af:96:b7:34:7d:88:8b:69: a4:72:9b:34:74:e1:34:77:ab:67:9d:46:ad:46:6a:1b:cc:d3: 0d:82:ee:7d:f6:01:4e:6d:67:d8:1a:36:1e:06:58:1d:77:ab: 14:1e:27:90:86:d9:52:d5:e8:3c:20:f3:d8:f0:09:61:bb:66: d6:a8:21:28:37:ed:36:e9:cd:7a:71:b6:d8:2e:5e:20:43:3e: a1:11:e5:e3:7b:ec:33:de:1b:fd:47:d1:d2:9e:24:8e:f5:d4: 32:80:74:55:5e:ae:21:34:db:7f:0a:9d:5f:a8:dc:70:b4:35: 2f:4a:fc:8e:b2:67:63:70:6f:8e:78:62:af:29:da:23:f7:ff: 8d:b9:1e:80:69:4f:8e:e5:c9:59:fb:a2:44:a8:4f:78:55:62: 17:89:74:aa:f0:fc:fe:0e:39:5e:3e:59:a5:0b:15:4c:35:4e: 2e:b3:d4:7d:d7:be:8b:d5:2f:9e:e9:7f:a8:77:61:3a:d3:39: b9:95:e0:e1:c5:88:fb:5a:65:20:06:e1:cb:0b:a5:bf:32:4d: d2:6a:4f:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JvtbB89Tf9hwKCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNzFkYTEtY2Q3NC00NmJkLTgyYTgtZGU3YjlmN2E5 ZmZhMB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyODE4MDAwMFowLzEtMCsGA1UEAxMk ZGM2NWU0NjMtOGY0ZC00ZTJiLTk4M2MtMzEwMDdiZTZmZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn19ancSCX4CvBc7tyrFsDVvsPxH7FXQQLiZD iQabousz5rSe1FJCy6odefqoJZTSyG2Fel2l1DdI0I7CcoYR2AlOKqXVw2JUr9Lc 66wMz+s27IePz6P/KMwHSS9/u+X9/eIYS0ak2RRdHhxqf7lmXhEKiaqn3Eo64K68 FcQKr+v8Oedflu/UhRIgVYwO8s+AAiRu2BKykGuylr/nRehtAAuXJ5kADUnupjpw rst7gHatoQ06BSlZMKYxalBeCEkxaoGfA7uH9K+gzyclE7Ik9iSuas//Lqu0RGcp OW1CoKLJu+Fqnj06g9pX2hdO3gYUc3ngptWipoIMlJ3XlOvSEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLMeclrHK62+8s87DUwUjqQkKPoqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYTM3 MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdiOWY3YTlmZmEvYmEzNzFkYTEtY2Q3NC00 NmJkLTgyYTgtZGU3YjlmN2E5ZmZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYmEzNzFkYTEtY2Q3NC00NmJkLTgy YTgtZGU3YjlmN2E5ZmZhL2JhMzcxZGExLWNkNzQtNDZiZC04MmE4LWRlN2I5Zjdh OWZmYS5jcmwwHwYDVR0jBBgwFoAUPS1g9kIqBBqhhHqFtla9D8pKmUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYTM3MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdi OWY3YTlmZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBS2y82CGZy8YX/Feto26Hh w+mHRBHNEnVSnnXO25OKMGA6PPUOK93L44n0fHc+r5a3NH2Ii2mkcps0dOE0d6tn nUatRmobzNMNgu599gFObWfYGjYeBlgdd6sUHieQhtlS1eg8IPPY8Alhu2bWqCEo N+026c16cbbYLl4gQz6hEeXje+wz3hv9R9HSniSO9dQygHRVXq4hNNt/Cp1fqNxw tDUvSvyOsmdjcG+OeGKvKdoj9/+NuR6AaU+O5clZ+6JEqE94VWIXiXSq8Pz+Djle PlmlCxVMNU4us9R9176L1S+e6X+od2E60zm5leDhxYj7WmUgBuHLC6W/Mk3Sak9R -----END CERTIFICATE-----Generated at Thu Mar 26 00:21:46 2026 by rpki-client