$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.mft File: ba2a056d-e4f4-44a7-ab61-c69845114d88.mft (raw, json) Hash identifier: eJRA4sGCmG5nWngDOmn016wSOEZIi3JFQa+2eA7zZtE= Subject key identifier: 93:25:A4:26:23:D0:71:BD:A2:28:A2:77:C9:CA:63:76:11:AC:76:FF Authority key identifier: F7:AE:DB:6D:A1:27:06:97:FD:CC:21:56:10:C9:71:E4:B2:11:BA:06 Certificate issuer: /CN=ba2a056d-e4f4-44a7-ab61-c69845114d88 Certificate serial: 010D0C9F4328584D4FAD97E49CDFA093A23D6A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.mft Manifest number: 010D0C9F4328584A6EC2D1D80DB1CD6607DFD2C9 Signing time: Fri 27 Mar 2026 21:00:09 +0000 Manifest this update: Fri 27 Mar 2026 21:00:09 +0000 Manifest next update: Mon 30 Mar 2026 21:00:00 +0000 Files and hashes: 1: 4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc.cer (hash: CBle/dqPkBP4Qf4eWWtD6w0xKTjifM+jhdZA5mBcYLY=) 2: ba2a056d-e4f4-44a7-ab61-c69845114d88.crl (hash: cQEkz2M5s8KZyX9F59t1c81mtP/VvC0BuuQ7I1z7dWg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4f:ad:97:e4:9c:df:a0:93:a2:3d:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2a056d-e4f4-44a7-ab61-c69845114d88 Validity Not Before: Mar 27 21:00:09 2026 GMT Not After : Mar 30 21:00:00 2026 GMT Subject: CN=80e33255-861e-49e4-bb5e-8623b7e5cdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f5:04:da:d1:4f:4c:a7:59:f2:15:b2:78:06: 12:0e:42:42:05:03:a8:97:68:d6:c4:69:87:e1:b4: 3a:98:71:9e:d9:ff:a8:6f:30:b5:92:b0:c9:2b:d8: 9e:7c:e3:c1:c4:5e:65:58:00:ff:12:af:4d:37:02: 22:bd:90:cd:71:28:cd:a4:c2:85:35:ed:ae:af:74: 14:85:36:60:d1:3b:4c:72:ec:69:bb:27:d2:09:8c: 97:24:8e:71:5a:6a:99:01:bc:29:09:93:74:83:2d: bc:56:31:d5:0f:70:c3:c7:70:62:5c:9b:81:f3:b9: bf:02:78:05:1d:bd:7e:46:dc:58:e8:94:5c:e2:0c: f4:ef:48:cc:c4:63:3c:36:5e:2d:06:cd:c1:90:d3: 33:47:23:7b:c0:5e:72:91:4b:e6:8b:d2:74:6a:db: 07:51:af:62:64:56:19:90:b2:0d:26:14:3e:2f:67: b7:61:11:01:53:18:a2:c9:7d:a6:6f:fd:ba:3d:3d: fb:5b:16:4d:13:cb:f4:56:29:63:47:f8:3e:4e:d1: 93:43:5c:f5:21:8f:de:ef:c9:5d:2c:22:5b:2a:7a: 46:bf:c1:42:03:a4:39:15:da:06:5c:42:77:61:c2: 36:e6:9f:b6:bb:0d:76:3f:b0:cc:a7:11:f6:07:b1: 32:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:25:A4:26:23:D0:71:BD:A2:28:A2:77:C9:CA:63:76:11:AC:76:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.crl X509v3 Authority Key Identifier: keyid:F7:AE:DB:6D:A1:27:06:97:FD:CC:21:56:10:C9:71:E4:B2:11:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:38:c9:fb:30:a6:6a:97:38:0e:7e:45:bb:64:b4:c1:0b:00: e0:9c:c8:f7:bb:4a:0a:62:81:83:29:fc:26:ce:87:f7:45:a6: b2:35:43:57:7f:9f:9f:f8:0f:43:f5:69:64:37:1b:ee:70:ca: 84:d0:3b:1d:a6:e5:25:a0:59:f6:b8:31:ac:ad:02:79:99:70: 1d:c6:eb:c1:21:99:ee:19:fd:8b:4a:05:c3:70:8a:e7:69:bd: 99:d5:dc:d1:0f:8f:fa:12:0a:91:8e:8c:8f:07:f0:17:e9:b9: 7e:48:b7:30:48:03:e5:83:d4:62:5c:f9:e0:d1:fd:e9:7c:19: 92:f4:45:c9:68:1a:29:97:3b:a9:65:60:7d:bc:7b:9f:3d:bf: 17:c1:70:87:d8:69:4f:cc:19:2a:54:83:59:25:a4:96:d2:18: b9:df:e1:64:88:02:78:c9:67:30:65:ad:23:5d:6a:85:00:e6: d1:5c:68:eb:eb:c0:0e:13:a0:11:60:20:ff:19:79:1a:fc:c0: 19:91:81:e0:23:d9:de:fb:c0:90:a3:8f:75:88:67:19:77:1c: bd:ee:c8:98:2a:65:24:0a:c4:82:3b:ce:0c:fa:e6:4d:27:b6: 45:f3:68:44:5b:17:1c:f1:7b:e4:76:40:96:a9:98:89:55:32: 60:40:f7:ab -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1PrZfknN+gk6I9agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyYTA1NmQtZTRmNC00NGE3LWFiNjEtYzY5ODQ1MTE0 ZDg4MB4XDTI2MDMyNzIxMDAwOVoXDTI2MDMzMDIxMDAwMFowLzEtMCsGA1UEAxMk ODBlMzMyNTUtODYxZS00OWU0LWJiNWUtODYyM2I3ZTVjZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfUE2tFPTKdZ8hWyeAYSDkJCBQOol2jWxGmH 4bQ6mHGe2f+obzC1krDJK9iefOPBxF5lWAD/Eq9NNwIivZDNcSjNpMKFNe2ur3QU hTZg0TtMcuxpuyfSCYyXJI5xWmqZAbwpCZN0gy28VjHVD3DDx3BiXJuB87m/AngF Hb1+RtxY6JRc4gz070jMxGM8Nl4tBs3BkNMzRyN7wF5ykUvmi9J0atsHUa9iZFYZ kLINJhQ+L2e3YREBUxiiyX2mb/26PT37WxZNE8v0ViljR/g+TtGTQ1z1IY/e78ld LCJbKnpGv8FCA6Q5FdoGXEJ3YcI25p+2uw12P7DMpxH2B7EyTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJMlpCYj0HG9oiiid8nKY3YRrHb/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTJh MDU2ZC1lNGY0LTQ0YTctYWI2MS1jNjk4NDUxMTRkODgvYmEyYTA1NmQtZTRmNC00 NGE3LWFiNjEtYzY5ODQ1MTE0ZDg4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmEyYTA1NmQtZTRmNC00NGE3LWFi NjEtYzY5ODQ1MTE0ZDg4L2JhMmEwNTZkLWU0ZjQtNDRhNy1hYjYxLWM2OTg0NTEx NGQ4OC5jcmwwHwYDVR0jBBgwFoAU967bbaEnBpf9zCFWEMlx5LIRugYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTJhMDU2ZC1lNGY0LTQ0YTctYWI2MS1jNjk4 NDUxMTRkODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApOMn7MKZqlzgOfkW7ZLTB CwDgnMj3u0oKYoGDKfwmzof3RaayNUNXf5+f+A9D9WlkNxvucMqE0DsdpuUloFn2 uDGsrQJ5mXAdxuvBIZnuGf2LSgXDcIrnab2Z1dzRD4/6EgqRjoyPB/AX6bl+SLcw SAPlg9RiXPng0f3pfBmS9EXJaBoplzupZWB9vHufPb8XwXCH2GlPzBkqVINZJaSW 0hi53+FkiAJ4yWcwZa0jXWqFAObRXGjr68AOE6ARYCD/GXka/MAZkYHgI9ne+8CQ o491iGcZdxy97siYKmUkCsSCO84M+uZNJ7ZF82hEWxcc8XvkdkCWqZiJVTJgQPer -----END CERTIFICATE-----Generated at Sat Mar 28 12:14:21 2026 by rpki-client