$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft File: ba5e814e-0ab8-4257-8c39-4091cb3be269.mft (raw, json) Hash identifier: iHtnQU1HDySwI2cxTEtw6VMxg412qP30BAHE/ujZAHw= Subject key identifier: 2B:7E:94:AD:4A:F2:4B:22:10:6C:8C:2D:47:A0:F3:3B:17:05:C9:15 Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584D4B7D835995403419E0024440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft Manifest number: 010D0C9F4328584AEAF04E87036ADC5F9026D5E2 Signing time: Thu 26 Mar 2026 09:00:04 +0000 Manifest this update: Thu 26 Mar 2026 09:00:04 +0000 Manifest next update: Sun 29 Mar 2026 09:00:00 +0000 Files and hashes: 1: 2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa (hash: O8Zir86LF+Z4GcqRdFvsRPOyk/Mch5TLtE+q4v5y1x0=) 2: ba5e814e-0ab8-4257-8c39-4091cb3be269.crl (hash: /qf1sCC40zjU7muSmQ9v4893RcJwgPYT7GZ94NLE58Q=) 3: c06a09fc-2584-35b2-be4c-9069314d842e.roa (hash: CsvrMxmMXOo1WH34A9m2HaD8Wg2CWSNxCwMO+U3FSp0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:7d:83:59:95:40:34:19:e0:02:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Mar 26 09:00:04 2026 GMT Not After : Mar 29 09:00:00 2026 GMT Subject: CN=9cbf404d-c3eb-4013-88ac-dfa6a512b25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ce:ef:6d:39:a2:3a:dd:e9:e4:27:71:1c:63: bf:55:f9:f7:49:42:d5:7b:57:e6:73:11:ae:7f:dd: c5:18:f5:70:7a:91:66:18:43:c3:71:65:03:fb:41: 80:d7:b6:d9:ed:fa:c0:dd:30:4f:72:01:72:2f:87: 5e:6c:e8:b4:3a:75:d7:2d:e0:8c:63:69:eb:e7:64: bc:1a:8f:c8:91:5b:a7:90:ff:35:de:95:2d:d7:8d: 44:64:23:49:59:37:b7:30:14:c8:8c:2f:d4:4a:a6: 80:8c:de:51:b7:a2:6e:9f:d2:be:85:b1:c1:02:0f: fc:d8:07:34:6b:0b:6b:b2:9a:dd:34:ea:55:77:44: 55:83:99:07:4d:05:2c:78:d4:16:fb:b5:6a:62:42: 27:2b:19:b9:7a:f0:3f:62:16:de:fd:23:24:47:3e: 6b:8f:0f:10:e4:59:2c:21:e6:13:b5:c4:07:90:20: 86:a7:ef:55:e1:25:fb:8c:e3:e4:34:05:cf:5c:b6: 37:2d:09:97:88:fd:19:6b:97:8c:ec:ad:d9:79:04: 9b:89:01:ac:99:ab:59:58:3d:69:4f:72:ec:18:a8: 50:10:1a:de:53:66:5d:1b:9c:dd:1e:80:1e:52:60: 25:21:04:5c:9f:ea:78:4e:ab:70:82:a0:f3:e2:2a: 58:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7E:94:AD:4A:F2:4B:22:10:6C:8C:2D:47:A0:F3:3B:17:05:C9:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:ec:81:11:f2:c0:a4:5b:8c:79:dd:77:6b:02:e2:e5:6c:7f: c6:ba:dc:3d:2b:ee:87:65:4f:eb:fb:6f:8f:64:61:f3:6b:c4: 8d:66:79:8f:c4:8d:e9:21:ce:f8:91:a4:b5:41:4a:9f:d3:b8: fb:75:ec:79:c4:c7:b8:df:38:57:c3:95:4e:ae:46:fe:0b:d1: 87:f8:df:8c:81:bf:16:7d:2d:de:e3:5b:34:80:e9:47:aa:e6: b3:a9:e1:10:82:5a:54:da:2f:4e:b7:7e:a6:28:63:e6:3f:97: 6e:95:3d:10:09:03:df:69:7d:4f:f4:44:6b:d6:11:27:cf:e0: a2:a6:9d:2e:ca:6c:c2:74:62:ba:9a:48:9b:6d:06:c5:0f:f0: e2:71:f6:de:f0:e9:57:f2:cf:c2:19:a3:96:14:1d:39:b8:b0: a6:8f:bd:ff:0d:53:0d:10:08:af:7b:eb:2f:86:45:3f:8e:f9: 32:c9:dc:f9:62:d7:f1:ad:ad:89:86:83:55:1f:4d:c3:19:95: 16:53:55:7a:ca:0b:df:e1:f1:ad:06:ed:e0:59:50:a2:d9:a2: c5:b8:12:bb:0c:e3:b1:79:d7:b3:60:3d:5d:ac:b7:82:82:a4: 0e:7f:ba:8d:a8:fa:28:6e:cd:6d:b9:ab:b3:84:f3:59:a0:ea: 97:b0:e6:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LfYNZlUA0GeACREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI2MDMyNjA5MDAwNFoXDTI2MDMyOTA5MDAwMFowLzEtMCsGA1UEAxMk OWNiZjQwNGQtYzNlYi00MDEzLTg4YWMtZGZhNmE1MTJiMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc7vbTmiOt3p5CdxHGO/Vfn3SULVe1fmcxGu f93FGPVwepFmGEPDcWUD+0GA17bZ7frA3TBPcgFyL4debOi0OnXXLeCMY2nr52S8 Go/IkVunkP813pUt141EZCNJWTe3MBTIjC/USqaAjN5Rt6Jun9K+hbHBAg/82Ac0 awtrsprdNOpVd0RVg5kHTQUseNQW+7VqYkInKxm5evA/Yhbe/SMkRz5rjw8Q5Fks IeYTtcQHkCCGp+9V4SX7jOPkNAXPXLY3LQmXiP0Za5eM7K3ZeQSbiQGsmatZWD1p T3LsGKhQEBreU2ZdG5zdHoAeUmAlIQRcn+p4TqtwgqDz4ipYuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCt+lK1K8ksiEGyMLUeg8zsXBckVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvYmE1ZTgxNGUtMGFiOC00 MjU3LThjMzktNDA5MWNiM2JlMjY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCa7IER8sCkW4x53XdrAuLl bH/Gutw9K+6HZU/r+2+PZGHza8SNZnmPxI3pIc74kaS1QUqf07j7dex5xMe43zhX w5VOrkb+C9GH+N+Mgb8WfS3e41s0gOlHquazqeEQglpU2i9Ot36mKGPmP5dulT0Q CQPfaX1P9ERr1hEnz+Cipp0uymzCdGK6mkibbQbFD/Dicfbe8OlX8s/CGaOWFB05 uLCmj73/DVMNEAive+svhkU/jvkyydz5Ytfxra2JhoNVH03DGZUWU1V6ygvf4fGt Bu3gWVCi2aLFuBK7DOOxedezYD1drLeCgqQOf7qNqPoobs1tuauzhPNZoOqXsOZh -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:27 2026 by rpki-client