$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft File: ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft (raw, json) Hash identifier: 6cK5XIjO+rhouSoL2ZkNE4hk3P7CAGGRZRXI0W4Nh3A= Subject key identifier: 9E:B3:36:03:42:35:3D:FE:62:68:00:64:29:BC:70:58:DC:C3:01:B0 Authority key identifier: A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 Certificate issuer: /CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Certificate serial: 010D0C9F4328584F7782FD3C615B6879F75EF970 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft Manifest number: 010D0C9F4328584073A8555E8FD3615D57A33F10 Signing time: Sun 11 Oct 2026 13:00:24 +0000 Manifest this update: Sun 11 Oct 2026 13:00:24 +0000 Manifest next update: Wed 14 Oct 2026 13:00:00 +0000 Files and hashes: 1: 14516a78-5003-3ee4-a230-723f4f86845d.roa (hash: /JmXb4HchvcZ3FG6SrX3oeIKHASJeVaVs7QeQjfI84c=) 2: ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl (hash: +vKnXaGCKZmtecHaTl2FTqFLJPj3NLT8yGe1t2qV+xc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:fd:3c:61:5b:68:79:f7:5e:f9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Validity Not Before: Oct 11 13:00:24 2026 GMT Not After : Oct 14 13:00:00 2026 GMT Subject: CN=28e7f116-08ea-4120-9136-f599fca0117e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e0:b4:b3:ae:5f:0d:bc:d1:8a:0b:e0:69:32: 57:45:e3:74:6d:90:d4:cf:62:21:ee:86:ac:17:68: 1c:06:ec:85:8d:6c:16:c0:37:f7:f8:a6:6a:b6:3b: d6:7f:33:1e:9a:0e:df:4e:35:7d:98:22:17:38:ec: 7c:1c:f4:7d:5e:d1:95:58:56:69:5a:f0:91:6d:29: 6c:f3:9b:ee:e2:7e:41:ad:05:c0:6e:7e:11:95:8e: 13:39:9b:c0:a8:ca:34:b1:bd:ea:98:5a:4b:b9:de: 29:8c:c8:aa:f5:ee:d9:6d:af:02:bf:17:2b:70:d8: f6:86:03:67:d4:c3:16:ea:36:49:e5:f7:3c:e5:a5: b7:a7:50:46:66:55:c2:b2:85:55:d1:46:ce:cc:01: c0:77:57:47:09:11:9a:54:68:ac:1c:14:47:9e:1a: 1e:c0:b0:6f:21:b9:b7:a7:58:9c:5f:06:a3:78:84: 6d:7d:40:6c:0f:1e:4e:ed:18:7b:04:1b:9c:02:5e: be:d1:43:b9:94:09:83:91:dd:ea:b0:fa:e0:29:7d: e0:8a:47:22:9c:fc:5c:d5:16:0c:22:53:96:24:d9: 35:c1:b1:7f:5c:cd:e0:62:f7:ac:f1:6c:9d:88:75: a9:69:25:6d:81:2f:28:a4:92:88:f5:2c:af:b5:64: 9c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B3:36:03:42:35:3D:FE:62:68:00:64:29:BC:70:58:DC:C3:01:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl X509v3 Authority Key Identifier: keyid:A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:03:74:88:5a:3c:1b:aa:4a:92:68:10:d2:18:a8:0f:d1:47: 2a:ec:4c:8e:61:8d:b5:a5:41:92:0d:56:16:4c:b2:eb:a5:da: 77:24:83:5a:13:90:6e:74:1b:ad:e5:ec:4b:93:2f:fc:bb:b9: c3:a1:2c:69:9f:12:8d:b5:4a:3d:8e:4a:90:d8:02:03:3d:5d: 9f:91:cd:09:44:70:dc:28:f9:c6:be:ee:de:d8:ab:4f:15:e9: f8:1c:30:94:7d:eb:e4:90:92:e5:50:c9:cc:3c:50:4d:75:b5: 6a:97:8b:d2:9f:07:81:05:9c:4a:2e:f0:8d:0f:78:5b:89:9b: 52:ea:b6:91:d2:da:d3:10:fc:6a:b3:aa:55:cb:4a:71:01:21: 0e:b4:fe:fb:68:94:4c:71:6e:31:52:d7:c3:ee:bf:e6:2d:e0: 91:1a:7f:b5:f8:a2:56:d6:a4:90:37:a8:5e:70:0b:8e:c5:e6: 15:95:a2:f6:4a:a4:e3:99:63:a1:6b:e5:0c:a2:73:a1:26:5d: 55:21:7e:45:d7:7a:18:4b:b8:bd:f7:ed:48:5b:31:c5:db:77: 6d:60:80:f1:91:1e:01:33:29:d5:67:83:55:50:d5:a2:6f:5f: 49:59:8c:5b:40:8f:95:9d:14:94:fd:51:51:9f:e9:3c:45:d0: a8:55:6b:57 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE93gv08YVtoefde+XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0MzRmYjMtMTQ2Yi00YmM1LWE4Y2QtMzhkZGYxNjAz NDcwMB4XDTI2MTAxMTEzMDAyNFoXDTI2MTAxNDEzMDAwMFowLzEtMCsGA1UEAxMk MjhlN2YxMTYtMDhlYS00MTIwLTkxMzYtZjU5OWZjYTAxMTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOC0s65fDbzRigvgaTJXReN0bZDUz2Ih7oas F2gcBuyFjWwWwDf3+KZqtjvWfzMemg7fTjV9mCIXOOx8HPR9XtGVWFZpWvCRbSls 85vu4n5BrQXAbn4RlY4TOZvAqMo0sb3qmFpLud4pjMiq9e7Zba8CvxcrcNj2hgNn 1MMW6jZJ5fc85aW3p1BGZlXCsoVV0UbOzAHAd1dHCRGaVGisHBRHnhoewLBvIbm3 p1icXwajeIRtfUBsDx5O7Rh7BBucAl6+0UO5lAmDkd3qsPrgKX3gikcinPxc1RYM IlOWJNk1wbF/XM3gYves8WydiHWpaSVtgS8opJKI9SyvtWScYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ6zNgNCNT3+YmgAZCm8cFjcwwGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQz NGZiMy0xNDZiLTRiYzUtYThjZC0zOGRkZjE2MDM0NzAvYmE0MzRmYjMtMTQ2Yi00 YmM1LWE4Y2QtMzhkZGYxNjAzNDcwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmE0MzRmYjMtMTQ2Yi00YmM1LWE4 Y2QtMzhkZGYxNjAzNDcwL2JhNDM0ZmIzLTE0NmItNGJjNS1hOGNkLTM4ZGRmMTYw MzQ3MC5jcmwwHwYDVR0jBBgwFoAUoeMQKTisZ5ja3PARTsG3ZHFaIQQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQzNGZiMy0xNDZiLTRiYzUtYThjZC0zOGRk ZjE2MDM0NzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhA3SIWjwbqkqSaBDSGKgP 0Ucq7EyOYY21pUGSDVYWTLLrpdp3JINaE5BudBut5exLky/8u7nDoSxpnxKNtUo9 jkqQ2AIDPV2fkc0JRHDcKPnGvu7e2KtPFen4HDCUfevkkJLlUMnMPFBNdbVql4vS nweBBZxKLvCND3hbiZtS6raR0trTEPxqs6pVy0pxASEOtP77aJRMcW4xUtfD7r/m LeCRGn+1+KJW1qSQN6hecAuOxeYVlaL2SqTjmWOha+UMonOhJl1VIX5F13oYS7i9 9+1IWzHF23dtYIDxkR4BMynVZ4NVUNWib19JWYxbQI+VnRSU/VFRn+k8RdCoVWtX -----END CERTIFICATE-----Generated at Sun Oct 11 18:29:55 2026 by rpki-client