$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/ba63cc08-daec-4944-82e6-c294a3caa982.mft File: ba63cc08-daec-4944-82e6-c294a3caa982.mft (raw, json) Hash identifier: hE8kPNGlTTcKFUJ7iSgMuzU71Cgr9S7aLg8cihjBoI8= Subject key identifier: 1E:22:77:AA:A4:B8:6E:5B:36:6E:A4:63:DE:F9:80:23:27:BE:2D:4A Authority key identifier: 7B:21:57:13:1B:DA:80:AD:2A:A4:E9:5E:34:0E:65:31:F8:2B:14:58 Certificate issuer: /CN=ba63cc08-daec-4944-82e6-c294a3caa982 Certificate serial: 010D0C9F4328584F42D150ED22FDB3C219A88E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/ba63cc08-daec-4944-82e6-c294a3caa982.mft Manifest number: 010D0C9F4328584E717EE2C6AB592760DC5899D3 Signing time: Tue 22 Sep 2026 16:00:24 +0000 Manifest this update: Tue 22 Sep 2026 16:00:24 +0000 Manifest next update: Thu 24 Sep 2026 16:00:00 +0000 Files and hashes: 1: 68adb526-7ee2-3bdd-af13-e05e41fedf40.roa (hash: 98P+i4cpwjWOfXYcXAzbRRaqdsshsQU7/JfYuPp+1io=) 2: adfc2fe6-1ed7-3320-ad28-f331d4b9e0b4.roa (hash: s0rKZUMd6ITPTFgVGePxjzyVFBNRB+zTUAsnzUvUMiQ=) 3: ba63cc08-daec-4944-82e6-c294a3caa982.crl (hash: ZqWMmbrD0YVljRtElRIKR9+Ds7o18qcVEBwAo4NpZpQ=) 4: e59f5867-1f0d-36cb-8ab4-13a4edd0283d.roa (hash: PhsNgAH5Jk1x5/ZHuzAOb+JNrUuq4JXk4lN6sw3xRq8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/ba63cc08-daec-4944-82e6-c294a3caa982.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/ba63cc08-daec-4944-82e6-c294a3caa982.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:d1:50:ed:22:fd:b3:c2:19:a8:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba63cc08-daec-4944-82e6-c294a3caa982 Validity Not Before: Sep 22 16:00:24 2026 GMT Not After : Sep 24 16:00:00 2026 GMT Subject: CN=dc741eec-f021-433f-a013-8da3ceef1a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:82:3b:93:f1:33:ce:95:9d:96:65:be:42:62: 6a:cf:ea:d8:bd:5f:10:8f:f9:0d:4f:3a:ae:76:4f: 29:d5:49:f0:ed:32:56:4d:21:49:46:a6:06:e2:4c: 53:c7:2f:92:c0:51:5b:58:46:c8:2c:25:9b:38:38: 86:a2:e7:db:10:1b:12:fc:06:d2:ca:94:03:6a:94: ed:c9:9e:0b:db:62:70:5e:a8:67:35:e7:d5:a6:90: 88:31:ea:27:93:30:49:77:b9:e3:d7:32:83:db:ad: 34:0a:8d:a1:42:18:f8:cb:4b:ea:f1:4a:65:34:cf: 90:ef:8c:c3:1c:71:50:d8:07:f3:fe:9f:68:af:68: 74:03:3d:41:7a:59:bb:83:cf:54:7d:cb:44:51:8a: 42:dd:3d:48:1b:9c:8f:b0:9f:5d:7c:3e:7c:89:72: 3f:6a:52:2d:53:cd:52:d8:29:be:5b:4b:06:25:3c: e3:9d:55:b7:f0:76:2b:7c:ac:82:c1:ad:d5:8b:2a: f2:77:53:6b:76:f0:f3:07:5b:c3:85:e3:43:67:cf: c6:0c:fd:57:51:30:b0:ec:7e:d9:dd:5a:17:4e:99: 56:d5:17:92:50:70:e2:f5:e0:c0:14:f0:b4:16:08: c1:20:2e:4c:52:28:f4:bc:67:92:38:b5:f5:bc:f2: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:22:77:AA:A4:B8:6E:5B:36:6E:A4:63:DE:F9:80:23:27:BE:2D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/ba63cc08-daec-4944-82e6-c294a3caa982.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/ba63cc08-daec-4944-82e6-c294a3caa982.crl X509v3 Authority Key Identifier: keyid:7B:21:57:13:1B:DA:80:AD:2A:A4:E9:5E:34:0E:65:31:F8:2B:14:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f5:ca:0c:76:00:b0:59:54:b6:57:f7:ae:78:a4:30:ed:63: c5:54:8e:5d:4e:65:bc:e9:e2:33:a5:ca:3e:38:b0:f3:a0:e4: ac:0e:54:b1:20:a4:27:03:41:a7:a6:c0:14:a1:39:cc:e2:24: 69:b4:ea:6c:e9:b4:76:7a:7e:b3:06:c6:c9:8f:6f:20:d5:e6: 3e:39:3b:2c:e1:69:12:c5:66:32:10:c3:55:b5:2d:2e:7c:c8: d7:c6:aa:18:30:32:e3:8a:a0:77:68:62:e3:ab:74:80:b6:95: 81:d2:40:70:f1:4c:6b:3d:71:f5:98:b7:0d:1c:fd:ae:67:d0: e7:9e:ac:ff:ed:42:dc:db:49:dc:04:4a:33:18:d7:b8:46:55: 88:e0:f9:58:a5:8a:a2:93:f6:72:1c:a8:15:27:c0:e5:b4:df: 28:0f:bf:f4:8e:15:94:ef:bc:6b:9d:97:f7:9e:0a:3d:1d:07: d0:31:bf:11:3f:e6:9b:8b:cc:c7:7e:02:ee:a9:48:8c:74:6d: 3f:17:a7:e9:cf:4d:19:17:79:ed:ab:b9:69:75:38:d1:63:b5: c3:ab:66:b4:32:ed:36:85:46:62:7a:31:0f:2f:77:41:f8:f3: 99:91:df:b7:59:0f:74:51:f1:ac:1a:1a:91:ee:5a:99:42:23: 8b:df:07:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9C0VDtIv2zwhmojkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2M2NjMDgtZGFlYy00OTQ0LTgyZTYtYzI5NGEzY2Fh OTgyMB4XDTI2MDkyMjE2MDAyNFoXDTI2MDkyNDE2MDAwMFowLzEtMCsGA1UEAxMk ZGM3NDFlZWMtZjAyMS00MzNmLWEwMTMtOGRhM2NlZWYxYTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtII7k/EzzpWdlmW+QmJqz+rYvV8Qj/kNTzqu dk8p1Unw7TJWTSFJRqYG4kxTxy+SwFFbWEbILCWbODiGoufbEBsS/AbSypQDapTt yZ4L22JwXqhnNefVppCIMeonkzBJd7nj1zKD2600Co2hQhj4y0vq8UplNM+Q74zD HHFQ2Afz/p9or2h0Az1Belm7g89UfctEUYpC3T1IG5yPsJ9dfD58iXI/alItU81S 2Cm+W0sGJTzjnVW38HYrfKyCwa3Viyryd1NrdvDzB1vDheNDZ8/GDP1XUTCw7H7Z 3VoXTplW1ReSUHDi9eDAFPC0FgjBIC5MUij0vGeSOLX1vPLwLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB4id6qkuG5bNm6kY975gCMnvi1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iYTYz Y2MwOC1kYWVjLTQ5NDQtODJlNi1jMjk0YTNjYWE5ODIvYmE2M2NjMDgtZGFlYy00 OTQ0LTgyZTYtYzI5NGEzY2FhOTgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYmE2M2NjMDgtZGFlYy00OTQ0LTgy ZTYtYzI5NGEzY2FhOTgyL2JhNjNjYzA4LWRhZWMtNDk0NC04MmU2LWMyOTRhM2Nh YTk4Mi5jcmwwHwYDVR0jBBgwFoAUeyFXExvagK0qpOleNA5lMfgrFFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iYTYzY2MwOC1kYWVjLTQ5NDQtODJlNi1jMjk0 YTNjYWE5ODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCM9coMdgCwWVS2V/eueKQw 7WPFVI5dTmW86eIzpco+OLDzoOSsDlSxIKQnA0GnpsAUoTnM4iRptOps6bR2en6z BsbJj28g1eY+OTss4WkSxWYyEMNVtS0ufMjXxqoYMDLjiqB3aGLjq3SAtpWB0kBw 8UxrPXH1mLcNHP2uZ9Dnnqz/7ULc20ncBEozGNe4RlWI4PlYpYqik/ZyHKgVJ8Dl tN8oD7/0jhWU77xrnZf3ngo9HQfQMb8RP+abi8zHfgLuqUiMdG0/F6fpz00ZF3nt q7lpdTjRY7XDq2a0Mu02hUZiejEPL3dB+POZkd+3WQ90UfGsGhqR7lqZQiOL3wf1 -----END CERTIFICATE-----Generated at Wed Sep 23 13:32:34 2026 by rpki-client