$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft File: ba9fc663-6e78-4435-a4e3-45ff8082831b.mft (raw, json) Hash identifier: Z+5fKZeeGIAB22IK7z8oYVOBz3b7YJ1DgfGo+hw8ieI= Subject key identifier: 0C:C2:AE:C5:77:43:90:10:2B:89:BE:DF:DD:3F:7A:9A:0D:32:A8:81 Authority key identifier: 45:60:60:A9:6F:7D:C0:21:A6:EB:ED:89:D4:20:65:00:5E:2D:EF:7B Certificate issuer: /CN=ba9fc663-6e78-4435-a4e3-45ff8082831b Certificate serial: 010D0C9F4328584F501409E0B0D9F55D2231F580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft Manifest number: 010D0C9F4328584E5224941727BFA755AC76BD7D Signing time: Sun 27 Sep 2026 10:00:23 +0000 Manifest this update: Sun 27 Sep 2026 10:00:23 +0000 Manifest next update: Tue 29 Sep 2026 10:00:00 +0000 Files and hashes: 1: 3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa (hash: nrisyL7s1+auNrnP5V6R5oswFQMs3O6b1ufGmJnMIpk=) 2: ba9fc663-6e78-4435-a4e3-45ff8082831b.crl (hash: U+Lqk29CwauAN82ahWQLKThka9i4oFPMEpUHWsi1QrQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:14:09:e0:b0:d9:f5:5d:22:31:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9fc663-6e78-4435-a4e3-45ff8082831b Validity Not Before: Sep 27 10:00:23 2026 GMT Not After : Sep 29 10:00:00 2026 GMT Subject: CN=2a87bc6d-620c-4479-b3b1-0195eec5d91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:fa:8d:43:52:ea:12:4e:ef:0b:1b:e5:1f: c3:3c:c8:59:9d:e7:c2:32:97:19:a1:b1:e3:18:c9: be:e8:05:3a:b7:72:cb:81:18:4b:f5:a5:03:29:f1: a4:44:28:e2:dd:c8:bd:64:03:fb:62:2e:d3:32:04: 9c:fb:1a:fb:17:51:67:44:0a:46:0a:02:cb:23:bc: 62:42:c7:72:c5:4b:f5:b7:05:d8:fb:6a:21:83:13: 67:46:0c:ac:45:0f:b7:65:3e:1f:bd:a1:39:d7:3a: fc:86:3b:73:7a:3d:84:95:f4:bc:07:8d:d6:c0:33: c8:16:2d:20:85:eb:57:5c:14:49:49:4a:81:f5:c6: 52:89:ec:d1:98:0d:9a:81:fa:48:e6:d2:49:33:b6: 96:d7:68:de:14:07:23:fa:fb:ed:25:28:32:00:3b: 0c:c9:6b:80:4b:af:2c:df:f5:a7:6b:c7:10:74:0d: fb:63:d0:e7:50:29:6a:32:cf:a5:50:b1:be:40:8c: 38:99:45:ae:ce:f7:13:f4:c1:c1:90:a5:c6:a1:ab: e0:9b:e2:b6:27:1b:84:99:81:c8:e8:57:b7:b2:e0: e5:4a:f6:27:98:86:80:99:a2:b2:cb:4f:9c:40:4a: 4d:2e:31:05:dd:cb:39:d7:77:a8:e9:5d:33:3a:f5: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C2:AE:C5:77:43:90:10:2B:89:BE:DF:DD:3F:7A:9A:0D:32:A8:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.crl X509v3 Authority Key Identifier: keyid:45:60:60:A9:6F:7D:C0:21:A6:EB:ED:89:D4:20:65:00:5E:2D:EF:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9e:55:f0:a8:3b:34:12:62:c1:24:46:11:3d:0d:25:ce:f9: 38:bf:09:dc:7e:ab:b5:99:69:7d:32:76:ad:7b:5d:0e:76:a5: db:bc:f7:4b:12:a1:d5:8d:d9:3f:ad:78:4b:1e:52:02:7e:8f: 03:58:4a:55:4e:29:f0:e4:50:5b:e5:92:fe:83:96:7e:45:cc: 32:09:8c:dd:c3:76:e2:42:0e:3d:a4:eb:a6:c5:0f:6e:c5:34: 83:b5:6c:25:46:75:c1:03:44:21:0c:e6:f7:e9:58:32:1c:80: 5b:03:68:7c:98:e7:cc:ad:b7:5f:e1:64:df:bc:d2:67:2d:7c: aa:a9:b4:80:bf:64:4e:3a:2f:ac:c0:42:5c:79:4c:80:6d:29: ac:ac:4b:4b:90:cf:5d:47:5b:02:d4:67:f4:7d:31:b6:5f:bb: 1c:08:6d:7b:99:15:e2:61:28:54:c0:b0:d6:30:ee:62:19:ef: 05:c5:a0:2a:98:4e:2a:47:10:44:de:62:c9:d2:8d:10:d5:10: 47:30:8e:83:69:f7:3e:20:67:69:b3:f0:a7:14:ea:52:ac:f4: 88:8f:36:c6:11:a2:ff:49:69:97:db:c7:a3:2b:23:e3:56:51: 7a:92:f5:9a:1e:c6:98:3b:66:22:78:32:cd:4d:64:df:f9:0d: 49:83:8e:3e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9QFAngsNn1XSIx9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE5ZmM2NjMtNmU3OC00NDM1LWE0ZTMtNDVmZjgwODI4 MzFiMB4XDTI2MDkyNzEwMDAyM1oXDTI2MDkyOTEwMDAwMFowLzEtMCsGA1UEAxMk MmE4N2JjNmQtNjIwYy00NDc5LWIzYjEtMDE5NWVlYzVkOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D/6jUNS6hJO7wsb5R/DPMhZnefCMpcZobHj GMm+6AU6t3LLgRhL9aUDKfGkRCji3ci9ZAP7Yi7TMgSc+xr7F1FnRApGCgLLI7xi QsdyxUv1twXY+2ohgxNnRgysRQ+3ZT4fvaE51zr8hjtzej2ElfS8B43WwDPIFi0g hetXXBRJSUqB9cZSiezRmA2agfpI5tJJM7aW12jeFAcj+vvtJSgyADsMyWuAS68s 3/Wna8cQdA37Y9DnUClqMs+lULG+QIw4mUWuzvcT9MHBkKXGoavgm+K2JxuEmYHI 6Fe3suDlSvYnmIaAmaKyy0+cQEpNLjEF3cs513eo6V0zOvVEcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAzCrsV3Q5AQK4m+390/epoNMqiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iYTlm YzY2My02ZTc4LTQ0MzUtYTRlMy00NWZmODA4MjgzMWIvYmE5ZmM2NjMtNmU3OC00 NDM1LWE0ZTMtNDVmZjgwODI4MzFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYmE5ZmM2NjMtNmU3OC00NDM1LWE0 ZTMtNDVmZjgwODI4MzFiL2JhOWZjNjYzLTZlNzgtNDQzNS1hNGUzLTQ1ZmY4MDgy ODMxYi5jcmwwHwYDVR0jBBgwFoAURWBgqW99wCGm6+2J1CBlAF4t73swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iYTlmYzY2My02ZTc4LTQ0MzUtYTRlMy00NWZm ODA4MjgzMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnnlXwqDs0EmLBJEYRPQ0l zvk4vwncfqu1mWl9Mnate10OdqXbvPdLEqHVjdk/rXhLHlICfo8DWEpVTinw5FBb 5ZL+g5Z+RcwyCYzdw3biQg49pOumxQ9uxTSDtWwlRnXBA0QhDOb36VgyHIBbA2h8 mOfMrbdf4WTfvNJnLXyqqbSAv2ROOi+swEJceUyAbSmsrEtLkM9dR1sC1Gf0fTG2 X7scCG17mRXiYShUwLDWMO5iGe8FxaAqmE4qRxBE3mLJ0o0Q1RBHMI6Dafc+IGdp s/CnFOpSrPSIjzbGEaL/SWmX28ejKyPjVlF6kvWaHsaYO2YieDLNTWTf+Q1Jg44+ -----END CERTIFICATE-----Generated at Mon Sep 28 06:07:46 2026 by rpki-client