$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.mft File: ba9a53df-0615-445c-b629-c0a289cd77e0.mft (raw, json) Hash identifier: vrqsTrRLmCo+k1THVLk+KKPnJUgE7XMO1zqx1OB3W04= Subject key identifier: F4:BB:5B:24:C7:FA:03:DA:53:57:6C:DE:59:D8:B7:7F:29:25:D0:4A Authority key identifier: 1A:8B:16:1A:27:66:54:B1:A4:AF:EB:72:01:FC:17:8E:FD:62:AE:DC Certificate issuer: /CN=ba9a53df-0615-445c-b629-c0a289cd77e0 Certificate serial: 010D0C9F4328584BBFE0D5FBA565602DBB3E9500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.mft Manifest number: 010D0C9F4328584877ADBF7865070EEB53F96D2D Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Thu 06 Nov 2025 16:00:00 +0000 Files and hashes: 1: ba9a53df-0615-445c-b629-c0a289cd77e0.crl (hash: Ax2VmspMOWcp0RqQjIwbagSsp4l5tD+8ER2hvYhiKc0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d5:fb:a5:65:60:2d:bb:3e:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9a53df-0615-445c-b629-c0a289cd77e0 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 6 16:00:00 2025 GMT Subject: CN=9a1cbff7-7b48-47d2-990a-aea8f3046a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:c5:c2:4e:3d:23:e5:cc:65:ef:3f:5f:e1: c7:29:a7:81:10:db:10:e2:22:df:ad:11:4b:11:b0: 8a:ed:b2:3e:f2:15:ff:d7:cd:1a:a0:05:d8:c5:f7: 4e:6f:90:7b:16:1c:a1:75:05:fb:ab:48:ef:8b:fb: 64:f9:bb:7b:33:e2:0e:1d:63:ca:ee:88:fa:37:83: 3d:d3:55:02:ab:02:0c:67:c9:31:6e:9d:40:cd:b7: 5a:3c:e4:91:81:44:bb:2c:66:a7:1b:cf:1f:f5:20: 57:22:26:3d:c4:f3:07:6f:b4:9c:bc:a3:68:fd:f8: 30:50:4b:c5:71:01:e8:21:34:94:43:73:d2:2f:6c: de:f2:a9:28:42:68:72:b7:fe:fd:21:5f:3c:55:1f: 05:13:cd:4e:49:24:d7:45:01:39:6d:d7:b5:cc:13: 82:af:51:03:7f:80:65:42:b3:74:a5:dd:d3:dd:80: 81:08:c7:fe:5a:29:81:f8:8b:ac:b1:33:a3:d1:2f: 3a:f3:ae:36:47:7d:8b:ea:0c:35:11:17:c9:6a:38: ff:37:c8:52:c6:7f:5c:01:1d:83:a9:e8:c6:16:77: 2f:e3:4d:fb:9d:22:e1:26:d7:c3:b8:67:15:e7:0e: 1d:1b:62:36:c7:2c:0b:27:b2:f8:f8:db:a1:dc:29: 63:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BB:5B:24:C7:FA:03:DA:53:57:6C:DE:59:D8:B7:7F:29:25:D0:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.crl X509v3 Authority Key Identifier: keyid:1A:8B:16:1A:27:66:54:B1:A4:AF:EB:72:01:FC:17:8E:FD:62:AE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:63:ec:49:05:4e:49:56:76:7e:97:2e:7a:37:c9:51:f0:17: 79:c0:85:a1:dd:cd:03:7e:3c:4e:96:dc:a7:30:19:48:27:5c: 12:04:a8:25:97:b8:a0:d6:f1:02:a8:30:c3:f0:e1:39:74:fd: 94:e1:be:ee:ac:68:a5:64:f3:a2:20:2d:1e:9b:30:65:99:77: 1d:89:d7:c3:d9:ae:94:16:69:c3:79:da:05:6e:e0:22:df:2e: 8c:eb:fd:66:8d:af:0f:48:d2:ec:21:0b:7e:cb:4d:56:68:04: 06:0d:af:5d:92:36:cb:70:7a:07:a4:ef:10:d6:70:47:07:4b: 92:9e:e3:c6:9a:c3:df:cf:98:7f:7f:12:0c:db:75:e8:e5:ef: c2:4f:d5:28:94:36:6f:47:52:60:11:9f:aa:63:03:1b:68:88: c0:7f:13:09:0e:33:9e:9c:6e:b1:89:31:95:70:cb:2f:0a:2c: 67:3d:d7:54:bf:2e:2c:24:b8:a9:5f:d6:88:1f:87:f3:ae:63: 18:2c:83:f2:34:b4:98:b1:4e:81:d8:79:c8:15:82:de:02:a7: 97:f7:94:6f:bd:54:0f:d8:8f:a5:53:3f:7c:c0:82:84:ee:b1: 9f:a0:20:6b:1a:64:a6:78:60:47:73:51:26:46:c9:05:65:ff: ab:e7:20:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NX7pWVgLbs+lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE5YTUzZGYtMDYxNS00NDVjLWI2MjktYzBhMjg5Y2Q3 N2UwMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNjE2MDAwMFowLzEtMCsGA1UEAxMk OWExY2JmZjctN2I0OC00N2QyLTk5MGEtYWVhOGYzMDQ2YTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaLFwk49I+XMZe8/X+HHKaeBENsQ4iLfrRFL EbCK7bI+8hX/180aoAXYxfdOb5B7FhyhdQX7q0jvi/tk+bt7M+IOHWPK7oj6N4M9 01UCqwIMZ8kxbp1AzbdaPOSRgUS7LGanG88f9SBXIiY9xPMHb7ScvKNo/fgwUEvF cQHoITSUQ3PSL2ze8qkoQmhyt/79IV88VR8FE81OSSTXRQE5bde1zBOCr1EDf4Bl QrN0pd3T3YCBCMf+WimB+IussTOj0S868642R32L6gw1ERfJajj/N8hSxn9cAR2D qejGFncv4037nSLhJtfDuGcV5w4dG2I2xywLJ7L4+Nuh3CljNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPS7WyTH+gPaU1ds3lnYt38pJdBKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTlh NTNkZi0wNjE1LTQ0NWMtYjYyOS1jMGEyODljZDc3ZTAvYmE5YTUzZGYtMDYxNS00 NDVjLWI2MjktYzBhMjg5Y2Q3N2UwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE5YTUzZGYtMDYxNS00NDVjLWI2 MjktYzBhMjg5Y2Q3N2UwL2JhOWE1M2RmLTA2MTUtNDQ1Yy1iNjI5LWMwYTI4OWNk NzdlMC5jcmwwHwYDVR0jBBgwFoAUGosWGidmVLGkr+tyAfwXjv1irtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTlhNTNkZi0wNjE1LTQ0NWMtYjYyOS1jMGEy ODljZDc3ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvY+xJBU5JVnZ+ly56N8lR 8Bd5wIWh3c0DfjxOltynMBlIJ1wSBKgll7ig1vECqDDD8OE5dP2U4b7urGilZPOi IC0emzBlmXcdidfD2a6UFmnDedoFbuAi3y6M6/1mja8PSNLsIQt+y01WaAQGDa9d kjbLcHoHpO8Q1nBHB0uSnuPGmsPfz5h/fxIM23Xo5e/CT9UolDZvR1JgEZ+qYwMb aIjAfxMJDjOenG6xiTGVcMsvCixnPddUvy4sJLipX9aIH4fzrmMYLIPyNLSYsU6B 2HnIFYLeAqeX95RvvVQP2I+lUz98wIKE7rGfoCBrGmSmeGBHc1EmRskFZf+r5yDi -----END CERTIFICATE-----Generated at Wed Nov 5 04:32:42 2025 by rpki-client