$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.mft File: ba9a53df-0615-445c-b629-c0a289cd77e0.mft (raw, json) Hash identifier: jSz0z+T7xxmkw4S568vxpFbWiA2KI+5E7W6r6hw9drI= Subject key identifier: 0B:AC:CC:66:0C:29:78:26:5C:92:C5:1B:6B:5D:9D:0D:58:66:29:49 Authority key identifier: 1A:8B:16:1A:27:66:54:B1:A4:AF:EB:72:01:FC:17:8E:FD:62:AE:DC Certificate issuer: /CN=ba9a53df-0615-445c-b629-c0a289cd77e0 Certificate serial: 010D0C9F4328584D89B9055F9399C1F863CB1C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.mft Manifest number: 010D0C9F4328584877ADBF7865070EEB53F96DD4 Signing time: Fri 17 Apr 2026 16:00:03 +0000 Manifest this update: Fri 17 Apr 2026 16:00:03 +0000 Manifest next update: Sun 19 Apr 2026 16:00:00 +0000 Files and hashes: 1: 515d465d-92af-3918-adfd-3af7d4d660b0.roa (hash: fdYSQNNBtnbaD214YWCSEX/AJNzkknM7ZgpOja9uoUc=) 2: ba9a53df-0615-445c-b629-c0a289cd77e0.crl (hash: FFo4OeSjt0/1QFm0khMp13kSrldooI+UDIMOBUT9dHs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:b9:05:5f:93:99:c1:f8:63:cb:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9a53df-0615-445c-b629-c0a289cd77e0 Validity Not Before: Apr 17 16:00:03 2026 GMT Not After : Apr 19 16:00:00 2026 GMT Subject: CN=4c0c8fc1-57a6-4363-983a-f539ecc21013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:97:d4:95:84:e0:a1:79:94:32:23:cd:e5:37: de:0e:67:71:62:a2:ce:5e:09:87:c8:5d:d9:ce:cf: d3:d4:c2:91:cb:5f:77:0c:69:ac:10:ec:3b:d6:6f: 31:e3:d6:27:fa:16:4a:8d:25:2c:04:98:e5:21:ad: 29:32:1a:e6:19:3b:d8:02:ef:5d:c0:b0:a8:36:de: 5d:09:1d:49:0a:b0:a7:fc:55:f8:21:10:41:98:d7: 6c:cb:f3:ba:b0:e8:f1:37:aa:ee:9b:1a:75:eb:40: 37:72:99:4a:07:45:49:0a:e4:21:f1:92:38:66:81: fd:26:14:4c:d3:f5:ae:63:d0:67:34:59:ee:fc:11: 1d:63:36:bc:24:af:5f:21:df:21:28:74:b4:86:b3: 93:99:76:46:4a:74:51:1e:a8:42:da:ea:fb:4e:e2: 3f:1f:fe:3a:d2:0a:f6:28:3a:dd:e5:5d:5f:92:f5: 9d:c0:65:e4:0a:69:0c:ac:e9:6f:14:7f:f5:00:df: 2f:c5:d1:e0:a4:d0:66:20:81:94:95:65:f9:c2:0b: 31:3c:b5:8a:42:57:95:a9:4d:9d:95:e7:05:d4:79: 15:3a:1d:b0:17:77:e9:b7:fc:ef:bb:bd:5e:19:e2: 2d:cf:0f:a1:2d:85:71:32:16:12:80:ef:66:f5:fb: eb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AC:CC:66:0C:29:78:26:5C:92:C5:1B:6B:5D:9D:0D:58:66:29:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0/ba9a53df-0615-445c-b629-c0a289cd77e0.crl X509v3 Authority Key Identifier: keyid:1A:8B:16:1A:27:66:54:B1:A4:AF:EB:72:01:FC:17:8E:FD:62:AE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba9a53df-0615-445c-b629-c0a289cd77e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:82:6c:a6:73:db:c0:05:0c:2c:71:46:ec:ea:c5:2f:01:1f: fc:b4:c3:f5:5d:a3:0c:7f:b9:69:33:1c:5c:37:00:34:b6:9e: 14:05:16:9e:f1:50:a1:d6:03:94:f5:39:f5:bb:bc:1e:6f:b2: 29:f9:e7:5e:d2:40:9d:75:b4:63:03:37:c8:0d:5a:87:aa:80: d1:cc:e5:8f:c2:2b:c1:cd:a0:f0:a9:db:d7:83:e6:77:38:44: e2:03:51:76:f6:91:f9:29:fe:ac:d4:ba:00:95:44:91:5e:e6: 0d:57:c2:a2:ce:f9:df:de:e8:f4:f6:bf:19:ea:37:40:d8:de: 10:34:f7:95:6a:21:cc:f3:11:11:b6:bb:c0:0e:14:c6:eb:e1: 2b:d2:c1:bc:ac:14:47:41:7c:3c:f7:bc:da:81:33:02:29:15: 1a:22:99:bf:0d:6f:6a:20:c7:5f:7d:22:7d:b0:fc:08:32:7b: 65:b4:40:ae:13:95:72:0d:c0:dc:23:65:3b:71:84:bf:4d:61: 04:0e:7d:bf:1b:65:ab:54:35:d8:4f:c0:8d:19:73:2e:ac:0b: bc:51:02:8f:b1:33:5b:30:f2:54:f6:d1:e2:34:56:d4:c7:3c: c3:53:f4:02:a3:0c:1d:85:10:48:ce:7d:71:2d:9f:52:93:71: 6d:e9:b9:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2JuQVfk5nB+GPLHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE5YTUzZGYtMDYxNS00NDVjLWI2MjktYzBhMjg5Y2Q3 N2UwMB4XDTI2MDQxNzE2MDAwM1oXDTI2MDQxOTE2MDAwMFowLzEtMCsGA1UEAxMk NGMwYzhmYzEtNTdhNi00MzYzLTk4M2EtZjUzOWVjYzIxMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpfUlYTgoXmUMiPN5TfeDmdxYqLOXgmHyF3Z zs/T1MKRy193DGmsEOw71m8x49Yn+hZKjSUsBJjlIa0pMhrmGTvYAu9dwLCoNt5d CR1JCrCn/FX4IRBBmNdsy/O6sOjxN6rumxp160A3cplKB0VJCuQh8ZI4ZoH9JhRM 0/WuY9BnNFnu/BEdYza8JK9fId8hKHS0hrOTmXZGSnRRHqhC2ur7TuI/H/460gr2 KDrd5V1fkvWdwGXkCmkMrOlvFH/1AN8vxdHgpNBmIIGUlWX5wgsxPLWKQleVqU2d lecF1HkVOh2wF3fpt/zvu71eGeItzw+hLYVxMhYSgO9m9fvrIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAuszGYMKXgmXJLFG2tdnQ1YZilJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTlh NTNkZi0wNjE1LTQ0NWMtYjYyOS1jMGEyODljZDc3ZTAvYmE5YTUzZGYtMDYxNS00 NDVjLWI2MjktYzBhMjg5Y2Q3N2UwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE5YTUzZGYtMDYxNS00NDVjLWI2 MjktYzBhMjg5Y2Q3N2UwL2JhOWE1M2RmLTA2MTUtNDQ1Yy1iNjI5LWMwYTI4OWNk NzdlMC5jcmwwHwYDVR0jBBgwFoAUGosWGidmVLGkr+tyAfwXjv1irtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTlhNTNkZi0wNjE1LTQ0NWMtYjYyOS1jMGEy ODljZDc3ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBgmymc9vABQwscUbs6sUv AR/8tMP1XaMMf7lpMxxcNwA0tp4UBRae8VCh1gOU9Tn1u7web7Ip+ede0kCddbRj AzfIDVqHqoDRzOWPwivBzaDwqdvXg+Z3OETiA1F29pH5Kf6s1LoAlUSRXuYNV8Ki zvnf3uj09r8Z6jdA2N4QNPeVaiHM8xERtrvADhTG6+Er0sG8rBRHQXw897zagTMC KRUaIpm/DW9qIMdffSJ9sPwIMntltECuE5VyDcDcI2U7cYS/TWEEDn2/G2WrVDXY T8CNGXMurAu8UQKPsTNbMPJU9tHiNFbUxzzDU/QCowwdhRBIzn1xLZ9Sk3Ft6bmR -----END CERTIFICATE-----Generated at Fri Apr 17 18:09:54 2026 by rpki-client