$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft File: ba691a44-20cf-450c-8abe-c548dd6bd5be.mft (raw, json) Hash identifier: lx3HMjQwEHeagMVFfErvVlLOWBdp84Tey7o5oiEFfg4= Subject key identifier: 04:D5:B3:18:26:1D:6E:40:A0:F3:C2:58:7D:49:0C:01:B8:68:9E:F9 Authority key identifier: 91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F Certificate issuer: /CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Certificate serial: 010D0C9F4328584D86EE56B413324AEA5289F5E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft Manifest number: 010D0C9F4328584D1F9E1AFDC135FF3750F3CDC6 Signing time: Thu 16 Apr 2026 16:00:03 +0000 Manifest this update: Thu 16 Apr 2026 16:00:03 +0000 Manifest next update: Sat 18 Apr 2026 16:00:00 +0000 Files and hashes: 1: ba691a44-20cf-450c-8abe-c548dd6bd5be.crl (hash: CfXv5l7ZIiLIzrZMVrX4vxs6VW9K7XRooQ1NFrYsd/M=) 2: f338295c-6e6c-3b3c-98dd-1e80c1957650.roa (hash: 4N3xdms+PPXOpr8hdZiJ59w8aUPMU5GRZfaJkpOKJek=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:ee:56:b4:13:32:4a:ea:52:89:f5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Validity Not Before: Apr 16 16:00:03 2026 GMT Not After : Apr 18 16:00:00 2026 GMT Subject: CN=540791fb-45b7-44da-9ac0-99161f2be2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:a9:73:5b:4e:df:ab:8a:8b:ac:d1:95:09: 99:3e:96:5d:fa:dc:6b:8e:46:b9:09:fd:1b:c3:ea: 1b:fa:04:2d:34:30:0e:a5:21:9d:aa:2a:fd:78:5f: bf:ee:e0:c5:8d:2f:89:fe:7e:c6:57:6a:74:bc:23: 53:fc:7d:90:7b:6e:fd:73:cd:b6:bb:6f:3f:23:19: 01:2c:33:6d:3e:c0:02:4a:24:5d:cb:27:ea:d1:ea: 01:75:b7:09:df:7d:09:14:4d:4f:fb:01:3d:72:c6: eb:ec:5c:4a:e2:44:2b:a6:a2:d6:51:66:52:e1:5c: ea:36:53:79:52:7b:e1:02:9a:ac:47:93:64:c3:c9: 27:fc:1d:f4:e7:12:db:f3:5f:6f:9f:06:d9:60:a4: 50:76:fd:19:c9:da:22:39:61:bc:37:6c:9b:ea:f2: 8f:d6:75:6d:57:d7:02:dc:21:39:7d:15:ce:00:56: 84:95:d5:80:62:e4:5c:0f:fd:b8:29:3d:87:28:bc: cf:55:71:6d:25:4f:eb:11:79:67:22:70:e2:70:6b: 16:75:3b:57:7e:37:3b:d1:54:39:b7:3c:56:bc:ec: 09:c8:01:18:ed:30:8a:ae:df:ee:4b:af:06:8a:e7: a1:b7:1e:2a:ef:c4:dc:1c:b0:52:a7:8d:39:f7:d0: 1a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D5:B3:18:26:1D:6E:40:A0:F3:C2:58:7D:49:0C:01:B8:68:9E:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl X509v3 Authority Key Identifier: keyid:91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e7:6c:d9:29:b9:c9:ee:a7:7e:1d:e9:19:74:7d:c7:be:dd: 92:71:fd:45:8b:d6:30:99:5e:f9:6f:b0:10:1f:e9:b2:6a:d5: 54:a3:78:34:5d:13:8e:c0:f7:e2:2e:1a:63:8b:96:63:d7:7a: 2f:bb:eb:33:9c:55:20:42:9f:d8:46:f6:61:f0:36:27:2d:d9: 8d:1a:5f:42:80:57:12:bd:48:58:fb:5e:cb:de:bf:1d:84:3f: 15:06:80:ad:fa:e5:10:7c:e6:c5:ed:70:09:a0:a8:9c:d0:bf: 71:97:17:b6:db:00:df:e1:49:5a:e0:9c:75:29:76:82:21:ed: bd:4c:09:ad:84:1e:39:4a:06:07:5e:a4:ea:10:7d:32:5c:9e: 17:cf:6a:84:28:ca:89:b2:f1:9a:dd:84:02:58:94:78:d8:51: 08:c1:7c:1b:2f:28:2d:87:18:c8:f2:20:ec:b5:e8:08:a2:d9: c2:56:06:dc:3c:b0:0e:1f:98:d2:c2:65:b9:86:a0:a0:65:d0: 03:cf:ed:ab:14:10:da:27:bc:60:8f:b2:c0:03:1c:c0:ab:76: ef:90:71:5a:9e:14:fd:a6:62:da:ef:b6:c0:e5:b4:ec:dc:52: 0b:38:d8:19:93:13:7c:58:50:ce:f8:bd:1f:90:a5:e0:55:b4: ce:16:b2:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2G7la0EzJK6lKJ9eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2OTFhNDQtMjBjZi00NTBjLThhYmUtYzU0OGRkNmJk NWJlMB4XDTI2MDQxNjE2MDAwM1oXDTI2MDQxODE2MDAwMFowLzEtMCsGA1UEAxMk NTQwNzkxZmItNDViNy00NGRhLTlhYzAtOTkxNjFmMmJlMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9ypc1tO36uKi6zRlQmZPpZd+txrjka5Cf0b w+ob+gQtNDAOpSGdqir9eF+/7uDFjS+J/n7GV2p0vCNT/H2Qe279c822u28/IxkB LDNtPsACSiRdyyfq0eoBdbcJ330JFE1P+wE9csbr7FxK4kQrpqLWUWZS4VzqNlN5 UnvhApqsR5Nkw8kn/B305xLb819vnwbZYKRQdv0ZydoiOWG8N2yb6vKP1nVtV9cC 3CE5fRXOAFaEldWAYuRcD/24KT2HKLzPVXFtJU/rEXlnInDicGsWdTtXfjc70VQ5 tzxWvOwJyAEY7TCKrt/uS68Giuehtx4q78TcHLBSp40599AaswIDAQABo4IDbjCC A2owHQYDVR0OBBYEFATVsxgmHW5AoPPCWH1JDAG4aJ75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5 MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4ZGQ2YmQ1YmUvYmE2OTFhNDQtMjBjZi00 NTBjLThhYmUtYzU0OGRkNmJkNWJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmE2OTFhNDQtMjBjZi00NTBjLThh YmUtYzU0OGRkNmJkNWJlL2JhNjkxYTQ0LTIwY2YtNDUwYy04YWJlLWM1NDhkZDZi ZDViZS5jcmwwHwYDVR0jBBgwFoAUkTurmw4XCTV7QqotqsMGwPraJh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4 ZGQ2YmQ1YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCA52zZKbnJ7qd+HekZdH3H vt2Scf1Fi9YwmV75b7AQH+myatVUo3g0XROOwPfiLhpji5Zj13ovu+sznFUgQp/Y RvZh8DYnLdmNGl9CgFcSvUhY+17L3r8dhD8VBoCt+uUQfObF7XAJoKic0L9xlxe2 2wDf4Ula4Jx1KXaCIe29TAmthB45SgYHXqTqEH0yXJ4Xz2qEKMqJsvGa3YQCWJR4 2FEIwXwbLygthxjI8iDstegIotnCVgbcPLAOH5jSwmW5hqCgZdADz+2rFBDaJ7xg j7LAAxzAq3bvkHFanhT9pmLa77bA5bTs3FILONgZkxN8WFDO+L0fkKXgVbTOFrJo -----END CERTIFICATE-----Generated at Fri Apr 17 14:52:59 2026 by rpki-client