$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.mft File: 5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.mft (raw, json) Hash identifier: YRqaCiWtnJSz7yWwuls9RZl6gwL8rbV7P9jstO0qzSE= Subject key identifier: BC:C0:8A:C9:FF:D9:D1:DA:C6:11:02:43:2D:FD:CA:D2:B5:B8:67:F5 Authority key identifier: 02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 Certificate issuer: /CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Certificate serial: 010D0C9F4328584F3FE8E6274C8AABBF2DB6FC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.mft Manifest number: 010D0C9F43285840FC51DFA653E5E37F99BA0FD0 Signing time: Mon 21 Sep 2026 15:00:25 +0000 Manifest this update: Mon 21 Sep 2026 15:00:25 +0000 Manifest next update: Thu 24 Sep 2026 15:00:00 +0000 Files and hashes: 1: 4af164e1-0993-3a33-9adc-cedf691ba81f.roa (hash: tUYKd0qeIm58sIIbAvMZf7W/zegrM8JXY0Cbl8JxcbY=) 2: 5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl (hash: w0xrpl6wnH6fFRai5HKILNo+cXhcCUG4QleKhizkRxU=) 3: 6efe680f-6b17-3b5a-b2db-732e1d4baa20.asa (hash: Mbb93jeKC0aDH2wafkvdHosCRThc0g9K79Zgk5HmrsQ=) 4: dad7d956-91ce-309d-a710-c9e480e1eb82.roa (hash: 2+UPttdS3S16diZwLqQIFYkZ8dgbhsMY2iHmJsUYrhU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:e8:e6:27:4c:8a:ab:bf:2d:b6:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Validity Not Before: Sep 21 15:00:25 2026 GMT Not After : Sep 24 15:00:00 2026 GMT Subject: CN=cb52e19e-5b45-43a0-9d8b-a7333b72a8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:ea:8f:b1:2c:7b:86:d1:37:5c:38:c9:74: 90:ce:13:8a:5c:f2:74:8a:96:9f:3a:17:9e:4c:cc: 0d:2e:2d:cd:99:eb:ed:c5:c4:1e:1f:9a:bd:ee:9b: d9:fe:52:c1:a4:b2:f0:78:ed:57:cd:80:11:2d:7e: f6:40:4a:bc:b8:d2:ba:65:bc:fb:7c:b6:81:83:33: 2c:a2:7f:6e:c1:2a:03:e3:20:f4:c7:b9:c7:82:cd: 63:07:10:ce:d3:09:e1:d6:66:4d:f7:85:c1:6c:46: e2:25:1a:03:ab:e3:d1:3d:29:dc:03:ab:06:04:f4: 67:54:8a:82:44:be:0c:13:1e:5e:38:d5:85:3c:87: 6b:f1:94:80:23:f5:d3:7c:4d:14:ae:db:31:c1:89: 73:38:5f:15:cc:c3:66:2c:6e:b6:0f:5d:dc:a4:aa: 99:bd:4c:51:e0:ef:71:08:1c:f7:e0:f1:f5:48:99: c8:0d:a3:51:76:7f:6e:8b:e1:05:fa:ef:91:e5:74: 1b:7e:9f:82:90:bc:ea:c4:14:d6:4d:57:34:9b:1d: 63:2d:89:e0:a4:91:12:3f:7c:7b:31:2e:6d:67:a5: d3:3d:59:f9:02:a3:24:0a:0b:68:36:a2:15:59:eb: d8:1b:22:87:5b:f7:72:36:c8:ed:e0:ac:a3:9c:28: ef:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C0:8A:C9:FF:D9:D1:DA:C6:11:02:43:2D:FD:CA:D2:B5:B8:67:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl X509v3 Authority Key Identifier: keyid:02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:df:1e:a4:51:f2:fd:3e:7f:c5:3a:e9:cc:74:6c:82:83:b9: 83:7f:c7:42:7e:46:45:44:59:a6:5f:f8:1f:7a:09:13:de:99: a0:53:4d:53:32:8c:a3:e7:c5:c1:8c:c5:5b:ed:7c:06:87:4e: 89:b6:ed:62:c2:3a:1b:0d:3e:33:26:73:99:ea:7d:0d:fd:c6: 48:38:3b:f2:63:19:41:15:2b:0d:a2:10:9c:9a:ab:1a:b0:4a: 12:72:14:85:34:9a:dd:7f:42:b9:07:ab:56:a2:d7:76:43:11: 72:01:16:e8:27:6c:d9:82:4d:7e:a8:51:d6:af:6b:d0:95:05: c6:59:a8:cc:4b:54:12:9b:e1:d9:6f:ee:08:3c:e2:f8:a2:56: 75:8d:18:a5:91:dd:e4:ce:1c:0b:7c:2c:23:8d:c5:7b:05:5e: 45:49:6d:92:d5:5d:b4:cf:4c:1a:82:b6:63:03:c9:fc:20:c9: 71:9b:81:37:9c:66:3c:dc:c9:5f:13:b5:52:2d:90:bd:5f:43: 82:be:2d:4d:d3:7f:3b:28:12:8b:87:f9:33:ee:1c:0c:4c:4f: 08:34:8d:8f:be:e2:72:47:dc:e4:d0:13:46:5f:2d:b8:98:2c: 27:f5:51:d7:bd:ac:ef:03:25:ba:f4:25:c6:b3:1a:cf:62:5e: 28:e2:5e:05 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8/6OYnTIqrvy22/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhMWFhOGEtYmFkNi00ZTA5LWE0YzYtYWM0MjRmMDRm NWNhMB4XDTI2MDkyMTE1MDAyNVoXDTI2MDkyNDE1MDAwMFowLzEtMCsGA1UEAxMk Y2I1MmUxOWUtNWI0NS00M2EwLTlkOGItYTczMzNiNzJhOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHvqj7Ese4bRN1w4yXSQzhOKXPJ0ipafOhee TMwNLi3NmevtxcQeH5q97pvZ/lLBpLLweO1XzYARLX72QEq8uNK6Zbz7fLaBgzMs on9uwSoD4yD0x7nHgs1jBxDO0wnh1mZN94XBbEbiJRoDq+PRPSncA6sGBPRnVIqC RL4MEx5eONWFPIdr8ZSAI/XTfE0UrtsxwYlzOF8VzMNmLG62D13cpKqZvUxR4O9x CBz34PH1SJnIDaNRdn9ui+EF+u+R5XQbfp+CkLzqxBTWTVc0mx1jLYngpJESP3x7 MS5tZ6XTPVn5AqMkCgtoNqIVWevYGyKHW/dyNsjt4KyjnCjvwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLzAisn/2dHaxhECQy39ytK1uGf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YmEx YWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQyNGYwNGY1Y2EvNWJhMWFhOGEtYmFkNi00 ZTA5LWE0YzYtYWM0MjRmMDRmNWNhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWJhMWFhOGEtYmFkNi00ZTA5LWE0 YzYtYWM0MjRmMDRmNWNhLzViYTFhYThhLWJhZDYtNGUwOS1hNGM2LWFjNDI0ZjA0 ZjVjYS5jcmwwHwYDVR0jBBgwFoAUAl+OPxoz9iI0GZDO8RmrK5tbr3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YmExYWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQy NGYwNGY1Y2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBU3x6kUfL9Pn/FOunMdGyC g7mDf8dCfkZFRFmmX/gfegkT3pmgU01TMoyj58XBjMVb7XwGh06Jtu1iwjobDT4z JnOZ6n0N/cZIODvyYxlBFSsNohCcmqsasEoSchSFNJrdf0K5B6tWotd2QxFyARbo J2zZgk1+qFHWr2vQlQXGWajMS1QSm+HZb+4IPOL4olZ1jRilkd3kzhwLfCwjjcV7 BV5FSW2S1V20z0wagrZjA8n8IMlxm4E3nGY83MlfE7VSLZC9X0OCvi1N0387KBKL h/kz7hwMTE8INI2PvuJyR9zk0BNGXy24mCwn9VHXvazvAyW69CXGsxrPYl4o4l4F -----END CERTIFICATE-----Generated at Tue Sep 22 03:54:13 2026 by rpki-client