$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.mft File: ba2a056d-e4f4-44a7-ab61-c69845114d88.mft (raw, json) Hash identifier: WMmkXc67Pfs3qovvP+0EChejS6dz5LHgjdhjI4W+FaU= Subject key identifier: 33:33:28:6F:9D:75:1F:58:FF:2F:04:FD:86:59:F5:95:74:F6:69:5E Authority key identifier: F7:AE:DB:6D:A1:27:06:97:FD:CC:21:56:10:C9:71:E4:B2:11:BA:06 Certificate issuer: /CN=ba2a056d-e4f4-44a7-ab61-c69845114d88 Certificate serial: 010D0C9F4328584D0717C00229449B7A51DA5480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.mft Manifest number: 010D0C9F4328584A6EC2D1D80DB1CD6607DFD2AF Signing time: Sun 01 Mar 2026 21:00:04 +0000 Manifest this update: Sun 01 Mar 2026 21:00:04 +0000 Manifest next update: Wed 04 Mar 2026 21:00:00 +0000 Files and hashes: 1: 4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc.cer (hash: CBle/dqPkBP4Qf4eWWtD6w0xKTjifM+jhdZA5mBcYLY=) 2: ba2a056d-e4f4-44a7-ab61-c69845114d88.crl (hash: MPW7y1bSCz5NrQNyYlj5u03f349Wwa9J+MiDa+f51jE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:17:c0:02:29:44:9b:7a:51:da:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2a056d-e4f4-44a7-ab61-c69845114d88 Validity Not Before: Mar 1 21:00:04 2026 GMT Not After : Mar 4 21:00:00 2026 GMT Subject: CN=ed0e0a6e-b4b0-4577-8c34-82f990164cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:93:ca:6c:51:5f:3d:9c:ab:81:26:5b:95:91: 76:dc:ad:d6:2b:3c:67:0e:db:e1:1f:e1:11:c2:e2: 1b:8e:fd:09:31:25:9e:49:23:29:a5:e3:67:db:19: cf:62:a1:f1:62:e6:45:b0:ea:fd:5d:8f:64:6a:7f: 0a:15:12:5d:99:32:cc:fe:27:83:ed:02:8e:99:36: 69:93:59:9f:96:73:73:83:0f:bf:ba:6a:31:71:f0: 7e:2e:3b:40:42:fb:82:a5:d6:1e:84:9b:c6:52:73: bb:a3:1f:60:02:4e:e7:88:e0:f5:be:4b:e5:c1:3c: 49:18:10:d5:b4:d6:eb:8c:de:76:40:9b:92:97:47: e1:9f:80:cf:f4:77:2e:cf:87:fc:c5:00:9c:67:cc: 52:36:eb:06:23:84:24:1a:c9:f3:e3:ec:fb:ef:71: 0f:20:c6:2f:04:c9:d0:7e:ea:0b:77:48:7d:56:7b: 2b:63:64:9d:2e:a5:54:04:62:46:40:58:f2:bc:44: 1f:7c:5d:9b:23:60:f1:bc:01:0a:62:aa:fb:88:06: c3:9a:91:8f:3f:79:b9:c6:67:43:25:04:69:a5:08: 5d:33:a4:d2:d5:03:2c:1d:62:81:ed:15:ce:b7:00: 34:0f:f4:63:d2:2c:cf:ee:ef:24:5a:58:ec:de:62: 5f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:33:28:6F:9D:75:1F:58:FF:2F:04:FD:86:59:F5:95:74:F6:69:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.crl X509v3 Authority Key Identifier: keyid:F7:AE:DB:6D:A1:27:06:97:FD:CC:21:56:10:C9:71:E4:B2:11:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6a:67:4a:27:bf:bc:f2:84:68:e7:35:b8:36:78:31:f0:e1: 64:cf:83:74:f3:d3:35:aa:52:83:5d:67:9e:cd:70:4f:a7:e7: 98:cf:e7:98:02:ab:b0:f0:66:83:3f:c1:53:32:94:62:a5:96: 93:ba:87:3d:53:cf:08:b5:42:48:f3:ec:ec:6d:24:23:10:d4: fa:97:35:be:2e:72:05:e6:36:73:71:ec:6f:1c:cd:43:80:44: ec:11:dd:80:1b:c9:5f:4d:09:59:63:db:ec:c0:08:81:61:8b: 81:b0:f3:63:5c:45:7d:ff:26:28:cf:74:d3:94:6e:df:34:bc: c2:80:47:88:e7:5c:44:4e:9d:34:e9:56:8c:0c:46:35:33:3e: 9e:50:69:e6:87:2d:ad:20:96:35:94:b9:16:0c:7d:bb:3a:65: c3:90:f8:80:7e:e2:fc:05:98:54:4f:2d:75:d8:d8:a1:6f:c8: 6c:8b:43:b4:8e:a7:e9:21:f9:a4:67:19:18:53:5e:df:0a:c8: b4:ed:ee:c2:67:5a:a5:1f:fa:73:9c:85:1a:61:0f:99:31:56: 22:33:fc:92:8a:36:f5:c4:38:e0:47:bf:f0:9b:19:ee:84:3c: c1:a9:7b:36:01:8a:94:fd:84:95:ac:2a:be:92:89:f9:32:53: 86:e2:9c:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0HF8ACKUSbelHaVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyYTA1NmQtZTRmNC00NGE3LWFiNjEtYzY5ODQ1MTE0 ZDg4MB4XDTI2MDMwMTIxMDAwNFoXDTI2MDMwNDIxMDAwMFowLzEtMCsGA1UEAxMk ZWQwZTBhNmUtYjRiMC00NTc3LThjMzQtODJmOTkwMTY0Y2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJPKbFFfPZyrgSZblZF23K3WKzxnDtvhH+ER wuIbjv0JMSWeSSMppeNn2xnPYqHxYuZFsOr9XY9kan8KFRJdmTLM/ieD7QKOmTZp k1mflnNzgw+/umoxcfB+LjtAQvuCpdYehJvGUnO7ox9gAk7niOD1vkvlwTxJGBDV tNbrjN52QJuSl0fhn4DP9Hcuz4f8xQCcZ8xSNusGI4QkGsnz4+z773EPIMYvBMnQ fuoLd0h9VnsrY2SdLqVUBGJGQFjyvEQffF2bI2DxvAEKYqr7iAbDmpGPP3m5xmdD JQRppQhdM6TS1QMsHWKB7RXOtwA0D/Rj0izP7u8kWljs3mJftQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDMzKG+ddR9Y/y8E/YZZ9ZV09mleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTJh MDU2ZC1lNGY0LTQ0YTctYWI2MS1jNjk4NDUxMTRkODgvYmEyYTA1NmQtZTRmNC00 NGE3LWFiNjEtYzY5ODQ1MTE0ZDg4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmEyYTA1NmQtZTRmNC00NGE3LWFi NjEtYzY5ODQ1MTE0ZDg4L2JhMmEwNTZkLWU0ZjQtNDRhNy1hYjYxLWM2OTg0NTEx NGQ4OC5jcmwwHwYDVR0jBBgwFoAU967bbaEnBpf9zCFWEMlx5LIRugYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTJhMDU2ZC1lNGY0LTQ0YTctYWI2MS1jNjk4 NDUxMTRkODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEamdKJ7+88oRo5zW4Nngx 8OFkz4N089M1qlKDXWeezXBPp+eYz+eYAquw8GaDP8FTMpRipZaTuoc9U88ItUJI 8+zsbSQjENT6lzW+LnIF5jZzcexvHM1DgETsEd2AG8lfTQlZY9vswAiBYYuBsPNj XEV9/yYoz3TTlG7fNLzCgEeI51xETp006VaMDEY1Mz6eUGnmhy2tIJY1lLkWDH27 OmXDkPiAfuL8BZhUTy112Nihb8hsi0O0jqfpIfmkZxkYU17fCsi07e7CZ1qlH/pz nIUaYQ+ZMVYiM/ySijb1xDjgR7/wmxnuhDzBqXs2AYqU/YSVrCq+kon5MlOG4pzi -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:21 2026 by rpki-client