$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft File: ba5e814e-0ab8-4257-8c39-4091cb3be269.mft (raw, json) Hash identifier: kDKFFdREI/Uu95gOz77JsijwXsr9yJd5XAYNFi5OUvo= Subject key identifier: 4C:E8:10:5A:41:E0:1F:ED:4D:C5:A4:84:87:F5:C4:E4:7E:42:39:A1 Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584BC1DB110980338DEB5BCEFA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft Manifest number: 010D0C9F4328584AEAF04E87036ADC5F9026D54F Signing time: Wed 05 Nov 2025 09:00:03 +0000 Manifest this update: Wed 05 Nov 2025 09:00:03 +0000 Manifest next update: Fri 07 Nov 2025 09:00:00 +0000 Files and hashes: 1: 2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa (hash: zqfK0jJ9bLVcsJAU1cF6WJPteBCIxR14h0HRDwG5DLY=) 2: ba5e814e-0ab8-4257-8c39-4091cb3be269.crl (hash: fHEu2kxxT/+2kzSz4l6oI9ZlNIIbP7sSNDG4FwPYBis=) 3: c06a09fc-2584-35b2-be4c-9069314d842e.roa (hash: R+JvuL8iOu9GBqV9DVe34lJSv4e3iYd8KFBYcRYa8Qw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:db:11:09:80:33:8d:eb:5b:ce:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Nov 5 09:00:03 2025 GMT Not After : Nov 7 09:00:00 2025 GMT Subject: CN=6435a2fb-d1e3-49f4-9f22-6e84c1155f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:91:7b:19:11:34:2c:47:ac:ce:54:7f:ea: 4e:fe:ec:d7:8f:45:7d:0d:df:31:c7:c7:f9:84:df: 0e:7f:d4:00:3d:f4:e7:0d:16:6d:20:7a:15:7f:4a: c2:e5:86:73:a1:67:c9:64:ef:4d:e2:02:3c:97:b1: 41:22:30:dc:2c:02:ee:38:e8:8f:ad:76:f0:de:29: 17:32:21:51:c7:b1:e2:fb:05:2e:5e:0c:34:8d:a2: 57:e7:9a:d8:aa:49:d9:e8:0b:1a:56:23:27:93:8e: 8a:03:2c:22:12:c9:e0:a3:18:f3:31:4d:f3:24:52: 6b:57:45:e2:5a:61:d4:57:6b:48:62:ba:61:ab:6b: 6a:dc:d2:76:a4:b4:c2:60:ee:a3:2b:59:f5:0c:f4: f4:3f:77:40:30:d3:eb:22:16:19:49:4f:c2:1d:e5: 35:37:12:67:0d:02:04:63:d0:7d:d1:8f:e9:34:97: ce:29:f4:62:76:f9:b3:76:b3:8b:0c:f8:fc:1c:57: be:be:ba:d6:11:30:99:00:8e:fa:0e:ca:35:37:1e: 42:a6:2e:7c:13:20:06:3d:e7:9b:7d:ec:36:49:54: 7a:a1:ea:13:55:65:c8:17:b8:30:05:c1:a9:cc:f8: 29:bb:6b:c6:b7:92:cf:89:cb:c3:39:6c:80:f5:54: 73:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E8:10:5A:41:E0:1F:ED:4D:C5:A4:84:87:F5:C4:E4:7E:42:39:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:96:3a:ac:c2:41:fc:71:37:fc:43:b4:ea:d5:b1:c8:e8:b0: ba:ed:f7:85:bf:47:cd:19:2c:f5:65:df:f3:f0:b7:27:51:54: fa:3c:e8:12:5b:f8:71:7e:4a:17:6c:2d:80:e1:ae:e3:02:a8: 52:34:5a:f5:df:bd:e2:28:93:46:6e:2e:85:83:7a:dc:a5:37: d8:41:0b:99:8d:9c:dd:e4:17:f1:14:b2:9a:13:10:b2:dc:58: 7a:e9:ad:70:48:49:79:7a:d0:ee:f1:5c:78:8a:a5:bf:19:70: f9:59:04:95:8a:88:ac:e6:7b:2c:a2:74:e5:e3:43:b3:94:2c: bc:46:26:b3:35:ea:2c:06:f0:0e:88:24:65:36:88:41:2a:e6: d4:09:ec:be:04:30:4c:60:22:58:33:25:45:f8:91:fd:bf:a2: bc:37:ac:22:32:5e:42:44:a2:0f:f0:89:cb:8b:5f:5e:db:24: cf:0d:a2:25:15:af:e3:f7:c3:ff:56:9b:e6:4d:f8:ca:e0:0e: 45:d4:ac:cc:ff:33:15:09:c5:07:ed:d6:17:16:0b:bb:8c:4f: f7:f3:c1:00:20:1b:ef:3c:c0:69:a0:b6:60:79:6b:60:26:65: cb:f4:72:54:b7:a8:53:0c:df:c0:f3:f5:35:bd:bd:45:84:96: c0:f9:d9:7e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvB2xEJgDON61vO+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI1MTEwNTA5MDAwM1oXDTI1MTEwNzA5MDAwMFowLzEtMCsGA1UEAxMk NjQzNWEyZmItZDFlMy00OWY0LTlmMjItNmU4NGMxMTU1Zjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9iRexkRNCxHrM5Uf+pO/uzXj0V9Dd8xx8f5 hN8Of9QAPfTnDRZtIHoVf0rC5YZzoWfJZO9N4gI8l7FBIjDcLALuOOiPrXbw3ikX MiFRx7Hi+wUuXgw0jaJX55rYqknZ6AsaViMnk46KAywiEsngoxjzMU3zJFJrV0Xi WmHUV2tIYrphq2tq3NJ2pLTCYO6jK1n1DPT0P3dAMNPrIhYZSU/CHeU1NxJnDQIE Y9B90Y/pNJfOKfRidvmzdrOLDPj8HFe+vrrWETCZAI76Dso1Nx5Cpi58EyAGPeeb few2SVR6oeoTVWXIF7gwBcGpzPgpu2vGt5LPicvDOWyA9VRzBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEzoEFpB4B/tTcWkhIf1xOR+QjmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvYmE1ZTgxNGUtMGFiOC00 MjU3LThjMzktNDA5MWNiM2JlMjY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnljqswkH8cTf8Q7Tq1bHI 6LC67feFv0fNGSz1Zd/z8LcnUVT6POgSW/hxfkoXbC2A4a7jAqhSNFr1373iKJNG bi6Fg3rcpTfYQQuZjZzd5BfxFLKaExCy3Fh66a1wSEl5etDu8Vx4iqW/GXD5WQSV iois5nssonTl40OzlCy8RiazNeosBvAOiCRlNohBKubUCey+BDBMYCJYMyVF+JH9 v6K8N6wiMl5CRKIP8InLi19e2yTPDaIlFa/j98P/VpvmTfjK4A5F1KzM/zMVCcUH 7dYXFgu7jE/388EAIBvvPMBpoLZgeWtgJmXL9HJUt6hTDN/A8/U1vb1FhJbA+dl+ -----END CERTIFICATE-----Generated at Wed Nov 5 21:04:57 2025 by rpki-client