$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft File: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft (raw, json) Hash identifier: KbGmgvWW4K+/r3U7/CkSuDuS20bPDORaabcZNniAFJs= Subject key identifier: 12:F7:3D:7D:DA:FB:89:9C:07:3B:16:2B:74:09:3A:28:C6:2B:6E:95 Authority key identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 Certificate issuer: /CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Certificate serial: 010D0C9F4328584E6FCF1B0DC68E8B325267D880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft Manifest number: 010D0C9F4328584073A83645CACD5CF3732BEAA0 Signing time: Thu 09 Jul 2026 02:00:23 +0000 Manifest this update: Thu 09 Jul 2026 02:00:23 +0000 Manifest next update: Sun 12 Jul 2026 02:00:00 +0000 Files and hashes: 1: 0df970dd-1000-33b2-94cf-be4c8681560d.roa (hash: /06L66ktsqKuqO3Nj6ZmdSxTAUC5NbWcGA2T5PiE61E=) 2: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl (hash: OEUhjaUB/fGdyhsyLl4U1VbV1Govt9WRT2H3dkAO0dg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:cf:1b:0d:c6:8e:8b:32:52:67:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Validity Not Before: Jul 9 02:00:23 2026 GMT Not After : Jul 12 02:00:00 2026 GMT Subject: CN=d7ea9755-39b8-47bb-84c2-85e93066fd54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:95:5b:8e:f7:76:07:4d:6d:22:9e:4e:30: 19:b3:d3:44:6c:09:2d:58:fe:f7:7e:c3:0d:06:13: d2:99:b4:2b:f4:77:42:61:33:c9:c9:02:4f:8e:21: 6f:94:0a:e8:34:b9:38:26:60:27:6f:c3:82:56:e4: b8:7f:bf:f1:e4:c6:a0:df:f6:3a:ab:2e:a3:4f:b3: 66:a1:41:fe:5f:7a:04:73:fc:fe:f6:5f:66:2c:0f: 2b:87:fc:6c:88:67:1a:5f:78:19:88:0b:06:32:d8: a9:42:94:e9:71:1c:0f:f0:3c:49:a9:42:ef:04:99: c6:86:66:09:57:23:99:fc:f1:76:28:ad:dd:51:8f: 34:9e:43:95:b2:07:17:11:b7:02:6e:32:3a:54:8a: e5:66:d3:17:eb:d8:24:64:3c:bd:9b:bd:64:6a:75: 7c:82:eb:fe:6a:77:1a:1f:56:d9:2a:ac:b4:43:70: 16:00:71:32:f5:6a:a2:29:fb:a5:ab:d5:6a:07:e0: b2:19:09:54:2c:f0:c5:4e:3b:60:13:43:d2:49:9d: 12:5b:56:e3:fc:cb:40:83:ec:d6:50:8c:37:1c:67: 17:df:0b:35:af:23:ef:b7:2f:c5:22:d8:51:58:e5: cc:5d:fa:8a:71:b8:05:9b:fa:f7:25:56:d9:07:b1: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F7:3D:7D:DA:FB:89:9C:07:3B:16:2B:74:09:3A:28:C6:2B:6E:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl X509v3 Authority Key Identifier: keyid:31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:7b:83:cb:88:4c:cf:bf:0a:70:b4:b3:0a:c0:c6:70:9a:60: 72:2d:50:84:27:48:d2:41:e5:d9:b7:a4:e9:ab:4c:f0:c7:a0: 23:f8:bd:de:68:8a:c5:83:74:e2:7a:c6:60:ad:49:1d:af:0d: 4b:ab:ab:be:03:d6:ed:0d:21:20:1e:17:f3:94:76:6d:67:90: c6:aa:6b:25:54:f8:a4:51:d6:e0:1b:ce:0c:95:af:34:d7:a1: 37:e6:f6:c1:4e:bb:4a:0d:9f:d7:c9:20:bc:6a:73:1b:6a:32: ad:f3:75:80:1a:8d:19:1d:b0:f0:25:f5:65:17:7b:9d:b9:dd: e9:47:f8:a8:a6:99:ca:52:04:6d:27:79:04:cd:68:76:50:de: 7d:59:73:f2:28:fd:6d:7f:56:58:14:ee:8e:68:63:43:11:50: 4f:b4:6a:17:82:42:fa:62:39:29:6d:6d:18:74:bb:2c:4d:7f: 0c:05:ab:9b:98:cc:70:0b:39:00:27:c7:7d:11:f7:f6:2f:19: c5:1e:b1:ec:f5:2f:4b:52:f3:f5:8f:87:eb:90:9f:74:48:2e: 9f:48:90:47:89:f8:58:c9:76:f0:98:3f:30:78:0c:af:b8:73: 3a:68:97:09:0e:6a:82:81:77:f4:64:7e:5c:d4:27:60:e9:e2: 99:cd:49:26 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE5vzxsNxo6LMlJn2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFjZjNlM2QtZDJkYy00ZDFmLTllMDItZTQwN2Q5ZjZh N2IxMB4XDTI2MDcwOTAyMDAyM1oXDTI2MDcxMjAyMDAwMFowLzEtMCsGA1UEAxMk ZDdlYTk3NTUtMzliOC00N2JiLTg0YzItODVlOTMwNjZmZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwKVW473dgdNbSKeTjAZs9NEbAktWP73fsMN BhPSmbQr9HdCYTPJyQJPjiFvlAroNLk4JmAnb8OCVuS4f7/x5Mag3/Y6qy6jT7Nm oUH+X3oEc/z+9l9mLA8rh/xsiGcaX3gZiAsGMtipQpTpcRwP8DxJqULvBJnGhmYJ VyOZ/PF2KK3dUY80nkOVsgcXEbcCbjI6VIrlZtMX69gkZDy9m71kanV8guv+anca H1bZKqy0Q3AWAHEy9WqiKfulq9VqB+CyGQlULPDFTjtgE0PSSZ0SW1bj/MtAg+zW UIw3HGcX3ws1ryPvty/FIthRWOXMXfqKcbgFm/r3JVbZB7GmTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBL3PX3a+4mcBzsWK3QJOijGK26VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNm M2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3ZDlmNmE3YjEvYmFjZjNlM2QtZDJkYy00 ZDFmLTllMDItZTQwN2Q5ZjZhN2IxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFjZjNlM2QtZDJkYy00ZDFmLTll MDItZTQwN2Q5ZjZhN2IxL2JhY2YzZTNkLWQyZGMtNGQxZi05ZTAyLWU0MDdkOWY2 YTdiMS5jcmwwHwYDVR0jBBgwFoAUMZH/v4mUBy3tLa+asZZgXRcOQ9EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNmM2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3 ZDlmNmE3YjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRe4PLiEzPvwpwtLMKwMZw mmByLVCEJ0jSQeXZt6Tpq0zwx6Aj+L3eaIrFg3TiesZgrUkdrw1Lq6u+A9btDSEg HhfzlHZtZ5DGqmslVPikUdbgG84Mla8016E35vbBTrtKDZ/XySC8anMbajKt83WA Go0ZHbDwJfVlF3udud3pR/ioppnKUgRtJ3kEzWh2UN59WXPyKP1tf1ZYFO6OaGND EVBPtGoXgkL6YjkpbW0YdLssTX8MBaubmMxwCzkAJ8d9Eff2LxnFHrHs9S9LUvP1 j4frkJ90SC6fSJBHifhYyXbwmD8weAyvuHM6aJcJDmqCgXf0ZH5c1Cdg6eKZzUkm -----END CERTIFICATE-----Generated at Thu Jul 9 09:21:20 2026 by rpki-client