$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft File: ba9fc663-6e78-4435-a4e3-45ff8082831b.mft (raw, json) Hash identifier: cJZLs8qQyXVUK0xDL/xXuaOQmzhCY3YMjLIGXR7tyr8= Subject key identifier: 84:86:93:90:04:76:B7:32:32:F9:44:75:32:09:3C:CB:00:A6:31:43 Authority key identifier: 45:60:60:A9:6F:7D:C0:21:A6:EB:ED:89:D4:20:65:00:5E:2D:EF:7B Certificate issuer: /CN=ba9fc663-6e78-4435-a4e3-45ff8082831b Certificate serial: 010D0C9F4328584E923D88D8F256B3C0DE401300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft Manifest number: 010D0C9F4328584E5224941727BFA755AC76BD37 Signing time: Tue 21 Jul 2026 10:00:22 +0000 Manifest this update: Tue 21 Jul 2026 10:00:22 +0000 Manifest next update: Thu 23 Jul 2026 10:00:00 +0000 Files and hashes: 1: 3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa (hash: A9mxcJT5hvAYaqxQGfNRn7gGbEa7p4/iCfu4PO9xHt0=) 2: ba9fc663-6e78-4435-a4e3-45ff8082831b.crl (hash: EV8DXBKUfCJ0jj91/js3VNm+OXAx85/hUTpq02XSYbs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:3d:88:d8:f2:56:b3:c0:de:40:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9fc663-6e78-4435-a4e3-45ff8082831b Validity Not Before: Jul 21 10:00:22 2026 GMT Not After : Jul 23 10:00:00 2026 GMT Subject: CN=e1efa349-df65-4d67-8ee8-901497d3d04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:88:63:84:35:27:12:85:19:6b:f0:da:d1: 76:d4:a9:0f:71:26:85:cf:58:6c:b0:e5:27:df:37: 3c:64:be:fa:3f:b5:28:7b:e2:da:b7:39:ca:d4:bf: 52:e3:c0:51:8a:02:d4:54:8e:68:4c:39:5f:25:47: ae:38:ca:7e:20:fb:77:15:ab:7b:ee:19:a7:61:c2: cb:4a:4d:a4:9e:7f:06:f2:1e:ee:b7:6b:9e:1e:d7: 0b:a7:27:5f:b3:6e:5d:6c:e3:c8:45:ef:48:40:cb: 0f:e2:10:d7:8e:aa:e4:ba:00:52:1d:3b:5e:02:1e: 9e:7a:dd:08:e3:e8:03:36:60:47:59:d2:91:63:43: 17:f2:48:a9:ec:2e:1c:1e:79:bf:05:48:6d:9c:3f: d9:85:f3:db:7a:e0:d3:38:44:53:33:21:d0:97:d5: cb:38:d6:4a:ea:55:9a:24:7d:29:d9:c2:f5:ff:8b: db:23:d9:15:f1:47:36:52:34:d6:71:13:e4:15:6e: 0c:1a:f7:67:05:78:ce:c0:4f:9d:55:88:df:3e:80: de:61:5a:52:f2:80:3a:70:77:90:62:f4:66:e2:1a: 5e:aa:1c:7e:7e:e1:57:bb:b9:f6:03:03:c3:7e:82: 79:a9:e4:b9:12:44:11:11:c4:b6:d1:6a:b1:6e:b7: 42:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:86:93:90:04:76:B7:32:32:F9:44:75:32:09:3C:CB:00:A6:31:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.crl X509v3 Authority Key Identifier: keyid:45:60:60:A9:6F:7D:C0:21:A6:EB:ED:89:D4:20:65:00:5E:2D:EF:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:6f:fe:6f:5b:3c:bd:92:6d:c9:b3:26:7e:ad:df:ed:65:33: fa:49:84:34:7b:1c:18:9c:53:70:4d:bc:94:5e:0b:7d:11:ac: 8e:1c:d9:58:3e:dc:33:49:45:55:73:e2:9a:bf:78:cc:fa:5e: 00:d0:eb:67:46:33:5d:a4:9b:4b:5d:9e:65:a3:55:9b:09:a1: 2b:58:b4:c9:4e:f6:42:b0:99:2c:80:bd:ce:5b:0d:65:c0:5f: 36:bf:24:c1:3c:c6:84:15:53:ee:66:d3:7c:bc:82:33:9e:e7: 9c:5e:3a:d5:aa:bc:a5:e6:45:33:f6:fd:f6:70:ed:24:97:41: d1:c6:7e:d0:73:7e:3f:15:8f:df:1a:7c:ea:f2:6b:9f:0d:17: 87:b7:ad:3c:cb:5f:76:4b:b4:b2:85:c6:a3:9c:a3:12:ad:92: d2:03:c4:c7:7b:91:e7:32:ea:f1:71:f0:51:19:3f:3e:31:f9: 68:9b:a6:e1:c7:96:59:b2:b7:22:74:ad:4f:6c:18:30:82:a9: 3e:b0:b8:b6:2d:d7:cf:cb:33:71:85:5c:47:7f:20:10:0b:7f: fb:39:12:2b:b2:f8:74:79:db:e3:66:ed:51:e4:06:c3:46:c8: 47:69:5a:cf:b3:b6:ad:25:5a:76:59:c8:14:c6:71:0c:ba:75: 5c:98:77:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6SPYjY8lazwN5AEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE5ZmM2NjMtNmU3OC00NDM1LWE0ZTMtNDVmZjgwODI4 MzFiMB4XDTI2MDcyMTEwMDAyMloXDTI2MDcyMzEwMDAwMFowLzEtMCsGA1UEAxMk ZTFlZmEzNDktZGY2NS00ZDY3LThlZTgtOTAxNDk3ZDNkMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAaIY4Q1JxKFGWvw2tF21KkPcSaFz1hssOUn 3zc8ZL76P7Uoe+LatznK1L9S48BRigLUVI5oTDlfJUeuOMp+IPt3Fat77hmnYcLL Sk2knn8G8h7ut2ueHtcLpydfs25dbOPIRe9IQMsP4hDXjqrkugBSHTteAh6eet0I 4+gDNmBHWdKRY0MX8kip7C4cHnm/BUhtnD/ZhfPbeuDTOERTMyHQl9XLONZK6lWa JH0p2cL1/4vbI9kV8Uc2UjTWcRPkFW4MGvdnBXjOwE+dVYjfPoDeYVpS8oA6cHeQ YvRm4hpeqhx+fuFXu7n2AwPDfoJ5qeS5EkQREcS20WqxbrdCmQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFISGk5AEdrcyMvlEdTIJPMsApjFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iYTlm YzY2My02ZTc4LTQ0MzUtYTRlMy00NWZmODA4MjgzMWIvYmE5ZmM2NjMtNmU3OC00 NDM1LWE0ZTMtNDVmZjgwODI4MzFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYmE5ZmM2NjMtNmU3OC00NDM1LWE0 ZTMtNDVmZjgwODI4MzFiL2JhOWZjNjYzLTZlNzgtNDQzNS1hNGUzLTQ1ZmY4MDgy ODMxYi5jcmwwHwYDVR0jBBgwFoAURWBgqW99wCGm6+2J1CBlAF4t73swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iYTlmYzY2My02ZTc4LTQ0MzUtYTRlMy00NWZm ODA4MjgzMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAb/5vWzy9km3JsyZ+rd/t ZTP6SYQ0exwYnFNwTbyUXgt9EayOHNlYPtwzSUVVc+Kav3jM+l4A0OtnRjNdpJtL XZ5lo1WbCaErWLTJTvZCsJksgL3OWw1lwF82vyTBPMaEFVPuZtN8vIIznuecXjrV qryl5kUz9v32cO0kl0HRxn7Qc34/FY/fGnzq8mufDReHt608y192S7SyhcajnKMS rZLSA8THe5HnMurxcfBRGT8+Mflom6bhx5ZZsrcidK1PbBgwgqk+sLi2LdfPyzNx hVxHfyAQC3/7ORIrsvh0edvjZu1R5AbDRshHaVrPs7atJVp2WcgUxnEMunVcmHel -----END CERTIFICATE-----Generated at Tue Jul 21 17:23:18 2026 by rpki-client