$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft File: ba691a44-20cf-450c-8abe-c548dd6bd5be.mft (raw, json) Hash identifier: 2LxCTqqJmq0AnZoQlBZQo99wx/RJzCYyvTkSwX2Y1v8= Subject key identifier: 80:9C:55:5E:63:3B:F8:0E:D1:5B:D4:1B:30:EB:5E:B9:55:62:9E:E8 Authority key identifier: 91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F Certificate issuer: /CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Certificate serial: 010D0C9F4328584D251A9E39630E9039962C3080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft Manifest number: 010D0C9F4328584D1F9E1AFDC135FF3750F3CDA3 Signing time: Thu 12 Mar 2026 15:00:04 +0000 Manifest this update: Thu 12 Mar 2026 15:00:04 +0000 Manifest next update: Sun 15 Mar 2026 15:00:00 +0000 Files and hashes: 1: ba691a44-20cf-450c-8abe-c548dd6bd5be.crl (hash: iG9+7FPk/TEjmtp07oVhblm2zqMYeXzj+YQnbY9kgpA=) 2: f338295c-6e6c-3b3c-98dd-1e80c1957650.roa (hash: 4N3xdms+PPXOpr8hdZiJ59w8aUPMU5GRZfaJkpOKJek=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:1a:9e:39:63:0e:90:39:96:2c:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Validity Not Before: Mar 12 15:00:04 2026 GMT Not After : Mar 15 15:00:00 2026 GMT Subject: CN=7f2ee065-0bf2-46a3-8377-f697b63990d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bd:db:bd:c8:1c:d2:ac:91:7b:eb:26:4b:a5: 70:a4:b6:14:19:f1:33:69:b9:ae:7e:28:47:06:12: a6:7a:ae:77:47:7e:97:76:3c:e0:5a:1f:75:86:bd: 2c:99:b0:61:a4:41:b1:f9:94:01:2a:09:89:57:43: 20:cc:18:03:d1:45:3a:14:61:14:aa:f0:50:33:eb: e8:4e:2b:ca:de:b1:40:7e:5c:ca:61:3e:a8:6c:00: 72:8c:60:2a:a2:42:5c:ad:3f:69:40:87:ba:16:9b: 78:01:44:17:25:2d:e6:a9:4f:5c:45:f7:8d:7e:36: f3:0c:ac:3c:8a:9e:ee:6c:e9:fd:ee:0a:95:85:c1: a0:c1:38:35:6b:de:80:71:53:d5:39:83:8a:ab:e0: b6:8b:e0:57:3d:38:11:2d:91:fd:77:33:2f:26:55: cb:85:44:7e:2f:74:7a:4e:4b:9f:fc:e0:24:8f:a3: 7c:bf:8c:25:c7:c0:a1:31:5e:9e:c8:44:d3:1b:c1: 3f:48:ba:cb:8a:84:52:d2:f6:b7:cb:e2:ec:08:80: 8f:c1:e3:f0:90:c9:fa:53:94:48:50:cb:45:b8:76: 8b:dd:96:2d:91:3d:d8:da:2c:8b:4c:46:ac:5c:8d: 3d:f6:9c:e5:8e:8d:af:03:26:24:d8:a3:0e:50:96: c0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9C:55:5E:63:3B:F8:0E:D1:5B:D4:1B:30:EB:5E:B9:55:62:9E:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl X509v3 Authority Key Identifier: keyid:91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:c5:3f:30:67:f3:1a:5b:1a:4e:93:ac:14:84:99:b3:34:35: 18:7a:a0:51:ca:54:5b:98:68:94:41:7c:6e:c3:5a:a0:ba:05: b1:fe:f2:87:b7:22:07:0a:d7:e6:76:e6:f2:ca:a9:b3:2a:d2: 54:b0:8e:65:11:61:43:75:e6:27:e9:aa:7c:fe:41:79:72:66: 0a:aa:4e:12:a4:03:f9:23:27:05:84:71:0d:b7:6a:20:eb:e6: 8f:95:b0:f9:a7:92:6f:92:1a:42:fc:48:a1:36:c5:58:2e:55: 4d:25:ba:4d:25:98:5d:62:db:16:b4:33:67:99:92:2b:3c:7a: ad:01:ab:c2:bd:70:1e:ca:f2:49:11:11:1b:8b:93:aa:ef:b0: 82:31:90:c3:88:83:5b:23:a7:39:0c:fc:74:82:13:67:61:0e: c6:e0:5e:50:f5:38:03:c4:6b:e5:41:75:62:7b:83:e3:17:7d: 0d:d7:1d:64:d7:93:7e:cc:b3:1e:27:91:14:6b:9d:83:95:fc: 9b:31:3b:c6:3b:4d:c1:a1:f0:55:30:c5:1d:e6:4a:22:cf:c0: 1e:fa:db:38:79:e4:4a:2b:2a:41:06:99:61:34:9e:c2:00:21: a7:3f:37:6f:ef:d5:50:16:45:f4:97:70:c8:00:c9:8a:b1:2d: 87:7f:b4:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0lGp45Yw6QOZYsMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2OTFhNDQtMjBjZi00NTBjLThhYmUtYzU0OGRkNmJk NWJlMB4XDTI2MDMxMjE1MDAwNFoXDTI2MDMxNTE1MDAwMFowLzEtMCsGA1UEAxMk N2YyZWUwNjUtMGJmMi00NmEzLTgzNzctZjY5N2I2Mzk5MGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L3bvcgc0qyRe+smS6VwpLYUGfEzabmufihH BhKmeq53R36XdjzgWh91hr0smbBhpEGx+ZQBKgmJV0MgzBgD0UU6FGEUqvBQM+vo TivK3rFAflzKYT6obAByjGAqokJcrT9pQIe6Fpt4AUQXJS3mqU9cRfeNfjbzDKw8 ip7ubOn97gqVhcGgwTg1a96AcVPVOYOKq+C2i+BXPTgRLZH9dzMvJlXLhUR+L3R6 Tkuf/OAkj6N8v4wlx8ChMV6eyETTG8E/SLrLioRS0va3y+LsCICPwePwkMn6U5RI UMtFuHaL3ZYtkT3Y2iyLTEasXI099pzljo2vAyYk2KMOUJbASwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFICcVV5jO/gO0VvUGzDrXrlVYp7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5 MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4ZGQ2YmQ1YmUvYmE2OTFhNDQtMjBjZi00 NTBjLThhYmUtYzU0OGRkNmJkNWJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmE2OTFhNDQtMjBjZi00NTBjLThh YmUtYzU0OGRkNmJkNWJlL2JhNjkxYTQ0LTIwY2YtNDUwYy04YWJlLWM1NDhkZDZi ZDViZS5jcmwwHwYDVR0jBBgwFoAUkTurmw4XCTV7QqotqsMGwPraJh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4 ZGQ2YmQ1YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDXxT8wZ/MaWxpOk6wUhJmz NDUYeqBRylRbmGiUQXxuw1qgugWx/vKHtyIHCtfmdubyyqmzKtJUsI5lEWFDdeYn 6ap8/kF5cmYKqk4SpAP5IycFhHENt2og6+aPlbD5p5JvkhpC/EihNsVYLlVNJbpN JZhdYtsWtDNnmZIrPHqtAavCvXAeyvJJEREbi5Oq77CCMZDDiINbI6c5DPx0ghNn YQ7G4F5Q9TgDxGvlQXVie4PjF30N1x1k15N+zLMeJ5EUa52DlfybMTvGO03BofBV MMUd5koiz8Ae+ts4eeRKKypBBplhNJ7CACGnPzdv79VQFkX0l3DIAMmKsS2Hf7R6 -----END CERTIFICATE-----Generated at Fri Mar 13 08:46:59 2026 by rpki-client