$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft File: ba691a44-20cf-450c-8abe-c548dd6bd5be.mft (raw, json) Hash identifier: VlmUAFbte/hZUO4TqtAEw1bq74GUSa/l5aUHrFle7bY= Subject key identifier: AF:12:97:6E:74:D1:B0:5B:5F:32:2B:E8:EC:15:A6:4B:BD:AF:93:F6 Authority key identifier: 91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F Certificate issuer: /CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Certificate serial: 010D0C9F4328584EF770DC7B4D6255E8C9544000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft Manifest number: 010D0C9F4328584D1F9E1AFDC135FF3750F3CE4D Signing time: Wed 26 Aug 2026 16:00:22 +0000 Manifest this update: Wed 26 Aug 2026 16:00:22 +0000 Manifest next update: Fri 28 Aug 2026 16:00:00 +0000 Files and hashes: 1: ba691a44-20cf-450c-8abe-c548dd6bd5be.crl (hash: RR6qKGFjnJwkef/N5qmoZJzuvT0QEySHFTio1ws1KCY=) 2: f338295c-6e6c-3b3c-98dd-1e80c1957650.roa (hash: y68hHB0id47ENy90uwDFHjavQrlGBXe9bvPKwEJNsG0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:70:dc:7b:4d:62:55:e8:c9:54:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Validity Not Before: Aug 26 16:00:22 2026 GMT Not After : Aug 28 16:00:00 2026 GMT Subject: CN=89f5e1d4-5005-4543-8780-7bc4c44395e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c9:67:97:12:f9:ca:d9:89:95:c5:f3:e3:7e: e6:7c:98:fb:ef:7f:48:f2:e7:68:3d:6b:84:67:35: 5b:dc:fb:db:51:b8:cf:f5:33:1a:58:8f:57:28:dd: 8e:e0:66:9d:0d:89:40:29:6e:6b:61:d0:36:f0:44: 19:34:54:6f:e8:f3:b4:20:96:b3:85:6e:62:af:ce: 75:03:4e:e4:39:84:f1:4b:c7:2a:40:d6:26:ca:2e: 9b:78:9f:0c:38:46:a0:64:48:cf:44:28:91:02:a5: 3f:56:b1:18:e3:77:02:22:54:98:1c:fa:65:80:72: 9d:29:5e:15:e4:3f:6a:bc:dc:e3:ff:a1:83:14:40: 7b:fc:5b:7f:a7:22:a5:f0:7e:ee:47:79:36:69:00: 4a:f4:b5:16:b7:e8:14:99:d8:28:cd:4d:aa:28:37: 40:b6:70:f7:ae:6b:bf:0c:e7:e9:d7:1c:46:8f:a4: d4:3f:f6:35:de:91:84:c3:90:60:94:07:20:8e:10: 72:38:10:cd:a0:60:a0:51:21:ff:b1:e2:9e:42:a6: e4:20:74:94:9c:f3:06:aa:7f:34:e4:83:61:b0:4b: 4e:af:05:20:ff:ad:a1:fe:8f:84:8a:92:a7:c9:6f: f0:fb:45:dd:3e:c5:46:a0:67:d7:fd:9c:f6:e6:f0: 23:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:12:97:6E:74:D1:B0:5B:5F:32:2B:E8:EC:15:A6:4B:BD:AF:93:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl X509v3 Authority Key Identifier: keyid:91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e0:a0:bd:c4:ec:eb:31:33:86:d1:24:0e:03:b7:60:82:8f: 86:38:db:31:74:23:6b:9a:30:e6:d2:d0:3a:55:09:fe:c1:e6: 9d:12:1f:b8:c2:b3:8f:ff:08:3e:a4:ad:62:a4:be:5b:cc:3b: ab:10:78:7b:12:b1:26:70:e1:95:54:5b:88:51:88:46:e5:bd: 07:7e:76:3b:99:70:5e:45:b9:cc:3e:8c:7e:88:ab:0e:94:a2: 57:43:3d:2b:bf:23:86:ed:cb:46:9e:88:a9:73:9f:3f:84:28: fa:32:fe:c6:88:ab:6d:1e:c8:24:65:33:51:4b:83:cd:30:78: 6a:55:47:32:59:99:a7:fa:15:be:9f:73:44:b7:07:c6:11:be: b3:02:44:20:de:42:18:a4:cd:39:03:a4:ee:a2:7e:3b:8c:e8: 5b:61:29:37:31:9c:7b:38:62:93:73:02:02:ad:f8:ed:4b:4c: ec:12:43:c7:4c:c6:3a:4e:db:bf:b1:c4:eb:1a:03:13:cf:62: f1:6b:a0:45:c0:dc:dd:ce:65:f8:ee:a3:99:49:89:fd:c2:b2: c7:8f:7c:2c:7b:57:6e:0a:68:af:6b:d3:b9:8b:7a:81:89:fa: 11:5b:4f:9f:2b:68:17:ae:b6:9f:47:08:e8:1b:b4:f5:04:15: c7:68:c1:eb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE73cNx7TWJV6MlUQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2OTFhNDQtMjBjZi00NTBjLThhYmUtYzU0OGRkNmJk NWJlMB4XDTI2MDgyNjE2MDAyMloXDTI2MDgyODE2MDAwMFowLzEtMCsGA1UEAxMk ODlmNWUxZDQtNTAwNS00NTQzLTg3ODAtN2JjNGM0NDM5NWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8lnlxL5ytmJlcXz437mfJj7739I8udoPWuE ZzVb3PvbUbjP9TMaWI9XKN2O4GadDYlAKW5rYdA28EQZNFRv6PO0IJazhW5ir851 A07kOYTxS8cqQNYmyi6beJ8MOEagZEjPRCiRAqU/VrEY43cCIlSYHPplgHKdKV4V 5D9qvNzj/6GDFEB7/Ft/pyKl8H7uR3k2aQBK9LUWt+gUmdgozU2qKDdAtnD3rmu/ DOfp1xxGj6TUP/Y13pGEw5BglAcgjhByOBDNoGCgUSH/seKeQqbkIHSUnPMGqn80 5INhsEtOrwUg/62h/o+EipKnyW/w+0XdPsVGoGfX/Zz25vAjtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK8Sl2500bBbXzIr6OwVpku9r5P2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5 MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4ZGQ2YmQ1YmUvYmE2OTFhNDQtMjBjZi00 NTBjLThhYmUtYzU0OGRkNmJkNWJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmE2OTFhNDQtMjBjZi00NTBjLThh YmUtYzU0OGRkNmJkNWJlL2JhNjkxYTQ0LTIwY2YtNDUwYy04YWJlLWM1NDhkZDZi ZDViZS5jcmwwHwYDVR0jBBgwFoAUkTurmw4XCTV7QqotqsMGwPraJh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4 ZGQ2YmQ1YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBT4KC9xOzrMTOG0SQOA7dg go+GONsxdCNrmjDm0tA6VQn+weadEh+4wrOP/wg+pK1ipL5bzDurEHh7ErEmcOGV VFuIUYhG5b0HfnY7mXBeRbnMPox+iKsOlKJXQz0rvyOG7ctGnoipc58/hCj6Mv7G iKttHsgkZTNRS4PNMHhqVUcyWZmn+hW+n3NEtwfGEb6zAkQg3kIYpM05A6Tuon47 jOhbYSk3MZx7OGKTcwICrfjtS0zsEkPHTMY6Ttu/scTrGgMTz2Lxa6BFwNzdzmX4 7qOZSYn9wrLHj3wse1duCmiva9O5i3qBifoRW0+fK2gXrrafRwjoG7T1BBXHaMHr -----END CERTIFICATE-----Generated at Wed Aug 26 18:03:30 2026 by rpki-client