$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.mft File: ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.mft (raw, json) Hash identifier: bZQFLaWlG9nDF1qovuQZ/4hAJwWCuS3GiLCf1fs8Ek4= Subject key identifier: 5E:49:BB:A5:65:83:DD:51:5B:C9:89:EC:CD:FD:A8:84:39:7C:8B:28 Authority key identifier: C4:41:9D:D5:56:F7:E9:28:F1:31:B6:66:7A:29:9E:9B:D8:7B:74:90 Certificate issuer: /CN=ba9f4db7-00df-4d0a-a8e8-efdd20572e9f Certificate serial: 010D0C9F4328584FBAA1330C24625D5D36242F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.mft Manifest number: 010D0C9F4328584073A857B47A930ABA0045E4F8 Signing time: Wed 04 Nov 2026 14:00:24 +0000 Manifest this update: Wed 04 Nov 2026 14:00:24 +0000 Manifest next update: Sat 07 Nov 2026 14:00:00 +0000 Files and hashes: 1: ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.crl (hash: ys7QXMJmvSch5RyVvMnnBe43UlsLoEfhcAGRa/iPrLw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:a1:33:0c:24:62:5d:5d:36:24:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9f4db7-00df-4d0a-a8e8-efdd20572e9f Validity Not Before: Nov 4 14:00:24 2026 GMT Not After : Nov 7 14:00:00 2026 GMT Subject: CN=d4f31d0e-fd63-42c1-94e2-befa167d8bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:87:50:72:f1:d9:5f:c6:d0:59:63:58:da: cd:36:e8:89:4e:9f:3e:94:f4:3e:e0:f9:58:c1:72: 56:d6:29:1c:99:0e:24:70:31:9f:24:1b:68:f1:75: 4f:d3:2a:2e:44:f5:4f:31:79:a5:b4:0f:6c:e4:98: 51:a0:ec:88:77:f4:bd:66:3d:47:44:9a:21:a6:d5: 57:c7:9e:d4:1f:8a:53:4f:cb:21:c5:03:62:f6:f7: c9:61:3e:7a:59:5d:15:a1:c3:81:8b:93:fd:bc:cb: 67:92:81:93:28:86:77:7f:57:14:28:5a:2f:2e:11: 16:ca:ea:91:f8:87:34:b6:f2:3b:16:57:7e:5a:3e: 1a:93:63:82:74:fc:ec:a9:ae:bc:8a:e2:ea:2e:cc: 54:4e:09:97:d4:2b:95:83:8d:ad:f3:70:2e:39:57: ba:d4:f2:f2:c3:be:84:98:14:79:e0:d6:56:eb:9b: 35:1b:c5:34:fe:0a:e4:30:80:99:8e:71:f0:5e:7d: 59:b3:b1:7e:b6:b8:09:63:7d:9d:8a:ac:cc:54:58: ff:cd:6c:ba:39:27:a2:fd:65:59:c4:db:c9:1a:60: b9:e6:b0:e3:a4:d1:58:6e:7b:b6:89:04:d7:44:88: 0f:3e:d7:48:37:cd:84:2e:01:0e:bf:10:89:40:67: 0e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:49:BB:A5:65:83:DD:51:5B:C9:89:EC:CD:FD:A8:84:39:7C:8B:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.crl X509v3 Authority Key Identifier: keyid:C4:41:9D:D5:56:F7:E9:28:F1:31:B6:66:7A:29:9E:9B:D8:7B:74:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:69:1e:cb:fe:bd:65:cb:ff:c5:56:ff:85:d7:0a:2c:f9:38: 74:bf:68:a7:12:aa:dd:d6:d8:48:0c:9c:ff:e4:36:71:c3:d4: 9c:d9:c4:5b:35:d9:51:e2:62:5d:9f:a4:ec:79:a8:18:79:7d: 44:39:e7:cf:95:a1:3e:22:1f:23:2e:be:d1:d4:ae:3c:0b:58: dc:a0:84:80:75:e9:6d:30:61:fd:b1:c1:3c:60:8d:31:04:1d: 0b:fc:de:14:5e:34:b2:b5:c6:f5:fd:53:89:f7:2b:38:ba:3c: b8:5b:65:c8:ac:c9:97:2e:75:2b:db:74:40:67:16:60:33:36: f1:e6:75:41:4c:1f:88:b7:19:92:7d:b3:ed:66:3e:94:fa:61: 27:49:da:f4:fe:1f:fb:7d:f1:48:9a:8a:34:4f:96:e6:94:4c: ea:62:1a:ee:bc:c8:7e:2d:cc:36:52:f8:15:bc:83:d2:29:cc: de:40:c6:be:2d:21:ec:a7:40:ae:bf:7f:6a:56:3b:1e:ed:46: 10:01:fa:cb:23:d8:d2:ee:fb:2d:76:78:f5:13:59:f2:25:04: a6:66:ea:ca:7e:31:97:f8:f4:e0:1b:4f:27:3e:b7:9c:47:91: ff:0a:ae:6c:98:9f:c4:f4:70:d8:21:b6:d2:f9:fa:46:8d:e1: 5d:95:ec:76 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+6oTMMJGJdXTYkLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE5ZjRkYjctMDBkZi00ZDBhLWE4ZTgtZWZkZDIwNTcy ZTlmMB4XDTI2MTEwNDE0MDAyNFoXDTI2MTEwNzE0MDAwMFowLzEtMCsGA1UEAxMk ZDRmMzFkMGUtZmQ2My00MmMxLTk0ZTItYmVmYTE2N2Q4YmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8GHUHLx2V/G0FljWNrNNuiJTp8+lPQ+4PlY wXJW1ikcmQ4kcDGfJBto8XVP0youRPVPMXmltA9s5JhRoOyId/S9Zj1HRJohptVX x57UH4pTT8shxQNi9vfJYT56WV0VocOBi5P9vMtnkoGTKIZ3f1cUKFovLhEWyuqR +Ic0tvI7Fld+Wj4ak2OCdPzsqa68iuLqLsxUTgmX1CuVg42t83AuOVe61PLyw76E mBR54NZW65s1G8U0/grkMICZjnHwXn1Zs7F+trgJY32diqzMVFj/zWy6OSei/WVZ xNvJGmC55rDjpNFYbnu2iQTXRIgPPtdIN82ELgEOvxCJQGcOiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF5Ju6Vlg91RW8mJ7M39qIQ5fIsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYTlm NGRiNy0wMGRmLTRkMGEtYThlOC1lZmRkMjA1NzJlOWYvYmE5ZjRkYjctMDBkZi00 ZDBhLWE4ZTgtZWZkZDIwNTcyZTlmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmE5ZjRkYjctMDBkZi00ZDBhLWE4 ZTgtZWZkZDIwNTcyZTlmL2JhOWY0ZGI3LTAwZGYtNGQwYS1hOGU4LWVmZGQyMDU3 MmU5Zi5jcmwwHwYDVR0jBBgwFoAUxEGd1Vb36SjxMbZmeimem9h7dJAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYTlmNGRiNy0wMGRmLTRkMGEtYThlOC1lZmRk MjA1NzJlOWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDRaR7L/r1ly//FVv+F1wos +Th0v2inEqrd1thIDJz/5DZxw9Sc2cRbNdlR4mJdn6TseagYeX1EOefPlaE+Ih8j Lr7R1K48C1jcoISAdeltMGH9scE8YI0xBB0L/N4UXjSytcb1/VOJ9ys4ujy4W2XI rMmXLnUr23RAZxZgMzbx5nVBTB+ItxmSfbPtZj6U+mEnSdr0/h/7ffFImoo0T5bm lEzqYhruvMh+Lcw2UvgVvIPSKczeQMa+LSHsp0Cuv39qVjse7UYQAfrLI9jS7vst dnj1E1nyJQSmZurKfjGX+PTgG08nPrecR5H/Cq5smJ/E9HDYIbbS+fpGjeFdlex2 -----END CERTIFICATE-----Generated at Thu Nov 5 14:02:16 2026 by rpki-client