$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft File: bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft (raw, json) Hash identifier: MpdbTtis4PVx9HvzLHnxFeK+GUskDRUkThPlWtBaqnc= Subject key identifier: D9:C1:A0:54:44:BE:B2:AF:0C:3F:96:0C:3D:FE:37:10:FE:56:A5:88 Authority key identifier: 1B:EF:E1:BF:7B:3A:50:D4:34:6C:3F:06:AE:1E:9F:4E:AF:3A:11:16 Certificate issuer: /CN=bad642f9-6daf-4edd-bf5a-bce7a69cd2e6 Certificate serial: 010D0C9F4328584DBF3B254934DA3BE70FAA2F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft Manifest number: 010D0C9F43285840D5E20FCF08444F93A82EDFB0 Signing time: Wed 06 May 2026 20:00:03 +0000 Manifest this update: Wed 06 May 2026 20:00:03 +0000 Manifest next update: Sat 09 May 2026 20:00:00 +0000 Files and hashes: 1: bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.crl (hash: Q8f12f2Z59wvBwoTmkm2aCeF1ZQSWuMFPLcKpHcXpjk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:3b:25:49:34:da:3b:e7:0f:aa:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad642f9-6daf-4edd-bf5a-bce7a69cd2e6 Validity Not Before: May 6 20:00:03 2026 GMT Not After : May 9 20:00:00 2026 GMT Subject: CN=327a4a58-110b-428d-888d-c159a5adb9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:20:20:0e:c3:cf:3a:05:b1:3a:a0:02:70: 36:67:0b:ed:a7:7c:da:73:07:b7:50:15:0f:a1:2a: 31:2f:14:cd:aa:75:ed:f3:9b:8c:30:c2:de:3a:21: 93:45:17:1a:63:ad:64:d1:3b:7b:5e:0c:a5:ea:40: 93:b5:e4:07:40:5b:c6:10:d1:42:70:03:06:41:50: 40:8e:08:41:84:82:d3:9c:04:92:42:30:e1:ac:54: 50:4e:41:a2:4f:06:53:f1:4a:5e:bf:f0:3e:a8:95: 70:47:67:b7:84:91:92:d3:14:b5:37:7f:d0:ad:6a: 01:0c:f7:c1:56:e8:ac:e4:d5:76:1c:e1:70:51:89: cf:72:d4:43:8e:60:19:9e:c7:62:c5:f5:69:b4:80: 43:34:0c:86:3a:c0:8e:3e:0e:20:f2:9f:8e:55:f6: 07:f9:c2:f4:71:d3:0c:d6:49:ee:0f:38:5b:4b:cd: 37:6c:3f:4c:45:b2:37:f3:7f:d5:78:7d:53:70:14: 2c:64:8c:73:e7:96:b4:cf:cc:dd:2a:72:9b:6e:29: f7:ef:6d:9e:67:ad:41:fb:2a:61:63:b8:84:43:a1: 81:39:ae:c2:eb:98:89:0c:ad:5e:71:06:b1:20:99: ca:a1:e0:b3:5b:68:b9:ab:0b:78:ad:52:38:a6:8b: b7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C1:A0:54:44:BE:B2:AF:0C:3F:96:0C:3D:FE:37:10:FE:56:A5:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.crl X509v3 Authority Key Identifier: keyid:1B:EF:E1:BF:7B:3A:50:D4:34:6C:3F:06:AE:1E:9F:4E:AF:3A:11:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:3e:3f:bf:b2:3f:75:85:38:79:8c:a1:5d:30:a9:dc:e8:24: 57:6d:19:a7:1e:97:42:2b:b2:cf:f2:f9:af:e7:f4:18:81:c0: 9b:6a:51:56:ff:3f:4d:1f:8f:93:0b:b4:c3:9b:9d:cd:99:8b: 0d:e8:9c:e7:e0:fa:80:75:d2:bf:96:e0:a9:19:d6:3a:91:98: ab:4a:d2:20:c4:e5:97:58:40:3c:af:61:c4:f4:15:e5:db:15: 81:17:c2:ef:8d:06:c9:3d:e3:eb:10:a3:8f:46:9a:dc:54:7f: 6f:87:c3:06:6b:78:c7:e9:dc:7f:64:e6:6e:50:89:6f:ae:82: c9:ee:ae:36:8d:d2:6e:70:8d:04:a0:dc:67:00:d9:b6:a1:4b: 9b:ca:d1:21:74:81:67:41:5b:42:2f:1d:de:54:7e:65:ac:2a: b2:8c:a0:a3:13:73:26:0a:f3:6f:5e:55:ed:31:bf:14:0b:42: 91:ac:f3:4b:5f:1b:31:eb:91:dc:5c:3e:5c:84:58:bd:cd:fc: dc:05:0c:23:a7:6a:70:8c:59:5f:32:95:fa:7b:bf:32:ad:19: b7:9f:40:47:02:57:b6:56:f8:8f:44:13:08:3c:67:6c:b7:92: d0:ee:7f:b4:fa:40:e2:5f:2e:47:bc:c5:7a:b0:d8:65:15:52: 66:f2:6f:cd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2/OyVJNNo75w+qL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNjQyZjktNmRhZi00ZWRkLWJmNWEtYmNlN2E2OWNk MmU2MB4XDTI2MDUwNjIwMDAwM1oXDTI2MDUwOTIwMDAwMFowLzEtMCsGA1UEAxMk MzI3YTRhNTgtMTEwYi00MjhkLTg4OGQtYzE1OWE1YWRiOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8sgIA7DzzoFsTqgAnA2Zwvtp3zacwe3UBUP oSoxLxTNqnXt85uMMMLeOiGTRRcaY61k0Tt7Xgyl6kCTteQHQFvGENFCcAMGQVBA jghBhILTnASSQjDhrFRQTkGiTwZT8Upev/A+qJVwR2e3hJGS0xS1N3/QrWoBDPfB Vuis5NV2HOFwUYnPctRDjmAZnsdixfVptIBDNAyGOsCOPg4g8p+OVfYH+cL0cdMM 1knuDzhbS803bD9MRbI383/VeH1TcBQsZIxz55a0z8zdKnKbbin3722eZ61B+yph Y7iEQ6GBOa7C65iJDK1ecQaxIJnKoeCzW2i5qwt4rVI4pou3nQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNnBoFREvrKvDD+WDD3+NxD+VqWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYWQ2 NDJmOS02ZGFmLTRlZGQtYmY1YS1iY2U3YTY5Y2QyZTYvYmFkNjQyZjktNmRhZi00 ZWRkLWJmNWEtYmNlN2E2OWNkMmU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmFkNjQyZjktNmRhZi00ZWRkLWJm NWEtYmNlN2E2OWNkMmU2L2JhZDY0MmY5LTZkYWYtNGVkZC1iZjVhLWJjZTdhNjlj ZDJlNi5jcmwwHwYDVR0jBBgwFoAUG+/hv3s6UNQ0bD8Grh6fTq86ERYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYWQ2NDJmOS02ZGFmLTRlZGQtYmY1YS1iY2U3 YTY5Y2QyZTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMPj+/sj91hTh5jKFdMKnc 6CRXbRmnHpdCK7LP8vmv5/QYgcCbalFW/z9NH4+TC7TDm53NmYsN6Jzn4PqAddK/ luCpGdY6kZirStIgxOWXWEA8r2HE9BXl2xWBF8LvjQbJPePrEKOPRprcVH9vh8MG a3jH6dx/ZOZuUIlvroLJ7q42jdJucI0EoNxnANm2oUubytEhdIFnQVtCLx3eVH5l rCqyjKCjE3MmCvNvXlXtMb8UC0KRrPNLXxsx65HcXD5chFi9zfzcBQwjp2pwjFlf MpX6e78yrRm3n0BHAle2VviPRBMIPGdst5LQ7n+0+kDiXy5HvMV6sNhlFVJm8m/N -----END CERTIFICATE-----Generated at Thu May 7 00:23:13 2026 by rpki-client