$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft File: ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft (raw, json) Hash identifier: oZ6YImHVaczZruPWkr/URYT5lKwp+zOKvm2BurOQDqY= Subject key identifier: 40:9F:49:49:26:CE:C0:B1:88:5A:F1:F2:BF:27:83:B2:D3:C5:50:DA Authority key identifier: 3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B Certificate issuer: /CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa Certificate serial: 010D0C9F4328584D739F18AFF020DE19CEF8BF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft Manifest number: 010D0C9F4328584D179559AAF1C4B8CA92FCBBA2 Signing time: Thu 09 Apr 2026 18:00:03 +0000 Manifest this update: Thu 09 Apr 2026 18:00:03 +0000 Manifest next update: Sat 11 Apr 2026 18:00:00 +0000 Files and hashes: 1: ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl (hash: S/UNy72jMa843EjuoEXTlbCt5WHMyEqljL6Z6ixD5Io=) 2: d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa (hash: 8gpgCNzRMisxjQOCjflXcyCYs4tZ5gvgNz641Fd69YM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:9f:18:af:f0:20:de:19:ce:f8:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa Validity Not Before: Apr 9 18:00:03 2026 GMT Not After : Apr 11 18:00:00 2026 GMT Subject: CN=344ea07d-3035-464c-9f76-4e1704343c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:33:64:d6:a2:73:87:60:cc:a6:af:32:0a:d6: 91:ce:08:f3:51:e1:3e:cd:41:35:6e:a8:32:73:53: fb:b9:8b:ab:e9:22:46:d0:4e:17:ec:71:3f:c5:c7: ba:7e:9a:59:76:57:58:5c:ef:74:10:30:08:f7:96: c5:f5:99:3f:4a:9a:fc:61:de:9a:40:d6:22:8a:02: c4:1e:c6:f4:a6:6e:a3:ee:7a:69:3e:7d:44:2f:83: c3:5a:ec:a5:bb:f7:cd:9c:a4:6f:c1:e2:e7:c8:37: d7:07:9f:67:76:09:ac:bd:a5:81:2a:c1:d1:f8:10: 17:2b:45:61:e6:61:39:68:87:b6:7a:85:26:e3:a8: cc:ed:48:b6:b8:b6:c3:6f:37:b7:c5:9e:a2:06:1f: 95:ac:ba:32:94:bd:d8:07:90:de:9f:4b:83:bc:f1: ec:b1:57:9b:5c:f4:f5:6a:f3:da:98:06:d9:2e:fe: 5d:79:c0:63:81:ac:4b:d2:cc:a7:be:28:7c:e7:9d: ca:97:22:9f:d6:f9:86:f1:e1:f1:2a:ef:e8:1e:f4: e5:78:1d:0e:00:e5:fd:53:88:b5:cf:04:78:44:12: a9:6e:82:4e:05:33:d7:71:a0:7a:d6:38:65:fd:63: 51:2f:47:af:08:a4:70:9b:6d:ed:38:92:92:75:d8: 95:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9F:49:49:26:CE:C0:B1:88:5A:F1:F2:BF:27:83:B2:D3:C5:50:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl X509v3 Authority Key Identifier: keyid:3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:22:1a:3c:97:dd:f4:71:34:de:02:d2:c4:de:9b:5e:a6:be: 43:d1:43:55:c5:b8:21:cf:e3:24:50:f4:04:73:5a:f1:41:19: a7:9f:6b:40:c0:9d:35:ab:34:73:cc:80:4e:74:60:aa:77:83: 7f:72:94:d0:45:f6:57:b9:d1:d1:a7:72:38:2b:a4:92:75:1d: 04:05:a3:ad:94:47:66:2b:7b:16:06:2c:88:3a:1f:2b:9a:2b: 9c:58:51:d9:b5:c3:67:89:17:6f:df:f6:5f:5c:1c:bc:9e:dc: 18:95:c1:21:8b:db:47:f3:aa:26:a4:b7:8d:4c:c7:72:a0:73: 8d:03:90:80:e1:33:49:a7:db:6d:98:00:87:cf:c0:60:d8:da: 7b:5b:7e:71:2d:c7:ce:42:e9:58:32:9a:5f:b4:be:99:5d:c7: 97:ed:01:c8:13:dd:b9:65:02:74:fd:7d:ca:57:6d:f2:f0:1e: 32:2e:a0:24:c2:71:82:ba:74:b6:e9:a5:d0:a6:82:52:86:d0: c7:33:6c:b9:51:ea:4c:8c:42:93:60:29:a9:14:f6:e5:dd:f3: d2:ad:ad:68:84:75:66:59:8d:9c:18:ae:31:8b:98:9c:21:00: 8b:f1:c5:a0:23:3b:f3:47:52:28:df:97:cc:99:47:da:ee:a0: 9f:ee:45:6b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1znxiv8CDeGc74vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNzFkYTEtY2Q3NC00NmJkLTgyYTgtZGU3YjlmN2E5 ZmZhMB4XDTI2MDQwOTE4MDAwM1oXDTI2MDQxMTE4MDAwMFowLzEtMCsGA1UEAxMk MzQ0ZWEwN2QtMzAzNS00NjRjLTlmNzYtNGUxNzA0MzQzYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljNk1qJzh2DMpq8yCtaRzgjzUeE+zUE1bqgy c1P7uYur6SJG0E4X7HE/xce6fppZdldYXO90EDAI95bF9Zk/Spr8Yd6aQNYiigLE Hsb0pm6j7nppPn1EL4PDWuylu/fNnKRvweLnyDfXB59ndgmsvaWBKsHR+BAXK0Vh 5mE5aIe2eoUm46jM7Ui2uLbDbze3xZ6iBh+VrLoylL3YB5Den0uDvPHssVebXPT1 avPamAbZLv5decBjgaxL0synvih8553KlyKf1vmG8eHxKu/oHvTleB0OAOX9U4i1 zwR4RBKpboJOBTPXcaB61jhl/WNRL0evCKRwm23tOJKSddiVZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFECfSUkmzsCxiFrx8r8ng7LTxVDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYTM3 MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdiOWY3YTlmZmEvYmEzNzFkYTEtY2Q3NC00 NmJkLTgyYTgtZGU3YjlmN2E5ZmZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYmEzNzFkYTEtY2Q3NC00NmJkLTgy YTgtZGU3YjlmN2E5ZmZhL2JhMzcxZGExLWNkNzQtNDZiZC04MmE4LWRlN2I5Zjdh OWZmYS5jcmwwHwYDVR0jBBgwFoAUPS1g9kIqBBqhhHqFtla9D8pKmUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYTM3MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdi OWY3YTlmZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhIho8l930cTTeAtLE3pte pr5D0UNVxbghz+MkUPQEc1rxQRmnn2tAwJ01qzRzzIBOdGCqd4N/cpTQRfZXudHR p3I4K6SSdR0EBaOtlEdmK3sWBiyIOh8rmiucWFHZtcNniRdv3/ZfXBy8ntwYlcEh i9tH86ompLeNTMdyoHONA5CA4TNJp9ttmACHz8Bg2Np7W35xLcfOQulYMppftL6Z XceX7QHIE925ZQJ0/X3KV23y8B4yLqAkwnGCunS26aXQpoJShtDHM2y5UepMjEKT YCmpFPbl3fPSra1ohHVmWY2cGK4xi5icIQCL8cWgIzvzR1Io35fMmUfa7qCf7kVr -----END CERTIFICATE-----Generated at Fri Apr 10 08:19:49 2026 by rpki-client