$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.mft File: baa47c38-d554-4849-bca9-e7ed28932034.mft (raw, json) Hash identifier: zgZlNXmS6mgoYoswNRTPtixhjqiCNd9v3eXuoweByCc= Subject key identifier: 39:07:2B:1E:87:0C:BC:FA:27:A0:57:29:DF:B7:D3:57:5A:C0:96:DA Authority key identifier: 03:DB:4C:F5:7B:C3:7D:0B:92:F7:C5:3C:20:BF:41:F4:23:7B:77:93 Certificate issuer: /CN=baa47c38-d554-4849-bca9-e7ed28932034 Certificate serial: 010D0C9F4328584D8F309D27A36AC3DCFEB5F100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.mft Manifest number: 010D0C9F4328584B28E6513AA746FB05FF753F01 Signing time: Sun 19 Apr 2026 15:00:03 +0000 Manifest this update: Sun 19 Apr 2026 15:00:03 +0000 Manifest next update: Wed 22 Apr 2026 15:00:00 +0000 Files and hashes: 1: 34827400-375f-3793-a621-53cacce76602.roa (hash: lGiBfK7CxioIRg1YWlZElGqRq0g/e6UorCG+uo9rIrw=) 2: baa47c38-d554-4849-bca9-e7ed28932034.crl (hash: XmAPkVaf8ZiMQW3T751JTp7T/D0yBxzsf1kZh1peiSI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8f:30:9d:27:a3:6a:c3:dc:fe:b5:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa47c38-d554-4849-bca9-e7ed28932034 Validity Not Before: Apr 19 15:00:03 2026 GMT Not After : Apr 22 15:00:00 2026 GMT Subject: CN=1284a267-cd10-45c1-9b7b-7e7cec32f873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:ac:75:3a:18:54:3b:2d:da:d1:00:b0:03: 0d:e1:b1:73:05:ca:d5:dd:4a:48:f8:21:9d:99:00: ed:f5:b3:b6:f6:5b:ca:d0:d0:e1:6b:ef:f0:37:2b: b0:ad:37:0b:c8:c8:7e:23:b7:d3:f4:e1:56:27:23: e4:52:0a:81:20:8b:f2:1b:f3:ec:46:34:d5:11:3f: a2:a4:33:60:6b:04:25:3f:8a:f2:38:0a:ed:f9:6a: f8:9f:c1:57:25:36:06:f8:81:5a:62:17:89:d1:96: e7:81:8d:ce:bf:5e:66:38:bc:b6:e7:d6:cf:da:d3: c7:c8:b9:ad:db:c7:b7:e7:4b:8c:6d:a8:01:1d:83: f2:39:c5:30:30:a6:84:c1:fe:73:ac:76:64:75:e2: 82:30:7c:72:90:ea:90:01:11:ab:a2:9f:59:2d:56: 72:36:03:5b:bc:95:e9:59:5f:1b:e3:07:8f:5b:ac: 9d:f7:bd:12:65:3d:63:2b:dc:67:6a:47:c7:f7:ec: 23:65:4e:a1:20:d4:7b:04:0e:06:cf:61:3e:fe:06: 37:9b:b7:31:59:35:89:98:10:48:30:12:9a:8f:1c: 77:34:9a:18:59:da:37:d2:21:ac:97:e0:1d:ee:83: a0:db:d3:82:a2:5a:f2:84:36:98:59:8e:22:72:a6: 81:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:07:2B:1E:87:0C:BC:FA:27:A0:57:29:DF:B7:D3:57:5A:C0:96:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.crl X509v3 Authority Key Identifier: keyid:03:DB:4C:F5:7B:C3:7D:0B:92:F7:C5:3C:20:BF:41:F4:23:7B:77:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:89:27:6d:9a:fa:51:2f:33:54:11:1e:a9:6a:70:2e:32:10: 0b:8f:8b:5a:c6:22:9f:9d:0f:84:d0:60:d8:19:b0:66:c5:21: 26:b4:d0:89:91:6d:50:b1:91:14:3c:96:2a:d1:4c:b6:d2:6d: cd:c3:72:2a:8f:a8:09:3c:4c:df:9e:e9:b0:bc:51:a3:45:2f: e0:d4:3e:f9:79:17:81:91:6a:d5:b8:70:34:32:e5:ea:73:44: 71:1c:4a:86:55:b5:7c:da:1c:26:3f:c3:78:30:0f:57:b4:34: 49:b1:4f:56:22:b9:a5:d9:cd:05:51:90:93:83:b8:d7:54:33: 56:7f:0f:e3:8f:68:e8:73:ea:5f:5f:a6:4c:b7:0e:24:07:52: e9:7f:8a:10:44:9b:11:5c:88:8d:53:ce:45:a7:6b:e6:1c:1e: 31:9d:34:2e:72:c4:15:f4:6d:93:38:3a:e1:5f:e2:f6:ee:ac: ac:a0:13:da:bb:5f:d9:ad:20:86:7e:fb:13:82:1a:df:6e:5b: 86:0c:86:c8:9e:e7:43:f0:72:ac:9c:f0:7f:b4:26:5d:23:67: b8:86:c6:d7:3e:d2:14:15:e6:d9:85:36:3d:a3:36:bf:66:0a: 7b:63:ef:c3:21:40:71:98:f3:35:a9:6f:7c:ed:66:27:3b:af: 9d:42:e5:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2PMJ0no2rD3P618QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFhNDdjMzgtZDU1NC00ODQ5LWJjYTktZTdlZDI4OTMy MDM0MB4XDTI2MDQxOTE1MDAwM1oXDTI2MDQyMjE1MDAwMFowLzEtMCsGA1UEAxMk MTI4NGEyNjctY2QxMC00NWMxLTliN2ItN2U3Y2VjMzJmODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfisdToYVDst2tEAsAMN4bFzBcrV3UpI+CGd mQDt9bO29lvK0NDha+/wNyuwrTcLyMh+I7fT9OFWJyPkUgqBIIvyG/PsRjTVET+i pDNgawQlP4ryOArt+Wr4n8FXJTYG+IFaYheJ0ZbngY3Ov15mOLy259bP2tPHyLmt 28e350uMbagBHYPyOcUwMKaEwf5zrHZkdeKCMHxykOqQARGrop9ZLVZyNgNbvJXp WV8b4wePW6yd970SZT1jK9xnakfH9+wjZU6hINR7BA4Gz2E+/gY3m7cxWTWJmBBI MBKajxx3NJoYWdo30iGsl+Ad7oOg29OColryhDaYWY4icqaBEwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDkHKx6HDLz6J6BXKd+301dawJbaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYWE0 N2MzOC1kNTU0LTQ4NDktYmNhOS1lN2VkMjg5MzIwMzQvYmFhNDdjMzgtZDU1NC00 ODQ5LWJjYTktZTdlZDI4OTMyMDM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmFhNDdjMzgtZDU1NC00ODQ5LWJj YTktZTdlZDI4OTMyMDM0L2JhYTQ3YzM4LWQ1NTQtNDg0OS1iY2E5LWU3ZWQyODkz MjAzNC5jcmwwHwYDVR0jBBgwFoAUA9tM9XvDfQuS98U8IL9B9CN7d5MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYWE0N2MzOC1kNTU0LTQ4NDktYmNhOS1lN2Vk Mjg5MzIwMzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDHiSdtmvpRLzNUER6panAu MhALj4taxiKfnQ+E0GDYGbBmxSEmtNCJkW1QsZEUPJYq0Uy20m3Nw3Iqj6gJPEzf numwvFGjRS/g1D75eReBkWrVuHA0MuXqc0RxHEqGVbV82hwmP8N4MA9XtDRJsU9W Irml2c0FUZCTg7jXVDNWfw/jj2joc+pfX6ZMtw4kB1Lpf4oQRJsRXIiNU85Fp2vm HB4xnTQucsQV9G2TODrhX+L27qysoBPau1/ZrSCGfvsTghrfbluGDIbInudD8HKs nPB/tCZdI2e4hsbXPtIUFebZhTY9oza/Zgp7Y+/DIUBxmPM1qW987WYnO6+dQuXL -----END CERTIFICATE-----Generated at Mon Apr 20 03:28:16 2026 by rpki-client