$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft File: 21a7c020-ebbc-4762-8841-54efb508a7c7.mft (raw, json) Hash identifier: pm0KnUhuNHSLDPUGLCyu2v+wMuTRDhV+3k+EhnXxBcI= Subject key identifier: AB:24:38:CA:D3:90:2F:B6:70:31:0A:CC:56:67:28:28:05:92:25:3D Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 Certificate issuer: /CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Certificate serial: 010D0C9F4328584F7C0C5A2AB4BE4548C1F8B180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft Manifest number: 010D0C9F4328584073A83BD55261AAC0C84A30FD Signing time: Tue 13 Oct 2026 04:00:24 +0000 Manifest this update: Tue 13 Oct 2026 04:00:24 +0000 Manifest next update: Fri 16 Oct 2026 04:00:00 +0000 Files and hashes: 1: 16591207-7557-378f-91cc-68c03f1a278a.roa (hash: a4o2cZaw1/wKzryX5srokBCoGwFGwuzBzqdZs7JQmzE=) 2: 21a7c020-ebbc-4762-8841-54efb508a7c7.crl (hash: M0XKoakCi7MmwKwKqzezsubTRB2B+P4UADrII281UQs=) 3: 4c31ef02-9049-3a69-bdae-e0e93a1e447f.roa (hash: kphI7/9qL5DCde2kK97fei21aO3ViaswhflvOX1zW/w=) 4: 65b660a1-3975-385b-add8-d9b4f1e98a18.roa (hash: xXIlYrXRX6Ka+L+EVrlIZUukwXWJDFhxA95hD/6iY1w=) 5: a0ea587d-3661-3a92-985e-52bc85f90a1c.roa (hash: flrX5BFMyOKD0OogPVA13F/RV3sfT9Yfp2cndr1OzcQ=) 6: b233c099-01b4-3727-a701-02cd60f48355.roa (hash: WgfqZ9xpsbSaqo2Yfuj5Z+D7OMtUjPF+TDPnnovbJHM=) 7: ed01e030-9725-3706-a152-4c292fbd1f32.roa (hash: oYrfHhZD/oGp6lwGKoEfT5pXyNJDNjeUWSwNXFXa7FA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7c:0c:5a:2a:b4:be:45:48:c1:f8:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Validity Not Before: Oct 13 04:00:24 2026 GMT Not After : Oct 16 04:00:00 2026 GMT Subject: CN=c5164e2b-3abd-4331-b26c-d4f4e52af8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d9:a5:6c:0d:e9:e3:a2:90:47:17:c9:84:4e: da:9c:76:b8:4e:92:3b:05:2d:13:c7:5e:22:3e:e4: 5e:e4:3f:ac:ff:0e:4a:d4:76:1a:f4:6f:7c:94:2b: 30:7a:e7:37:f6:02:55:5d:10:d3:c5:8f:23:21:88: f7:3d:12:29:1a:44:31:3b:81:50:b4:30:24:ff:d9: dc:4f:84:69:44:aa:96:aa:de:9f:d5:92:80:69:4f: ae:fc:3a:15:ca:27:d8:7b:bf:5b:18:cc:c2:9a:e5: ea:a3:66:75:7d:cc:0b:fd:ee:84:a4:39:f1:4e:1b: 01:3e:d6:3a:9a:61:3c:94:7f:40:73:ca:de:d1:c9: c5:d2:80:8f:2a:68:9c:29:d2:20:1e:de:32:c1:56: b5:94:de:0f:04:fc:cd:79:85:b9:f3:ab:92:2a:c5: 0a:7f:5f:ae:b8:a3:44:43:0c:7a:5e:83:64:9c:18: a0:48:64:0f:b7:29:7a:cc:89:a6:ac:bf:2b:aa:8c: 63:7d:22:fc:69:19:9a:4d:94:55:2f:97:b7:21:c7: 2f:a3:fc:14:30:b6:92:51:d8:42:79:81:2b:e1:ba: 0a:3f:e6:25:3e:ec:71:ad:c9:f6:b1:4c:41:d5:2b: 33:da:16:13:cd:50:bf:de:e2:c5:35:35:49:06:f2: 22:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:24:38:CA:D3:90:2F:B6:70:31:0A:CC:56:67:28:28:05:92:25:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl X509v3 Authority Key Identifier: keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:43:31:b7:f8:b2:46:2c:45:7e:2a:4f:74:e0:c1:c6:1a:1e: aa:89:10:38:ef:39:d2:bf:18:fa:0b:c4:93:54:a4:00:0f:ca: 51:d8:96:45:77:00:b5:5e:70:25:04:78:40:1f:c0:83:fb:d8: 07:c8:c2:a3:75:46:22:3a:e6:33:d8:2a:1c:5f:a1:01:3a:98: 04:41:a0:79:68:0b:ee:20:4d:d1:2b:e1:49:7e:3b:e4:b0:50: 7e:eb:18:89:f1:ef:61:e7:1a:b3:c0:76:0c:8b:e6:c6:52:0f: a0:48:8c:ea:41:90:3e:b5:fe:2d:6c:6d:d2:a5:bb:e2:a6:db: 21:15:c7:52:87:5f:47:32:f4:92:bc:4f:31:dd:58:c2:dd:aa: 6f:6c:e0:2c:62:20:22:74:e5:1b:cc:1a:de:74:50:2d:b4:6a: 82:0a:fe:04:b3:44:cb:f0:90:74:62:58:62:50:6d:a8:ac:5d: 8e:4e:ca:58:2a:e8:c0:4c:8b:c9:fb:17:1e:64:b6:bb:41:4e: 1b:ad:4d:8c:41:4e:08:7a:33:af:a5:50:2f:6f:d6:a3:67:4d: 3e:80:cc:41:67:41:a1:93:bd:cb:e6:ff:53:f1:04:1f:d8:42: 72:8c:51:c1:91:4c:89:90:39:33:c4:f9:98:aa:03:4c:12:46: ce:5b:83:75 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE98DFoqtL5FSMH4sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhN2MwMjAtZWJiYy00NzYyLTg4NDEtNTRlZmI1MDhh N2M3MB4XDTI2MTAxMzA0MDAyNFoXDTI2MTAxNjA0MDAwMFowLzEtMCsGA1UEAxMk YzUxNjRlMmItM2FiZC00MzMxLWIyNmMtZDRmNGU1MmFmOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdmlbA3p46KQRxfJhE7anHa4TpI7BS0Tx14i PuRe5D+s/w5K1HYa9G98lCsweuc39gJVXRDTxY8jIYj3PRIpGkQxO4FQtDAk/9nc T4RpRKqWqt6f1ZKAaU+u/DoVyifYe79bGMzCmuXqo2Z1fcwL/e6EpDnxThsBPtY6 mmE8lH9Ac8re0cnF0oCPKmicKdIgHt4ywVa1lN4PBPzNeYW586uSKsUKf1+uuKNE Qwx6XoNknBigSGQPtyl6zImmrL8rqoxjfSL8aRmaTZRVL5e3Iccvo/wUMLaSUdhC eYEr4boKP+YlPuxxrcn2sUxB1Ssz2hYTzVC/3uLFNTVJBvIiCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKskOMrTkC+2cDEKzFZnKCgFkiU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3 YzAyMC1lYmJjLTQ3NjItODg0MS01NGVmYjUwOGE3YzcvMjFhN2MwMjAtZWJiYy00 NzYyLTg4NDEtNTRlZmI1MDhhN2M3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFhN2MwMjAtZWJiYy00NzYyLTg4 NDEtNTRlZmI1MDhhN2M3LzIxYTdjMDIwLWViYmMtNDc2Mi04ODQxLTU0ZWZiNTA4 YTdjNy5jcmwwHwYDVR0jBBgwFoAUIm7/Fpf6khUxCul23NPYRtOPYZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3YzAyMC1lYmJjLTQ3NjItODg0MS01NGVm YjUwOGE3YzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgQzG3+LJGLEV+Kk904MHG Gh6qiRA47znSvxj6C8STVKQAD8pR2JZFdwC1XnAlBHhAH8CD+9gHyMKjdUYiOuYz 2CocX6EBOpgEQaB5aAvuIE3RK+FJfjvksFB+6xiJ8e9h5xqzwHYMi+bGUg+gSIzq QZA+tf4tbG3SpbviptshFcdSh19HMvSSvE8x3VjC3apvbOAsYiAidOUbzBredFAt tGqCCv4Es0TL8JB0YlhiUG2orF2OTspYKujATIvJ+xceZLa7QU4brU2MQU4IejOv pVAvb9ajZ00+gMxBZ0Ghk73L5v9T8QQf2EJyjFHBkUyJkDkzxPmYqgNMEkbOW4N1 -----END CERTIFICATE-----Generated at Tue Oct 13 13:52:23 2026 by rpki-client