$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft File: 21a7c020-ebbc-4762-8841-54efb508a7c7.mft (raw, json) Hash identifier: GIOBEZgrJb6OMPFSTI0H032VIgDpg9HTn1hDBgaB7pc= Subject key identifier: A8:04:6F:DA:10:A0:CF:28:95:BF:FB:97:EC:11:B6:F8:29:5B:72:DB Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 Certificate issuer: /CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Certificate serial: 010D0C9F4328584D4AE89E0532F9D21B54F69580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft Manifest number: 010D0C9F4328584073A83BD55261AAC0C84A3019 Signing time: Thu 26 Mar 2026 04:00:03 +0000 Manifest this update: Thu 26 Mar 2026 04:00:03 +0000 Manifest next update: Sat 28 Mar 2026 04:00:00 +0000 Files and hashes: 1: 16591207-7557-378f-91cc-68c03f1a278a.roa (hash: cNgs5tTkG7oJO5MEhwbyoOQVYKm//yWXX3wN84eMzQY=) 2: 21a7c020-ebbc-4762-8841-54efb508a7c7.crl (hash: jGAXo9pexI3VpqQeXecM6h2IFcq9m6vQnF8vuEX5X1w=) 3: 4c31ef02-9049-3a69-bdae-e0e93a1e447f.roa (hash: MRpZj+OtXb9G9jHmOMJQK0NEjm8gWmEKU7lw5eUj/Ac=) 4: 65b660a1-3975-385b-add8-d9b4f1e98a18.roa (hash: fc/HeCQCKV2VichupXOe0591mv/BU/p1/tRy5F/dprk=) 5: a0ea587d-3661-3a92-985e-52bc85f90a1c.roa (hash: b0aGs6uZCkYCwl9egiVgrIjPrW4C3OzTLOztitZA1i4=) 6: b233c099-01b4-3727-a701-02cd60f48355.roa (hash: 6LDbUJV6ZdvNdTfhaXyKB+QofV7j6+xO9mEQk7V3Vg0=) 7: ed01e030-9725-3706-a152-4c292fbd1f32.roa (hash: XEh+HJP0IMqdxzv3ZpdCIySqPaMaTNdtxptzeyO+uaM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:e8:9e:05:32:f9:d2:1b:54:f6:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Validity Not Before: Mar 26 04:00:03 2026 GMT Not After : Mar 28 04:00:00 2026 GMT Subject: CN=971769c6-88db-4398-b80e-422709362709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:ec:85:9b:ad:a6:cc:fa:96:6a:86:f4:b5: 55:e6:3b:15:70:06:f0:93:50:69:50:d7:90:88:f3: 68:fb:82:ee:e5:a7:00:05:fb:11:2a:fb:5b:b5:ea: 0b:4a:ee:1c:b5:85:60:4f:07:10:38:9e:a5:f2:0d: 3b:62:69:12:28:b4:2a:59:0f:af:db:fa:34:6e:51: 26:9e:10:97:03:61:0c:b5:73:f2:46:70:92:bd:e5: ce:83:99:b9:c2:84:f9:bb:41:1a:71:c7:79:7d:d5: 7d:7b:47:c7:ab:70:e7:1c:fc:a3:30:23:15:d6:3d: ed:b5:37:25:00:c8:f5:c6:69:ae:78:06:71:66:6b: 96:8e:7a:bd:93:9c:1d:91:25:4e:f4:b8:c2:75:ea: 9c:6e:d9:b2:18:7c:60:bf:c0:ed:90:35:ff:9a:42: df:5d:8d:4a:ca:6c:a9:e3:29:13:81:77:43:4a:5b: 89:30:b9:90:e2:cd:e7:50:20:1a:21:9b:f7:57:a6: 04:6b:fb:94:d2:8c:17:93:82:09:f1:1f:dd:53:e1: 96:0a:23:a6:b7:76:b6:39:a1:3d:64:a1:75:a6:5e: 89:cd:40:d7:58:04:00:6d:2e:40:16:29:7c:e1:2c: 15:58:b6:25:ed:0b:7b:57:2b:3b:06:26:a0:ed:d6: 88:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:04:6F:DA:10:A0:CF:28:95:BF:FB:97:EC:11:B6:F8:29:5B:72:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl X509v3 Authority Key Identifier: keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b7:57:22:2d:e0:52:65:d4:b7:42:41:8f:8e:6b:2d:c1:27: c4:be:a6:a4:b2:e9:d7:40:8a:68:44:d5:80:b0:8f:64:d2:50: 5f:e0:d1:69:61:8f:6e:11:e2:a9:42:ae:66:98:0f:60:52:89: 2b:7d:e2:66:38:96:4b:5a:c3:43:20:d9:e3:53:d1:7b:e8:ec: ab:64:aa:1b:4e:dd:c6:db:d0:20:ac:e6:27:57:cc:94:09:ff: d3:e2:d6:3d:da:87:b5:6c:38:c6:7c:bd:3f:94:bb:27:05:4a: 78:5a:f8:e9:8b:8a:c3:23:ac:71:de:bc:3c:12:df:a6:46:ac: 97:4b:76:c0:9b:18:2c:82:f8:0f:26:23:a5:a5:17:19:01:29: 31:4d:27:97:70:1e:ad:39:e9:9f:9f:23:1c:06:da:9c:e1:2f: d0:8f:db:9f:e3:0b:98:73:6a:c6:2f:63:8b:9d:5f:13:e9:ed: a8:7e:fb:e8:e2:22:2d:90:b2:63:9a:af:89:81:72:fc:51:b0: 34:73:46:81:d7:9a:55:30:e9:3b:1c:84:80:dd:d8:64:64:d4: 41:7f:c8:e4:1d:35:f7:45:cd:c6:bc:2b:8c:2b:9c:2f:cb:67: 44:97:58:2c:ad:6c:c2:19:49:7e:11:d6:e6:b0:c9:01:16:ad: b5:50:07:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1K6J4FMvnSG1T2lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhN2MwMjAtZWJiYy00NzYyLTg4NDEtNTRlZmI1MDhh N2M3MB4XDTI2MDMyNjA0MDAwM1oXDTI2MDMyODA0MDAwMFowLzEtMCsGA1UEAxMk OTcxNzY5YzYtODhkYi00Mzk4LWI4MGUtNDIyNzA5MzYyNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLXshZutpsz6lmqG9LVV5jsVcAbwk1BpUNeQ iPNo+4Lu5acABfsRKvtbteoLSu4ctYVgTwcQOJ6l8g07YmkSKLQqWQ+v2/o0blEm nhCXA2EMtXPyRnCSveXOg5m5woT5u0Eaccd5fdV9e0fHq3DnHPyjMCMV1j3ttTcl AMj1xmmueAZxZmuWjnq9k5wdkSVO9LjCdeqcbtmyGHxgv8DtkDX/mkLfXY1Kymyp 4ykTgXdDSluJMLmQ4s3nUCAaIZv3V6YEa/uU0owXk4IJ8R/dU+GWCiOmt3a2OaE9 ZKF1pl6JzUDXWAQAbS5AFil84SwVWLYl7Qt7Vys7Biag7daI3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKgEb9oQoM8olb/7l+wRtvgpW3LbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3 YzAyMC1lYmJjLTQ3NjItODg0MS01NGVmYjUwOGE3YzcvMjFhN2MwMjAtZWJiYy00 NzYyLTg4NDEtNTRlZmI1MDhhN2M3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFhN2MwMjAtZWJiYy00NzYyLTg4 NDEtNTRlZmI1MDhhN2M3LzIxYTdjMDIwLWViYmMtNDc2Mi04ODQxLTU0ZWZiNTA4 YTdjNy5jcmwwHwYDVR0jBBgwFoAUIm7/Fpf6khUxCul23NPYRtOPYZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3YzAyMC1lYmJjLTQ3NjItODg0MS01NGVm YjUwOGE3YzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApt1ciLeBSZdS3QkGPjmst wSfEvqaksunXQIpoRNWAsI9k0lBf4NFpYY9uEeKpQq5mmA9gUokrfeJmOJZLWsND INnjU9F76OyrZKobTt3G29AgrOYnV8yUCf/T4tY92oe1bDjGfL0/lLsnBUp4Wvjp i4rDI6xx3rw8Et+mRqyXS3bAmxgsgvgPJiOlpRcZASkxTSeXcB6tOemfnyMcBtqc 4S/Qj9uf4wuYc2rGL2OLnV8T6e2ofvvo4iItkLJjmq+JgXL8UbA0c0aB15pVMOk7 HISA3dhkZNRBf8jkHTX3Rc3GvCuMK5wvy2dEl1gsrWzCGUl+EdbmsMkBFq21UAcI -----END CERTIFICATE-----Generated at Thu Mar 26 21:20:46 2026 by rpki-client