$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft File: 21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft (raw, json) Hash identifier: dZtcmt24wcY8KQ7XNlCVxGMrr5l3+YkQ1OXOxDDdMf4= Subject key identifier: 81:0D:FB:9D:58:85:44:FF:05:73:8C:DA:F3:E2:02:CC:11:2B:1F:14 Authority key identifier: D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA Certificate issuer: /CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Certificate serial: 010D0C9F4328584D4B7D848BE59C0E42C802E180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft Manifest number: 010D0C9F4328584073A849401CA199B6CDC963D0 Signing time: Thu 26 Mar 2026 09:00:04 +0000 Manifest this update: Thu 26 Mar 2026 09:00:04 +0000 Manifest next update: Sat 28 Mar 2026 09:00:00 +0000 Files and hashes: 1: 1364679f-cb1b-3efa-99ba-f498d36e1c01.roa (hash: S7rUXm9U4rbqg/SNKBjcgKYZ/DTClS1GycdmBshfK1s=) 2: 21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl (hash: 468vtyuQEaIh+DESyjKI5U00WQSWSAldChnOeYfIfYc=) 3: 63555432-fed5-3827-95ba-2c1139e7a9ac.roa (hash: ESunSvYEpeUlK/Q/ImYTOHOJwefFhfTOZ9AuY8XDbts=) 4: 6a7c1fcd-5997-353b-aa88-da1a2d616872.roa (hash: oVebPBPhTNA1G8BIBWn1xNhTtKTqeQj4I2ow1/vwgUk=) 5: aefb5437-6034-3391-9329-ca5ca351ea5d.roa (hash: mH4TUkV55QZLJ9PkmMclV5+9rHBIz2h2CiPTZORyVbQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:7d:84:8b:e5:9c:0e:42:c8:02:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Validity Not Before: Mar 26 09:00:04 2026 GMT Not After : Mar 28 09:00:00 2026 GMT Subject: CN=6c2d21e8-a9b1-41d6-a00a-f5c0a77ab6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:46:5f:b1:43:0c:af:25:10:d4:f4:0a:55: cf:0b:45:e4:bb:a6:4c:19:be:7a:cb:48:b2:88:e6: a4:2d:11:3b:09:55:12:d9:55:90:4f:bf:f7:dc:4f: 11:35:aa:a8:fa:12:fe:5d:02:a0:61:b3:cd:00:59: d3:9a:29:15:96:ce:61:8f:53:78:3b:c9:40:bb:b7: a5:62:78:06:81:16:4e:7d:9b:79:57:0e:0e:ec:f9: 72:c6:60:b9:ad:64:8e:f2:8e:4a:f8:87:f0:2c:26: 5b:fd:11:70:dc:a9:d4:5d:94:0f:bf:3e:b1:c2:68: 14:c6:84:bb:8b:8b:cf:8a:0b:74:97:a0:06:1c:a0: 0f:99:01:be:a7:51:a2:d5:15:f3:07:7f:b0:ed:e6: 65:f5:91:d0:e1:f2:d7:fd:d5:71:c1:c3:9f:50:70: af:72:86:2f:63:4b:0f:7b:7f:13:44:8a:87:45:7b: 06:93:74:0f:4d:e7:7b:5f:e2:8e:29:23:d2:49:59: bb:ce:f5:49:a5:73:2f:1e:8b:6b:c2:4c:5b:54:ab: b8:c0:05:e9:bf:e0:fb:e4:0d:ab:b6:71:ee:d1:20: 74:95:52:a2:a6:75:e9:f4:dc:6c:1a:5a:a5:a9:74: 96:a6:de:e1:c5:8e:ef:d7:0d:02:83:40:18:ee:0a: 70:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0D:FB:9D:58:85:44:FF:05:73:8C:DA:F3:E2:02:CC:11:2B:1F:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl X509v3 Authority Key Identifier: keyid:D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:85:59:95:8c:b7:44:a4:ce:1e:2b:5d:b4:f7:ec:77:e2:ab: 0c:68:71:fa:20:72:b0:7a:a4:70:ba:e3:86:ce:40:cb:bd:16: 75:95:d3:95:3d:57:3c:32:44:35:7b:2c:9d:d2:c2:a1:f4:89: 84:be:5b:0b:ab:aa:b3:a1:32:74:a1:a4:34:5b:8e:b8:df:2a: 7f:d7:dc:ce:0a:fc:6c:b3:1b:86:98:ae:27:e6:78:b7:84:30: 0b:46:37:e1:2c:61:c0:24:10:0c:fe:22:7b:19:b3:49:76:12: 74:ed:d2:30:63:cc:f9:f0:6a:d4:57:db:57:90:25:53:15:09: 65:7f:ba:30:50:f9:08:36:2e:14:b6:82:b3:bd:a3:4e:68:6e: 8e:19:f9:73:8d:b0:ed:5a:a2:fe:39:58:02:cd:78:30:05:0b: ac:bd:89:57:a4:a5:43:4c:e3:0e:bb:f1:9e:ce:ef:34:b2:40: 06:e8:79:9c:68:30:2f:29:17:b6:07:8e:d4:6a:ee:3b:b0:93: c5:3c:77:9f:97:7d:63:30:c6:54:21:71:ec:21:fa:67:3f:75: 30:ed:5d:f8:a4:65:fd:0c:e4:f4:a1:55:0e:e9:38:37:02:53: 6a:44:9b:2b:0a:9c:b4:ee:b0:c1:39:dd:5a:ca:ff:6b:11:5f: e6:63:3e:53 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1LfYSL5ZwOQsgC4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlYTEwNTEtZDJmNi00OWE2LWE1NTMtYjc1ZWI5Yjgz YjExMB4XDTI2MDMyNjA5MDAwNFoXDTI2MDMyODA5MDAwMFowLzEtMCsGA1UEAxMk NmMyZDIxZTgtYTliMS00MWQ2LWEwMGEtZjVjMGE3N2FiNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv9GX7FDDK8lENT0ClXPC0Xku6ZMGb56y0iy iOakLRE7CVUS2VWQT7/33E8RNaqo+hL+XQKgYbPNAFnTmikVls5hj1N4O8lAu7el YngGgRZOfZt5Vw4O7PlyxmC5rWSO8o5K+IfwLCZb/RFw3KnUXZQPvz6xwmgUxoS7 i4vPigt0l6AGHKAPmQG+p1Gi1RXzB3+w7eZl9ZHQ4fLX/dVxwcOfUHCvcoYvY0sP e38TRIqHRXsGk3QPTed7X+KOKSPSSVm7zvVJpXMvHotrwkxbVKu4wAXpv+D75A2r tnHu0SB0lVKipnXp9NxsGlqlqXSWpt7hxY7v1w0Cg0AY7gpwBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIEN+51YhUT/BXOM2vPiAswRKx8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVh MTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVlYjliODNiMTEvMjFlYTEwNTEtZDJmNi00 OWE2LWE1NTMtYjc1ZWI5YjgzYjExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjFlYTEwNTEtZDJmNi00OWE2LWE1 NTMtYjc1ZWI5YjgzYjExLzIxZWExMDUxLWQyZjYtNDlhNi1hNTUzLWI3NWViOWI4 M2IxMS5jcmwwHwYDVR0jBBgwFoAU17/spji01sUwIRm+CadPKvJr4/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVhMTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVl YjliODNiMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEhVmVjLdEpM4eK1209+x3 4qsMaHH6IHKweqRwuuOGzkDLvRZ1ldOVPVc8MkQ1eyyd0sKh9ImEvlsLq6qzoTJ0 oaQ0W4643yp/19zOCvxssxuGmK4n5ni3hDALRjfhLGHAJBAM/iJ7GbNJdhJ07dIw Y8z58GrUV9tXkCVTFQllf7owUPkINi4UtoKzvaNOaG6OGflzjbDtWqL+OVgCzXgw BQusvYlXpKVDTOMOu/Gezu80skAG6HmcaDAvKRe2B47Uau47sJPFPHefl31jMMZU IXHsIfpnP3Uw7V34pGX9DOT0oVUO6Tg3AlNqRJsrCpy07rDBOd1ayv9rEV/mYz5T -----END CERTIFICATE-----Generated at Thu Mar 26 21:07:01 2026 by rpki-client