$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft File: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft (raw, json) Hash identifier: UErL3aaBtEe+u+G1pl9jgZ/BgdzhNPduvImKnMz8YU8= Subject key identifier: E4:24:31:C4:20:F8:28:1C:13:E6:C1:5D:2F:47:F6:EA:A3:50:95:1A Authority key identifier: 2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 Certificate issuer: /CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Certificate serial: 010D0C9F4328584D49BED4ED06C470E943D5D900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft Manifest number: 010D0C9F432858438A0A161212CB83FF1869C684 Signing time: Wed 25 Mar 2026 18:00:03 +0000 Manifest this update: Wed 25 Mar 2026 18:00:03 +0000 Manifest next update: Sat 28 Mar 2026 18:00:00 +0000 Files and hashes: 1: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl (hash: 9/jrRL6O1wgoG4qLSuXlw2AR4cSixUmMdXKgpfuSOjY=) 2: fe655c59-f54b-337c-afb0-edb608a6ba8d.roa (hash: npGzMx1jJekj+c0f+B+OHsFj4X4TPBUZiiI1PGmIm08=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:be:d4:ed:06:c4:70:e9:43:d5:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Validity Not Before: Mar 25 18:00:03 2026 GMT Not After : Mar 28 18:00:00 2026 GMT Subject: CN=2f49ffaf-216c-4a09-b98d-4c84e27e780c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9d:a8:f2:b3:99:40:3a:5a:11:72:71:e5:54: 18:67:fb:8c:bb:ae:db:bf:e3:2c:d7:97:f1:be:60: dd:55:90:3e:0f:41:a6:c1:56:ac:f3:c9:a1:10:c6: a3:b7:3e:74:f4:43:cf:97:57:52:ad:ec:53:12:99: 1c:0e:94:d8:29:df:6f:24:dc:60:1a:7b:ec:60:47: 67:0c:6f:e6:1b:62:2a:4b:f0:0d:e0:ed:ea:a9:c0: 54:3d:10:70:21:1a:6f:af:f8:6c:12:4f:49:ed:dd: 84:9b:1b:c9:e4:a9:72:ee:8a:be:ab:a0:a2:a3:47: 4c:52:54:06:b8:58:67:31:3c:21:72:b7:45:57:2b: 70:cd:cf:d1:a6:76:b8:eb:78:7a:04:d2:a7:0f:47: 7a:bc:db:0f:2e:38:8d:1a:d2:a1:52:9b:81:9e:81: 27:d1:f7:b1:a0:6b:dd:47:d4:30:68:dd:5a:2b:04: 76:e4:70:8d:b7:d2:12:37:de:24:7c:b1:60:e4:07: b4:68:49:55:55:11:13:05:76:1c:0b:e4:22:55:9a: 4b:69:03:f7:a9:37:c6:0c:9c:5d:15:ba:8c:bc:40: 03:9e:7b:b2:09:f8:d7:88:48:43:a0:1f:f0:dc:87: f9:39:04:b5:9c:6e:e3:2d:f1:d8:b3:e3:56:c7:1f: d5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:24:31:C4:20:F8:28:1C:13:E6:C1:5D:2F:47:F6:EA:A3:50:95:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl X509v3 Authority Key Identifier: keyid:2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:62:26:80:f1:72:a9:3c:a0:58:b3:2e:d3:a6:0b:c7:45:27: e6:0d:b9:c5:40:24:cf:d5:21:c9:25:98:a2:4d:1c:1d:a0:bf: 6e:37:76:f6:bc:80:a2:c9:9f:9e:93:49:05:67:1a:44:ee:4b: 01:e3:97:4f:dc:f9:c7:cc:fd:2f:74:89:71:eb:84:59:f3:03: 63:c5:1d:f4:cf:6b:7f:7c:01:a4:b6:e2:de:ad:88:db:ac:1d: d4:ab:2f:c4:f6:c5:b9:b8:48:ab:b8:66:99:b9:a5:31:c2:e7: ea:6c:a5:19:75:bf:ae:1f:72:2a:38:a9:4d:ce:13:0d:dd:bd: 04:ff:a4:14:65:82:63:38:96:4c:c0:47:9e:8c:bb:bd:be:00: c0:ac:0b:fb:3e:36:d8:fa:38:22:cb:e6:8b:90:30:87:96:89: 70:03:07:f7:5d:3c:7b:9f:a3:16:3a:02:24:02:0e:7c:4c:ef: 1d:c2:57:3c:56:e6:57:89:f8:f7:2a:be:7e:99:c0:f1:74:ed: 8d:87:c2:6b:ef:ee:7a:92:32:59:40:32:12:6d:bd:49:33:88: ff:9d:b1:b8:d3:db:34:92:34:f4:36:0a:d5:b5:df:08:8c:cb: d6:9d:1a:d8:f4:dc:a4:1b:7b:70:5d:44:59:7c:3f:01:da:33: 66:86:86:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JvtTtBsRw6UPV2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMGUwMzYtZTRiYi00YWJmLThlZGUtOGFkOWEyMTNm OTFhMB4XDTI2MDMyNTE4MDAwM1oXDTI2MDMyODE4MDAwMFowLzEtMCsGA1UEAxMk MmY0OWZmYWYtMjE2Yy00YTA5LWI5OGQtNGM4NGUyN2U3ODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl52o8rOZQDpaEXJx5VQYZ/uMu67bv+Ms15fx vmDdVZA+D0GmwVas88mhEMajtz509EPPl1dSrexTEpkcDpTYKd9vJNxgGnvsYEdn DG/mG2IqS/AN4O3qqcBUPRBwIRpvr/hsEk9J7d2EmxvJ5Kly7oq+q6Cio0dMUlQG uFhnMTwhcrdFVytwzc/Rpna463h6BNKnD0d6vNsPLjiNGtKhUpuBnoEn0fexoGvd R9QwaN1aKwR25HCNt9ISN94kfLFg5Ae0aElVVRETBXYcC+QiVZpLaQP3qTfGDJxd FbqMvEADnnuyCfjXiEhDoB/w3If5OQS1nG7jLfHYs+NWxx/VSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOQkMcQg+CgcE+bBXS9H9uqjUJUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEw ZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5YTIxM2Y5MWEvMjFhMGUwMzYtZTRiYi00 YWJmLThlZGUtOGFkOWEyMTNmOTFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMGUwMzYtZTRiYi00YWJmLThl ZGUtOGFkOWEyMTNmOTFhLzIxYTBlMDM2LWU0YmItNGFiZi04ZWRlLThhZDlhMjEz ZjkxYS5jcmwwHwYDVR0jBBgwFoAUL9rdF7/KN9XXT83lsecuu8KGhxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEwZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5 YTIxM2Y5MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQYiaA8XKpPKBYsy7TpgvH RSfmDbnFQCTP1SHJJZiiTRwdoL9uN3b2vICiyZ+ek0kFZxpE7ksB45dP3PnHzP0v dIlx64RZ8wNjxR30z2t/fAGktuLerYjbrB3Uqy/E9sW5uEiruGaZuaUxwufqbKUZ db+uH3IqOKlNzhMN3b0E/6QUZYJjOJZMwEeejLu9vgDArAv7PjbY+jgiy+aLkDCH lolwAwf3XTx7n6MWOgIkAg58TO8dwlc8VuZXifj3Kr5+mcDxdO2Nh8Jr7+56kjJZ QDISbb1JM4j/nbG409s0kjT0NgrVtd8IjMvWnRrY9NykG3twXURZfD8B2jNmhobK -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:55 2026 by rpki-client