$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft File: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft (raw, json) Hash identifier: K+5ZE13nLFXsxWm9+C/fpERm6lUWB5PF0QUy9OhMM+I= Subject key identifier: A3:22:41:4C:62:43:E5:E6:F8:B3:8E:0C:9B:B0:E1:ED:27:F0:F2:B8 Authority key identifier: 47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 Certificate issuer: /CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Certificate serial: 010D0C9F4328584D4A35F46B01D8DEE85A0F40C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft Manifest number: 010D0C9F4328584B728422C8F4B1EE7ECA7B0B2D Signing time: Wed 25 Mar 2026 22:00:04 +0000 Manifest this update: Wed 25 Mar 2026 22:00:04 +0000 Manifest next update: Fri 27 Mar 2026 22:00:00 +0000 Files and hashes: 1: 1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa (hash: i0TE8bHBroHVMJzjhS4S8z0lm++ndlNHk3LkzoXpw0o=) 2: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl (hash: 7/MI46ecW07UtsScNlgYtgp9xtUxZlfF/7wANiyDkpc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:35:f4:6b:01:d8:de:e8:5a:0f:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Validity Not Before: Mar 25 22:00:04 2026 GMT Not After : Mar 27 22:00:00 2026 GMT Subject: CN=cc275801-7dc9-4ae6-8d7f-a64a55c1ce16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:45:84:f2:e8:7c:aa:e1:23:cd:92:ec:16:d3: e6:93:b2:58:92:30:17:3e:e1:81:f9:70:39:88:f8: 0c:31:4d:b0:27:f1:5c:cb:52:d3:da:aa:62:df:e3: 16:be:6b:59:88:20:01:79:a1:10:b5:5c:2c:28:ce: 9b:33:e0:0a:f5:0e:6e:f4:fa:3b:02:dc:13:bd:28: 6d:ce:12:47:ec:b7:e7:60:dc:1c:17:8d:c7:98:12: 4b:6a:43:2a:66:7d:de:5f:ab:e2:e2:05:2b:2a:33: 71:0e:f7:67:dd:ea:3f:b6:10:4d:f4:d9:d0:d5:c1: 2b:fc:d3:41:ef:48:ff:f7:4c:16:85:7a:fc:60:66: 1b:a3:7e:25:0e:4e:c2:ed:d0:02:b0:9f:07:1d:1f: 04:c5:51:00:d8:4b:2a:37:45:81:de:91:fc:4d:ad: fc:4f:24:60:e3:ef:1b:ca:f9:5b:05:92:bd:d1:fe: f0:62:53:db:dd:09:15:5d:d1:f4:86:3a:84:4a:18: 51:30:02:47:32:d5:e1:4a:20:8f:29:75:80:40:ab: 66:ef:11:32:bd:da:cf:90:cc:df:01:1f:d9:4e:aa: 96:cd:06:6d:f6:a3:dd:21:9d:40:02:64:7b:84:fa: 84:a7:65:6d:e7:f9:ef:5e:0f:46:99:d0:ba:63:47: e0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:22:41:4C:62:43:E5:E6:F8:B3:8E:0C:9B:B0:E1:ED:27:F0:F2:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl X509v3 Authority Key Identifier: keyid:47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:11:51:90:c8:4a:6d:4f:90:b4:26:9e:29:ef:5b:61:a8:e3: 70:f6:18:15:36:d2:3c:5b:64:12:21:dd:11:7a:d3:7f:23:34: 9c:0e:fe:bf:56:15:4b:58:c7:f5:d4:26:89:28:d6:fe:64:a1: 1c:94:7b:34:a3:ae:f1:22:9a:c8:fc:f6:38:27:cc:67:81:e7: 89:f7:ec:2b:a3:ce:db:d1:d6:84:5d:04:fe:82:b9:52:d6:6b: ee:e2:74:bf:5c:f2:73:15:bc:82:8b:7a:79:06:25:c1:32:75: ea:9b:c4:49:54:e5:ab:05:68:83:d4:31:9a:5e:87:b9:f6:a9: d8:e3:47:28:e3:69:35:e4:6b:e5:40:08:3d:7b:d2:37:3f:dd: 3f:4d:67:6b:d8:77:4f:87:dc:5e:a0:25:57:08:ce:86:61:51: 15:ff:f6:92:55:60:6e:2e:bb:f8:0d:f6:59:c8:d9:8e:26:3f: 36:90:51:20:ad:2c:2a:5a:41:92:c8:8c:dc:65:5c:3e:20:d5: c9:18:06:55:f1:85:0b:38:3f:be:00:5e:af:a4:85:f3:89:b0: f8:38:3b:78:0b:98:24:af:4d:05:7f:55:27:34:85:ee:95:c2: e3:44:7b:a5:45:be:11:93:1a:53:43:f6:7a:3c:85:86:49:ff: 9b:1e:a9:aa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KNfRrAdje6FoPQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMjBhZDktYTg0OC00ZDBkLWExMTktM2RmNWQ2ZGJj YjFmMB4XDTI2MDMyNTIyMDAwNFoXDTI2MDMyNzIyMDAwMFowLzEtMCsGA1UEAxMk Y2MyNzU4MDEtN2RjOS00YWU2LThkN2YtYTY0YTU1YzFjZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0WE8uh8quEjzZLsFtPmk7JYkjAXPuGB+XA5 iPgMMU2wJ/Fcy1LT2qpi3+MWvmtZiCABeaEQtVwsKM6bM+AK9Q5u9Po7AtwTvSht zhJH7LfnYNwcF43HmBJLakMqZn3eX6vi4gUrKjNxDvdn3eo/thBN9NnQ1cEr/NNB 70j/90wWhXr8YGYbo34lDk7C7dACsJ8HHR8ExVEA2EsqN0WB3pH8Ta38TyRg4+8b yvlbBZK90f7wYlPb3QkVXdH0hjqEShhRMAJHMtXhSiCPKXWAQKtm7xEyvdrPkMzf AR/ZTqqWzQZt9qPdIZ1AAmR7hPqEp2Vt5/nvXg9GmdC6Y0fgiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKMiQUxiQ+Xm+LOODJuw4e0n8PK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEy MGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1ZDZkYmNiMWYvMjFhMjBhZDktYTg0OC00 ZDBkLWExMTktM2RmNWQ2ZGJjYjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMjBhZDktYTg0OC00ZDBkLWEx MTktM2RmNWQ2ZGJjYjFmLzIxYTIwYWQ5LWE4NDgtNGQwZC1hMTE5LTNkZjVkNmRi Y2IxZi5jcmwwHwYDVR0jBBgwFoAUR/7o0BwHiDWZxcIwx3IIh9YCfigwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEyMGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1 ZDZkYmNiMWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbEVGQyEptT5C0Jp4p71th qONw9hgVNtI8W2QSId0RetN/IzScDv6/VhVLWMf11CaJKNb+ZKEclHs0o67xIprI /PY4J8xngeeJ9+wro87b0daEXQT+grlS1mvu4nS/XPJzFbyCi3p5BiXBMnXqm8RJ VOWrBWiD1DGaXoe59qnY40co42k15GvlQAg9e9I3P90/TWdr2HdPh9xeoCVXCM6G YVEV//aSVWBuLrv4DfZZyNmOJj82kFEgrSwqWkGSyIzcZVw+INXJGAZV8YULOD++ AF6vpIXzibD4ODt4C5gkr00Ff1UnNIXulcLjRHulRb4RkxpTQ/Z6PIWGSf+bHqmq -----END CERTIFICATE-----Generated at Thu Mar 26 16:56:54 2026 by rpki-client