$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: OzohLSj4lCtcUA6xLjLSq5IgkaOCjvDEE67gY63Ho0Y= Subject key identifier: 75:F1:10:F8:A3:A1:11:C9:F2:D2:BF:F9:10:D3:C1:C9:E5:C0:4B:81 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584DCF665B61D28FAB23D7F9DBA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF7C9 Signing time: Tue 12 May 2026 15:00:03 +0000 Manifest this update: Tue 12 May 2026 15:00:03 +0000 Manifest next update: Thu 14 May 2026 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: RtrvURZ2KQVmcwolPfEaGUEOGRXP6sHLijzyu6gXaoA=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: 6W+Oiicp5gMoTzlkV4+8OjeNxLf4kk9i54HQQgyIXzc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:66:5b:61:d2:8f:ab:23:d7:f9:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: May 12 15:00:03 2026 GMT Not After : May 14 15:00:00 2026 GMT Subject: CN=3b28ef20-9f01-4801-b75a-c08af2859162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cb:9b:1d:2e:bf:57:6a:f1:0a:8e:e4:cd:90: 50:4c:2e:03:3b:62:3c:c3:c9:4a:51:f8:7e:6c:68: df:b9:8f:ae:9e:53:d1:f4:fe:ff:08:e1:9f:cc:bf: 60:1b:f7:86:b3:0b:35:a4:58:9e:e4:06:5f:ee:50: f5:12:c3:0c:a6:67:9a:c2:42:2f:10:3e:72:e8:76: 14:b8:e2:d2:ad:f9:4f:25:41:e2:eb:09:78:07:8b: ed:7c:1a:3f:54:c4:74:30:bd:3a:12:25:61:d4:f7: ef:fc:f7:f7:01:8e:2e:ec:6c:01:1f:e1:e7:3a:3d: e4:00:4f:15:67:93:1e:a8:e7:1c:bd:39:79:15:87: 09:e0:10:e5:a4:6f:0e:b6:ad:b0:d2:c6:a3:cd:62: b0:b9:ab:1e:26:14:e7:ad:09:7d:db:fa:70:de:fd: 1b:29:80:57:5f:e1:9a:47:ce:ed:90:be:6b:9d:7e: 1b:ea:d6:f2:73:05:44:63:e6:cc:a5:93:74:d6:b3: a3:7b:fa:db:3a:7f:1b:ae:81:5e:35:f6:c0:a0:e6: 56:a6:69:e4:34:11:56:b8:27:7e:7a:3c:68:77:85: 37:ba:b5:de:c1:46:37:33:48:f2:dd:ff:62:8c:e7: c1:09:91:b1:33:9c:3f:33:1b:48:ce:c4:da:21:e3: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F1:10:F8:A3:A1:11:C9:F2:D2:BF:F9:10:D3:C1:C9:E5:C0:4B:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:80:3f:e7:71:a0:5f:af:d9:1d:b0:42:b6:5c:58:ec:d0:6e: e3:4a:1d:5a:93:5f:be:6c:7e:44:2d:d1:ff:73:d1:4a:96:ad: d3:89:87:c4:99:9c:33:c3:29:dd:ff:59:f3:f3:df:8e:15:ad: 5e:ef:4f:a5:d5:ba:e0:cc:9d:8b:29:83:8f:5e:1f:ae:97:dc: 7c:09:32:ec:24:ac:95:8b:f1:18:33:1a:13:93:1a:6c:77:c0: dd:64:52:0d:46:71:3f:ea:12:75:de:4d:42:70:f0:de:59:ad: bc:a7:9e:a9:f3:84:ee:d4:24:8f:ec:d5:4b:19:a1:af:0e:40: b9:bb:63:e0:bc:fb:a9:34:67:36:37:b4:dc:fa:6d:61:01:fe: ce:b2:1f:0b:92:cd:cd:f3:35:a8:28:64:0a:f6:0d:63:83:4e: 10:e4:cd:17:2c:fc:f6:e4:ca:78:59:89:c3:a1:e5:51:ed:95: ee:5e:0b:60:a9:a7:2f:ad:c4:d3:00:f9:6c:87:d8:6d:83:de: e9:1e:99:9c:14:ae:97:4e:90:35:a4:4c:1c:0e:08:f0:46:aa: c5:df:c8:14:ef:79:d8:fd:ef:40:62:61:98:88:24:ce:e8:03: d3:a0:05:f8:27:6d:9c:c3:3d:8f:62:94:1c:e5:98:ed:4c:e0: 14:ab:6d:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PZlth0o+rI9f526AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI2MDUxMjE1MDAwM1oXDTI2MDUxNDE1MDAwMFowLzEtMCsGA1UEAxMk M2IyOGVmMjAtOWYwMS00ODAxLWI3NWEtYzA4YWYyODU5MTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMubHS6/V2rxCo7kzZBQTC4DO2I8w8lKUfh+ bGjfuY+unlPR9P7/COGfzL9gG/eGsws1pFie5AZf7lD1EsMMpmeawkIvED5y6HYU uOLSrflPJUHi6wl4B4vtfBo/VMR0ML06EiVh1Pfv/Pf3AY4u7GwBH+HnOj3kAE8V Z5MeqOccvTl5FYcJ4BDlpG8Otq2w0sajzWKwuaseJhTnrQl92/pw3v0bKYBXX+Ga R87tkL5rnX4b6tbycwVEY+bMpZN01rOje/rbOn8broFeNfbAoOZWpmnkNBFWuCd+ ejxod4U3urXewUY3M0jy3f9ijOfBCZGxM5w/MxtIzsTaIePsXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHXxEPijoRHJ8tK/+RDTwcnlwEuBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAugD/ncaBfr9kdsEK2XFjs 0G7jSh1ak1++bH5ELdH/c9FKlq3TiYfEmZwzwynd/1nz89+OFa1e70+l1brgzJ2L KYOPXh+ul9x8CTLsJKyVi/EYMxoTkxpsd8DdZFINRnE/6hJ13k1CcPDeWa28p56p 84Tu1CSP7NVLGaGvDkC5u2PgvPupNGc2N7Tc+m1hAf7Osh8Lks3N8zWoKGQK9g1j g04Q5M0XLPz25Mp4WYnDoeVR7ZXuXgtgqacvrcTTAPlsh9htg97pHpmcFK6XTpA1 pEwcDgjwRqrF38gU73nY/e9AYmGYiCTO6APToAX4J22cwz2PYpQc5ZjtTOAUq207 -----END CERTIFICATE-----Generated at Wed May 13 11:04:43 2026 by rpki-client