$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: QUmG5ALAywDEkLnSPlew1R+uDg6xOICCUmr/GKeoU3c= Subject key identifier: AF:78:0A:E6:EF:AE:41:C7:4D:47:B1:47:86:7C:1A:4D:69:E6:23:90 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584D49657F6B6FA7C5AB66823780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF798 Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Fri 27 Mar 2026 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: bLzzpOPWLFACWBOR1K2289DAU/QrhO66C6xPPxI3k8Q=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: c5qzFmbFqng6+KHePTvglV9revkGiX36DAaho1tPvlQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:7f:6b:6f:a7:c5:ab:66:82:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 27 15:00:00 2026 GMT Subject: CN=650d99f1-bdf4-4ccc-8ef6-51f0bf299eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a0:f4:71:2d:27:ed:e0:ef:1b:0d:34:8e:d5: 56:54:18:8f:0e:c3:5f:9d:15:6a:1a:b5:42:2e:3d: 23:d1:a3:a6:9e:a3:c5:52:dc:89:72:12:e7:d9:29: 89:4c:6b:1a:3c:87:1a:01:14:fe:c8:55:74:27:24: f9:2a:a7:2a:42:79:da:b5:fa:7c:bd:a5:3c:4d:ec: 7b:a7:91:54:03:de:e5:09:b3:36:62:f3:24:66:c2: 6f:24:fb:37:d3:ef:e6:70:01:f0:fe:02:be:af:f7: e0:40:32:f2:4d:16:65:78:fb:82:bd:c9:33:40:e5: 6b:82:fc:d6:73:5d:1a:50:d0:9a:b3:a9:ed:b3:c9: df:4b:b2:95:b2:03:70:ff:70:98:dd:1b:d5:ce:f4: d9:05:9f:41:9f:a6:bd:2d:f7:49:ca:be:a3:71:52: 89:e2:26:9d:bf:64:4e:47:b5:97:88:b8:98:1f:d5: 6f:4a:f0:1d:f5:7d:23:24:6c:61:47:30:0b:0c:7d: 30:5b:38:42:ae:db:a9:dd:ed:fa:b3:c2:2c:b7:46: 14:82:ff:2c:21:82:a1:3c:a7:10:90:8e:74:84:3f: 73:1c:c4:07:b2:92:59:7e:3f:a7:13:ad:c5:ff:36: 10:ce:b0:e0:e3:2f:d5:c1:5d:d9:b8:17:a3:b7:64: fe:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:78:0A:E6:EF:AE:41:C7:4D:47:B1:47:86:7C:1A:4D:69:E6:23:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:c6:d6:5c:8b:1a:26:8f:09:cf:d9:3f:d1:13:3d:51:2a:6a: d7:e8:99:e2:76:5c:dc:5f:01:21:7b:29:91:65:40:be:20:de: 0d:b4:89:49:23:73:05:e6:1a:07:7e:e6:ec:25:de:40:35:0c: f8:db:56:81:6c:07:69:c5:73:4f:96:28:1a:82:43:77:c5:c3: e1:20:e5:f4:06:3d:e2:d4:67:31:aa:9b:2b:18:71:61:86:e9: bb:65:67:d3:69:95:a0:bd:75:c1:91:4d:a0:d6:b8:19:d2:e8: 80:86:99:53:7b:03:d9:e8:fd:0e:32:06:7a:26:3a:7f:27:9a: d7:30:57:23:3b:7b:67:19:87:1f:dc:58:22:79:af:fc:b6:da: 73:42:42:e3:c4:ca:18:5c:7f:7a:0d:01:27:92:1f:2c:ee:05: 37:cf:91:72:23:12:ee:ad:f8:6b:a4:a2:3d:7e:21:a3:68:9e: e5:88:96:c3:75:5b:0a:b6:7e:94:11:08:5f:ed:cf:87:a5:6b: f2:63:82:88:7b:c4:8a:cb:7c:88:c6:11:bf:46:7e:b6:1e:c9: c1:5a:49:c2:ce:04:13:6d:7c:60:7c:03:ef:d0:4e:21:30:0b: d7:72:7e:2d:aa:ca:f1:f5:65:be:a5:16:4f:5c:2b:d7:cf:e9: cd:62:1b:38 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZX9rb6fFq2aCN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyNzE1MDAwMFowLzEtMCsGA1UEAxMk NjUwZDk5ZjEtYmRmNC00Y2NjLThlZjYtNTFmMGJmMjk5ZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6D0cS0n7eDvGw00jtVWVBiPDsNfnRVqGrVC Lj0j0aOmnqPFUtyJchLn2SmJTGsaPIcaART+yFV0JyT5KqcqQnnatfp8vaU8Tex7 p5FUA97lCbM2YvMkZsJvJPs30+/mcAHw/gK+r/fgQDLyTRZlePuCvckzQOVrgvzW c10aUNCas6nts8nfS7KVsgNw/3CY3RvVzvTZBZ9Bn6a9LfdJyr6jcVKJ4iadv2RO R7WXiLiYH9VvSvAd9X0jJGxhRzALDH0wWzhCrtup3e36s8Ist0YUgv8sIYKhPKcQ kI50hD9zHMQHspJZfj+nE63F/zYQzrDg4y/VwV3ZuBejt2T+lQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK94CubvrkHHTUexR4Z8Gk1p5iOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHxtZcixomjwnP2T/REz1R KmrX6JnidlzcXwEheymRZUC+IN4NtIlJI3MF5hoHfubsJd5ANQz421aBbAdpxXNP ligagkN3xcPhIOX0Bj3i1GcxqpsrGHFhhum7ZWfTaZWgvXXBkU2g1rgZ0uiAhplT ewPZ6P0OMgZ6Jjp/J5rXMFcjO3tnGYcf3Fgiea/8ttpzQkLjxMoYXH96DQEnkh8s 7gU3z5FyIxLurfhrpKI9fiGjaJ7liJbDdVsKtn6UEQhf7c+HpWvyY4KIe8SKy3yI xhG/Rn62HsnBWknCzgQTbXxgfAPv0E4hMAvXcn4tqsrx9WW+pRZPXCvXz+nNYhs4 -----END CERTIFICATE-----Generated at Thu Mar 26 00:58:18 2026 by rpki-client